brandlift-ssl.eu

Issued by R3

About this certificate

This digital certificate with serial number 04:9c:e3:98:83:ce:cb:81:1d:6b:71:3d:03:92:6d:6d:e3:6b was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=brandlift-ssl.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9c:e3:98:83:ce:cb:81:1d:6b:71:3d:03:92:6d:6d:e3:6b
Serial Number (int): 401835719624252701187393069326220743533419
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 43:a5:03:5c:83:38:64:4c:46:0b:67:47:f4:3a:47:43:f4:4a:f4:a4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c0:7b:9e:99:10:4b:78:1f:28:c4:55:6f:73:ec:38:8e:a9:ef:93:a5
Fingerprint (sha256): a2:5f:3c:c8:a3:a6:a4:e6:8b:1e:9e:43:f5:1d:67:03:b8:26:35:fe:59:e5:c2:2a:6e:a7:43:f1:da:26:e8:d7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brandlift-ssl.eu

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brandlift-ssl.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brandlift-ssl.eu
kaliumhaz.hu
mail.brandlift-ssl.eu
mail.mfbcsoport.hu
mfbcsoport.hu
www.brandlift-ssl.eu
www.kaliumhaz.hu
www.mfbcsoport.hu

Other certificates including the domain name brandlift-ssl.eu

(limited to 100 certificates)
en.brandlift.eu
designsmart.ly
gyermekekvarazshegye.hu
bszk.brandlift-ssl.eu
designsmart.brandlift-ssl.eu
www.brandlift.hu
budaeyecenter.com
bszk-teszt.brandlift-ssl.eu
euroaszfalt.hu
euroaszfalt.hu
*.brandlift-ssl.eu
kozjegyzo.net
hello.carglass.hu
kozjegyzo.net
fressnapftest.brandlift-ssl.eu
hello.carglass.hu
kozjegyzo.net
www.brandlift-ssl.eu
mywiwe.brandlift-ssl.eu
brandlift.hu
bxragro.com
erstetest.brandlift-ssl.eu
akcija.kfc.rs
nagykonyveloteszt.hu
jatek.kfc.hu
gyermekekvarazshegye.hu
brandlift-ssl.eu
erstetest.brandlift-ssl.eu
www.brandlift-ssl.eu
bszk.brandlift-ssl.eu
fressnapftest.brandlift-ssl.eu
filharmonikusok.hu
toyseekers.net
mp-hacs.hungi.hu
budaeyecenter.com
brandlift.hu
erstetest.brandlift-ssl.eu
webdisk.kalikert.hu
fressnapftest.brandlift-ssl.eu
appetit.hu
akcija.kfc.rs
jatek.kfc.hu
igaz.us
fressnapftest.brandlift-ssl.eu
budaeyecenter.com
*.brandlift-ssl.eu
erstetest.brandlift-ssl.eu
internationalsolution.brandlift-ssl.eu
erstetest.brandlift-ssl.eu
budaeyecenter.com
kuponi.kfc.hr
jatekkeresok.hu
toffifee-land.brandlift-ssl.eu
fressnapftest.brandlift-ssl.eu
www.jatek.brandlift-ssl.eu
ajanlat.brandlift-ssl.eu
cpcalendars.budaeyecenter.com
erstetest.brandlift-ssl.eu
euroaszfalt.hu
fressnapf2.brandlift-ssl.eu
jatek.kfc.hu
www.brandlift-ssl.eu
jatekkeresok.hu
unnepinyitvatartasunk.hu
ilcsi.brandlift-ssl.eu
kuponkod.kfc.hu
toyseekers.net
gyermekekvarazshegye.hu
brandlift-ssl.eu
euroaszfalt.hu
hello.carglass.hu
fairlakashitel.hu
fairlakashitel.hu
www.brandlift-ssl.eu
kuponi.kfc.hr
comedycentralro.brandlift-ssl.eu
brandlift.eu
brandlift.hu
toyseekers.net
unnepinyitvatartasunk.hu
brandlift.eu
brandlift-ssl.eu
aztaminden-it.hu
www.toyseekers.net.brandlift-ssl.eu
fressnapftest.brandlift-ssl.eu
toyseekers.net
www.euroaszfalt.hu
citibank.brandlift.eu
unnepinyitvatartasunk.hu
euroaszfalt.hu
nagykonyveloteszt.hu
jatekkeresok.hu
www.brandlift-ssl.eu
fairlakashitel.hu
fressnapftest.brandlift-ssl.eu
kozjegyzo.net
erstetest.brandlift-ssl.eu
brandlift.hu
gyermekekvarazshegye.hu
www.brandlift-ssl.eu

