5752754626625536-fe1.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0b:0a:96:42:c6:9f:8e:e7:4b:96:64:79:b4:ec:78:8c:10 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5752754626625536-fe1.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:0a:96:42:c6:9f:8e:e7:4b:96:64:79:b4:ec:78:8c:10
Serial Number (int): 265094036310273283315965703070547548081168
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:c9:0d:15:a8:e9:df:c9:b4:7b:80:78:15:b0:6c:9a:4a:f2:ed:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:cf:76:55:3d:90:f6:79:00:87:c5:da:66:58:b0:67:88:7c:3c:4d
Fingerprint (sha256): a9:51:42:d2:ff:f5:22:95:a8:b0:33:11:eb:52:5f:14:5c:b5:fb:34:00:e5:a2:a6:07:41:a4:63:b0:ee:b2:2a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5752754626625536-fe1.pantheonsite.io

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5752754626625536-fe1.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5752754626625536-fe1.pantheonsite.io
a11ysummit20.highedweb.org
academiccenters.berkeley.edu
academicservices.berkeley.edu
api-department.berkeley.edu
aten.io
atendesigngroup.com
boo-onthesamepage.berkeley.edu
brainbalancecenters.com
calwise.berkeley.edu
chasebrexton.org
cityofrehoboth.com
clay.blog
clickspace.tv
closertotruth.com
crevecoeurfamilydental.com
criticaldialogues.berkeley.edu
denison.edu
dev-recycle.pantheon.berkeley.edu
dev.njlcv.org
developerdev.plantronics.com
digital.lib.berkeley.edu
farmrichsmokehouse.com
gentlegiant.com
hardyandnancestudios.com
idahopeaceofficersmemorial.com
ihouse.berkeley.edu
info.warmboard.com
kante.berkeley.edu
kidsdentalplace.com
londonchildrensmuseum.ca
modentalcare.com
mseco.com
myblackbird.com
mykingpins.com
nefa.org
ohsx.stanford.edu
onthesamepage.berkeley.edu
osd.berkeley.edu
pasafeprescribing.org
pcssc.berkeley.edu
pe.berkeley.edu
php72.2hholinger.com
puente.berkeley.edu
researchdata.berkeley.edu
reslife.berkeley.edu
restrooms.berkeley.edu
retirement.berkeley.edu
rha.berkeley.edu
rl-test.com
scid.stanford.edu
sfrb.org
shop.gentlegiant.com
stage.ohs.stanford.edu
studentech.berkeley.edu
studenttech.berkeley.edu
test-recycle.pantheon.berkeley.edu
test.bolletta-energia.it
test.gentlegiant.com
themeprograms.berkeley.edu
transcore.com
transportation.stanford.edu
ulo.stanford.edu
warmboard.com
westernbankers.com
wib.org
woodcockpc.com
workforcetools.naswa.org
www.atendesigngroup.com
www.bismarckbraces.com
www.brainbalancecenters.com
www.cee.berkeley.edu
www.chasebrexton.org
www.cityofrehoboth.com
www.clay.blog
www.clickspace.tv
www.closertotruth.com
www.denison.edu
www.dewindowcoverings.com
www.extension-commons.berkeley.edu
www.formersaintdenver.com
www.gentlegiant.com
www.idahopeaceofficersmemorial.com
www.londonchildrensmuseum.ca
www.mseco.com
www.myblackbird.com
www.mykingpins.com
www.nefa.org
www.pasafeprescribing.org
www.pcssc.berkeley.edu
www.quickfire.net.au
www.restrooms.berkeley.edu
www.retirement.berkeley.edu
www.sfrb.org
www.studentech.berkeley.edu
www.transcore.com
www.warmboard.com
www.westernbankers.com
www.wib.org
www.woodcockpc.com

Other certificates including the domain name 5752754626625536-fe1.pantheonsite.io

(limited to 100 certificates)
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io
5752754626625536-fe1.pantheonsite.io

Certificate

The complete raw certificate details for 5752754626625536-fe1.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIODjCCDPagAwIBAgISAwsKlkLGn47nS5ZkebTseIwQMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDcyMjEzMDVaFw0y
MDA1MDcyMjEzMDVaMC8xLTArBgNVBAMTJDU3NTI3NTQ2MjY2MjU1MzYtZmUxLnBh
bnRoZW9uc2l0ZS5pbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALkP
IyP9hjM6Wvyoj1iXfotB5fKxZf7oY/5jSlAVZjILUw7L+25OfgFm80tdqvNU7qW3
KNOXrpWZgttw/FFL+HhJrM0q+GybHF5A+FYJHJM0yWSq1L/O/TclCK/sfvF4bi6V
S+Ig1Dl1U+H7eSyE79PDO2Jn4jmZDKp02fRDrBqtAJsRq4CiY66h6ZMB1C2jIR6m
hCQ2pqBUxgaqQOtPaOg9HY7ZI0/GXWc5ohw7xUd6BUSr9uuuDV3DACNH8Zv139Tx
8uX0mPLnxNrZqxLxT+k9ia21UujyhXT30e0DGfw4jwb0QB+alUOew5jZQwouPXyG
