duchesneacademy.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f2:b8:21:8d:7f:03:b7:3e:6f:e4:54:55:55:d3:3d:7c:a7 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=duchesneacademy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:b8:21:8d:7f:03:b7:3e:6f:e4:54:55:55:d3:3d:7c:a7
Serial Number (int): 343929942757051485005436713074109559176359
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:48:7b:97:66:6e:7f:11:a2:c1:d7:fc:9e:2d:e6:25:72:7d:17:31
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d4:70:3d:cb:1d:2e:10:fa:bb:2b:f3:76:48:07:cd:0f:59:53:31:85
Fingerprint (sha256): f3:bf:41:1f:e4:26:6e:28:1b:14:c6:29:18:8e:a5:20:30:b1:6e:2b:a1:40:48:2b:49:f3:3d:d0:04:7b:b4:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate duchesneacademy.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for duchesneacademy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digitaloceandonate.duchesneacademy.org
digitaloceanweb.duchesneacademy.org
donate.duchesneacademy.com
donate.duchesneacademy.info
donate.duchesneacademy.net
donate.duchesneacademy.org
duchesneacademy.com
duchesneacademy.info
duchesneacademy.net
duchesneacademy.org
eventregistration.duchesneacademy.org
www.duchesneacademy.com
www.duchesneacademy.info
www.duchesneacademy.net
www.duchesneacademy.org

Other certificates including the domain name duchesneacademy.com

(limited to 100 certificates)
dashonline.org
dashonline.org
dashonline.org
dashonline.org
duchesneacademy.com
dashonline.org
dashonline.org
dashonline.org
duchesneacademy.com
duchesneacademy.com
duchesneacademy.com

