4moreyears.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e5:2b:f9:b0:ca:20:fb:20:2c:6c:30:67:a4:90:ce:bd:0b was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=4moreyears.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e5:2b:f9:b0:ca:20:fb:20:2c:6c:30:67:a4:90:ce:bd:0b
Serial Number (int): 339319973091630560810804428565368433196299
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:6c:8f:3d:09:44:e7:a4:17:00:40:f5:f1:a4:da:ab:aa:f1:91:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:a4:c2:98:2c:bc:6c:cd:3b:fb:6a:40:3e:50:46:44:27:47:2d:e7
Fingerprint (sha256): 8f:a3:3a:8e:03:be:9a:34:be:d6:dc:ee:c9:b2:44:f4:32:44:37:95:87:04:fa:0c:63:9f:01:e9:18:cc:36:32

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 4moreyears.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 4moreyears.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4moreyears.com
4moreyears.shwaerydesign.com
autodiscover.4moreyears.com
autodiscover.shwaerydesign.com
cpanel.4moreyears.com
cpanel.shwaerydesign.com
mail.4moreyears.com
mail.shwaerydesign.com
shwaerydesign.com
webdisk.4moreyears.com
webdisk.shwaerydesign.com
webmail.4moreyears.com
webmail.shwaerydesign.com
www.4moreyears.com
www.4moreyears.shwaerydesign.com
www.shwaerydesign.com

Other certificates including the domain name 4moreyears.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for 4moreyears.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG2DCCBcCgAwIBAgISA+Ur+bDKIPsgLGwwZ6SQzr0LMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMzExNDA0MTJaFw0y
MDA0MzAxNDA0MTJaMBkxFzAVBgNVBAMTDjRtb3JleWVhcnMuY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMctYr8rm4qxFKs7Mre/Esg+FnG8SJr/
omUqMYn6X99Vi29EeMHirehjYpaEN8fE5MAZaIWVdWQKKcUgXcbu8K3sznmOnL7U
IKg0Cb7rCw7EBDFf0dywimTkjtm5FepFZNxQF3ng2s+CCO+5TCVSKlYjgcHtlkNw
o8ZVvZCqY86A5nB+r+RsQIy67nhBKBa3wejMD1IajzBpnkjBHD2hmdJyMjqjF5Uy
aygcmgOsuRQ+t8i7elyrhr5QzsbQlERrzrCeVEZW+kr+nKbPfmOwApMt8eXH4Y2u
kzQm+yNr0AbQQE3vJhFVQvBjA3YF7tvm8u235exAqmccVb9nqFioywIDAQABo4ID
5zCCA+MwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRObI89CUTnpBcAQPXxpNqrqvGR
LzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj
MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v
cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v
cmcvMIIBnAYDVR0RBIIBkzCCAY+CDjRtb3JleWVhcnMuY29tghw0bW9yZXllYXJz
LnNod2FlcnlkZXNpZ24uY29tghthdXRvZGlzY292ZXIuNG1vcmV5ZWFycy5jb22C
HmF1dG9kaXNjb3Zlci5zaHdhZXJ5ZGVzaWduLmNvbYIVY3BhbmVsLjRtb3JleWVh
cnMuY29tghhjcGFuZWwuc2h3YWVyeWRlc2lnbi5jb22CE21haWwuNG1vcmV5ZWFy
cy5jb22CFm1haWwuc2h3YWVyeWRlc2lnbi5jb22CEXNod2FlcnlkZXNpZ24uY29t
ghZ3ZWJkaXNrLjRtb3JleWVhcnMuY29tghl3ZWJkaXNrLnNod2FlcnlkZXNpZ24u
Y29tghZ3ZWJtYWlsLjRtb3JleWVhcnMuY29tghl3ZWJtYWlsLnNod2FlcnlkZXNp
Z24uY29tghJ3d3cuNG1vcmV5ZWFycy5jb22CIHd3dy40bW9yZXllYXJzLnNod2Fl
cnlkZXNpZ24uY29tghV3d3cuc2h3YWVyeWRlc2lnbi5jb20wTAYDVR0gBEUwQzAI
BgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nw
cy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgDwlaRZ
8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW/8IYTIAAAEAwBHMEUCIEa/
emcMLRsC6opOoX61nDYChaK+FOjYo28+aKxZYxE9AiEAmJ7LSdWS5pCwp0zC30Qj
Ld78jT9LHeuDe2GxoDIYTPgAdQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt
74uQXgAAAW/8IYTFAAAEAwBGMEQCIHqgE9UOn+IVlBeWh8sN/6My1c9l4od9m+2S
fNN5brqrAiBLBYux7cfWhjwfbeMv9OTOPEj7N+oXwMoUaTT+LVmD5zANBgkqhkiG
9w0BAQsFAAOCAQEAiRDwc7dEDi1/WsCulBIt/gByd687sbRhIM6MBYgad2IXydio