wz/6JIfpxcfR1itYp1UCAwEAAaOCCwcwggsDMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUOskNFajp38m0e4B4FbBsmkry7fwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCCCL0GA1UdEQSCCLQwggiwgiQ1NzUy
NzU0NjI2NjI1NTM2LWZlMS5wYW50aGVvbnNpdGUuaW+CGmExMXlzdW1taXQyMC5o
aWdoZWR3ZWIub3JnghxhY2FkZW1pY2NlbnRlcnMuYmVya2VsZXkuZWR1gh1hY2Fk
ZW1pY3NlcnZpY2VzLmJlcmtlbGV5LmVkdYIbYXBpLWRlcGFydG1lbnQuYmVya2Vs
ZXkuZWR1ggdhdGVuLmlvghNhdGVuZGVzaWduZ3JvdXAuY29tgh5ib28tb250aGVz
YW1lcGFnZS5iZXJrZWxleS5lZHWCF2JyYWluYmFsYW5jZWNlbnRlcnMuY29tghRj
YWx3aXNlLmJlcmtlbGV5LmVkdYIQY2hhc2VicmV4dG9uLm9yZ4ISY2l0eW9mcmVo
b2JvdGguY29tggljbGF5LmJsb2eCDWNsaWNrc3BhY2UudHaCEWNsb3NlcnRvdHJ1
dGguY29tghpjcmV2ZWNvZXVyZmFtaWx5ZGVudGFsLmNvbYIeY3JpdGljYWxkaWFs
b2d1ZXMuYmVya2VsZXkuZWR1ggtkZW5pc29uLmVkdYIhZGV2LXJlY3ljbGUucGFu
dGhlb24uYmVya2VsZXkuZWR1gg1kZXYubmpsY3Yub3JnghxkZXZlbG9wZXJkZXYu
cGxhbnRyb25pY3MuY29tghhkaWdpdGFsLmxpYi5iZXJrZWxleS5lZHWCFmZhcm1y
aWNoc21va2Vob3VzZS5jb22CD2dlbnRsZWdpYW50LmNvbYIYaGFyZHlhbmRuYW5j
ZXN0dWRpb3MuY29tgh5pZGFob3BlYWNlb2ZmaWNlcnNtZW1vcmlhbC5jb22CE2lo
b3VzZS5iZXJrZWxleS5lZHWCEmluZm8ud2FybWJvYXJkLmNvbYISa2FudGUuYmVy
a2VsZXkuZWR1ghNraWRzZGVudGFscGxhY2UuY29tghhsb25kb25jaGlsZHJlbnNt
dXNldW0uY2GCEG1vZGVudGFsY2FyZS5jb22CCW1zZWNvLmNvbYIPbXlibGFja2Jp
cmQuY29tgg5teWtpbmdwaW5zLmNvbYIIbmVmYS5vcmeCEW9oc3guc3RhbmZvcmQu
ZWR1ghpvbnRoZXNhbWVwYWdlLmJlcmtlbGV5LmVkdYIQb3NkLmJlcmtlbGV5LmVk
dYIVcGFzYWZlcHJlc2NyaWJpbmcub3JnghJwY3NzYy5iZXJrZWxleS5lZHWCD3Bl
LmJlcmtlbGV5LmVkdYIUcGhwNzIuMmhob2xpbmdlci5jb22CE3B1ZW50ZS5iZXJr
ZWxleS5lZHWCGXJlc2VhcmNoZGF0YS5iZXJrZWxleS5lZHWCFHJlc2xpZmUuYmVy
a2VsZXkuZWR1ghZyZXN0cm9vbXMuYmVya2VsZXkuZWR1ghdyZXRpcmVtZW50LmJl
cmtlbGV5LmVkdYIQcmhhLmJlcmtlbGV5LmVkdYILcmwtdGVzdC5jb22CEXNjaWQu
c3RhbmZvcmQuZWR1gghzZnJiLm9yZ4IUc2hvcC5nZW50bGVnaWFudC5jb22CFnN0
YWdlLm9ocy5zdGFuZm9yZC5lZHWCF3N0dWRlbnRlY2guYmVya2VsZXkuZWR1ghhz
dHVkZW50dGVjaC5iZXJrZWxleS5lZHWCInRlc3QtcmVjeWNsZS5wYW50aGVvbi5i
ZXJrZWxleS5lZHWCGHRlc3QuYm9sbGV0dGEtZW5lcmdpYS5pdIIUdGVzdC5nZW50
bGVnaWFudC5jb22CGnRoZW1lcHJvZ3JhbXMuYmVya2VsZXkuZWR1gg10cmFuc2Nv
cmUuY29tght0cmFuc3BvcnRhdGlvbi5zdGFuZm9yZC5lZHWCEHVsby5zdGFuZm9y
ZC5lZHWCDXdhcm1ib2FyZC5jb22CEndlc3Rlcm5iYW5rZXJzLmNvbYIHd2liLm9y
Z4IOd29vZGNvY2twYy5jb22CGHdvcmtmb3JjZXRvb2xzLm5hc3dhLm9yZ4IXd3d3
LmF0ZW5kZXNpZ25ncm91cC5jb22CFnd3dy5iaXNtYXJja2JyYWNlcy5jb22CG3d3
dy5icmFpbmJhbGFuY2VjZW50ZXJzLmNvbYIUd3d3LmNlZS5iZXJrZWxleS5lZHWC
FHd3dy5jaGFzZWJyZXh0b24ub3JnghZ3d3cuY2l0eW9mcmVob2JvdGguY29tgg13
d3cuY2xheS5ibG9nghF3d3cuY2xpY2tzcGFjZS50doIVd3d3LmNsb3NlcnRvdHJ1
dGguY29tgg93d3cuZGVuaXNvbi5lZHWCGXd3dy5kZXdpbmRvd2NvdmVyaW5ncy5j
b22CInd3dy5leHRlbnNpb24tY29tbW9ucy5iZXJrZWxleS5lZHWCGXd3dy5mb3Jt
ZXJzYWludGRlbnZlci5jb22CE3d3dy5nZW50bGVnaWFudC5jb22CInd3dy5pZGFo
b3BlYWNlb2ZmaWNlcnNtZW1vcmlhbC5jb22CHHd3dy5sb25kb25jaGlsZHJlbnNt
dXNldW0uY2GCDXd3dy5tc2Vjby5jb22CE3d3dy5teWJsYWNrYmlyZC5jb22CEnd3
dy5teWtpbmdwaW5zLmNvbYIMd3d3Lm5lZmEub3Jnghl3d3cucGFzYWZlcHJlc2Ny
aWJpbmcub3JnghZ3d3cucGNzc2MuYmVya2VsZXkuZWR1ghR3d3cucXVpY2tmaXJl
Lm5ldC5hdYIad3d3LnJlc3Ryb29tcy5iZXJrZWxleS5lZHWCG3d3dy5yZXRpcmVt
ZW50LmJlcmtlbGV5LmVkdYIMd3d3LnNmcmIub3Jnght3d3cuc3R1ZGVudGVjaC5i
ZXJrZWxleS5lZHWCEXd3dy50cmFuc2NvcmUuY29tghF3d3cud2FybWJvYXJkLmNv
bYIWd3d3Lndlc3Rlcm5iYW5rZXJzLmNvbYILd3d3LndpYi5vcmeCEnd3dy53b29k
Y29ja3BjLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQIGCisG
AQQB1nkCBAIEgfMEgfAA7gB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgia
N9kTAAABcCHtnk0AAAQDAEYwRAIgZSXOnIzFz26Latk/MXmcpvkGiqDwpveA8d2g
zfbFto4CIC1v70tDdVtmSOzvdUJsg2rEPxeO6cOe5LgDDGLLEshrAHUAsh4FzIui
zYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFwIe2ePgAABAMARjBEAiARwTxS
ZYwmCGelzyb6wY/Kc36xSJIQavkeYxu+lDSdkQIgO9cE4JDgLMJBm7XFtvdxUPsY
K6ZAU89w4Ro9Bhd66aMwDQYJKoZIhvcNAQELBQADggEBAHvtEkuLMLVy1WLxK7nK
GiZryOoTkqLCrvh+/56+H4OAhUCXQW23HR1CDQrhl8/Dny5mTdrLYKfBvNFeoI7v
gRn3TUZJXdmtzqUi6psii3/FgJQ+qJ9axpGVPVt+zWjvOSfiQJLVomUkzGu88KSZ
PDeM6NhWzm3NX4idP77PENUJOkIh3mLSwuuHN0LvRPaC6uhkOZ8fqYzOaB50tzay
st/cBE3wea/XVl28l6Y5PM/WLKpiH3bOOyvnsPXpofBMh3QX5mh0GlvEBDbBUjXI
ktzNR6MuPm0Y5p5ux2u6VeWEnbY3auEG6tiqB1JKZ5+vu/AUg6GNHkErFilYCZho
oa4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ8jI/2GMzpa/KiPWJd+
