roulette.ke

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:76:01:05:e0:67:5d:d2:b0:d4:cd:da:e7:46:75:34:d1:8f was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roulette.ke

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:01:05:e0:67:5d:d2:b0:d4:cd:da:e7:46:75:34:d1:8f
Serial Number (int): 301491536832880844990901898695222450508175
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9d:e9:d8:20:22:0a:a3:68:ff:b5:ab:fa:a2:23:a3:5d:b5:2a:a1:2a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e0:81:db:45:f4:71:58:e8:6b:d7:74:86:65:e3:ea:ec:08:8c:c0:48
Fingerprint (sha256): cc:59:90:f5:7a:1e:9b:c7:68:47:e0:c1:d8:74:cd:ac:e1:c4:b0:98:cc:44:09:16:ce:e0:4e:2f:0a:b1:f4:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate roulette.ke

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roulette.ke

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.itaka.dk
autodiscover.roulette.ke
cpanel.itaka.dk
cpanel.roulette.ke
itaka-dk.radicalnames.com
itaka.dk
mail.itaka.dk
mail.roulette.ke
roulette-ke.radicalnames.com
roulette.ke
webdisk.itaka.dk
webdisk.roulette.ke
webmail.itaka.dk
webmail.roulette.ke
www.itaka-dk.radicalnames.com
www.itaka.dk
www.roulette-ke.radicalnames.com
www.roulette.ke

Other certificates including the domain name roulette.ke

(limited to 100 certificates)

