gabosimonetti.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0e:d6:5f:f1:d5:a8:1f:fc:c2:5d:d3:42:5e:44:dd:ed:9c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gabosimonetti.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:0e:d6:5f:f1:d5:a8:1f:fc:c2:5d:d3:42:5e:44:dd:ed:9c
Serial Number (int): 353498049828222003127972020579877783465372
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 06:14:80:c5:48:e5:6a:0f:33:68:27:7d:56:72:0e:4d:ca:a0:4f:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 29:50:5f:12:87:b9:fd:a9:89:90:ac:b8:66:07:13:14:70:ba:b5:d0
Fingerprint (sha256): a2:c2:41:3b:0c:66:77:a7:c0:d7:6c:34:ba:ac:03:ab:48:c2:99:9a:f8:67:81:ee:50:1e:e9:11:25:c9:a2:ec

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gabosimonetti.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gabosimonetti.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gabosimonetti.com
www.gabosimonetti.com

Other certificates including the domain name gabosimonetti.com

(limited to 100 certificates)
meeting.strongdallas.com
meeting.strongdallas.com
meeting.kreate.agency
meet.mysocalhealth.com
meeting.kreate.agency
meeting.kreate.agency
meeting.kreate.agency
webinar.engys.com
assist.makasacorp.com
meet.keterna.com
meeting.kreate.agency
meeting.kreate.agency
meeting.kreate.agency
meeting.tradefy.com.br
meeting.theholdingbox.com
meeting.kreate.agency
meeting.abrahamsenfinancial.com
meeting.kreate.agency
meeting.kreate.agency
meeting.kreate.agency
meet.mysocalhealth.com
meet.keterna.com
meeting.kreate.agency
meeting.kreate.agency
meetings.bopyx.com
meeting.kreate.agency
meeting.kreate.agency
meetings.greenlight.education
meeting.kreate.agency
meeting.kreate.agency
meeting.thebrandingzone.com
meeting.kreate.agency
meeting.kreate.agency
gabosimonetti.com
meeting.virtualpethub.com
meeting.theholdingbox.com
meeting.kreate.agency
meeting.kreate.agency
gabosimonetti.com
meeting.virtualpethub.com
meeting.strongdallas.com
meeting.thebrandingzone.com
meeting.kreate.agency
meeting.kreate.agency
meeting.kreate.agency
meetings.greenlight.education
meeting.abrahamsenfinancial.com
meeting.kreate.agency
meeting.kreate.agency
meeting.fastrnd.com
meet.keterna.com
gabosimonetti.com
meeting.kreate.agency
meetings.synkron-international.com
meeting.kreate.agency
meeting.kreate.agency
meeting.kreate.agency
meeting.thebrandingzone.com
meeting.kreate.agency
meeting.abrahamsenfinancial.com
meeting.kreate.agency
meetings.greenlight.education
meeting.kreate.agency
meeting.kreate.agency
meetings.greenlight.education
meeting.kreate.agency
events.mondayskills.com
meet.indrastra.com
meet.indrastra.com
meeting.virtualpethub.com
meeting.strongdallas.com
meeting.kreate.agency
meeting.kreate.agency
meet.mysocalhealth.com
reunion.gabosimonetti.com
join.excellence.pk
meeting.kreate.agency
documentos.implex.com.mx
meetings.bopyx.com
reunion.gabosimonetti.com
meeting.kreate.agency
events.mondayskills.com
gabosimonetti.com
meeting.tradefy.com.br
meeting.virtualpethub.com
webinar.engys.com
meet.mysocalhealth.com
gabosimonetti.com
meeting.kreate.agency
webinar.engys.com
assist.inspiredagility.co.za
meet.ebsagroup.com.py
meeting.abrahamsenfinancial.com
meetings.synkron-international.com
join.excellence.pk
meeting.kreate.agency
projects.pressone.net
meeting.kreate.agency
meeting.theholdingbox.com
meeting.kreate.agency

