www.spitexsense.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:46:bf:ab:4f:f2:be:75:cb:42:47:12:ed:83:b7:b7:42:0e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.spitexsense.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:bf:ab:4f:f2:be:75:cb:42:47:12:ed:83:b7:b7:42:0e
Serial Number (int): 285411395531246679342540913103628301451790
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:f9:77:94:6d:33:42:cf:2c:bf:63:26:d5:a4:e5:db:ba:ee:5d:63
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 61:09:19:76:d9:bd:e7:52:ef:5a:7a:de:43:0a:1d:b8:17:5d:f9:4e
Fingerprint (sha256): eb:95:b8:24:61:f8:ac:22:18:cf:f0:8f:ad:48:fa:39:f1:93:bb:64:76:1a:91:c8:4c:12:d0:88:21:5f:59:1c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.spitexsense.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.spitexsense.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.spitexsense.ch

Other certificates including the domain name spitexsense.ch

(limited to 100 certificates)
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch

Certificate

The complete raw certificate details for www.spitexsense.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHDjCCBfagAwIBAgISA0a/q0/yvnXLQkcS7YO3t0IOMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MjMwMjI3MTdaFw0x
ODEyMjIwMjI3MTdaMB0xGzAZBgNVBAMTEnd3dy5zcGl0ZXhzZW5zZS5jaDCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKwJaX2JyRBIZr6PVDEZpcDHPuSd
0HXq920ltNbafyt+1aAj/nWC2qJvlPeeHf6Ygt/j0EZZGuw9yOiDVyPtyGrMBuu5
/E27eEWmFtqxfhRsDFrFPiWTfpPpMjMJq8ZUGu3PkcPWPkY3hFUam51rm1YVVcef
x0M+5y3iZrrtj23mm3WZ2RvGzx31QlXzat/taxB4w0ijC4Q4+uc5lCd0QsC9pzAb
2TJZamnE1IfXayin32NIBhdxCMST5o4rgODOB2VD90Szdh2RLJTrDODKJL2545V3
b5EMGTdtxKLaLFMajh1eCFCSkefThMyhIa9IGG6euHXCzZOPMc8qV6wFgxphItSG
2yJKlrQsubv07z/QGsP57sWDSl1SOfybiCcwKGRgUdzmJKsjJ2BsFKgelhrTMF95
MJikOo9Xa5bGljTgZG4RKEf4RX2zj245Mfw2zgYy0KErBDNKaHyUcYql6/Q6dM+j
/KelhMTpFBlyny++ch9laY4NvSlrjjjZaoyO+BC6RCTqIrAud8IWdgOAq6yrDJS0
+9yQxUvcJhfMrrFdsKVOxLuwPPbztk4+mLvw3Dv+jm8QAJ02Seiz1po2sS7QiMD1
VcrP04Y47PA0Cmd2kUOPbClKOELjkajT40fI2sc2yt6Wn8+ad1R/fKub6CnV0CD9
wwVVq3IGsVhYS5aLAgMBAAGjggMZMIIDFTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FP/5d5RtM0LPLL9jJtWk5du67l1jMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3LnNwaXRleHNl
bnNlLmNoMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB
1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG
AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg
dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3
aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz
ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8A
dgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWYEd5TYAAAEAwBH
MEUCIQC2lRhZcN1XP0LFGVrfx8afIYMVC/jwf6lADAoViTl8lgIgN7oQekAtGRQG
dPPsyurDzAl0KtMc9t6QhvY/TzuJx/UAdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily
3KTDDPTlRUf0eAAAAWYEd5Y/AAAEAwBGMEQCICvtFMdQ6St7H01js09AW/KS6xbl
VWzavBAhmVSEdkKTAiBU9vhYpNrb5ZPAUZBMAZoapwb/cW5EKtRVsd08Xc/0dzAN
BgkqhkiG9w0BAQsFAAOCAQEAYs0AaDiiZNIZT6nKrD4zzuaPRGIUojV/XFuZKwOt
Z0/MPUAgsaT5GbgeRRUDFwnzQQ99ySOgwP7Ar3u2h2rqt5u0bzsDmJEMwqhwQFNE
11rRaI3IlVes90V6syLiV4ks/B6gvhBagW/MfSuqhsNNZvfSvFsFBQ0ogXyodwsD
G6H4zwEHv8coPW+D+24fXi0ZBUgcKdNO1mvRUq/wBgqxGgYQFkANu61BReRhcFd7
z0xNMT2mOaGTG1G1mQJouJZBXIdDcMNsfQgQLuWyx+uC/R3VJduqaIXHherrO/s5
ahL9ssnUloEPtxx3L/L3knuahfNkPiG3uEZIYybCH/CZ6Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285411395531246679342540913103628301451790
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-23 02:27:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-22 02:27:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.spitexsense.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 701848771507792620891335551865834262520435083083571495155066020418557768137623162896408375792988906388801488718104676070791808049846452892493047498979878941928237840239753662608285103579956506673861564595224363303409966990959817656296106956154777054876342068216805337832475083821347540922164742398900840071582874911469192864579310517212561898559996361279662579473932946050419366570733036077526238096631985106562947118947636658820918693707065627190492128833564627589250685511848227225718441322106558894593352112294853843379217845066022016660369112079927031656063179245541462325619566869363761832287489129206519810058019279991857781120076187815936081788714556592298915623180127848250442073827859948706901954704980332821247673966065677104637749428173485357786016709688028584707894592414767390492053803953168528599538043771754544784144490160679802217999757711244002317978756288223580308514096344904581663444436936409219732271276233005478881948580340684644704311726297700393670412289308253656046261287739208663742312702320670590657963573482924137062741823125506274702559603334772304130559776180570786829873271555751163870863454611437307666663215879945428601227636161413782265911089009274049729360186026811989695837549084072092222234531467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fff977946d3342cf2cbf6326d5a4e5dbbaee5d63
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spitexsense.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166047794d80000040300473045022100b695185970dd573f42c5195adfc7c69f2183150bf8f07fa9400c0a1589397c96022037ba107a402d19140674f3eccaeac3cc09742ad31cf6de9086f63f4f3b89c7f5007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001660477963f000004030046304402202bed14c750e92b7b1f4d63b34f405bf292eb16e5556cdabc1021995484764293022054f6f858a4dadbe593c051904c019a1aa706ff716e442ad455b1dd3c5dcff477
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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