Certificate

The complete raw certificate details for brandlift-ssl.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISBJzjmIPOy4Eda3E9A5JtbeNrMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTMwMjAwMjFaFw0yNDA2MTEwMjAwMjBaMBsxGTAXBgNVBAMT
EGJyYW5kbGlmdC1zc2wuZXUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6DADF1Tirl8peTVMZcvA8SPMHeeB481IGyuOzl0cZIi9UIGX6nCaqkMMaeNVe
mZzEdk7BwElpszDs6oqa1P7YRHuQerLNfUw48UnH+TyROiP3vxwfegei9D4BD1Rr
afSlvvE9G0Ou8vx1HqASl/mNMOQAtnUtuZ9gVCQAmh27B5ZBedBAtLjbS28CM4U+
5+0wRoKtVDxCWIcX416LWUyTcMFYuzQK7dNCVoE01FZavElR8EvaHGpTSpefLSw8
xABBBTPLEYNvsfPRj0Iy6jmKn+6laZG2AgzjNXrklZ0rqICTXSBauCbM0s1rZnX/
kToTzidw+7V4hth8VRcZ4+4lAgMBAAGjggKYMIIClDAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFEOlA1yDOGRMRgtnR/Q6R0P0SvSkMB8GA1UdIwQYMBaAFBQusxe3WFbL
rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov
L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v
cmcvMIGgBgNVHREEgZgwgZWCEGJyYW5kbGlmdC1zc2wuZXWCDGthbGl1bWhhei5o
dYIVbWFpbC5icmFuZGxpZnQtc3NsLmV1ghJtYWlsLm1mYmNzb3BvcnQuaHWCDW1m
YmNzb3BvcnQuaHWCFHd3dy5icmFuZGxpZnQtc3NsLmV1ghB3d3cua2FsaXVtaGF6
Lmh1ghF3d3cubWZiY3NvcG9ydC5odTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQG
CisGAQQB1nkCBAIEgfUEgfIA8AB3AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK
+Jpt9RfYAAABjjXA9jYAAAQDAEgwRgIhAO6Sz9PiOC2Uv/gH9CWq+wXz/lspbRRO
KDQb+3vQw9gEAiEAl28Xxrp1ZrCTN2xkfpbxU5/eyuAfd1fgHIo/Q73gsR4AdQB2
/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY41wPZ8AAAEAwBGMEQC
IAqw2iLjNwr0hlfs1ClBp4Kp/6jP+ZZPoPvSQXAwv7q5AiBIxuKVhcKS7TnyATjr
4hawnF5iSfNXaLdW7Z0p0iT1cDANBgkqhkiG9w0BAQsFAAOCAQEAtphMIZZrdUWR
ldg2XBeiZxsBLLvkg+usvNYK4XDV/Gm3kx9qtaeC8/FBbNSZAPNzQXQFYdz6pcEX
nMQ/USbFweUkR0plPC6RHQ5rHR7yQZJF0Ldtp7NVdxPL37IOM/YmdeG6zaOJO/Ta
YYUkrmVV8T5c8+JxP1k1nhfB5aeuabH1V26MyzTvhajX1AUitomS1iVU9dF4+jRj
lJYT9WKlMvJxGVANdIPo7k3aqFr6lkje7G6D96R1Zyyk4AKKdvRnXqbfWSIV+cQl
tdITTOYQb924InB0ztN03UERQeqYmy0Im94miUy95OzRXzsHI5XY8c8QoHBd7kX4
l8Apc6u1sg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugwAxdU4q5fKXk1TGXLw
PEjzB3ngePNSBsrjs5dHGSIvVCBl+pwmqpDDGnjVXpmcxHZOwcBJabMw7OqKmtT+
2ER7kHqyzX1MOPFJx/k8kToj978cH3oHovQ+AQ9Ua2n0pb7xPRtDrvL8dR6gEpf5
jTDkALZ1LbmfYFQkAJoduweWQXnQQLS420tvAjOFPuftMEaCrVQ8QliHF+Nei1lM
k3DBWLs0Cu3TQlaBNNRWWrxJUfBL2hxqU0qXny0sPMQAQQUzyxGDb7Hz0Y9CMuo5
ip/upWmRtgIM4zV65JWdK6iAk10gWrgmzNLNa2Z1/5E6E84ncPu1eIbYfFUXGePu
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401835719624252701187393069326220743533419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 02:00:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 02:00:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brandlift-ssl.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23486243632803918220617894060753357006873952547478671993300627319564854998654823492446982109519547393613743881547161831013575022721198448643148115352628296194835742302241651524583854484911249281776256342022390580749276301801360764537755330179169660429507987829635480982864149364928639616650698440463630305784065812678253834229229785609543094166413542810969392857128778575835733657073253779973021420206430956634794370065860908078701680393633538318712010255411398315446295038534101998700796787498845835476386039691800836950903387648796409318700377715849077672704382660185956979055355844709240353144261735177937811140133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43a5035c8338644c460b6747f43a4743f44af4a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandlift-ssl.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaliumhaz.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.brandlift-ssl.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mfbcsoport.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfbcsoport.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandlift-ssl.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaliumhaz.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mfbcsoport.hu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e35c0f6360000040300483046022100ee92cfd3e2382d94bff807f425aafb05f3fe5b296d144e28341bfb7bd0c3d804022100976f17c6ba7566b093376c647e96f1539fdecae01f7757e01c8a3f43bde0b11e00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e35c0f67c000004030046304402200ab0da22e3370af48657ecd42941a782a9ffa8cff9964fa0fbd2417030bfbab9022048c6e29585c292ed39f20138ebe216b09c5e6249f35768b756ed9d29d224f570
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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