sculpit.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9f:17:21:9c:f7:b3:e1:6a:f8:a4:16:b7:c6:4c:9c:e3:c8 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sculpit.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9f:17:21:9c:f7:b3:e1:6a:f8:a4:16:b7:c6:4c:9c:e3:c8
Serial Number (int): 315472500909090264985845565292653431284680
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:9d:12:df:b2:10:4e:b2:8a:d0:5a:4a:31:40:96:00:ee:48:b2:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 64:d5:65:5c:d9:d7:f3:76:31:96:92:ed:44:0d:43:b1:94:95:de:be
Fingerprint (sha256): f6:87:b3:ec:d2:4b:29:fd:cd:40:fd:d9:0f:46:03:d2:59:77:d8:92:9e:2a:1b:2b:f8:36:a7:99:41:90:dc:64

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sculpit.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sculpit.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.sculpit.org
cpanel.zinnia.holdings
mail.sculpit.org
mail.zinnia.holdings
sculpit-org.sculpit.fitness
sculpit.org
webdisk.sculpit.org
webdisk.zinnia.holdings
webmail.sculpit.org
webmail.zinnia.holdings
www.sculpit-org.sculpit.fitness
www.sculpit.org
www.zinnia.holdings
www.zinnia.sculpit.fitness
zinnia.holdings
zinnia.sculpit.fitness

Other certificates including the domain name sculpit.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for sculpit.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGrDCCBZSgAwIBAgISA58XIZz3s+Fq+KQWt8ZMnOPIMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTEwMzQ2MTBaFw0x
OTEyMTAwMzQ2MTBaMBYxFDASBgNVBAMTC3NjdWxwaXQub3JnMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTDFPupGunQU1UydaTS2nvLBXuzBdB6DPuhG
ul1klMUzct4Uvpk78h3MaCcbX0KKppweP/g/azAjK2zFWOcQLXrNWGbdB0Ob401Z
9tShnZRYvnHdqj5RrceiD5p8AqqdwjrXar+W4KXRBrlCveJouSR0r3aO9sRWTL/H
onkT2WMUh/AVjKX/mmDOVc2SBuJj/SPysh86/VVtXjbe+BiQQIckNMz2QU6sEmND
Kppk++0QO4CZLcYJaor9h9TVja2fsbNDSIGNGhN5M+41meF6JI9h/wJXDxbn/zqV
uflCNMN3ZS/TrkQuLAxjmZGyOTqoM2Th91CZaHD/uXviswKu+QIDAQABo4IDvjCC
A7owDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTrnRLfshBOsorQWkoxQJYA7kiy+TAf
BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw
LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw
LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv
MIIBcwYDVR0RBIIBajCCAWaCEmNwYW5lbC5zY3VscGl0Lm9yZ4IWY3BhbmVsLnpp
bm5pYS5ob2xkaW5nc4IQbWFpbC5zY3VscGl0Lm9yZ4IUbWFpbC56aW5uaWEuaG9s
ZGluZ3OCG3NjdWxwaXQtb3JnLnNjdWxwaXQuZml0bmVzc4ILc2N1bHBpdC5vcmeC
E3dlYmRpc2suc2N1bHBpdC5vcmeCF3dlYmRpc2suemlubmlhLmhvbGRpbmdzghN3
ZWJtYWlsLnNjdWxwaXQub3Jnghd3ZWJtYWlsLnppbm5pYS5ob2xkaW5nc4Ifd3d3
LnNjdWxwaXQtb3JnLnNjdWxwaXQuZml0bmVzc4IPd3d3LnNjdWxwaXQub3JnghN3
d3cuemlubmlhLmhvbGRpbmdzghp3d3cuemlubmlhLnNjdWxwaXQuZml0bmVzc4IP
emlubmlhLmhvbGRpbmdzghZ6aW5uaWEuc2N1bHBpdC5maXRuZXNzMEwGA1UdIARF
MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6
Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA
4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFtHqSnOAAABAMARzBF
AiEApA2hH9nF8RjzrcEz4iJO1w2VDqdCPaiqHamrzx9vYxkCICCUtNruwOFyykCJ
HDICKQpTYoWSyzheRP2dYe+oGh5oAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWm
OLHHaFRL2I0AAAFtHqSnKQAABAMARjBEAiBuzX4zUBAxjpex3Y4OflmKx4PbKkTQ
BS3WJXhys8EUnQIgGUMe1/fzINFU7XOQPyYZkFuQV9XR/2HmcJMLiffZTGYwDQYJ
KoZIhvcNAQELBQADggEBAGVIssCSwBFK1E1WW+U/zUCrf7IADVi4pirWJxQh4QWr
sLNPFnKmKupbKX8rhWMpUM8RVSEBEgKr6my0l3l4RkYGXjpnAZ/EXfy2yrC2v55B
vqXQi4S3x4VMrpFFOnCnnA5MFONDGO3qE5Pgi5qgVIWzMkiV98ktliNUYKlg2Duk
1hUb0OrOWUdZvGYxl8msSu4GEOarYXjKWK5hcslnXg4PnxTq9N/dknTCewSSMtkn
Ewg3hbzqbXpBoDPC5jWzrT9r4lrLd8RsIeicqd3Z8141wORCPz9d6EZmJbWKqDPt
xKrFribZB0fzAhYJ9u3IEHpnHfZy5R1R2TSg4SA7+8I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTDFPupGunQU1UydaTS2
nvLBXuzBdB6DPuhGul1klMUzct4Uvpk78h3MaCcbX0KKppweP/g/azAjK2zFWOcQ
LXrNWGbdB0Ob401Z9tShnZRYvnHdqj5RrceiD5p8AqqdwjrXar+W4KXRBrlCveJo
uSR0r3aO9sRWTL/HonkT2WMUh/AVjKX/mmDOVc2SBuJj/SPysh86/VVtXjbe+BiQ
QIckNMz2QU6sEmNDKppk++0QO4CZLcYJaor9h9TVja2fsbNDSIGNGhN5M+41meF6
JI9h/wJXDxbn/zqVuflCNMN3ZS/TrkQuLAxjmZGyOTqoM2Th91CZaHD/uXviswKu
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315472500909090264985845565292653431284680
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 03:46:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 03:46:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sculpit.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24892995703895121027729760022459170237298338558203356526313358003684185613108011216316237699082148087388286180262561019455134416235124760709013477918714067032164318357908285696212013010455502097125502312430122048079866408585549821777017336883904769624631000816125814507523003881104448400606639256157697726364497070991994595557846095373496586335555383420579225450418799890536309151312873523134628250617541863701569878214627263484834500565010134668577906393323986918228353010751495302806757852050443484126815083638604230155735469031268960610285338935765756772815379163668705890049106218255383045611331415012282164489977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb9d12dfb2104eb28ad05a4a31409600ee48b2f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.sculpit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.zinnia.holdings'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sculpit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zinnia.holdings'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit-org.sculpit.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.sculpit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.zinnia.holdings'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.sculpit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.zinnia.holdings'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sculpit-org.sculpit.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sculpit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zinnia.holdings'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zinnia.sculpit.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.holdings'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.sculpit.fitness'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d1ea4a7380000040300473045022100a40da11fd9c5f118f3adc133e2224ed70d950ea7423da8aa1da9abcf1f6f631902202094b4daeec0e172ca40891c3202290a53628592cb385e44fd9d61efa81a1e6800750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d1ea4a729000004030046304402206ecd7e335010318e97b1dd8e0e7e598ac783db2a44d0052dd6257872b3c1149d022019431ed7f7f320d154ed73903f2619905b9057d5d1ff61e670930b89f7d94c66
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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