i0Hl8rFl/uhj/mNKUBVmMgtTDsv7bk5+AWbzS12q81Tupbco05eulZmC23D8UUv4
eEmszSr4bJscXkD4VgkckzTJZKrUv879NyUIr+x+8XhuLpVL4iDUOXVT4ft5LITv
08M7YmfiOZkMqnTZ9EOsGq0AmxGrgKJjrqHpkwHULaMhHqaEJDamoFTGBqpA609o
6D0djtkjT8ZdZzmiHDvFR3oFRKv2664NXcMAI0fxm/Xf1PHy5fSY8ufE2tmrEvFP
6T2JrbVS6PKFdPfR7QMZ/DiPBvRAH5qVQ57DmNlDCi49fIbDP/okh+nFx9HWK1in
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265094036310273283315965703070547548081168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 22:13:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 22:13:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5752754626625536-fe1.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23361550883736045252117561803693089703592509698645070918951383796590597008659886483560755272625671268483988209421061467474057620499861510275047191962656742782951637475731951215847874677403828206074367465816500356106235334930297266215451918720905469801690099467991082930429865448850947006543122893739657313377511420669609009789400682934226504918813417107834823244164478974966872859476115300128134587305408319228164253035694533279154609722518512656817529941434978752330906587491180818904626365904647718831036804772190001347747484840760074478159560188624450790820557300819544742635408223689361845510000876184567568443221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ac90d15a8e9dfc9b47b807815b06c9a4af2edfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2228 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5752754626625536-fe1.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a11ysummit20.highedweb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academiccenters.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academicservices.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-department.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aten.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atendesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boo-onthesamepage.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainbalancecenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calwise.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chasebrexton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofrehoboth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clay.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickspace.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'closertotruth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crevecoeurfamilydental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criticaldialogues.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denison.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-recycle.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.njlcv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developerdev.plantronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.lib.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmrichsmokehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gentlegiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardyandnancestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idahopeaceofficersmemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihouse.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.warmboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kante.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsdentalplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonchildrensmuseum.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modentalcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mseco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myblackbird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mykingpins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nefa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohsx.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onthesamepage.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osd.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasafeprescribing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcssc.