sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:00:74:cd:54:d5:50:59:3f:60:d0:8e:00:45:c2:f4:5a:7b was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:00:74:cd:54:d5:50:59:3f:60:d0:8e:00:45:c2:f4:5a:7b
Serial Number (int): 348604400316030908484173565008529130281595
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ec:44:d2:de:3c:1d:26:37:62:bd:a4:b2:1c:a2:4e:07:d9:7d:bb:8a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8c:68:94:d9:5c:58:77:0c:e6:b6:93:59:b5:2a:92:66:2a:4e:1a:e9
Fingerprint (sha256): fe:1d:f5:66:ab:80:7e:a0:cf:0a:f3:d1:00:fc:a9:87:22:c8:80:34:5b:8d:0a:12:1c:83:a2:a3:7e:94:f6:8d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ahiparagamefishclub.co.nz
ashleyforestrallysprint.co.nz
aucklandrugby.co.nz
aucklandsquashjuniors.nz
boptouch.co.nz
bowlshawkesbay.org.nz
bullernetball.co.nz
csa.org.nz
eakfc.org
ecbsoftball.org.nz
hbsfc.co.nz
juniorcricket.co.nz
karakatennis.co.nz
kensingtonfitness.co.nz
mandevillesports.co.nz
manurewaswimmingclub.co.nz
marketground.co.nz
marlborough-car-club.co.nz
marlboroughparktennis.co.nz
marlboroughvolleyball.org.nz
morningtonbowlingclub.co.nz
nelsonfarmersmarket.co.nz
nelsonfarmersmarket.org.nz
nelsonsoftball.org.nz
netballwairarapa.co.nz
northharboursoftball.co.nz
nskfc.org.nz
nzpowerlifting.co.nz
osssa.org.nz
otahuhuroversrugbyleague.co.nz
ponsonbybowls.nz
porritt.school.nz
ratec.org.nz
rbpc.nz
schoolground.com
sissnetball.co.nz
sportotago.co.nz
sportsground.com
sporty.co.nz
stewartalexander.co.nz
tasportscycling.co.nz
temata.school.nz
tgahockey.co.nz
touchnorthharbour.co.nz
tutangiora.nz
twyford.school.nz
waiopehu.ac.nz
wellingtonrnr.org.nz
wmcc.net.nz
woodendrugby.co.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nJS8GNX7P7UmBRaZ1DT
jBOwHGjPplxtYvEjPAK/w4Z2wHlKZ5zKi4zdU8n5QmoCiavIdE32APqWsYt46yxP
50vHG+eMlxoWCBgTGAfDtaLs1SwwcQ1FkL5d9fZXvQ8u1zdnLuIX5NGPWQ8gvHNz
jw4EESYg0JfoENo+eIBrrwXViFZ67KvPv56kfsOI5R9yFE9gzWv6vKbKBAK5uiiG
2PJMyeWUljuKdCCk4YXm7JTKtbKvaKrsyprg2BFTbcmNo+0gYEd4cwnWbm90YWCd
tKf7OmFi7pR1U9Phc1gFJdPPqdbFKVjPUXJPp7TSfobJn9DhtKzrfp+GykNW0UC2
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348604400316030908484173565008529130281595
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-03 02:01:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-01 02:01:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27071372518670799438453957394646599439205185568841275554297300708251183387944356604574714012777045116547578001546420663636272210369446097720045942078903089197234548394331449895689888571859662029186426759114657310416070295932037350203241072717982397957380276542169707040344666485711004953725272712630282191706316034966287902793664310094301705942711701302830273412884621788791066316034526381123562061227622510829760999694958156278162378603197357146677535081545509896743042238059885489778122652556158050952349697581059611438280611963350348861220754640747302313674921783938373092824263919219179346578084117680895635273293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec44d2de3c1d263762bda4b21ca24e07d97dbb8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1050 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbsfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kensingtonfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-car-club.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sissnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiopehu.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmcc.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186a56b4f340000040300483046022100c12401ef874ef9a85d989bca742659ab66c1989e3f06668f4b1e0256fb367e380221009a363364c49cbbff600d96118622b7d50da9a4908e9778326a8aecf9d0f36dde007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186a56b4f180000040300473045022100e213afd128b7342a33e00c6cea53fb8a7bd6f1c2abead3e4deecf46e2adb1c5602202ddde3819ed55b014f8008afae91043ddd6f8ec3aa807f143c3d3d4d3f454b14
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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