beobank.billit.be
Issued by R3
About this certificate
This digital certificate with serial number 04:4e:da:ad:4f:ba:5f:cc:8f:8c:a2:37:30:be:1b:88:be:75 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=beobank.billit.be
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:4e:da:ad:4f:ba:5f:cc:8f:8c:a2:37:30:be:1b:88:be:75Serial Number (int): 375281839934388270212939582640556689899125
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 85:ed:51:9d:23:8b:36:55:91:af:cb:4c:f0:39:94:55:7e:36:ea:08
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 24:0a:35:e4:24:a3:d5:cb:80:32:40:cc:bc:a0:b3:07:91:c2:c2:3d
Fingerprint (sha256): 02:d0:f2:de:01:de:94:90:1a:c3:f6:32:63:5a:d6:4f:47:28:db:07:6c:60:62:a8:f9:27:82:f0:6f:08:ba:58
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate beobank.billit.be
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for beobank.billit.be
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
beobank.billit.be
Other certificates including the domain name billit.be
(limited to 100 certificates)
my.billit.be
dev.billit.be
orderit.billit.be
manage.billit.be
peppol.billit.be
monitor.billit.be
dev.billit.be
beobank.billit.be
data.billit.be
docs.billit.be
monitor.billit.be
blog.billit.be
peppol.billit.be
manage.sandbox.billit.be
api.sandbox.billit.be
billit.be
mail.billit.be
my.sandbox.billit.be
billit.be
monitor.billit.be
api.billit.be
api.sandbox.billit.be
peppol.billit.be
billit.be
manage.billit.be
sandbox.billit.be
mail.billit.be
peppol.sandbox.billit.be
status.billit.be
mail.billit.be
acc.www.billit.be
prod2.billit.be
peppol.billit.be
go.billit.be
api.sandbox.billit.be
peppolapi.sandbox.billit.be
manage.billit.be
fiskcouncil.billit.be
monitor.billit.be
orderit.billit.be
dev.billit.be
dupontgeert.billit.be
my.billit.be
support.billit.be
my.sandbox.billit.be
blog.billit.be
test.billit.be
manage.billit.be
peppol.billit.be
prod2.billit.be
manage.billit.be
api.sandbox.billit.be
orderit.billit.be
webtools.billit.be
get.billit.be
webtools.billit.be
status.billit.be
peppolapi.sandbox.billit.be
api.sandbox.billit.be
get.billit.be
api.billit.be
my.sandbox.billit.be
peppol.billit.be
manage.billit.be
manage.sandbox.billit.be
api.billit.be
orderit2.billit.be
dupontgeert.billit.be
manage.billit.be
bellerose.billit.be
api.billit.be
peppol.billit.be
webtools.billit.be
webtools.billit.be
manage.billit.be
peppolapi.billit.be
mail.billit.be
temp.www.billit.be
data.billit.be
mail.billit.be
api.sandbox.billit.be
webtools2.billit.be
www.billit.be
manage.billit.be
data.billit.be
bellerose.billit.be
dupontgeert.billit.be
mail.billit.be
orderit.billit.be
orderit.billit.be
smp-test.billit.be
api.sandbox.billit.be
my.sandbox.billit.be
dev.billit.be
mail.billit.be
status.billit.be
api.billit.be
dupontgeert.billit.be
smp-test.billit.be
my.sandbox.billit.be
dev.billit.be
orderit.billit.be
manage.billit.be
peppol.billit.be
monitor.billit.be
dev.billit.be
beobank.billit.be
data.billit.be
docs.billit.be
monitor.billit.be
blog.billit.be
peppol.billit.be
manage.sandbox.billit.be
