piwik.itns.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:63:fb:3e:39:a1:4b:3e:60:a7:78:bc:52:c4:7f:ac:18:1d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=piwik.itns.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:63:fb:3e:39:a1:4b:3e:60:a7:78:bc:52:c4:7f:ac:18:1d
Serial Number (int): 382471057370437505871297186648875086911517
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 59:33:9f:bf:63:30:f3:15:32:bc:91:5e:a4:73:da:f6:8e:15:86:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:c3:4c:ae:ec:51:f0:52:63:cf:1d:77:4b:ec:f8:02:37:04:3c:50
Fingerprint (sha256): 8d:2f:8c:3e:61:8a:d9:39:6e:cf:da:ff:a7:71:22:44:58:68:19:62:15:cd:a6:13:c9:16:d1:6e:b2:ce:ca:30

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate piwik.itns.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for piwik.itns.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

piwik.itns.de

Other certificates including the domain name itns.de

(limited to 100 certificates)
itns.de
hilfe.itns.de
itns.de
itns.de
itns.de
itns.de
remote.it-netservice.de
remote.it-netservice.de
itns.de
cloud.itns.de
hilfe.itns.de
hilfe.itns.de
itns.de
remote.it-netservice.de
itns.de
piwik.itns.de
itns.de
remote.it-netservice.de
hilfe.itns.de
hilfe.itns.de
itns.de
itns.de
itns.de
cloud.itns.de
remote.it-netservice.de
itns.de
itns.de
itns.de
remote.it-netservice.de
itns.de
tts.itns.de
hilfe.itns.de
itns.de
itns.de
remote.it-netservice.de
itns.de
itns.de
itns.de
piwik.itns.de
*.it-netservice.de
hilfe.itns.de
itns.de
hilfe.itns.de
hilfe.itns.de
hilfe.itns.de
vtiger-uap.itns.de
hilfe.itns.de
*.it-netservice.de
itns.de
piwik.itns.de
piwik.itns.de
piwik.itns.de
itns.de
tts.itns.de
hilfe.itns.de
itns.de
itns.de
itns.de
itns.de
itns.de
cloud.itns.de
itns.de
cloud.itns.de
hilfe.itns.de
itns.de
cloud.itns.de
remote.it-netservice.de
piwik.itns.de
piwik.itns.de
remote.it-netservice.de
itns.de
hilfe.itns.de
itns.de
itns.de
itns.de
itns.de
remote.it-netservice.de
itns.de
remote.it-netservice.de
itns.de
itns.de
itns.de
itns.de
tts.itns.de
itns.de
itns.de
hilfe.itns.de
itns.de
itns.de
hilfe.itns.de
remote.it-netservice.de
hilfe.itns.de
dyn.itns.de
dyn.itns.de
itns.de
hilfe.itns.de
itns.de
piwik.itns.de
piwik.itns.de
remote.it-netservice.de

