hlbc.org.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5b:96:b8:47:f0:e5:87:0b:67:88:a4:2a:3c:12:64:49:9b was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hlbc.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:96:b8:47:f0:e5:87:0b:67:88:a4:2a:3c:12:64:49:9b
Serial Number (int): 292502894226212724093040677564918486288795
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:3d:c4:de:14:4c:70:14:95:38:52:ba:23:a0:ce:b5:8c:79:fa:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:00:29:07:cf:e8:3c:e9:45:b4:bd:d6:cf:51:ce:f9:0d:ed:5f:dc
Fingerprint (sha256): fd:70:19:db:d9:a5:d7:b1:c8:00:0f:3a:e4:e6:b2:a6:f5:11:56:5b:4d:d1:aa:60:7a:3f:fb:6f:d6:1e:25:e5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hlbc.org.uk

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hlbc.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.hlbc.org.uk
cpanel.hlbc.org.uk
hlbc.org.uk
hlbc.wingfinger.on-rev.com
mail.hlbc.org.uk
mapping.wingfinger.on-rev.com
webdisk.hlbc.org.uk
webmail.hlbc.org.uk
wfstart.wingfinger.on-rev.com
www.hlbc.org.uk
www.hlbc.wingfinger.on-rev.com
www.mapping.wingfinger.on-rev.com
www.wfstart.wingfinger.on-rev.com

Other certificates including the domain name hlbc.org.uk

(limited to 100 certificates)
hlbc.org.uk
hlbc.org.uk
hlbc.org.uk
graphicsleeds.info
*.hlbc.org.uk
*.hlbc.org.uk
cpcontacts.hlbc.org.uk
hlbc.org.uk
graphicdesignleeds.info
graphicdesignleeds.info
hlbc.org.uk
*.wingfinger.co.uk
hlbc.org.uk
*.wingfinger.co.uk
hlbc.org.uk
*.hlbc.org.uk
hlbc.org.uk
hlbc.org.uk

