www.sportsground.com

Issued by R3

About this certificate

This digital certificate with serial number 03:18:06:4f:61:0d:74:ed:7c:07:fe:04:41:d7:9b:28:48:af was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sportsground.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:18:06:4f:61:0d:74:ed:7c:07:fe:04:41:d7:9b:28:48:af
Serial Number (int): 269512022129269681838789632955749830772911
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:03:bb:e2:0f:b5:44:e0:28:a0:f1:db:91:af:ba:c2:4f:fd:26:84
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b3:35:6c:1a:db:3e:00:71:6a:da:a5:fe:61:61:52:5a:c1:b4:84:bf
Fingerprint (sha256): f3:e8:ea:19:b8:da:2d:a4:68:c5:ed:f0:49:b9:95:5d:e3:e8:1d:42:1c:e4:3d:fd:f9:be:1c:c4:09:30:d8:62

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sportsground.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sportsground.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

id.idme.co.nz
international.freyberg.ac.nz
library.freyberg.ac.nz
www.aklbadminton.com
www.ams.school.nz
www.athleticsotago.co.nz
www.aucklandswords.org.nz
www.canoepolohb.co.nz
www.chbc.school.nz
www.courtinthebay.co.nz
www.fdmc.school.nz
www.freyberg.ac.nz
www.giafc.co.nz
www.gijfc.co.nz
www.haumoana.school.nz
www.hockeywanganui.org.nz
www.howicksoftball.co.nz
www.kartsport.org.nz
www.kiwitagnz.co.nz
www.kuranuicollege.school.nz
www.leamingtonrugby.co.nz
www.lindisfarne.school.nz
www.lrsc.co.nz
www.mahe.kiwi
www.malvernnetball.co.nz
www.mca.org.nz
www.mcnetball.co.nz
www.mitre10park.co.nz
www.mmc.school.nz
www.netballchristchurch.org.nz
www.nzbsa.org.nz
www.olympicwrestlingnz.com
www.omuafc.org.nz
www.ourfc.co.nz
www.oxfordcres.school.nz
www.pbhockey.co.nz
www.polo.org.nz
www.porthillunited.co.nz
www.rotoruaunited.co.nz
www.shirleyrugby.co.nz
www.sked.co.nz
www.skeggsfoundation.nz
www.softballwaikato.co.nz
www.softballwaikato.org.nz
www.sportsground.com
www.sportycrm.co.nz
www.sportycrm.com
www.supercrm.co.nz
www.unimountbohs.org.nz
www.wellsfordsquashclub.co.nz

Other certificates including the domain name sportsground.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sportsground.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uk5M1xgSjurp23cLqFf
IiKBMZaCB9pqNQu4dKxc+/Awz/4Ud5VI50PHonIUtuzk7/QSBMuyE1KrK/ZWc3EC
OoEWs7tuvYzy2BRNhc9CCmaYdkPP5ULtxuK2izKhRxMRBMSFVU2H1MbG0BNMhVw5
/Tylu069q2hFJo1mP2FLyuBI1n3YCVQlcKMn0VGVAXxh1PpdvRhrklOo2AV0UJxE
bcXIKUjYVCcndnSaYcD3M7HOPPlHCdqutl/dFsQIN/Qe5QdKIEgJWEFeR1uUlJ1z
vid0lMUaX4AGGGfQEXWPPrgMVAqD+Kr8WTh/9n1y6iayW9oSDOBYJn6Swxk7FXt4
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269512022129269681838789632955749830772911
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 20:21:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 20:21:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportsground.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29654770126659994040805652176137071588753490960009335050397596465554404525602146449774143655304423257453000960749257107300512060994110384891894408777026250456541789916044631077821094253169952687154083331470471702519631830485476180572838771504276811805572173797838464432396039544935078379400860155477195157924930919592239347839845223442419047349212299470198944687609728067295644378274299599017766533644183620459010563744707506724608549993156146325857731469964083153734526121228076678787239864427799926094871240829879062124086899390168844767708010075987937160298611113936556973438688994640095113016266730575170050423013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4603bbe20fb544e028a0f1db91afbac24ffd2684
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.idme.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international.freyberg.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.freyberg.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aklbadminton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ams.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleticsotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandswords.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoepolohb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chbc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courtinthebay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freyberg.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gijfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haumoana.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeywanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kartsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwitagnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuranuicollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leamingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lindisfarne.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lrsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahe.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malvernnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mca.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitre10park.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballchristchurch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzbsa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omuafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxfordcres.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pbhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porthillunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotoruaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shirleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skeggsfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softballwaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softballwaikato.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportycrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportycrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supercrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unimountbohs.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f78fbcb5f0000040300473045022100e1b0674b098dd27756b89ab5dc9b8c4a443cc719a81beb2ad2c88ef936c83d43022060a54dcb4801113a50f28cf12ed274db6f6d758cd8cadfd4e3c8e1fdc9014d210076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f78fbcbd90000040300473045022100acd72e3b4f511e5909b0749cf238c907e47701cce609545d4866d904293c73a402203a18df339b028c0966d5dac9e6e8753b57115162a823638e400bc68cf4ae9ecb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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