api.sandbox.billit.be
billit.be
mail.billit.be
my.sandbox.billit.be
billit.be
monitor.billit.be
api.billit.be
api.sandbox.billit.be
peppol.billit.be
billit.be
manage.billit.be
sandbox.billit.be
mail.billit.be
peppol.sandbox.billit.be
status.billit.be
mail.billit.be
acc.www.billit.be
prod2.billit.be
peppol.billit.be
go.billit.be
api.sandbox.billit.be
peppolapi.sandbox.billit.be
manage.billit.be
fiskcouncil.billit.be
monitor.billit.be
orderit.billit.be
dev.billit.be
dupontgeert.billit.be
my.billit.be
support.billit.be
my.sandbox.billit.be
blog.billit.be
test.billit.be
manage.billit.be
peppol.billit.be
prod2.billit.be
manage.billit.be
api.sandbox.billit.be
orderit.billit.be
webtools.billit.be
get.billit.be
webtools.billit.be
status.billit.be
peppolapi.sandbox.billit.be
api.sandbox.billit.be
get.billit.be
api.billit.be
my.sandbox.billit.be
peppol.billit.be
manage.billit.be
manage.sandbox.billit.be
api.billit.be
orderit2.billit.be
dupontgeert.billit.be
manage.billit.be
bellerose.billit.be
api.billit.be
peppol.billit.be
webtools.billit.be
webtools.billit.be
manage.billit.be
peppolapi.billit.be
mail.billit.be
temp.www.billit.be
data.billit.be
mail.billit.be
api.sandbox.billit.be
webtools2.billit.be
www.billit.be
manage.billit.be
data.billit.be
bellerose.billit.be
dupontgeert.billit.be
mail.billit.be
orderit.billit.be
orderit.billit.be
smp-test.billit.be
api.sandbox.billit.be
my.sandbox.billit.be
dev.billit.be
mail.billit.be
status.billit.be
api.billit.be
dupontgeert.billit.be
smp-test.billit.be
my.sandbox.billit.be
Certificate
The complete raw certificate details for beobank.billit.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISBE7arU+6X8yPjKI3ML4biL51MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMDEwNzEwMzhaFw0yNDAzMzEwNzEwMzdaMBwxGjAYBgNVBAMT EWJlb2JhbmsuYmlsbGl0LmJlMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKC AYEAvUX0Vm3my4lxNg9JrLJKqeqGOytG61RITRbrvP5oJx18IDOUPCxsfmlMT7I3 4SGr+yW52gXHaHUp74xCVmofvguRRlIJXgiAliTy71yHkDYo/n/thkxy/SwBSlla 8PTnJNp/tQQIkmwRZdQPcylv/OF4qmx/Qu6zm0T1Ibd8yV3oyO4dLMnJbS1qTM6v TK5PA8L8T1JRwoumUa63s9EZoJXTIeFDzeiZa7q4DpS05+nU+a6WEQZkMRMrIXKt Kr/iQYYGTi4V8uHAL+OyVqb2s1YNZxhpGAYLzJK6tCDr+6F2TXQARBsSNm5oIevc Bp5EvIsyInvfAuUeBCI7v3kiImjBv1ug8ungK7C8F0OfcPIBO5WjLPUp1gZLJ2EM AgqxrR1I48u9T8866A5fb+dSTidnIT+LdgjrpiF6CV5jMhOcI5JFM9UFdgpsV5KA m+ky0hYYJ+i6m+cXJcJcsAxMxMI6nHJ3Ha0wschbZ9LonH1Ci4ZV5Ts9M1c7tOOx 8LLZAgMBAAGjggITMIICDzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIXtUZ0jizZV ka/LTPA5lFV+NuoIMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUG CCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3Jn MCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMBwGA1UdEQQVMBOC EWJlb2JhbmsuYmlsbGl0LmJlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYB BAHWeQIEAgSB9QSB8gDwAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznY hHMAAAGMxBMmygAABAMARzBFAiA89vQS1NDCfY5OL9ZvJU3UBdV4xB3MSfDW8Hf7 a8iWcAIhAINvz9r3tiPuAjahg5Vlj6MmeQ/vC9K3XavoShKo8i/tAHYA7s3QZNXb Gs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGMxBMm1QAABAMARzBFAiAnnHdm 