Certificate

The complete raw certificate details for piwik.itns.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgISBGP7PjmhSz5gp3i8UsR/rBgdMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjEwMDAxNDlaFw0x
OTExMTkwMDAxNDlaMBgxFjAUBgNVBAMTDXBpd2lrLml0bnMuZGUwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDYSkrLMncWjZ0YVnKR1e7e/zWNgazYmR78
sRvaEmQGA8/Vl4cnX3qGL0dnSxYbUVsDFz0wmrEYMbpXA+CsHzWL1zJMOQ0kOKOv
gzsZdGjDy0ezdqbAHylG1VP/YjOb93qtTtfFxjL2x1Irk0l7k7iWJxkcveKIXyfB
DfQmFR7tJF9Pc7ywr6F59n41D3Fn4Q/1bUWu/Wa1C03ueTccjjf5jSL2PReBkpZh
NK0y9IZehp0We0f28pUzZFV3G+HC2XALxm7Dbig7ynxNtX3IKDwll8XaH9cIxozX
FB6y5BrkJ3/B/EefS5y8i/r8eQtu9eUUJa/FEA4vx3vZ5SRvwlxdPzTygrEsfkvn
8rq70kMlOwX2bMFjyb+Do2jMLfvHt3DFLz8uZ8GoxcKeeGeEprDnMiYZV56DvqZI
HtpgB/V2vc9sL2EwxYQE9GY3Qa4Q5J3cEi4Kr5Fmm3b0gWhab0FIg5+kwiGzfXVz
Vfpqk6XyIK2gCpYabYPqdEdbkSjuGx2scZ1ytfCYeVdYyaervbJCUbYHUAMTx0A6
iD5lrMH55fH/AqDXY6WyZif/OVt38biYOR/SijjSA0yErf78RZwkrgkMQ3nFHrps
IZrqhkMxl8Lm8e7TKIwe5N8GAWoNhSw/aQc0As/gWqTHpzPmYp0069/x7NHNimED
ogLRpnrBQwIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRZM5+/
YzDzFTK8kV6kc9r2jhWGSTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXBpd2lrLml0bnMuZGUwTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx
AO8AdQDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWyxsbVZAAAE
AwBGMEQCIBECqmit/5n6Mkn8e9lEMZEWuQqwB0E0ZX2UTqdG4CcdAiAj41chww39
uKosAfbZwCV+sJSv13AxiboBDniylvJRIgB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6
KXLcpMMM9OVFR/R4AAABbLGxtx0AAAQDAEcwRQIgEPzP+5jwk7VCJvzlogpRSL8W
aAgt+n9oBCLKn7u8Q20CIQD84D7wWPALt4rg0xBqctu3CsTDZYQGRsdvQ83NCZsn
4TANBgkqhkiG9w0BAQsFAAOCAQEAdQ0ycwl0Hkn43gyF5BPubIAR2DfyoOgUpqMo
tNx5wdT/QpB1HnR48AGMksKBx+rKbayVXBYKHVZRCKncTxDijkhZqn4vXMIvkyIQ
Z86SUgdek2/fJztSaJqud/+W0lzKwVrrYiY6CYg6GlzARJb1Tqksy15Rp4+Y2hjs
4iCzBziq/y6wT/VmwrSGwapbOXofbigg6N46Y1y5XQdQXa3hqP5josSpXdOUnJwr
tgDbH2YwmH7iYH17Gnm4v1X+/zG/Ok7xhEZTRmEOBqkOPM7kvuE2i7DW+w97CZj3
tEoeeju8Bn/yib8fczFkMtwC0otK47CGrPFqVKRs5JPqT6Zkpg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2EpKyzJ3Fo2dGFZykdXu
3v81jYGs2Jke/LEb2hJkBgPP1ZeHJ196hi9HZ0sWG1FbAxc9MJqxGDG6VwPgrB81
i9cyTDkNJDijr4M7GXRow8tHs3amwB8pRtVT/2Izm/d6rU7XxcYy9sdSK5NJe5O4
licZHL3iiF8nwQ30JhUe7SRfT3O8sK+hefZ+NQ9xZ+EP9W1Frv1mtQtN7nk3HI43
+Y0i9j0XgZKWYTStMvSGXoadFntH9vKVM2RVdxvhwtlwC8Zuw24oO8p8TbV9yCg8
JZfF2h/XCMaM1xQesuQa5Cd/wfxHn0ucvIv6/HkLbvXlFCWvxRAOL8d72eUkb8Jc
XT808oKxLH5L5/K6u9JDJTsF9mzBY8m/g6NozC37x7dwxS8/LmfBqMXCnnhnhKaw
5zImGVeeg76mSB7aYAf1dr3PbC9hMMWEBPRmN0GuEOSd3BIuCq+RZpt29IFoWm9B
SIOfpMIhs311c1X6apOl8iCtoAqWGm2D6nRHW5Eo7hsdrHGdcrXwmHlXWMmnq72y
QlG2B1ADE8dAOog+ZazB+eXx/wKg12OlsmYn/zlbd/G4mDkf0oo40gNMhK3+/EWc
JK4JDEN5xR66bCGa6oZDMZfC5vHu0yiMHuTfBgFqDYUsP2kHNALP4Fqkx6cz5mKd
NOvf8ezRzYphA6IC0aZ6wUMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382471057370437505871297186648875086911517
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-21 00:01:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 00:01:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'piwik.itns.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882387046748031988631854420306978537106893589443053998518740520082232021507960394167431944957024388386043239535736252763357345257789124507461700660168874813288863892271082027220602539044479216804954378226943967150229731316303106106856797566437808293197287756925084060585295911997594526961231429744812689143861214408219222547566724837924685619406780274492093521423498491511072939459885256144773844642859005299606331153279076043441287402995566490914070920550578177974900499161197042553936633684870691644779887850652206871173912311302996808420967609406369721083316446701370315102813393208892896034752593026905584356715067320078506139114897133648944930779906182445876249156904533753742076528171689652781567769302596316534063989119442592036680478790850197228773592194990727493920523006100794308830200022835241762724116218548543125109352905729686237054622545958955996827832332786295418693750875975969719020054389648687904190005949902147505498429607259922223569827671444223503989837372310307185149812570687747847490708934779247775052799055603631560415744879829621331043124303342824602641391679083618197380330173805236082565898865200680598681700820284382168830046996399377144609871875719580373141373407041982479976999320267714363554763817283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59339fbf6330f31532bc915ea473daf68e158649
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwik.itns.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cb1b1b559000004030046304402201102aa68adff99fa3249fc7bd944319116b90ab0074134657d944ea746e0271d022023e35721c30dfdb8aa2c01f6d9c0257eb094afd7703189ba010e78b296f25122007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cb1b1b71d0000040300473045022010fccffb98f093b54226fce5a20a5148bf1668082dfa7f680422ca9fbbbc436d022100fce03ef058f00bb78ae0d3106a72dbb70ac4c365840646c76f43cdcd099b27e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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