jamieraskin.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 92:7c:5c:3d:03:76:d8:0d:30:9a:a2:6f:a2:ea:c7:02 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jamieraskin.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 92:7c:5c:3d:03:76:d8:0d:30:9a:a2:6f:a2:ea:c7:02
Serial Number (int): 194713003010729613944346033210025232130
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 89:5b:fc:44:b8:70:3a:e0:d2:0a:ac:22:f8:98:c9:a6:14:a4:d9:b9
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): bd:a4:48:09:46:63:54:68:9b:d2:05:ec:d9:2d:b9:aa:42:98:9e:84
Fingerprint (sha256): fd:d2:20:f7:84:c3:0d:d0:66:9e:bf:8f:db:67:dd:bc:a3:ff:49:37:d4:16:81:8e:e0:26:41:98:4c:a9:37:10

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate jamieraskin.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jamieraskin.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jamieraskin.com
www.jamieraskin.com

Other certificates including the domain name jamieraskin.com

(limited to 100 certificates)
act.progressiowa.org
jamieraskin.com
jamieraskin.com
blueprintinteractive.com
blueprintinteractive.com
jamieraskin.com
act.ilhanomar.com
jamieraskin.com
act.weareultraviolet.org
peoplesmillion.whitehelmets.org
act.peoplesconvoy.com
act.elizabethwarren.com
act.jamieraskin.com
act.gunsensevoter.org
jamieraskin.com
act.pirg.org
blueprintinteractive.com
act.ruraldemocratsturnoutfund.com
jamieraskin.com
act.berniesanders.com
act.democratic-strategy.org
jamieraskin.com
go.giffords.org
blueprintinteractive.com
blueprintinteractive.com
act.gavinnewsom.com
act.betoorourke.com
act.jamieraskin.com
blueprintinteractive.com
act.whitehelmets.org
jamieraskin.com
act.nuestropac.com
jamieraskin.com