Certificate

The complete raw certificate details for gabosimonetti.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgISBA7WX/HVqB/8wl3TQl5E3e2cMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MDIxMjE1NDJaFw0yNDA3MzExMjE1NDFaMBwxGjAYBgNVBAMT
EWdhYm9zaW1vbmV0dGkuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAxDCJXH1Ir3hqARizf2UTQ617S17blWfyhmnGniqmHjgncAINGBCiL6ZgO81N
V81AOuGtnyTgYcnP1Df0KP7MS7wIA97eeNLyG/06WIjTRioFJmEMs7YxeS/56pRi
MjDA3vFgnbyXFmVMQ8tMC0EQt+UvrodGO7d6OYCSFhzDBlTkGS82DoU0qXhYOgQJ
LtyFRO16pkrzVdO7DxpFxiRAXuiQ9jq45g59+SAGFEfhjwT3diAgG8j0ndgr+mLE
q5ooPFOgXWpblaMvs9c4KrgLsFWCWh8UIAZNWxZ4nimU5vsv/IsMIIw8tZsoaOge
rBonsoUr5Ufzk44Ja2Ihfu4ZZQZlGuVDInAo5mNfprfxxvL+nRJQkj+4MyKENruU
NKykxElczWtWluUbBsQEefJGqcJGYPUIbwJ7rU9OocOKj/wrW5ZFNIVFqtAxImv2
p+1x/6+ZWDYpdG1ez698zYefWMt9Hp7rvEtyAD4Moqbk7YWQElZfgS9dEoEmoXID
5cDfhhT0LwHsjtHweJTXA+iyxCJJBoKY1io8oOajkRP86nLekgeqOXx5IwhYD7eC
DTHxzRp3Euk8KtiDaunFvTftQzfhJnWJNPR0OYxoJ9GSHtJ4yVoMragN0nxhWxCY
RcC4LKRva804MbZe+Cwy5ZFydOGUMNG68teTQ1f7NROxxdECAwEAAaOCAikwggIl
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUBhSAxUjlag8zaCd9VnIOTcqgT2cwHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wMwYDVR0RBCwwKoIRZ2Fib3NpbW9uZXR0aS5j
b22CFXd3dy5nYWJvc2ltb25ldHRpLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCC
AQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ABmYEHEJ8NZSLjCA0p4/ZLuDbijM+Q9S
ju7fzko/FrTKAAABjzlyTE0AAAQDAEYwRAIgLPyrh5Ux8/pg1b27f1u3HYgfXlEb
USoLblS+/HOWlrACIC2NoW/Mn14jI3JCZjCrx+ugOekq2t1sN4iDpg5Zcj6eAHYA
dv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGPOXJMgwAABAMARzBF
AiEAsI3juuKoLpXD+hxfCdEWmfiVa+8UkGguvjzA1cfGTwwCIGpUQj7x1O5gUDAl
Q5JRn2sIUciaaTB+BASdhzDqnY/0MA0GCSqGSIb3DQEBCwUAA4IBAQCfFMDYUCJ2
XUuz4AfJD1PdKmQGAZrtwmPHkYs62oZKB/rAOYqQKIDiDFuGIwdLko+pDRqEiGeS
lx2oQmEoK8HJpW1GqDkWXJnGXM8r3ZPSWVeXo/Qem1q/vo46lIfSbKky6wZJR6gq
Xh5zak8GzI6wwCfrnOQTpmeRsEKDK5TnkwwCecuptjSVeOHbdQNiI5mX44Q0bvXG
2mP8Zkid3sCBie5xXhi3HCzx8NnJJ78KKr157CV3DOucb99w2X9U42vvw5XyY4MG
ByFG6k0NaBlyE8s+naNQy7CSPLg3hnLZVKCfTZz6gqNRvWvT5TLN3FBoKcwgR9ci
f1Jsd3Nb9Ngh
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxDCJXH1Ir3hqARizf2UT
Q617S17blWfyhmnGniqmHjgncAINGBCiL6ZgO81NV81AOuGtnyTgYcnP1Df0KP7M
S7wIA97eeNLyG/06WIjTRioFJmEMs7YxeS/56pRiMjDA3vFgnbyXFmVMQ8tMC0EQ
t+UvrodGO7d6OYCSFhzDBlTkGS82DoU0qXhYOgQJLtyFRO16pkrzVdO7DxpFxiRA
XuiQ9jq45g59+SAGFEfhjwT3diAgG8j0ndgr+mLEq5ooPFOgXWpblaMvs9c4KrgL
sFWCWh8UIAZNWxZ4nimU5vsv/IsMIIw8tZsoaOgerBonsoUr5Ufzk44Ja2Ihfu4Z
ZQZlGuVDInAo5mNfprfxxvL+nRJQkj+4MyKENruUNKykxElczWtWluUbBsQEefJG
qcJGYPUIbwJ7rU9OocOKj/wrW5ZFNIVFqtAxImv2p+1x/6+ZWDYpdG1ez698zYef
WMt9Hp7rvEtyAD4Moqbk7YWQElZfgS9dEoEmoXID5cDfhhT0LwHsjtHweJTXA+iy
xCJJBoKY1io8oOajkRP86nLekgeqOXx5IwhYD7eCDTHxzRp3Euk8KtiDaunFvTft
QzfhJnWJNPR0OYxoJ9GSHtJ4yVoMragN0nxhWxCYRcC4LKRva804MbZe+Cwy5ZFy
dOGUMNG68teTQ1f7NROxxdECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353498049828222003127972020579877783465372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 12:15:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-31 12:15:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gabosimonetti.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800383721393624196472682599233890394029104223885952064146442683652711687894572122684984662210870743651562595912110624322755913967816897554773816892105368983306576546339484241483103620279405450912369723617884933530369840308887469197562176334234750961264382190602326758772374369605444962125137559402670679143605718010768652209129944122644598051624994492713580482475500731702939138001187909401030330966280513331805796446489803669665481492174367068755891143987528198827816899580183509001838346258672849586254085787261033614050455722002642261392325627408256793059525305075532578143664484597963681750197593861182411448383733232756417507717083731175022563969899378796248731655635748241124210864264959983722349317032913317869845241634525210694223753998356556580161719387647180676711874408784568235879378433522507102337023209797474344941011343270235182142512963752126792119788769457187571079558711426915907053842728358617235261953209741607026773366494255852020069114033539645620947017511332209362368131165164373150211561951210398265161345796507044855554108933961544910612154408862370520960577617511758415681950494451209740576365076909282383073605628051215391697003558845850083594345558174935020896854284871696145148226670547839567482112296401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							061480c548e56a0f3368277d56720e4dcaa04f67
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabosimonetti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gabosimonetti.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f39724c4d000004030046304402202cfcab879531f3fa60d5bdbb7f5bb71d881f5e511b512a0b6e54befc739696b002202d8da16fcc9f5e232372426630abc7eba039e92adadd6c378883a60e59723e9e00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f39724c830000040300473045022100b08de3bae2a82e95c3fa1c5f09d11699f8956bef1490682ebe3cc0d5c7c64f0c02206a54423ef1d4ee605030254392519f6b0851c89a69307e04049d8730ea9d8ff4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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