difmportal.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:67:96:36:e7:1a:1e:cc:5c:da:a0:ef:9e:c6:1c:13:a6:5f was issued on by Let's Encrypt.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=difmportal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:96:36:e7:1a:1e:cc:5c:da:a0:ef:9e:c6:1c:13:a6:5f
Serial Number (int): 383697896790601828863409980021322433144415
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b6:dc:7f:74:18:4f:29:b3:da:99:fb:fa:b5:63:bd:9f:07:d8:6a:cb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ac:f8:00:3c:a3:55:28:f3:83:81:3b:99:08:19:ca:90:fd:9f:8e:b2
Fingerprint (sha256): 88:f3:a4:58:46:45:90:66:22:78:8d:85:67:d5:49:34:32:28:d9:2d:fd:25:6e:7f:6f:08:a1:bf:eb:6c:86:b1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate difmportal.com

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for difmportal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

difmportal.com
firestonecompleteautocarebattery.com
fleet-iframe.difmportal.com
fleets-canada.difmportal.com
hibdontiresplusbattery.com
offers.pennzoil.ca
offers.pennzoil.com
offers.quakerstate.ca
offers.quakerstate.com
offers.shell.ca
pennzoilautonation.com
pennzoilfirestone.com
pennzoilhibdontiresplus.com
pennzoilmicheltiresplus.com
pennzoilpromotionspepboys.com
pennzoilpromotionspepboys.com.sq1dev.co
pennzoilpromotionspepboys.com.sq1stage.co
pennzoilwheelworks.com
ru-gtm.difmportal.com
tiresplusbattery.com
www.difmportal.com
www.pennzoilautonation.com
www.pennzoilfirestone.com
www.pennzoilhibdontiresplus.com
www.pennzoilmicheltiresplus.com
www.pennzoilpromotionspepboys.com
www.pennzoilwheelworks.com

Other certificates including the domain name difmportal.com

(limited to 100 certificates)
portal.shell.com.sq1dev.co
www.quakerstatetiresplus.com
www.quakerstatetiresplus.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
difmportal.com
difmportal.com
portal.shell.com.sq1dev.co
difmportal.com
www.quakerstatetiresplus.com
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
www.quakerstatetiresplus.com
www.quakerstatetiresplus.com
portal.shell.com.sq1dev.co
difmportal.com
difmportal.com
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
difmportal.com
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
ru.difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
www.quakerstatetiresplus.com
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
ru.difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
ru.difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
difmportal.com
www.quakerstatetiresplus.com
portal.shell.com.sq1dev.co
www.quakerstatetiresplus.com
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
www.quakerstatetiresplus.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
difmportal.com
difmportal.com
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
www.quakerstatetiresplus.com
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
difmportal.com
ru.difmportal.com

Certificate

The complete raw certificate details for difmportal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kjX0hUMPOlicxatZ7yn
+mjqhgoJ4Nvkczcm5YvvtH14mSIlEMrBcIQZXgW3wJn/xqa6KQsOsT/DaG9xtg9B
FYN5cnUl4K412byfvouBABuEVcXvMRaDmWaPXY2K7B+jwcO6Zk2SPZ4haE8JYagt
sngZJsEleO26oZNWShqNs5XoF7ACCcHN9Dc5M9O79fr4macX22Bop3/JNaEPjJx1
10uKCjywunS1qL7rb3/iSUrgc23rGVNxQpr4bOJZleRTezs+gNcot9jmvO6RYhgb
yuXoy7+1o6Hb86BnASvzDd84j9btWpfvN84t6evuu/bCB10ew0vKwFbd+i9pnF4v
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383697896790601828863409980021322433144415
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-01 00:01:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 00:01:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'difmportal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28060823948865539619730364962317222877286404352996534054164608941458056264421972745187710014496042198461702907856640828297590474545286163450722804973045942249101805234229185381355202106833805930956652936112379100933889006190619743507193494432344458686953426578980317736742905672906053263027133847306698779820044713837013459461062676395491531926802501516564956979701993222098689895604062120998446346768234644273764537176976350106940430858635835768332058134720573439412924529433451880537614716456656293911838927310147976828008325427631779509217997417269915733230013893967055666917255948178828235869819162845930076385161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6dc7f74184f29b3da99fbfab563bd9f07d86acb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (743 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'difmportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firestonecompleteautocarebattery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleet-iframe.difmportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleets-canada.difmportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hibdontiresplusbattery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.pennzoil.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.pennzoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.quakerstate.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.quakerstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.shell.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilautonation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilfirestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilhibdontiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilmicheltiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilpromotionspepboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilpromotionspepboys.com.sq1dev.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilpromotionspepboys.com.sq1stage.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilwheelworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru-gtm.difmportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiresplusbattery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.difmportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilautonation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilfirestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilhibdontiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilmicheltiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilpromotionspepboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilwheelworks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ebefa42bd000004030047304502205f56813b3c9efbac599547552e705f0a13ef25486294672f6e9b703a0af593e8022100b898d339f5667248b2b7af1340da915cc23733ca4fe0c3b2f268eda7e70a89210077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ebefa42f10000040300483046022100a33f78edbd6897cfd2b60cf801ba573eefbfd753b767099ed810d02f82f1bf30022100fe4c4156e026e7ad6252302ca4646948570f5a64fea6af106f70470069cb7133
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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