mamaweed.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:91:c9:8c:a2:70:85:e1:c4:e9:6a:ab:bd:97:29:b4:d1:a0 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mamaweed.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:91:c9:8c:a2:70:85:e1:c4:e9:6a:ab:bd:97:29:b4:d1:a0
Serial Number (int): 398057991973955371192680050709246577529248
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f0:03:24:90:eb:a1:3c:37:33:9f:49:eb:9d:4f:1c:41:01:ca:21:4b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): aa:34:8f:21:ae:60:50:8b:ea:f3:65:35:9b:32:65:2e:62:4a:b9:12
Fingerprint (sha256): fc:02:90:4a:61:7e:0b:e2:1e:56:51:47:b2:b8:a9:98:84:92:10:20:5f:3c:52:4f:31:c2:d6:6f:ab:0c:08:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mamaweed.ca

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mamaweed.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

69ers.love
amzbookkeeping.com
barbkops.com
brokeninjas.com
cameronparish.com
deify.church
houstonprolotherapy.com
kalamazooanalog.com
kangaroomeats.com
lawsuitreform.com
mamaweed.ca
mayaixchell.com
missionpossibleloans.com
pool4vip.com
republicanvideographer.co
rivercityseniors.com
spinawinner.com
walkingemoji.com
wildroseultras.com
yalikavakmarina.com

Other certificates including the domain name mamaweed.ca

(limited to 100 certificates)
ventosa.xyz.mamaweed.ca
mamaweed.ca
mamaweed.ca
mamaweed.ca
radioactivetrader.com.mamaweed.ca
hoppycoppy.com.mamaweed.ca
tuscaloosaproperties.com.hotfordaddy.com.mamaweed.ca
mamaweed.ca
mamaweed.ca
mamaweed.ca
mamaweed.ca
mamaweed.ca
domainstocash.com.lasvegaschillerparts.com.mamaweed.ca
mamaweed.ca
mamaweed.ca