Certificate

The complete raw certificate details for hlbc.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGjzCCBXegAwIBAgISA1uWuEfw5YcLZ4ikKjwSZEmbMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjcwODU2MzBaFw0y
MDAyMjUwODU2MzBaMBYxFDASBgNVBAMTC2hsYmMub3JnLnVrMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0Rt4MtLCntWeTP67zwlD8+24x/FUiPuiHOc
fRMkNaotvT66pRLr70AjPKCG72ABhdX9122EsWNHcwIXtQO2acucz3OpBZQmt+Yl
g/biLNUfvADKbV9i5i8LqO1bk5cP568AOHdxg6m+At6Rc4FPPRQ6UA2CFKgMP5rP
hDouSiLIH25rSXl5+V6iqzYZSoHufq9yXk3CjbBgC5JTqnPe8Eev0kkYsouUszXw
A4DDu+QDqpOR9rLpVA6++QRRtMButSBLpjzpKJncBet6rkjtBj3obllJBryh70Pq
wBDzQ/9IQG/u7tTPCRCJlGB2Wgr5c5wo2L82884A3nn1vKeIHQIDAQABo4IDoTCC
A50wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTxPcTeFExwFJU4UrojoM61jHn6ITAf
BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw
LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw
LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv
MIIBVQYDVR0RBIIBTDCCAUiCGGF1dG9kaXNjb3Zlci5obGJjLm9yZy51a4ISY3Bh
bmVsLmhsYmMub3JnLnVrggtobGJjLm9yZy51a4IaaGxiYy53aW5nZmluZ2VyLm9u
LXJldi5jb22CEG1haWwuaGxiYy5vcmcudWuCHW1hcHBpbmcud2luZ2Zpbmdlci5v
bi1yZXYuY29tghN3ZWJkaXNrLmhsYmMub3JnLnVrghN3ZWJtYWlsLmhsYmMub3Jn
LnVrgh13ZnN0YXJ0LndpbmdmaW5nZXIub24tcmV2LmNvbYIPd3d3LmhsYmMub3Jn
LnVrgh53d3cuaGxiYy53aW5nZmluZ2VyLm9uLXJldi5jb22CIXd3dy5tYXBwaW5n
LndpbmdmaW5nZXIub24tcmV2LmNvbYIhd3d3Lndmc3RhcnQud2luZ2Zpbmdlci5v
bi1yZXYuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYB
BAHWeQIEAgSB9QSB8gDwAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+L
kF4AAAFurEpy/AAABAMARzBFAiAYit2RGtuDp4HkAdpZfQg9qBRu1/GxJ/B5vffG
yATcegIhAKFIE63hl6JIno2pNhuu2ZT5i0Qs3qkR+DlMU6WxtP2GAHYAb1N2rDHw
MRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFurEpzLgAABAMARzBFAiEA9eT6
SaPuF2xVj821rcKaV2fu9slU3vj9hlCdmEFblHoCIEDzYnQzxup5hW3PN6mqHrtJ
Mz4zG32z7sYd32ad7gsZMA0GCSqGSIb3DQEBCwUAA4IBAQA5Dqv1Z4YrgUlwOS0p
5/OROYTGjSA8G4UUe+yuyRQsWNjd8Se1dIVhaRVQrqoXISRXLJdwgnN34hd/woH4
2EPYp/GSwJ1C7rqrQgmu7mKLpuDzU8MTvSCY8W1SOu3oWdSp1wUloYVfhnPgeq/g
/PlB6yOI65Kx7cYEiL91GQuLF4194KjJyo9/+fweZsGnVA3mWP8D4AR+IJ6DM0j+
3UGnqdvLhqfub2sWqgj3HscxHs5vTLpkZ2tMkBISeJX4MT3rTT504fFPncn/Nqo8
yAdM++FkfsvOloeYChZ/AnzpzQ7JYu/xd8ETROBQQa32dr4FXVM6ccaGW199FcqN
mrEa
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0Rt4MtLCntWeTP67zwl
D8+24x/FUiPuiHOcfRMkNaotvT66pRLr70AjPKCG72ABhdX9122EsWNHcwIXtQO2
acucz3OpBZQmt+Ylg/biLNUfvADKbV9i5i8LqO1bk5cP568AOHdxg6m+At6Rc4FP
PRQ6UA2CFKgMP5rPhDouSiLIH25rSXl5+V6iqzYZSoHufq9yXk3CjbBgC5JTqnPe
8Eev0kkYsouUszXwA4DDu+QDqpOR9rLpVA6++QRRtMButSBLpjzpKJncBet6rkjt
Bj3obllJBryh70PqwBDzQ/9IQG/u7tTPCRCJlGB2Wgr5c5wo2L82884A3nn1vKeI
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292502894226212724093040677564918486288795
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 08:56:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 08:56:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hlbc.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21620493850950775932059245968884642536006395562781241188960768205509420696687235779667568428480081109580315481034832074115292619627432327872835470941180825650563417529476585489833679137456202092517373594770124643314554548058135673252564555369066359359738751934665537924786483387528010424211168889686958395193026890334683202625424926435165790761639409305994604685823667575653615019385980165469377920161642100917785018910694223339691467911941488226601904311545453459082766630525881514674106748550389754474525209844986504451389696523254718583765145298623037485056028743720359887127661577659788872449583661532736280561693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f13dc4de144c7014953852ba23a0ceb58c79fa21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (332 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hlbc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.hlbc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlbc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlbc.wingfinger.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hlbc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapping.wingfinger.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.hlbc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.hlbc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfstart.wingfinger.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hlbc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hlbc.wingfinger.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mapping.wingfinger.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wfstart.wingfinger.on-rev.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eac4a72fc00000403004730450220188add911adb83a781e401da597d083da8146ed7f1b127f079bdf7c6c804dc7a022100a14813ade197a2489e8da9361baed994f98b442cdea911f8394c53a5b1b4fd860076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016eac4a732e0000040300473045022100f5e4fa49a3ee176c558fcdb5adc29a5767eef6c954def8fd86509d98415b947a022040f3627433c6ea79856dcf37a9aa1ebb49333e331b7db3eec61ddf669dee0b19
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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