Certificate

The complete raw certificate details for roulette.ke in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGujCCBaKgAwIBAgISA3YBBeBnXdKw1M3a50Z1NNGPMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDQxNDExNDhaFw0y
MDA1MDQxNDExNDhaMBYxFDASBgNVBAMTC3JvdWxldHRlLmtlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPxxwNKta7HkgD232c0njgUWn6Mmn2dQmUhS
NVOEQucV2PkQy0g5lGqlfTtv6hKHqAJrcRhmprlu16raZwX5h3+3GU7qEcaLhiZB
bdhImJLqL+QeD6Z5olXAmBDodwWlJM2q+1JmZ5zCBsYvjnIwyXhCy4zkUQ6xc2gZ
47YbV5SQ0wGaYy4ACJgoEt9YzBcnY7bQhDNqzFJt82G4fyjteoTFkSl7rgOcrV3a
Se+qE4xOZmXOxNQS3VGiq6IFrixgk03ONG+7GXeW5R8ngyINGlfk+jV8wCICq3GA
TS2KcLiiMz5RyhH1N+F8Any6w8kWYBJr1jrLqpSAJhdnV3kCwwIDAQABo4IDzDCC
A8gwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSd6dggIgqjaP+1q/qiI6NdtSqhKjAf
BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw
LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw
LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv
MIIBggYDVR0RBIIBeTCCAXWCFWF1dG9kaXNjb3Zlci5pdGFrYS5ka4IYYXV0b2Rp
c2NvdmVyLnJvdWxldHRlLmtlgg9jcGFuZWwuaXRha2EuZGuCEmNwYW5lbC5yb3Vs
ZXR0ZS5rZYIZaXRha2EtZGsucmFkaWNhbG5hbWVzLmNvbYIIaXRha2EuZGuCDW1h
aWwuaXRha2EuZGuCEG1haWwucm91bGV0dGUua2WCHHJvdWxldHRlLWtlLnJhZGlj
YWxuYW1lcy5jb22CC3JvdWxldHRlLmtlghB3ZWJkaXNrLml0YWthLmRrghN3ZWJk
aXNrLnJvdWxldHRlLmtlghB3ZWJtYWlsLml0YWthLmRrghN3ZWJtYWlsLnJvdWxl
dHRlLmtlgh13d3cuaXRha2EtZGsucmFkaWNhbG5hbWVzLmNvbYIMd3d3Lml0YWth
LmRrgiB3d3cucm91bGV0dGUta2UucmFkaWNhbG5hbWVzLmNvbYIPd3d3LnJvdWxl
dHRlLmtlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHW
eQIEAgSB8wSB8ADuAHUA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMA
AAFwEMHoAQAABAMARjBEAiB3U0hi5ly8WTZnltKV9ZD5yoJpQKX9AR1PSSnEGfQM
9gIgXZJXtIUk40FFa52xSoveeuwuYZLrCt+kI89kgJnAQ94AdQAHt1wb5X1o//Gw
xh0jFce65ld8V5S3au68YToaadOiHAAAAXAQwehNAAAEAwBGMEQCIA2Qn4YPRaEJ
13jYdQGx2PbeR/rrS6wqyLN/fSJt8QJDAiBFDP/jTu2qbRitFuNpfdXyLC5UbBCq
s0xW8GGZIaUMizANBgkqhkiG9w0BAQsFAAOCAQEAda9heP/N64asHIE9DHFR3wXT
3UryaCQzY/B3n6fPhqam3QKkI5nAfPzljLCS3Vss5Yz0x/sMSfoBprFBH01uwJvg
5LfdYyr2NcxrvfuSVYgBbbSng9PMbK7KiJzj65CbZyGzW1uquAkNg/1I9nH8FGKB
m32QyNDe3Kj4xVrMHDFKmDoURj/u/sScgMMC/3WnQUUgc0Udtcu73h+W8Rqpjwlm
I8X3orSDaKFutv/t15FPIR2t4kwns3A65Ua8NpSbZup5l5CHWocDokQFLHTHzaAE
ND4dxIpgUDZBIXUhw0uzncv80W9tIauYrLN4tMqRC7GJewFFS1yZT37AMaHe2g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPxxwNKta7HkgD232c0n
jgUWn6Mmn2dQmUhSNVOEQucV2PkQy0g5lGqlfTtv6hKHqAJrcRhmprlu16raZwX5
h3+3GU7qEcaLhiZBbdhImJLqL+QeD6Z5olXAmBDodwWlJM2q+1JmZ5zCBsYvjnIw
yXhCy4zkUQ6xc2gZ47YbV5SQ0wGaYy4ACJgoEt9YzBcnY7bQhDNqzFJt82G4fyjt
eoTFkSl7rgOcrV3aSe+qE4xOZmXOxNQS3VGiq6IFrixgk03ONG+7GXeW5R8ngyIN
Glfk+jV8wCICq3GATS2KcLiiMz5RyhH1N+F8Any6w8kWYBJr1jrLqpSAJhdnV3kC
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301491536832880844990901898695222450508175
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 14:11:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 14:11:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roulette.ke'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25372145941072080865929856257710573911405132036331884739755202223144740315642258653120502359696494938610802256874292612292653893677145325252077119566749045892840925670413012885086799357997474250404280030995964086033388042334452741308214732097261151801873524949022690427749055951421992239254871299232374684141364364617986595334230319592532244182928731834669985022573280487328569587114693297079602660991778910481287402400031506682067561354380310612371487364282435450030634481846096092781749646426489455056309699500281173754752968709111584326779515694404213511641317852507107551809259866209922916491402268440707060007619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9de9d820220aa368ffb5abfaa223a35db52aa12a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (377 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.itaka.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.roulette.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.itaka.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.roulette.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itaka-dk.radicalnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itaka.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.itaka.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.roulette.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roulette-ke.radicalnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roulette.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.itaka.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.roulette.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.itaka.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.roulette.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itaka-dk.radicalnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itaka.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roulette-ke.radicalnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roulette.ke'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017010c1e8010000040300463044022077534862e65cbc59366796d295f590f9ca826940a5fd011d4f4929c419f40cf602205d9257b48524e341456b9db14a8bde7aec2e6192eb0adfa423cf648099c043de00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017010c1e84d000004030046304402200d909f860f45a109d778d87501b1d8f6de47faeb4bac2ac8b37f7d226df102430220450cffe34eedaa6d18ad16e3697dd5f22c2e546c10aab34c56f0619921a50c8b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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