sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:24:4a:10:1c:d1:95:16:21:16:2d:69:0a:18:87:7e:88:b3 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:24:4a:10:1c:d1:95:16:21:16:2d:69:0a:18:87:7e:88:b3
Serial Number (int): 360797755469144886489820646914756506978483
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0c:59:52:22:59:32:a2:f9:28:6a:11:22:a4:bd:cc:67:ca:e6:eb:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:ab:f5:bf:ff:6f:0f:3c:bd:9e:a6:65:7e:0b:b2:db:04:d5:61:87
Fingerprint (sha256): da:14:48:45:af:9e:37:ba:93:db:81:70:73:75:37:3a:16:2c:7b:96:76:6b:b2:a9:1b:6d:2a:35:85:7f:9f:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

basketballhawkesbay.co.nz
bowlswaikato.co.nz
cashmere.school.nz
cfc.co.nz
christchurchfootballclub.co.nz
countiesmanukaurugbyleague.co.nz
cyclingsc.co.nz
eden.rugby
ellerslieeagles.co.nz
feildingfarmersmarket.co.nz
feildingfarmersmarket.net.nz
feildingfarmersmarket.org.nz
glenfieldrugbyleague.co.nz
golfnorthland.co.nz
greenacrescountry.org.nz
harbourgolf.co.nz
hastingsboys.school.nz
havelocknorth.rugby
hawkesbay.basketball
hawkesbaynetball.co.nz
hbnetball.co.nz
hbrugby.co.nz
hockeymarlborough.org.nz
hokowhitubridge.org.nz
hpnc.org.nz
huianetball.co.nz
karakarugbyclub.co.nz
kirweerugby.co.nz
maoribasketball.com
marlboroughnetball.org.nz
marlboroughtrampingclub.co.nz
marsdensport.school.nz
membermanager.co.nz
metrofootball.org.nz
mountsports.co.nz
nzblackpowder.nz
nzteachersgames.co.nz
patoka.school.nz
ponsonbyrugby.co.nz
referees.co.nz
schoolsport.nz
schoolsportnz.co.nz
schoolsportnz.org.nz
sked.co.nz
southcanterbury.basketball
sporty.org.nz
stmw.school.nz
taradaleint.school.nz
waihibeachtennisclub.co.nz
waimakunited.org.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2LivA7qV/TQFOuKFHyi
BAgcpjhd1Vkdk5C1cwayNr3VldO2GXKZNnhX0Ibp9TUmAwRhJsXVFbPramERsDTX
gxCqRYRCfawNkg0M1by6T5ZrOiDGD4nj+jtu5VTEjt5PHBr2smkQ0ZwrzkQC2qrb
2i0HIo2pxdkQebNwgmIkqzotd3uMKtnggwo3DkEnhfPapKrb/9dCw/KI3ZekZ9Pk
Z3i8ciMFU3hrGXrjHfKJd+YZmjsP7PH6agx18K0u5nxpX/+fumXdkllQ52K9PfH2
wxWMzn34UMEKHj6aihaEYIgft2YTlKKJwkbdwxv3/oS1ZsRTek4l0r+nOoR2BpGv
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360797755469144886489820646914756506978483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 19:09:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 19:09:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23150372156000897081036669549509493840958488929223062709830066361622784175165928527616901419629307061705239492006972803947140285697017530114852373176202586902554810622269628868906170511470892306904324378210143628839444224594930628976847606864338296126204770529804309469799975784976660404809744680145214916575316845077964887933525500896091843224241389503613568354380435295766844030969100279015735893738784859740877280383809893435152226362200223025705658133924612664136161078035570726180588780416637805059073830996674116294927087239297352626927650733125655068676929056600321959651015853344965468210806055070120170073857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c5952225932a2f9286a1122a4bdcc67cae6ebc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1093 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsboys.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrofootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patoka.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmw.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimakunited.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e4e08cffd0000040300473045022033f015a5c26c6beaed444c82fb6d60c3d02f27155eee885a7e34b95d75aba7410221009360652129849b976293907754999efbc42a9c66e33547f6f48aa167774e72f4007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e4e08cff400000403004630440220593186318755d01047295fe63ade110086797b442b702402fc96a7622d240a5e02203e7f3b9dd940ab64fdf8619d737bf53e95c84bb6dbce6c798a4cd4f0193886c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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