oaconnect.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:25:de:ef:d0:b4:ce:18:18:ab:bf:34:50:3a:87:0a:91:86 was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=oaconnect.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:de:ef:d0:b4:ce:18:18:ab:bf:34:50:3a:87:0a:91:86
Serial Number (int): 274223639178434954090467286272550162305414
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:9a:7b:ff:16:06:92:5a:05:c8:c1:ab:57:56:06:48:19:79:7f:13
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 39:45:14:23:9c:e9:e9:f0:c8:40:28:7e:b4:7f:4e:af:fa:cd:df:b0
Fingerprint (sha256): ad:ae:0c:9a:0b:db:3a:cf:bd:b8:66:bb:d7:52:b4:fd:f4:40:0e:2f:d1:5a:73:86:d2:7a:e7:95:fa:8c:90:98

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate oaconnect.co.za

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oaconnect.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oaconnect.co.za
obacommunity.org
obadirectory.org
occonnect.org.uk
ohconnect.org.uk
oldalleynianconnect.org
oldenburgconnect.de
oldnovos.com
oldsedberghianclub.com
omplus.org
onlconnect.org.uk
oonetwork.org.uk
opconnect.org.uk
ortalumni.org
osaconnect.co.uk
osconnect.co.uk
ouracsabudhabi.com
owconnect.com
ownetwork.co.uk
oxfordalumnicommunity.org
www.oaconnect.co.za
www.obadirectory.org
www.occonnect.org.uk
www.ohconnect.org.uk
www.oldalleynianconnect.org
www.oldenburgconnect.de
www.oldnovos.com
www.oldsedberghianclub.com
www.omplus.org
www.onlconnect.org.uk
www.oonetwork.org.uk
www.opconnect.org.uk
www.ortalumni.org
www.osaconnect.co.uk
www.osconnect.co.uk
www.ouracsabudhabi.com
www.owconnect.com
www.ownetwork.co.uk
www.oxfordalumnicommunity.org

Other certificates including the domain name oaconnect.co.za

(limited to 100 certificates)
oldnovos.com
ofaconnect.com.au
oaconnect.co.za
oaconnect.co.za
oldsedberghianclub.com
oaconnect.co.za
oaconnect.co.za
oaconnect.co.za
ofaconnect.com.au
oldsedberghianclub.com
oaconnect.co.za
oldnovos.com
oaconnect.co.za
oaconnect.co.za
oldnovos.com
ofaconnect.com.au
oaconnect.co.za
odtum.network
oldsedberghianclub.com
oaconnect.co.za
ofaconnect.com.au
ofaconnect.com.au
oldsedberghianclub.com
oaconnect.co.za
oldsedberghianclub.com
oldsedberghianclub.com
oldnovos.com
oaconnect.co.za
oaconnect.co.za
oldalleynianconnect.org
oldnovos.com
oldnovos.com
oldsedberghianclub.com
oaconnect.co.za
oaconnect.co.za
oaconnect.co.za
oldsedberghianclub.com
ofaconnect.com.au
oldnovos.com
oldnovos.com
oaconnect.co.za
oldsedberghianclub.com
oldsedberghianclub.com
oaconnect.co.za
oaconnect.co.za
oldsedberghianclub.com
obgsglobalconnect.com.au
oldsedberghianclub.com
opconnect.org.uk
obgsglobalconnect.com.au
ofaconnect.com.au
oaconnect.co.za
oaconnect.co.za
oaconnect.co.za
opconnect.org.uk
obacommunity.org
oaconnect.co.za
oldnovos.com
oaconnect.co.za
oldsedberghianclub.com
oaconnect.co.za
oldsedberghianclub.com
oldnovos.com
oaconnect.co.za
oldsedberghianclub.com
oaconnect.co.za
oldnovos.com
oaconnect.co.za
oaconnect.co.za
obgsglobalconnect.com.au
oldsedberghianclub.com

Certificate

The complete raw certificate details for oaconnect.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUQL2Wao1VUaqgONO+z9
nsu7idecpq8o0F/tySv0GuAPb9IidXtcLS6cZimeBNUtgauXTAy9wu57WJ9eZe+r
Ov4sK/t2mDIRhuF7ZBj+Rwl5IgbQAs0BxjaYliGUn1xBp8AvXDICErHf2r5jBTVd
x3SlTUPVbRsvBpjvbHhkW34VevZIJxu/gquXZoRLVY1KwHUiNPbgtlHw9n5vBCGl
IVV9RtikNYosql/X1RZsjSYA7tLDA0lwd48zDJitJmqFxReoVUIyF/uYYBeLPPpt
DyKXHkh8uZMmIt/zvY//BW6WJ0XkC3EGBJWrB8R6hOkCrrBVqVxROiiABF0myOWT
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274223639178434954090467286272550162305414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-26 10:36:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-25 10:36:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oaconnect.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17328202654596845074842474960131583982912998131777247888256568270130500924754957646281500356609712712931393858432243346082858425607231428226977789739861117184063702771622883275206465783429610292984143441102980533205609585252383038375155646035890622085386356834075247739989518322239880602351085922466330054079105380227770707252311423033917663218284123761155096480933647867451685046382208645572876964286203450206557021419619782463893709471501734905127461511159719405342696280261890111688120042512012761833610212943830541337314198015211698930511258393620460099699147355517038567621653333265217031677161563906182236967687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c9a7bff1606925a05c8c1ab5756064819797f13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (800 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaconnect.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obacommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obadirectory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'occonnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldalleynianconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldenburgconnect.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldnovos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsedberghianclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omplus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oonetwork.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ortalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osaconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouracsabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxfordalumnicommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oaconnect.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obadirectory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.occonnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldalleynianconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldenburgconnect.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldnovos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldsedberghianclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omplus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oonetwork.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ortalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osaconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouracsabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.owconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ownetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxfordalumnicommunity.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001790df7b9fc0000040300473045022069a7088b6bc19e9aa60ecd4622cbb57002bdd1449f1457de8d24040e9fbaab91022100f4d336df1989e3cf6c0e92c95b7761b9c778dcc66c802a49e8e54fb65e6b9a82007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001790df7bd38000004030046304402207edde0ea4802c5c3e61561f4fe83a4c62d4c1b441c571bc30cb920541af7ca0502206a85f0c98e19956ace909a0fd9465697931f1241d16bcc07522d7129348b806f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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