www.joasia.koumbit.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c6:70:e7:dd:4e:e8:14:fd:ab:9a:4d:e9:1a:2c:63:77:bb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.joasia.koumbit.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:70:e7:dd:4e:e8:14:fd:ab:9a:4d:e9:1a:2c:63:77:bb
Serial Number (int): 328862843890392932810418246289636389517243
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e9:f9:05:df:fc:80:16:5e:e0:6a:ca:43:b2:e2:75:90:11:f5:76:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): be:dc:84:f3:8b:cc:11:0d:a9:f9:fe:92:bb:61:f7:d1:e3:4d:2e:b3
Fingerprint (sha256): a0:40:dc:9a:0e:07:bf:3d:c9:27:12:18:69:ee:72:88:4a:a4:85:2b:90:e8:9b:7b:49:2e:af:ea:66:aa:fb:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.joasia.koumbit.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.joasia.koumbit.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.joasia.koumbit.org

Other certificates including the domain name koumbit.org

(limited to 100 certificates)
nextcloud.cumulus.koumbit.org
gabrielle.koumbit.org
www.vikinge.koumbit.org
www.koumbit.org
www.apbm.koumbit.org
www.shadowrun.koumbit.org
www.assep.koumbit.org
cmac.gwradio.koumbit.org
lmssop.koumbit.org
www.narchive.koumbit.org
www.johnb.koumbit.org
www.gfilion.koumbit.org
www.adte2254.koumbit.org
pplif.koumbit.org
www.assep.koumbit.org
www.koumbit.org
tnm.koumbit.org
nextcloud.cumulus.koumbit.org
www.assep.koumbit.org
mystic.koumbit.org
www.joasia.koumbit.org
wiki.praec.koumbit.org
www.gabrielle.koumbit.org
www.gidget.koumbit.org
gabrielle.koumbit.org
*.koumbit.org
www.koumbit.org
www.gfilion.koumbit.org
www.koumbit.org
gidget.koumbit.org
www.kepo.koumbit.org
confluetest.kwekwe.koumbit.org
www.joasia.koumbit.org
nextcloud.sdcmp.koumbit.org
www.joasia.koumbit.org
www.narchive.koumbit.org
vikinge.koumbit.org
www.assep.koumbit.org
wb.tnm.koumbit.org
rcentres.koumbit.org
www.assep.koumbit.org
www.shadowrun.koumbit.org
www.koumbit.org
www.koumbit.org
wb.tnm.koumbit.org
www.tnm.koumbit.org
www.narchive.koumbit.org
cmac.gwradio.koumbit.org
www.ktrh.koumbit.org
nuage.ecrinum.koumbit.org
nextcloud.sdcmp.koumbit.org
nuage.ecrinum.koumbit.org
www.philou.koumbit.org
70s.haproxy.koumbit.org
narchive.koumbit.org
www.koumbit.org
www.assep.koumbit.org
www.gabrielle.koumbit.org
www.gidget.koumbit.org
www.koumbit.org
https56.nina.koumbit.org
etcgroup.koumbit.org
www.koumbit.org
www.praec.koumbit.org
www.kepo.koumbit.org
rcentres.koumbit.org
ktrh.koumbit.org
www.joasia.koumbit.org
www.assep.koumbit.org
gretchenk.gwradio.koumbit.org
www.koumbit.org
www.enkerli.koumbit.org
*.koumbit.org
shadowrun.koumbit.org
www.koumbit.org
www.mystic.koumbit.org
www.assep.koumbit.org
www.koumbit.org
www.koumbit.org
www.joasia.koumbit.org
enkerli.koumbit.org
cache.haproxy.koumbit.org
www.largot.koumbit.org
ktrh.koumbit.org
www.enkerli.koumbit.org
www.koumbit.org
vikinge.koumbit.org
gidget.koumbit.org
www.joasia.koumbit.org
www.praec.koumbit.org
tnm.koumbit.org
www.sdcmp.koumbit.org
www.koumbit.org
www.koumbit.org
www.koumbit.org
wp.nina.koumbit.org
www.assep.koumbit.org
81s.haproxy.koumbit.org
www.koumbit.org
www.tnm.koumbit.org