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'php72.2hholinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puente.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'researchdata.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reslife.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restrooms.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rha.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rl-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scid.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfrb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gentlegiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ohs.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentech.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studenttech.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-recycle.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.bolletta-energia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.gentlegiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themeprograms.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transcore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transportation.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulo.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warmboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernbankers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodcockpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workforcetools.naswa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atendesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bismarckbraces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brainbalancecenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cee.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chasebrexton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofrehoboth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clay.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clickspace.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.closertotruth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denison.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dewindowcoverings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extension-commons.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.formersaintdenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gentlegiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idahopeaceofficersmemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.londonchildrensmuseum.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mseco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myblackbird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mykingpins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nefa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pasafeprescribing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcssc.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quickfire.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restrooms.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirement.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfrb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentech.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transcore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warmboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernbankers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodcockpc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017021ed9e4d000004030046304402206525ce9c8cc5cf6e8b6ad93f31799ca6f9068aa0f0a6f780f1dda0cdf6c5b68e02202d6fef4b43755b6648ecef75426c836ac43f178ee9c39ee4b8030c62cb12c86b007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017021ed9e3e0000040300463044022011c13c52658c260867a5cf26fac18fca737eb14892106af91e631bbe94349d9102203bd704e090e02cc2419bb5c5b6f77150fb182ba64053cf70e11a3d06177ae9a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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