39aAgc2hKL7JEVvnGV+S0KDUM9IJd/Saql+6OwIhAPtOjq1AD6jKS7e69bMU2YQr QTEKRAakEPTQTGK3dv6fMA0GCSqGSIb3DQEBCwUAA4IBAQBwqKi1YdMZwvuBdd30 9ECw46y0Dd+nJob3Fwz5rrvXWepDV8w0u4IkVB0KYduZUyZ0kLS0W7kSJ2+DXvXO jJycJMvQiCPgeEVlwHvJc+yPngabPT9Pj+4F1iWPoPilXCMDEHHrgzXhmfi6X7uZ /l57l/DvQgksLidsd1vOmKLJ4qVMkpEBrEFCUfwAXFh10fJhH/hKIA1Yl0AqHgDv reqRhncgmPYzNg32IsJC34P7K96VYLEcsA/YhGoxSS4l8w6ftC3pozWRGVH7/L5i aiau9ZHy0zRY0oddhuSIrdWPl+Sy78NUcMwUeTa5NbiVPHUgPgEQJvZPuQJvWUqN P3oR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAvUX0Vm3my4lxNg9JrLJK qeqGOytG61RITRbrvP5oJx18IDOUPCxsfmlMT7I34SGr+yW52gXHaHUp74xCVmof vguRRlIJXgiAliTy71yHkDYo/n/thkxy/SwBSlla8PTnJNp/tQQIkmwRZdQPcylv /OF4qmx/Qu6zm0T1Ibd8yV3oyO4dLMnJbS1qTM6vTK5PA8L8T1JRwoumUa63s9EZ oJXTIeFDzeiZa7q4DpS05+nU+a6WEQZkMRMrIXKtKr/iQYYGTi4V8uHAL+OyVqb2 s1YNZxhpGAYLzJK6tCDr+6F2TXQARBsSNm5oIevcBp5EvIsyInvfAuUeBCI7v3ki ImjBv1ug8ungK7C8F0OfcPIBO5WjLPUp1gZLJ2EMAgqxrR1I48u9T8866A5fb+dS TidnIT+LdgjrpiF6CV5jMhOcI5JFM9UFdgpsV5KAm+ky0hYYJ+i6m+cXJcJcsAxM xMI6nHJ3Ha0wschbZ9LonH1Ci4ZV5Ts9M1c7tOOx8LLZAgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 375281839934388270212939582640556689899125 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 07:10:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 07:10:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beobank.billit.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4295324466493546672258812849492315240205101234899399148873749470113782886124422839047530252398157746642341996498623011295325024375877430630303571424816324316521400581212684389893442084227814200675718248893490329630243057580169827830891069040882555736824924144141438361159906596664550595743318088576465049226165012655304170948271812117294768818524564760042671503170680512958841121614674384533767672585526179127306576401950203967506261803008442834915017427151419295054074806680372366376198039906456503045734968822246109539716505425455095594188202258589102066305958957283084193488002806945727607302896042755368725903806187834866158181075840501580084619259781863051182107820645799293147695091727512270845968969650856316345004893248420825088906388876056931079505245613882654818931262670905115957717616838617348086923560643145110339845480232156680898465722313939321623603709901386373985877336623644707531513977506986103706148188889 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 85ed519d238b365591afcb4cf03994557e36ea08 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beobank.billit.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cc41326ca000004030047304502203cf6f412d4d0c27d8e4e2fd66f254dd405d578c41dcc49f0d6f077fb6bc89670022100836fcfdaf7b623ee0236a18395658fa326790fef0bd2b75dabe84a12a8f22fed007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cc41326d500000403004730450220279c7766dfd68081cda128bec9115be7195f92d0a0d433d20977f49aaa5fba3b022100fb4e8ead400fa8ca4bb7baf5b314d9842b41310a4406a410f4d04c62b776fe9f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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