UCVAxgu8ZtmOfWH9nFcTzK+Asj+3A/GXd406A+5ntVTXdP6l8ZZWVRrYEGDMEebI
V1Bc2mk8e/O0j8ODQ3dA8yFOWNQTj2tPzkbE+GnFlSafDku+cGc8AuRZkOzETpRK
m9oji3RdlzkXri8AiW6QCeuJEgMf+kampyEgPZXPO7J7xPFQgjPu5KEZDtoo3Wpt
r8o0NresC3p//ssF36MSO4idr+y7N0n/S2MWLc3ahQQ41dEzE0Tgv1AqVYbOdStk
jEyq+p149bSZKcwbCywC6rMunPhHjKHH0x1Pcw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMctYr8rm4qxFKs7Mre/
Esg+FnG8SJr/omUqMYn6X99Vi29EeMHirehjYpaEN8fE5MAZaIWVdWQKKcUgXcbu
8K3sznmOnL7UIKg0Cb7rCw7EBDFf0dywimTkjtm5FepFZNxQF3ng2s+CCO+5TCVS
KlYjgcHtlkNwo8ZVvZCqY86A5nB+r+RsQIy67nhBKBa3wejMD1IajzBpnkjBHD2h
mdJyMjqjF5UyaygcmgOsuRQ+t8i7elyrhr5QzsbQlERrzrCeVEZW+kr+nKbPfmOw
ApMt8eXH4Y2ukzQm+yNr0AbQQE3vJhFVQvBjA3YF7tvm8u235exAqmccVb9nqFio
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339319973091630560810804428565368433196299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-31 14:04:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-30 14:04:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4moreyears.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22316159655376356334099001232006133676907838283600965414791672960012707519593894973940573210017074719168912723372677567097710237685931061379588765173609214753625599764003506576187672687106669225562587602236913838469199653051379409795640817309240528414418634645216746600608888143330798054188291129801213155967818992401251747615832452937444857801533019065408208986194959134957709066610958260320781729524396955269338858679159913988546612879459221393389930096123066001845583340312600366426606632941434901189616036142778401543396924908087771341725673935801737836566364901396666912485344286383165084827937154248036794804427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e6c8f3d0944e7a4170040f5f1a4daabaaf1912f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (403 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4moreyears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4moreyears.shwaerydesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.4moreyears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.shwaerydesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.4moreyears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.shwaerydesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.4moreyears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.shwaerydesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shwaerydesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.4moreyears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.shwaerydesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.4moreyears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.shwaerydesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4moreyears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4moreyears.shwaerydesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shwaerydesign.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ffc2184c80000040300473045022046bf7a670c2d1b02ea8a4ea17eb59c360285a2be14e8d8a36f3e68ac5963113d022100989ecb49d592e690b0a74cc2df44232ddefc8d3f4b1deb837b61b1a032184cf8007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ffc2184c5000004030046304402207aa013d50e9fe21594179687cb0dffa332d5cf65e2877d9bed927cd3796ebaab02204b058bb1edc7d6863c1f6de32ff4e4ce3c48fb37ea17c0ca146934fe2d5983e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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