Certificate

The complete raw certificate details for jamieraskin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIRAJJ8XD0DdtgNMJqib6LqxwIwDQYJKoZIhvcNAQELBQAw
gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE
AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0yMzEwMTgwMDAwMDBaFw0yNDExMDEyMzU5NTlaMBoxGDAWBgNVBAMTD2ph
bWllcmFza2luLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMTu
OhyICqsIhN/T5w71wZsE1XZNexFpTTM6GZPGBArBtJo8LMQHqgr0aIp9jg6A4ppG
eUUjmlM7gxlj0trcHxiM7e2S93cQ1cQlQkUcmMWnVRiAb/sWhx33jj0K0pfUsY8M
Ty+1wZoK2FY44KoQQGdSPN2fBhkXbpETC9r1PenHHt8hIzpeIWaV4p1vwtU33S+5
Nb4alt7ECqT9CK3+AtgNL31pceMc8vBnruJAyywAbX/KHxfEd/z7j15+dk5S2wXz
xSMKQidlQ6Nj8n68IeGduwKe3PtKQ1mqwy2vA8nZRykF44qlYsDPka31yt4epgzh
7kGVb7s7zKLV2hp67rSGGCGoYZxbiSwxMAtWjK2uIPAK0cylasnFZ32W44qcn6g3
/L+pj9suCYlj07aHxeoTVPT2EhjZlGmbOIEjALWmqQwYyYtfDRZNQXIqIPn0GSsX
IOI6D+6R7ELPRZ6qsCkCYO8bNFW3TgQauGZaQ3Ci2YShhv1AdMpJwbxs48ob1idz
USYW0m0lgGNoq46UujmqqiXytMlA20wLvVhsLtc7v7yO9pgkE0Abez+26kYGF6Gh
Fask42h9PFxgrUV7hcGfbhu6eUhhq9OSmJS/s6eB3DMp+PEuHmRoh8kk6nARKqId
JLG3ji5u9MKG37/vom9TyA8PIN3bOo3DbZEsjQBtAgMBAAGjggMGMIIDAjAfBgNV
HSMEGDAWgBSNjF7EVK2K4Xfpm/mbBeG4AY1h4TAdBgNVHQ4EFgQUiVv8RLhwOuDS
Cqwi+JjJphSk2bkwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQEC
AgcwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EM
AQIBMIGEBggrBgEFBQcBAQR4MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuc2Vj
dGlnby5jb20vU2VjdGlnb1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJD
QS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMC8GA1Ud
EQQoMCaCD2phbWllcmFza2luLmNvbYITd3d3LmphbWllcmFza2luLmNvbTCCAX4G
CisGAQQB1nkCBAIEggFuBIIBagFoAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhC
Cp/mZ0xaOnQAAAGLQ60lPwAABAMASDBGAiEAvLqCeLzHyizM2rTELJBXYu13vnns
HGNdlLl8FHXXBmQCIQDBcnt64P1QUlPoLbrHT7Jh8VJCIYgkBJmRQ+1Ct41gUwB2
ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABi0OtJZ8AAAQDAEcw
RQIhAJZ768lTg31VsyuIUy/MjCpyBNYkVae9TIJyXPHrBZrTAiA0SJmcp0qrBzvF
UwM8CYCPZmcpW3LRRLuRNEjBMQxoaAB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOze
w1FIWUZxH7WbAAABi0OtJW0AAAQDAEYwRAIgcQfLsL1jAk8iclataZyGXBlUEUV5
dfDFhe2wodUOYeACIEFMv3qKwNHxtqay/MkI56MClomHg2zmAmpKurXoWnp2MA0G
CSqGSIb3DQEBCwUAA4IBAQBvVr9qcoiOidJa6jMyvWcZg4eGnzwLh5E3kslNDucO
3dAU3HyEXZWJ2LFYLyMgvBOHXn0MjE6X4uPSB5dEmd00D2AgBGgaZ5kaI541Qcxz
+Jj0cug84IKMgC3HWKLio8rRLbjSE70pgn7/c0FEnd7hS73+B44k3jzplEd9+4Db
UT+QELY0KUTjfv+ZxtbCfK8ssERndkldvj8ZlRSr0cR5j+o+9W9h+r9M42yFpAWm
yG75BwCQrnl1dEj+BrVpHEz61xZLIltTHHxdYV/52CA1Wn0L82/f1E0AbB8cSacc
cPRpvxrY3n1mzBj95ClO6Q0kx7SvnZZibMJZuIUK7sc1
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 194713003010729613944346033210025232130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jamieraskin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803406648889134795259466487971331737746446214569667459783394735609052829837804209729873822470643586284813708901325201970869291289712848580248667110465211072028975297271288436090618661659071374076262074418491072396710341690348946839650350670727498236931099793922601647844473851782615891197127711242953219721655543875956377055470255221233611860318386803531494092671367220254556444367109697950892046327374785999451395974338486984812167470926427170127966581410465187624003007276817712330840775111986621276180034844652000040144601146441386871353293924775782013259111728388061366135158066174033160833812496752483819369961962701436131312622185059873905309392894280254464457812342500246755670952673966183241588714039959119681595452278440734341327179483641934405650899739939807234823250061904844952302209263964442729097138964805771736344246726362592174009031517323346062999200025106781775838270996244667519163556645166794016192171456342975126033705592438365889457261997065406321555668878071820475757845230368254608882087829835489951030348953724407467746872017243953751416776972639056466123439626710230686180788465940419358843695675869006608837119629358788661061753606924519543674918636825103994505769136648791899109827358231288528503430774893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							895bfc44b8703ae0d20aac22f898c9a614a4d9b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamieraskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamieraskin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b43ad253f0000040300483046022100bcba8278bcc7ca2cccdab4c42c905762ed77be79ec1c635d94b97c1475d70664022100c1727b7ae0fd505253e82dbac74fb261f1524221882404999143ed42b78d6053007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b43ad259f0000040300473045022100967bebc953837d55b32b88532fcc8c2a7204d62455a7bd4c82725cf1eb059ad302203448999ca74aab073bc553033c09808f6667295b72d144bb913448c1310c6868007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b43ad256d000004030046304402207107cbb0bd63024f227256ad699c865c195411457975f0c585edb0a1d50e61e00220414cbf7a8ac0d1f1b6a6b2fcc908e7a302968987836ce6026a4abab5e85a7a76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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