Certificate

The complete raw certificate details for www.joasia.koumbit.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgISA8Zw591O6BT9q5pN6RosY3e7MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDgxNjAwMjZaFw0y
MDA2MDYxNjAwMjZaMCExHzAdBgNVBAMTFnd3dy5qb2FzaWEua291bWJpdC5vcmcw
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCuI5F4yCvw6yL5Vn0L8Swm
Rm5ee2vVRrE8lnCs/5k/V6RLHaZE1Pl2Qh1Y1nT75NDA4b8kUbxz9ttvNppXmW9y
aIF8avTxP4GFb4uaCZuKDC0da8qOU8bLeZ6IQsFUd0uBRRJ7JaGvYO3uCWAwJ7M7
oNImnFJoZ3+3uJ8JDCfBVBp1kBXliDiJtrRIbe+Yg0NGk31QQjddGNnJ/hNa5Hsn
xpAra15RHJLEK/bujTi/sL1Ds4THCjb92aFgumKZCXGuA6Gy7SPEY3dZqbJd9pL9
tc3JIOlszhN0Mb5asIegsyxKLbvEv2CoRjQujQYLFcZHVMuEpum+rQWMQFTbIwHi
8FwE1kL+VG+6Jk6X1HRjj49upa9/9ZX7er4F1ISzmE1gzEnA8GcLq1BS6LAhlqYt
RIwR5xcgZ7pgeiAAO1L/olc7GSbg1/006J/4InM2jhWsk9PJa8iEJgenKtK39oyd
9QTfSkRgUQsHtofWdZ4yCgXzgjrhc7UbdBvn6Jl6TzhmznD+jvBK8oIsaYkjnoCP
32Tov5w2Qock7IY8BJvE0L4VF3amXBt+JOjziL8P8trA1qJ6lDTUxbpwjnuF2C6e
aD8sWKvDRjPMv4D32VqB8zStgRXFNAWW2yq+LobpFKjd/DUwXKSD4LC7bJ/hAT+r
t87lzB/7qNrTPCWVgB45kQIDAQABo4ICbDCCAmgwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBTp+QXf/IAWXuBqykOy4nWQEfV26jAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFnd3dy5qb2Fz
aWEua291bWJpdC5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEF
BgorBgEEAdZ5AgQCBIH2BIHzAPEAdgDnEvKwN34aYvuOyQxhhPHqezfLVh0RJlvz
4PNL8kFUbgAAAXC7FzilAAAEAwBHMEUCIDhTlxbbUf+QOObAT3R6m19OQrzxTnoK
PkddJFd5dZLYAiEAjpzSmZhhGCVU7S788MJCV3kcm7xWsIPlw+CUWBWPzyMAdwCy
HgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXC7Fzi1AAAEAwBIMEYC
IQDJwGy1tgif7lA2XFqx2NQDpuy8/Fhr6zIv1yI62lxE8AIhAPTsiaMXmPjgUY1l
9JgS74CCcw9HD8GoV+bDdoLI/Xn1MA0GCSqGSIb3DQEBCwUAA4IBAQBrfmBOEJNN
SHp9+UFbTTMxQzNGaDoa4rdBQcqrkJipebot7bKaPuJE6OOOw00Zyvk3mzysreuF
xS65WMlXG+x3JMZGGUlUKEJS1ldCHJ+KMhy+3nh7q3Cl0DmODzOttn24ZfwSwr/Q
4ymvlBbLe2XN8n70h45nTihqz0W3/ETHnIYuvNRk/TkQ9pft6ERejIddD4ubvaD8
FSGqGJGzU0KCbg8EOFUhHQWDdjx/b9U6ghn+H9QZdK98fGUf3pAKJKjiZUvu3lwB
g7v90OgFFCU0OIPR3qHOu0dQbZuF1YvJ9kuY4C/WjF1JN5w/pmoPgjL4pRVNjPkf
hOuH32U6KawF
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328862843890392932810418246289636389517243
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 16:00:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-06 16:00:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.joasia.koumbit.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 710424887355052429541245418156444745400157311994625849547558376256181342685471095326701696206241691463818855282204623255146955498448836827657697960014410038805330284740938164464371860723556073451459017152621871312430745514147107703871585613917643279488007851123023322340272474566283614691596561627639045783967300734413492304639360795281034797702977674184233933859476755530848648095908741111927220522304620705046288354539608846164411288451297599715208103345679799515846780737592743257409048277252421309383356840702968261862041545100952753592458874210177774941740694540986542509265581292710153580289262363810866259317003789996520412739624313621912687022917235251606265885453829441532786626984521491445952448008398929585885679009942777830913735362031748522542118916679299579087933974893137802591585621124353529857377746449276631502074230462397421214603618158002935007482029049299031699267132075049534622730287076424197631367161281352269597423989367166960906967706525183783697592224647447845142904668097344976062082514835397855453717209721138009317216091658677074126219320493943991532899304393274843471609428605193850984957866964209796569436364036787425973101788752625494043550097202550234707922998567660612176245911361511669382388791697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9f905dffc80165ee06aca43b2e2759011f576ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joasia.koumbit.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170bb1738a50000040300473045022038539716db51ff9038e6c04f747a9b5f4e42bcf14e7a0a3e475d2457797592d80221008e9cd2999861182554ed2efcf0c24257791c9bbc56b083e5c3e09458158fcf23007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170bb1738b50000040300483046022100c9c06cb5b6089fee50365c5ab1d8d403a6ecbcfc586beb322fd7223ada5c44f0022100f4ec89a31798f8e0518d65f49812ef8082730f470fc1a857e6c37682c8fd79f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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