ssl.circlesoft.net

Issued by R3

About this certificate

This digital certificate with serial number 03:b2:ca:c6:3a:68:0a:34:4c:4d:40:a0:bb:23:44:f8:e1:69 was issued on by Let's Encrypt.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl.circlesoft.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:ca:c6:3a:68:0a:34:4c:4d:40:a0:bb:23:44:f8:e1:69
Serial Number (int): 322176652421756973326395514724519549395305
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:ea:8c:73:1c:d7:a8:6d:64:f5:4f:4a:6d:1c:1a:b3:30:a5:da:db
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 04:b9:27:33:8b:0c:7a:6b:20:4a:91:ad:d9:1b:b5:14:f2:d1:47:1d
Fingerprint (sha256): a5:05:fe:8b:5d:dd:1b:bb:8a:dc:cf:91:7b:54:01:f1:7c:a5:b8:fe:09:f5:2e:56:95:1e:73:1d:7d:95:5f:07

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl.circlesoft.net

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.circlesoft.net

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aesopsattic.com
aesopsattic.com.au
beechworthbooks.au
beechworthbooks.com.au
booknestmudgee.com.au
booktique.com.au
brightandearlybooks.com.au
carsonsbookshop.co.nz
collinsbooks.com.au
dorothybutler.co.nz
escapehatchbooks.com.au
hannahsbooks.net
mylocalbookshop.com.au
shop.bookcow.com.au
shop.fullersbookshop.com.au
shop.shelflovers.com.au
shop.thebookgarden.com.au
shop.thechestnuttree.com.au
ssl.circlesoft.net
thebookboutique.com.au
thebookshopatqueenscliff.com
thepictonbookshop.co.nz
www.aesopsattic.com
www.aesopsattic.com.au
www.beechworthbooks.au
www.beechworthbooks.com.au
www.booknestmudgee.com.au
www.booktique.com.au
www.brightandearlybooks.com.au
www.carsonsbookshop.co.nz
www.collinsbooks.com.au
www.dorothybutler.co.nz
www.escapehatchbooks.com.au
www.hannahsbooks.net
www.mylocalbookshop.com.au
www.thebookboutique.com.au
www.thebookshopatqueenscliff.com
www.thepictonbookshop.co.nz

Other certificates including the domain name circlesoft.net

(limited to 100 certificates)
timeout.circlesoft.net
moransbooks.circlesoft.net
johnreedau.alpha.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
booksatstones.circlesoft.net
aesopsattic.com
bookpassion.beta.circlesoft.net
www.teahousebooks.circlesoft.net
torquaybooks.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
childrensbookshop.beta.circlesoft.net
thebookroomatlennox.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
booksatstones.circlesoft.net
teahousebooks.beta.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
*.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
booksatstones.circlesoft.net
*.circlesoft.net
torquaybooks.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
ballaratonydiard.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
*.circlesoft.net
metropolis.beta.circlesoft.net
bookpassion.beta.circlesoft.net
boobookonowen.beta.circlesoft.net
*.beta.circlesoft.net
bookpassion.beta.circlesoft.net
timeout.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
wholesale.circlesoft.net
neighbourhoodbooks.circlesoft.net
*.alpha.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
abacus.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
ballaratbridge.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
circlesoft.net
ssl.circlesoft.net
vivabooks.beta.circlesoft.net
ssl.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
*.beta.circlesoft.net
ironbirdbookshop.circlesoft.net
matildabookshop.beta.circlesoft.net
johnreedau.beta.circlesoft.net
abacus.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
paradoxbooks.beta.circlesoft.net
cookthebooks.beta.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
pottspoint.beta.circlesoft.net
cowlickbooks.beta.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
area52.circlesoft.net
abacus.circlesoft.net
jasonbooks.circlesoft.net
abacus.beta.circlesoft.net
retail.dev.circlesoft.net
booksatstones.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
abacus.circlesoft.net
moransbooks.circlesoft.net

Certificate

The complete raw certificate details for ssl.circlesoft.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5sgzn8SPv4KCaYc1dMcJLm50+Qln
OP3hevtWqmq0yiyoX7lNRZxJZJTJwcTOm+ezbjiucsmYr7R36CmrDV4ozw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322176652421756973326395514724519549395305
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 16:29:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 16:29:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.circlesoft.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004e6c8339fc48fbf828269873574c7092e6e74f9096738fde17afb56aa6ab4ca2ca85fb94d459c496494c9c1c4ce9be7b36e38ae72c998afb477e829ab0d5e28cf
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fea8c731cd7a86d64f54f4a6d1c1ab330a5dadb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (941 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesopsattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesopsattic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beechworthbooks.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beechworthbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booknestmudgee.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booktique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightandearlybooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsonsbookshop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collinsbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dorothybutler.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escapehatchbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hannahsbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocalbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bookcow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fullersbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.shelflovers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thebookgarden.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thechestnuttree.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.circlesoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebookboutique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebookshopatqueenscliff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepictonbookshop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aesopsattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aesopsattic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beechworthbooks.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beechworthbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booknestmudgee.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booktique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brightandearlybooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carsonsbookshop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collinsbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dorothybutler.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escapehatchbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hannahsbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mylocalbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookboutique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookshopatqueenscliff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thepictonbookshop.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b3988f833000004030046304402205e6e1ab9b89fc304d873c14727e4a862edea5d995c71b7850be6f74281e31498022007998aee4abefdeb96dc1cc4ab50fd1c237304e31ac4432a4c775f129d2e614e00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b3988f87f0000040300463044022038c8d7b5f2d88ce31d13eadf2e1332b172f4c663d19df4cfe13fa9c00e4a526e02206079e1a5a365f7369fc1eb48baeec7c4e8b75e7884666ae904528eb171412c4b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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