drona.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:61:0b:ce:d9:44:88:bb:dc:de:ac:84:6c:2e:1e:40:74:72 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=drona.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:0b:ce:d9:44:88:bb:dc:de:ac:84:6c:2e:1e:40:74:72
Serial Number (int): 294359942914430979261787117001805412725874
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:98:3f:77:b4:9e:e9:3a:59:6c:d1:ff:ab:a9:37:a4:8a:cf:0f:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:cd:bd:ed:0a:87:f4:73:c4:0d:11:4d:f1:48:14:2a:0e:3c:80:92
Fingerprint (sha256): 92:17:e8:47:b3:9c:99:03:cc:ef:7f:fb:76:35:54:ff:c6:67:db:b3:94:ce:a3:4a:1c:36:08:e3:73:d4:17:48

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate drona.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for drona.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

drona.ca
www.drona.ca

Other certificates including the domain name drona.ca

(limited to 100 certificates)
drona.ca
www.wbartoo.com
www.drona.ca
drona.ca
drona.ca
drona.ca
nmstateretrojerseys.com
cory.benbraham.com
www.frontendshere.com
www.drona.ca
blog.wick.technology

Certificate

The complete raw certificate details for drona.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgISA2ELztlEiLvc3qyEbC4eQHRyMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MTAwODU2NTJaFw0x
ODEyMDkwODU2NTJaMBMxETAPBgNVBAMTCGRyb25hLmNhMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEA3+Hv0Cn6drTiTZNF37Sj/9AVWKbnZOqHfDuWx1/5
xaJYnlJvBkeegT/jLYzUjuWZoT0VkX7dLkC1FB5XuDey9Zyjm1x9hdBlvHzsMaGw
ol6FqrqTfuSTqaUEstg/PnShupM/p1ge6VD9td2hMq+DriqmlWJ//qwbpeHL5bZh
tVDmyZ1zOoV3RFUUtt9mhNBTgVDfyT/RwveB74JwvHZxiL0vct+1wKz6NcfyebJI
Y//uOs1OpJcIpEA3/3IPDaD9AUUO0IHaOWyfLvCD5smubL9P1we6FflU5CArdw2G
9YbX1Am4oLwKN2vAHxFzxeABLXBJC/tc5kDsl8Dl/MVKK0xQ9aUPCBux9ay8o+AL
2OgLtcWl8lL18G6NsnX74zoRZnyG5xyPRuzQW5osvbPKGCwSy914R2wy1WUTWSpX
XRT6qonnmfORj9uphO5yFRTTEX9ZS0fhsjjyBjXLsihjQLNU/31m2aHsQbcJCZLa
q+4znte+3i49aPvjH+HsSHxcvnPJCI2Ly+WS87U18hLZHUlbGNXtoOnwkzNr37lq
E+LaSy1IlcgVYPB1CLqpJRNR7pBo5M5XJhkx5aps6BaLDva1OsNal3auas2cJZG0
7/s5e/RvKJZFeG693TTLmDHegR0tk8GCegaKZt1hOUCeKHKoZUG+Ftxhi+ZNH8po
ZT0CAwEAAaOCAx4wggMaMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUCZg/d7Se6TpZ
bNH/q6k3pIrPD0cwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzAhBgNVHREEGjAYgghkcm9uYS5jYYIMd3d3LmRyb25hLmNh
MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwIC
MIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBi
eSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRo
ZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlw
dC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwDbdK/u
yynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWXC6ZSWAAAEAwBIMEYCIQDh
sgM4X7vYRcFXu9Os2yQaVMHPzmdfo0UUJOsAv5GB5wIhALQMB9ldmGLfkQv4JMLF
4K0bx59bR/EI4M3yehv2KZ3HAHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz0
5UVH9HgAAAFlwumWwQAABAMARjBEAiBLJmSStHB78GZM2sUk9Q6u9vhRIpZsyR1p
1FlBPTCiOwIgHNjf/nxEwZsZOetqz9504/EkkXcZJwGgFv5t/rSfvOcwDQYJKoZI
hvcNAQELBQADggEBAB2ZLzrpr48O+AQqvN2T238AWD9T1+gb8fhwx14zfL7wW1VJ
spcf3yukcK7f55M3bB4xwEATXsXOBc9NitO11iftc9xJCUbtaFTX8ClEMCiNOuE+
RNqzJaSW9kEh1CJMy68PnC15OhhWPU0pYS5G7mGx9ccobfd/rPtzduoiQPiLu0tE
