bkb.paixon.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9b:53:23:e9:c2:ea:66:22:88:30:e8:ce:50:9a:15:e9:38 was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bkb.paixon.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:53:23:e9:c2:ea:66:22:88:30:e8:ce:50:9a:15:e9:38
Serial Number (int): 314191137063310642657523804829157776812344
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:87:8b:ca:85:8a:61:2e:bb:51:54:40:b1:40:64:3d:d0:aa:a5:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c5:e7:63:48:a1:21:a8:16:ce:34:96:72:c8:c0:92:34:0c:66:43:53
Fingerprint (sha256): ea:26:29:7e:d6:4e:dc:db:6a:32:fa:de:24:97:f1:6b:22:08:26:ce:f7:9d:3f:1c:15:87:f7:3b:6a:4c:f4:e3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bkb.paixon.ch

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bkb.paixon.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.paixon.ch
backup.paixon.ch
bkb.paixon.ch
bot.bkb.paixon.ch
bot.das.paixon.ch
bot.ifmh.paixon.ch
bot.mite.paixon.ch
bot.sygma.paixon.ch
bot.systemcredit.paixon.ch
bot.talus.paixon.ch
bot.unibern.paixon.ch
bot.ylex.paixon.ch
dev.admin.paixon.ch
dev.bkb.paixon.ch
dev.bot.bkb.paixon.ch
dev.bot.das.paixon.ch
dev.bot.ifmh.paixon.ch
dev.bot.sygma.paixon.ch
dev.bot.systemcredit.paixon.ch
dev.bot.talus.paixon.ch
dev.bot.unibern.paixon.ch
dev.bot.ylex.paixon.ch
dev.ifmh.paixon.ch
dev.paixon.ch
dev.sygma.paixon.ch
dev.systemcredit.paixon.ch
dev.talus.paixon.ch
dev.unibern.paixon.ch
dev.ylex.paixon.ch
ifmh.paixon.ch
paixon.ch
rasa.sdt.paixon.ch
sdt.paixon.ch
sygma.paixon.ch
sygmax.sygma-ag.ch
systemcredit.paixon.ch
talus.paixon.ch
unibern.paixon.ch
ylex.paixon.ch

Other certificates including the domain name paixon.ch

(limited to 100 certificates)
bkb.paixon.ch
*.paixon.ch
bkb.paixon.ch
bkb.paixon.ch
bkb.paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
*.paixon.ch
paixon.ch
paixon.ch
paixon.ch
bkb.paixon.ch
paixon.ch
paixon.ch
paixon.ch
*.paixon.ch
paixon.ch
paixon.ch
bls.paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
bls.paixon.ch
paixon.ch
paixon.ch
bls.paixon.ch
paixon.ch
paixon.ch
bkb.paixon.ch
bls.paixon.ch
bls.paixon.ch
paixon.ch
paixon.ch
paixon.ch
bls.paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
bkb.paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
bls.paixon.ch
*.paixon.ch
bkb.paixon.ch
bkb.paixon.ch
bls.paixon.ch
*.paixon.ch
bls.paixon.ch
*.paixon.ch
paixon.ch

Certificate

The complete raw certificate details for bkb.paixon.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7R+NxlnTUSJ1+7ugjCC
Lk+A1vZmijdSTr4LjZ2EmuVwddyNOb6efZlYRtgzpcZbYtMoN6CiYla94no7vof6
XForepcvIlD7mIN2qoZR/xM7niycp9iUwQWucrN4Ja6+kJ18nEEtCMi5IaNrMd9I
LGGm8yNydbMpT4rbS9vyUc/AoUv143GFdwor7O0HvY03clFgkShO4Mv/Ws8EduHt
vvncH6sjTkhoWaz3i6DGycof0lqhpIcjyiYIOyLiKsH0j81ZAhq3Eim2DVyfW9vv
l039ixfuYIVsHhWbV8fe9Ry/1iKLOlUO7j7d/iYXZEG0YzWYR0Nqy1Ttcu2TyRgj
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314191137063310642657523804829157776812344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 06:10:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 06:10:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bkb.paixon.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23190614238258117402923020952039126208973825823150892054295769480757153628029089309777865068273888273415618945811257392522490173942297442407222845515353598994503613479168916201559819933376073848812374775804512137548671617544315989011949011302379341019503303471971758175850943566253403055439472695533403597278735134315384126186645623750475541612670408466313729400004169452302822261599622553987801374801321218353799348798405871433930929491336087598939041780966643012326646709574788355687198850914708489834407600578214192180011879537434010165961418863157817080434138265039053047608780762234915676083745473128415939273693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79878bca858a612ebb515440b140643dd0aaa5ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (811 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkb.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.bkb.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.das.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.ifmh.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.mite.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.sygma.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.systemcredit.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.talus.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.unibern.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.ylex.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.admin.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bkb.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.bkb.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.das.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.ifmh.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.sygma.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.systemcredit.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.talus.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.unibern.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.ylex.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ifmh.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sygma.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.systemcredit.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.talus.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.unibern.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ylex.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifmh.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rasa.sdt.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdt.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sygma.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sygmax.sygma-ag.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systemcredit.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talus.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibern.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ylex.paixon.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001707b2effac0000040300473045022100bc2e64ba031d41a9e042b3f9a2fb1b7970046b35ae5cd661da07284095928c0b022006c9363cd0790baa5843ac4d5f94f832f3c44d5616ec660f3fe0304a9dae341200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001707b2effd30000040300473045022054b5d1be3f6cf1f0d192d0e0d150cc5c8ad71500475adc88534e6463b2c92cb3022100dfd5084976457d2b40a36bdf50bab4a2c3c21e571b86b96834cf770edfe670c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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