platform.sparkinfluence.net

Issued by R3

About this certificate

This digital certificate with serial number 04:6d:ea:01:e7:de:7e:3d:44:ba:22:60:db:21:6a:02:06:42 was issued on by Let's Encrypt.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=platform.sparkinfluence.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6d:ea:01:e7:de:7e:3d:44:ba:22:60:db:21:6a:02:06:42
Serial Number (int): 385850970967598147655060078904993560790594
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 65:fc:6f:36:8e:e5:f6:de:c1:2f:37:7b:33:f8:d9:a3:21:ed:18:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d0:f9:91:38:cb:59:ff:9f:20:fb:21:0e:28:38:33:16:a8:70:34:82
Fingerprint (sha256): a0:73:d7:8c:7b:27:dd:14:de:13:04:bd:f8:b9:1d:0b:8c:26:f2:2e:16:a3:7b:02:04:d9:0a:4f:72:fc:67:5b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate platform.sparkinfluence.net

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for platform.sparkinfluence.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act.physiciansgrassrootsnetwork.org
action.appfairness.org
action.blochforirving.com
action.cancersupportcommunity.org
action.lungevity.org
action.openplans.org
action.peopleforbikes.org
action.progresschamber.org
action.ridersalliance.org
action.vinylsiding.org
action.williams.com
advocacy.kidney.org
advocacy.massmutual.com
fccactioncenter.com
givetoadpac.ada.org
groundswellstrat.com
magna.action.magnasvoice.com
makeurvoiceheard.com
platform.sparkinfluence.net
savehealthcareinwa.org
spark.savebostonswaterfront.com
usgr.smiths.com
voices.kidney.org
www.aahoa-pac.com
www.autocareadvocacy.org
www.boatingunited.org
www.faircompactforall.com
www.fccactioncenter.com
www.magnasvoice.com
www.makeurvoiceheard.com
www.ridapac.org
www.savehealthcareinwa.org
www.spiritsunited.org

Other certificates including the domain name sparkinfluence.net

(limited to 100 certificates)
platform.sparkinfluence.net
platform.sparkinfluence.net
oivi.sparkinfluence.net
peopleforbikes.org
mps.sparkinfluence.net
asn.sparkinfluence.net
oivi.sparkinfluence.net
platform.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
peopleforbikes.org
oivi.sparkinfluence.net
terminal-demo.sparkinfluence.net
oivi.sparkinfluence.net
asn.sparkinfluence.net
*.sparkinfluence.net
sparkinfluence.net
sparkinfluence.net
mps.sparkinfluence.net
pmiusa.sparkinfluence.net
oivi.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
*.sandbox.sparkinfluence.net
pmiusa.sparkinfluence.net
*.sparkinfluence.net
oivi.sparkinfluence.net
oivi.sparkinfluence.net
dev.sparkinfluence.net
alpapac.sparkinfluence.net
asn.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
peopleforbikes.org
platform.sparkinfluence.net
platform.sparkinfluence.net
default.sparkinfluence.net
peopleforbikes.org
default.sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
*.sandbox.sparkinfluence.net
*.sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
kb.sparkinfluence.net
oivi.sparkinfluence.net
mps.sparkinfluence.net
peopleforbikes.org
asn.sparkinfluence.net
peopleforbikes.org
dev.sparkinfluence.net
peopleforbikes.org
dev.sparkinfluence.net
mps.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
staging.mailer.sparkinfluence.net
asn.sparkinfluence.net
oivi.sparkinfluence.net
default.sparkinfluence.net
platform.sparkinfluence.net
oivi.sparkinfluence.net
*.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
mps.sparkinfluence.net
sparkinfluence.net
oivi.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
default.sparkinfluence.net
dev.sparkinfluence.net
peopleforbikes.org
*.sparkinfluence.net
*.app.sparkinfluence.net
oivi.sparkinfluence.net
sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
sparkinfluence.net
dev.sparkinfluence.net
dev.sparkinfluence.net
mps.sparkinfluence.net
oivi.sparkinfluence.net
asn.sparkinfluence.net
features.sparkinfluence.net
asn.sparkinfluence.net
default.sparkinfluence.net
default.sparkinfluence.net
platform.sparkinfluence.net
pmiusa.sparkinfluence.net
pmiusa.sparkinfluence.net
dev.sparkinfluence.net
peopleforbikes.org

Certificate

The complete raw certificate details for platform.sparkinfluence.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bzGWwvkYSIyjTTlPOyU
Wf5oEKDg8eEl8duSvH9mj8lYQ6kQqUvyKY8vXpBwd9tHf+9odEZpphD4tNzgaJdC
l6FtgELsej7TTw7Y1texSkAd4rjkLXKlZ+MJ5NLijLFU4MLV9KXH5r/oLMjX2Emb
rfMtpQymPq9U6pzGwLPzepbPkmeMWX8Jq728pfe4FpZj8YRpWPoGKhF+vg5QLxO3
6se4G5UEW6N50Xts5G8irisRNRpIzFxiYvreb8YQLvm932jgmUkl0KHAOJOlMTGT
46rP8lftTuK0fIhfAMthaVp2rH2IJVFRnEqvGhwcO94yK4fZoOGsYLMKZMjX4mPd
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385850970967598147655060078904993560790594
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 17:32:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 17:32:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'platform.sparkinfluence.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27991753734023450660660189882110164753799188494518884472689935788418527294338422811969352836450517184469826008818524964006411336797835907820115777870387434636269785388259118748628859638248704987448514298826745800979621742952053960546414908896049660025405132910131771048217313795180482671552110465698900128301644741778212777102423323442507727001659526517411923317636568221865945091993742152312924081546864865977924933309001449796352985823628114119810953406869704158829863854917654392596208387415641971148018684108759124908513436530074289312198024839675961323437896590585892539152274062132588979641136102316136647089467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65fc6f368ee5f6dec12f377b33f8d9a321ed186f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (817 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.physiciansgrassrootsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.appfairness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.blochforirving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.cancersupportcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.lungevity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.openplans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.peopleforbikes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.progresschamber.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.ridersalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.vinylsiding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.williams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocacy.kidney.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocacy.massmutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fccactioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givetoadpac.ada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groundswellstrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magna.action.magnasvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeurvoiceheard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.sparkinfluence.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savehealthcareinwa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.savebostonswaterfront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usgr.smiths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voices.kidney.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aahoa-pac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autocareadvocacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boatingunited.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faircompactforall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fccactioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnasvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeurvoiceheard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ridapac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savehealthcareinwa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritsunited.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b15b62e3b0000040300473045022100ea920285cba6c09cff761e1abb441a73ca08cad9de32d638020187754d043d9a02205494b4d69413c430a58d3f151f676e4322ec258f7aeb8bd62c6c375e3ffdd1cf007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b15b62e500000040300483046022100bae111a37a8f41bb9a10a4e90544e9f452ac566cfc86e60aad088a02cdfd3d79022100f4bc4a6ef46634cfdddbd509c3e4849c0220e7016791061310b8a0a87ae93fd6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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