ZwOZrayUX6PmKSe47LbUTorvrt74fC2EyHBPDvCZFw9/U+uF7tvQbv2kSQw72IGc
cgw93K0LbsnJCn3qRBmri/cTR8KGpedsJsiI+X27SXM8mBFOzPJ+nf72w+EnRxxg
Y3fF7TaC223g0SQrQYJs49xyEZwVOvGexcZHLqI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3+Hv0Cn6drTiTZNF37Sj
/9AVWKbnZOqHfDuWx1/5xaJYnlJvBkeegT/jLYzUjuWZoT0VkX7dLkC1FB5XuDey
9Zyjm1x9hdBlvHzsMaGwol6FqrqTfuSTqaUEstg/PnShupM/p1ge6VD9td2hMq+D
riqmlWJ//qwbpeHL5bZhtVDmyZ1zOoV3RFUUtt9mhNBTgVDfyT/RwveB74JwvHZx
iL0vct+1wKz6NcfyebJIY//uOs1OpJcIpEA3/3IPDaD9AUUO0IHaOWyfLvCD5smu
bL9P1we6FflU5CArdw2G9YbX1Am4oLwKN2vAHxFzxeABLXBJC/tc5kDsl8Dl/MVK
K0xQ9aUPCBux9ay8o+AL2OgLtcWl8lL18G6NsnX74zoRZnyG5xyPRuzQW5osvbPK
GCwSy914R2wy1WUTWSpXXRT6qonnmfORj9uphO5yFRTTEX9ZS0fhsjjyBjXLsihj
QLNU/31m2aHsQbcJCZLaq+4znte+3i49aPvjH+HsSHxcvnPJCI2Ly+WS87U18hLZ
HUlbGNXtoOnwkzNr37lqE+LaSy1IlcgVYPB1CLqpJRNR7pBo5M5XJhkx5aps6BaL
Dva1OsNal3auas2cJZG07/s5e/RvKJZFeG693TTLmDHegR0tk8GCegaKZt1hOUCe
KHKoZUG+Ftxhi+ZNH8poZT0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294359942914430979261787117001805412725874
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-10 08:56:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-09 08:56:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'drona.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 913361180308353323999046350531422445168285135394455071407173175006351363842321744495932606417560528149694881711704856415926740639622633817163113325353237297675298875754523722465940266514755765033118488558666513649445873953929237888135076362025160846686005616654668206075133818173430330740342655210574645354774747186094132433797065932422315905428739931809149057237016960647920428569935597955270913923246386345940207010621945634201881851562904538569667433862548734527515667956645331021338995866693544445000392169816837265267418669725138599933006403576476158634340246242842439719253517675512760192262947333481568684244500703533730681547762912182616110242480253941231720711228352717915239889638373695096551371531880599651352254833646553188776301672800385908585883037279744887698900316736095531163132311491253255362769755760290963197242750202356882101674390309433021899977602135809875056827604109444961305823413266466767100405321965204899788143433729377079088288987134431157872236576634429356030013444851986047429318605708772894570258608494361681678631722940263264599379566831656347234816233352943892463428709759826010639285603083486916049858365718848417590103234183843405140038825869977302201413426788899573939014850580784350940547802429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09983f77b49ee93a596cd1ffaba937a48acf0f47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drona.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drona.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165c2e994960000040300483046022100e1b203385fbbd845c157bbd3acdb241a54c1cfce675fa3451424eb00bf9181e7022100b40c07d95d9862df910bf824c2c5e0ad1bc79f5b47f108e0cdf27a1bf6299dc7007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165c2e996c1000004030046304402204b266492b4707bf0664cdac524f50eaef6f85122966cc91d69d459413d30a23b02201cd8dffe7c44c19b1939eb6acfde74e3f1249177192701a016fe6dfeb49fbce7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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