Certificate

The complete raw certificate details for mamaweed.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgISBJHJjKJwheHE6WqrvZcptNGgMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMDYwODQyNTFaFw0yNDA1MDYwODQyNTBaMBYxFDASBgNVBAMT
C21hbWF3ZWVkLmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuy+
jCar9kUl3ScfEhGpusfctq3Z3nptj5nNyXSoWWJxMTDjLkf59BsCtJThTTyhk8dE
TbPr1YYumlReVHt/8ApMUq3N0gMszIA2833iH/VLgwLefMJbg5VK2nCQzEN7d6dU
TlPiOEt2UfA4XEZq8apOi/ZQ3Pv5zZgG6MfeKDgTzTYJPI4beh/taMjNbIuPcRWE
dzcQB60NHE61hK4H74MZmdRrgC3BUqcTjH3sYK0JkRcJwNZIkbB+8KQtnAEcnD5D
W76NJ1rHVqRQ2nzcFc+Mk2KdfoyRNq62FpftbEw+Gjf3Uvm3aU9CV9y+cSCwOWmk
DPUDy8G9pSEhELQkyQIDAQABo4IDfDCCA3gwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBTwAySQ66E8NzOfSeudTxxBAcohSzAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm
H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v
LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCC
AYQGA1UdEQSCAXswggF3ggo2OWVycy5sb3ZlghJhbXpib29ra2VlcGluZy5jb22C
DGJhcmJrb3BzLmNvbYIPYnJva2VuaW5qYXMuY29tghFjYW1lcm9ucGFyaXNoLmNv
bYIMZGVpZnkuY2h1cmNoghdob3VzdG9ucHJvbG90aGVyYXB5LmNvbYITa2FsYW1h
em9vYW5hbG9nLmNvbYIRa2FuZ2Fyb29tZWF0cy5jb22CEWxhd3N1aXRyZWZvcm0u
Y29tggttYW1hd2VlZC5jYYIPbWF5YWl4Y2hlbGwuY29tghhtaXNzaW9ucG9zc2li
bGVsb2Fucy5jb22CDHBvb2w0dmlwLmNvbYIZcmVwdWJsaWNhbnZpZGVvZ3JhcGhl
ci5jb4IUcml2ZXJjaXR5c2VuaW9ycy5jb22CD3NwaW5hd2lubmVyLmNvbYIQd2Fs
a2luZ2Vtb2ppLmNvbYISd2lsZHJvc2V1bHRyYXMuY29tghN5YWxpa2F2YWttYXJp
bmEuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB
8QDvAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGNfcyDhwAA
BAMARzBFAiAWd2fHxLRP7sKNlzEx1DuADAp4a5FfgccFByHO/TGcFQIhAPpdc2l6
7zMgWl0pnNLd8ysMVlnIlFy2S3ofhklM3jTKAHUAouK/1h7eLy8HoNZObTen3GVD
sMa1LqLat4r4mm31F9gAAAGNfcyDkgAABAMARjBEAiBsicxGK6PrzX4L4mwyN/I4
WRTAR++5TrUYKCJBSQQLCgIgFlhFsicSs1iP5/OYWGP5vVRhmDEJROIubAAV3wO8
djAwDQYJKoZIhvcNAQELBQADggEBAC5bwTKHlg+qCJRR1OBciDz1Nd02UzmfQcyK
lMxQwcaiPGkxaAdVPzLI+nKnaa2RwbnJzfEC2Yxlyiqpn2iag+gAPXE6MuIDqPbN
0FEfTbosBFttnHv5oIGbImwr+JUKbWmAPVuMxJvFKKXyypIye84EvZpFb3bMlm6K
B7KBc5YGKue7UMOY2wCOHrTMiI4tckP8PF7/q0J5TH2l2vwWsdx5upRLBLA6BeUe
pGfmIU5ThaZtmVGF2AALXR/8YDxoWIGH4zW0eFezGYFtrIRPz854HgtQCbwF0//o
q9yxy/n2BR+gPpJuVfjLMx5HmnLusvXFSAalM8c3T2NTijngdds=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuy+jCar9kUl3ScfEhGp
usfctq3Z3nptj5nNyXSoWWJxMTDjLkf59BsCtJThTTyhk8dETbPr1YYumlReVHt/
8ApMUq3N0gMszIA2833iH/VLgwLefMJbg5VK2nCQzEN7d6dUTlPiOEt2UfA4XEZq
8apOi/ZQ3Pv5zZgG6MfeKDgTzTYJPI4beh/taMjNbIuPcRWEdzcQB60NHE61hK4H
74MZmdRrgC3BUqcTjH3sYK0JkRcJwNZIkbB+8KQtnAEcnD5DW76NJ1rHVqRQ2nzc
Fc+Mk2KdfoyRNq62FpftbEw+Gjf3Uvm3aU9CV9y+cSCwOWmkDPUDy8G9pSEhELQk
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398057991973955371192680050709246577529248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 08:42:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 08:42:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mamaweed.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23092114482061151087342532808154767901938512326351502700814407734016035409314441436126115665057426743874997867137171817465104806668030220911017065957239838285795942247295124225378602822936863411867568220246842635574237082129745757116251837811268594024631197427501531243425030528151506479418885130649125806660256085000110139088274018178317245294731592749526810291926010942726569548367435928909611046417540668520479165340205887955953478160216225651110403458409503744233944363926178617866336116589346601881500269077075541088906571606032617861483770857070217013324698628266497622831666349600437697747410156129873699284169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0032490eba13c37339f49eb9d4f1c4101ca214b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (379 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '69ers.love'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amzbookkeeping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbkops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokeninjas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameronparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deify.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonprolotherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalamazooanalog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kangaroomeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawsuitreform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mamaweed.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayaixchell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionpossibleloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pool4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicanvideographer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivercityseniors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spinawinner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walkingemoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildroseultras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yalikavakmarina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d7dcc838700000403004730450220167767c7c4b44feec28d973131d43b800c0a786b915f81c7050721cefd319c15022100fa5d73697aef33205a5d299cd2ddf32b0c5659c8945cb64b7a1f86494cde34ca007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d7dcc8392000004030046304402206c89cc462ba3ebcd7e0be26c3237f2385914c047efb94eb51828224149040b0a0220165845b22712b3588fe7f3985863f9bd546198310944e22e6c0015df03bc7630
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002e5bc13287960faa089451d4e05c883cf535dd3653399f41cc8a94cc50c1c6a23c69316807553f32c8fa72a769ad91c1b9c9cdf102d98c65ca2aa99f689a83e8003d713a32e203a8f6cdd0511f4dba2c045b6d9c7bf9a0819b226c2bf8950a6d69803d5b8cc49bc528a5f2ca92327bce04bd9a456f76cc966e8a07b2817396062ae7bb50c398db008e1eb4cc888e2d7243fc3c5effab42794c7da5dafc16b1dc79ba944b04b03a05e51ea467e6214e5385a66d995185d8000b5d1ffc603c68588187e335b47857b319816dac844fcfce781e0b5009bc05d3ffe8abdcb1cbf9f6051fa03e926e55f8cb331e479a72eeb2f5c54806a533c7374f63538a39e075db