www.mysporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:61:d5:a9:f0:6c:0f:a1:2a:e3:b0:59:22:75:79:0a:aa:72 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.mysporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:d5:a9:f0:6c:0f:a1:2a:e3:b0:59:22:75:79:0a:aa:72
Serial Number (int): 294628255324222833905302006735938616207986
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:32:6f:9f:78:28:ef:5f:7e:15:5d:d3:84:c6:96:a7:05:9c:9d:19
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:5b:68:b5:54:04:18:dc:1b:2b:a7:68:5d:a1:de:d2:db:32:d7:eb
Fingerprint (sha256): c4:26:d9:b2:9f:8f:28:65:0e:c5:1e:86:2a:17:7f:5b:eb:90:38:fc:4d:7c:05:fb:d0:62:0f:8d:33:d2:4a:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.mysporty.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mysporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kaiapoinetball.co.nz
patumahoerugby.co.nz
sport.aotea.school.nz
www.aucklandsquashjuniors.nz
www.belfastrugby.co.nz
www.bowlshawkesbay.org.nz
www.bowlswaikanae.com
www.burnsiderugby.co.nz
www.canterburycountrycricket.co.nz
www.cathcollege.school.nz
www.cdcricket.co.nz
www.darfieldrugby.co.nz
www.greertonmaristnz.org.nz
www.hampsteadrugby.co.nz
www.havelocknorthbridgeclub.co.nz
www.havelockski.org.nz
www.hawkesbaysquash.co.nz
www.hbcricket.co.nz
www.hbsfc.co.nz
www.hnhs.school.nz
www.hpnc.org.nz
www.huttaikido.org.nz
www.invercargillnetball.co.nz
www.kaiapoinetball.co.nz
www.kaitaiacollege.school.nz
www.kensingtonfitness.co.nz
www.marlborough-car-club.co.nz
www.mpcricket.org.nz
www.mysporty.co.nz
www.netballwairarapa.co.nz
www.northharboursoftball.co.nz
www.northharbourwaterpolo.co.nz
www.nskfc.org.nz
www.nzpca.org
www.otta.org.nz
www.papatoetoenorth.school.nz
www.patumahoerugby.co.nz
www.playsoftball.co.nz
www.prebbletonrugby.co.nz
www.ratec.org.nz
www.silverdalerugby.co.nz
www.sissnetball.co.nz
www.sportauckland.co.nz
www.sportauckland.org.nz
www.sportslink.org.nz
www.squashauckland.org.nz
www.taurangasports.co.nz
www.tgahockey.co.nz
www.tuki.co.nz
www.waiopehu.ac.nz
www.waitematarugby.co.nz

Other certificates including the domain name mysporty.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.mysporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiqmwwf4zI2IHDKPpNru
XUgbC6AjMhsvchwcOG7zLVPGmmPf/cw6++bM3Gd7kqFgMcXg7IX3gg2G9FYPZ5nN
JCylejU5qEb8B5WGR+3E+2CWTyBD9zNu7Dlr6iKYkX8N9+XfB5Fv0w287gFrafpk
/k/HdJ/+SAHN8BArcEbVBe52i7vBjymao7fhNY/jBpUvlDBXBIo1DTxLzJ/z6ukl
LuXwwgvb3+4c+da1Szw4+oVhMG4wZO3t0forsikQXtoV9THFekLpWohuF5kqoKdU
BVJ8OY9c6kbk8mw0rm0S29dnvoxfHhGSWDhpyr2gwnBgQRChFeqErvaNPRCv0Qrb
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294628255324222833905302006735938616207986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 19:04:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 19:04:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mysporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20976590820213190027215309024809003354743924184368886692912560483933148585807084632940987128116691679559533503137064497881116952944304079880800214053194041696144505709774919514304324497655699943986675530801016932919697736494563246163044078857449553512801864458621209716562185362037317415654463340669461397208847691931402058118542991262390158317957052805640375400938997277802801128437564720017716288483876727821874214877885510193605009628898136150340012124080072453732244054384025692698939621872210450256278274978308971810055182853300176667779851982458788952280293319951211389349284527816615702875150218019587878476797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17326f9f7828ef5f7e155dd384c696a7059c9d19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1267 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiapoinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.aotea.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burnsiderugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycountrycricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathcollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greertonmaristnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hampsteadrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelockski.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaysquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbsfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaiapoinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaitaiacollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kensingtonfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-car-club.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpcricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papatoetoenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silverdalerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sissnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportslink.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taurangasports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tgahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiopehu.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitematarugby.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bab630ef10000040300483046022100b0ae0ecf04888c4343f68acf5f58384a6393a3254350a2cd03cd6e4d906f9c78022100e0e47da4a63776c045fbcfa1b0748b6a0299195861dac4db3a57fb132b3b554e00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bab630f40000004030047304502201ccf1b59d51e7f9cfae6cdfcff928400c8af58e562828ef208d30e2c663062c8022100cb75b5d13afad564b3543437ccec9ed651e01b576ccdf77aedcc7340c26bb156
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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