Certificate

The complete raw certificate details for duchesneacademy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgISA/K4IY1/A7c+b+RUVVXTPXynMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMzAwMzI2MDlaFw0x
OTA2MjgwMzI2MDlaMB4xHDAaBgNVBAMTE2R1Y2hlc25lYWNhZGVteS5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxEU3io7LEyD05bSEPEmnlDZpX
BcjxuTNMADE3RtuWehKrljU/oWC2P7hx7UCmIRDUkG6Dy40sU5B/wX3c0YH2w+7J
gX2eJAfC8q8chq2xHUx47Kf0j4MDb3Ir7JakcglmJRhyVkbBfLQTZGlJPsilCSsJ
5l6lbDS9FGmXYSDs1cKgyCLa5ckAmBXaC+x6n2R7AKKBIqWZl04RW4SqdlwBExEa
IJzajD2ExIxNVxPqRglOeE0XakY6CSjZfabdBbXQzkWZLtQk0dh7f7GQ/MWt/T4e
gKsc0CGwCXAsZX/SOOC8FnFZFYgKMyTg3q6ZCQzAs6PLuQOv2AFlnfT7J0pHAgMB
AAGjggP3MIID8zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFK1Ie5dmbn8RosHX/J4t
5iVyfRcxMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF
BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wggGsBgNVHREEggGjMIIBn4ImZGlnaXRhbG9jZWFuZG9uYXRlLmR1
Y2hlc25lYWNhZGVteS5vcmeCI2RpZ2l0YWxvY2VhbndlYi5kdWNoZXNuZWFjYWRl
bXkub3Jnghpkb25hdGUuZHVjaGVzbmVhY2FkZW15LmNvbYIbZG9uYXRlLmR1Y2hl
c25lYWNhZGVteS5pbmZvghpkb25hdGUuZHVjaGVzbmVhY2FkZW15Lm5ldIIaZG9u
YXRlLmR1Y2hlc25lYWNhZGVteS5vcmeCE2R1Y2hlc25lYWNhZGVteS5jb22CFGR1
Y2hlc25lYWNhZGVteS5pbmZvghNkdWNoZXNuZWFjYWRlbXkubmV0ghNkdWNoZXNu
ZWFjYWRlbXkub3JngiVldmVudHJlZ2lzdHJhdGlvbi5kdWNoZXNuZWFjYWRlbXku
b3Jnghd3d3cuZHVjaGVzbmVhY2FkZW15LmNvbYIYd3d3LmR1Y2hlc25lYWNhZGVt
eS5pbmZvghd3d3cuZHVjaGVzbmVhY2FkZW15Lm5ldIIXd3d3LmR1Y2hlc25lYWNh
ZGVteS5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEE
AdZ5AgQCBIH0BIHxAO8AdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvM
VgAAAWnM2QsLAAAEAwBHMEUCIB0FolJzgX4vnFnUqqXUpLVbGYNup3uLY55ebiKa
p8RuAiEAuK+90tSPao+52WsrhIUrZSsHTH2Z/sPkU+RO9cTnBEkAdQApPFGWVMg5
ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWnM2Q0EAAAEAwBGMEQCIHP/IePn
761zMoBuOrL7SREShhfw5EpJFddH+1EWj+JrAiAuVvnxTAuCOcHDknbEWlQ4K6EE
/C46d5+lwMzVRi7A/zANBgkqhkiG9w0BAQsFAAOCAQEADErzwxDPap85u+uiKylw
JBvbW3Bmjp42XPaUrY0Yh6i44EylReYO5IyAu3WL/RkqZxSnsSFkkdcVpDp+wXou
yI9VgPuKleakBchP+xRrgjXPesZtoqJoMUM0Xd/9+quPY1CUanImbXX3fA5s13gx
zui/gFS/llpEP0Oe7p/ImUkC7M44jelbHjKtk2vmqFzd2ST/8WF1fcjePsIzhFrz
5OK+KVfA2qj3qEpII9AXYtkDn8EVs9cHUkMNIw5vt1kBhbmod2YuSzx4gTeqq0y1
s9Nzmc+3R2DrVCwAk4UDAWQmceInAAMBmS223CSPfpFFdJiIKDg3fRiSGhwa+mNN
Tg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRFN4qOyxMg9OW0hDxJp
5Q2aVwXI8bkzTAAxN0bblnoSq5Y1P6Fgtj+4ce1ApiEQ1JBug8uNLFOQf8F93NGB
9sPuyYF9niQHwvKvHIatsR1MeOyn9I+DA29yK+yWpHIJZiUYclZGwXy0E2RpST7I
pQkrCeZepWw0vRRpl2Eg7NXCoMgi2uXJAJgV2gvsep9kewCigSKlmZdOEVuEqnZc
ARMRGiCc2ow9hMSMTVcT6kYJTnhNF2pGOgko2X2m3QW10M5FmS7UJNHYe3+xkPzF
rf0+HoCrHNAhsAlwLGV/0jjgvBZxWRWICjMk4N6umQkMwLOjy7kDr9gBZZ30+ydK
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343929942757051485005436713074109559176359
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-30 03:26:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-28 03:26:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'duchesneacademy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22352713017517326083097243551445029182488521068368912577153718412387322874534212990790731724324418432768996713601896573808707933856595320856757192900742453175811711126804988214756700338390695524294243211017041357153862170690265840922277015217610624056792384034971479180962138127841701770135825904488796007115799438519552728034016562673736017994269805815635220676128701998071841207747468100824916990700977646569602637647665469683539441485273260176012226267249951708137790539151720037110396131012298808506376414996125305826312397320097476851576051717735043968226170201830715170025978404482558604733966628140680122681927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad487b97666e7f11a2c1d7fc9e2de625727d1731
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (419 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaloceandonate.duchesneacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaloceanweb.duchesneacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.duchesneacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.duchesneacademy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.duchesneacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.duchesneacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duchesneacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duchesneacademy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duchesneacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duchesneacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventregistration.duchesneacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duchesneacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duchesneacademy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duchesneacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duchesneacademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169ccd90b0b000004030047304502201d05a25273817e2f9c59d4aaa5d4a4b55b19836ea77b8b639e5e6e229aa7c46e022100b8afbdd2d48f6a8fb9d96b2b84852b652b074c7d99fec3e453e44ef5c4e70449007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169ccd90d040000040300463044022073ff21e3e7efad7332806e3ab2fb4911128617f0e44a4915d747fb51168fe26b02202e56f9f14c0b8239c1c39276c45a54382ba104fc2e3a779fa5c0ccd5462ec0ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000c4af3c310cf6a9f39bbeba22b2970241bdb5b70668e9e365cf694ad8d1887a8b8e04ca545e60ee48c80bb758bfd192a6714a7b1216491d715a43a7ec17a2ec88f5580fb8a95e6a405c84ffb146b8235cf7ac66da2a2683143345ddffdfaab8f6350946a72266d75f77c0e6cd77831cee8bf8054bf965a443f439eee9fc8994902ecce388de95b1e32ad936be6a85cddd924fff161757dc8de3ec233845af3e4e2be2957c0daa8f7a84a4823d01762d9039fc115b3d70752430d230e6fb7590185b9a877662e4b3c788137aaab4cb5b3d37399cfb74760eb542c0093850301642671e227000301992db6dc248f7e91457498882838377d18921a1c1afa634d4e