*.goliveus.com
Issued by R3
About this certificate
This digital certificate with serial number 04:91:d7:50:c6:a3:03:ac:e3:63:80:f4:4a:2a:e1:49:38:3f was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.goliveus.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:91:d7:50:c6:a3:03:ac:e3:63:80:f4:4a:2a:e1:49:38:3fSerial Number (int): 398076290362251932964508497174317203273791
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 3c:c3:80:4a:00:b1:af:a2:1a:7b:2e:eb:dd:7d:bf:2d:ed:ef:68:1f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 4e:df:47:19:af:61:24:8d:d1:b3:18:fd:e9:e5:c4:b4:5b:90:e4:c5
Fingerprint (sha256): 03:fc:ab:40:72:2c:1c:12:f8:f0:8c:c5:87:a3:41:a9:00:d3:c7:b5:02:24:30:76:cf:bf:a9:2a:19:ce:fe:db
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.goliveus.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.goliveus.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.goliveus.com
goliveus.com
goliveus.com
Other certificates including the domain name goliveus.com
(limited to 100 certificates)
support.lingo4all.com
support.lingo4all.com
*.goliveus.com
support.lingo4all.com
support.lingo4all.com
support.onmon.global
support.lingo4all.com
*.goliveus.com
support.lingo4all.com
support.lingo4all.com
helpdesk.miadistribution.com.au
support.thetelephony.co
support.gamingedge.net
support.signalmash.com
support.lingo4all.com
support.lingo4all.com
support.lingo4all.com
support.lingo4all.com
desk.zurot.org
help.gogappi.com
help.gogappi.com
support.lingo4all.com
desk.zurot.org
support.goliveus.com
support.onmon.global
nexsource-sbo.nexus-sr.com
support.whiteoakpartners.com
support.gamingedge.net
nexsource-sbo.nexus-sr.com
support.lingo4all.com
support.tappyrewards.com
support.lingo4all.com
desk.rickandnix.com
support.thetelephony.co
helpdesk.miadistribution.com.au
servicedesk.onex.co
www.unvs.club
support.thetelephony.co
support.onmon.global
nexsource-sbo.nexus-sr.com
desk.rickandnix.com
support.lingo4all.com
support.goliveus.com
support.lingo4all.com
desk.rickandnix.com
desk.zurot.org
support.ameritrex.net
support.signalmash.com
support.gamingedge.net
support.niveshonline.com
support.lingo4all.com
zoho.silvprop.com
support.lingo4all.com
support.whiteoakpartners.com
help.gogappi.com
helpdesk.miadistribution.com.au
www.unvs.club
support.goliveus.com
support.lingo4all.com
support.lingo4all.com
support.lingo4all.com
desk.zurot.org
support.lingo4all.com
support.lingo4all.com
support.whiteoakpartners.com
support.lingo4all.com
support.lingo4all.com
support.niveshonline.com
www.unvs.club
support.lingo4all.com
support.ameritrex.net
support.niveshonline.com
support.lingo4all.com
zoho.silvprop.com
faapplications.goliveus.com
support.gresnickrealty.com
support.lingo4all.com
nexsource-sbo.nexus-sr.com
support.lingo4all.com
support.goliveus.com
support.lingo4all.com
zoho.silvprop.com
*.goliveus.com
support.lingo4all.com
support.niveshonline.com
servicedesk.onex.co
support.gamingedge.net
zoho.silvprop.com
support.lingo4all.com
helpdesk.miadistribution.com.au
help.gogappi.com
servicedesk.onex.co
support.lingo4all.com
support.lingo4all.com
support.onmon.global
desk.rickandnix.com
support.lingo4all.com
support.lingo4all.com
support.whiteoakpartners.com
support.lingo4all.com
support.lingo4all.com
*.goliveus.com
support.lingo4all.com
support.lingo4all.com
support.onmon.global
support.lingo4all.com
*.goliveus.com
support.lingo4all.com
support.lingo4all.com
helpdesk.miadistribution.com.au
support.thetelephony.co
support.gamingedge.net
support.signalmash.com
support.lingo4all.com
support.lingo4all.com
support.lingo4all.com
support.lingo4all.com
desk.zurot.org
help.gogappi.com
help.gogappi.com
support.lingo4all.com
desk.zurot.org
support.goliveus.com
support.onmon.global
nexsource-sbo.nexus-sr.com
support.whiteoakpartners.com
support.gamingedge.net
nexsource-sbo.nexus-sr.com
support.lingo4all.com
support.tappyrewards.com
support.lingo4all.com
desk.rickandnix.com
support.thetelephony.co
helpdesk.miadistribution.com.au
servicedesk.onex.co
www.unvs.club
support.thetelephony.co
support.onmon.global
nexsource-sbo.nexus-sr.com
desk.rickandnix.com
support.lingo4all.com
support.goliveus.com
support.lingo4all.com
desk.rickandnix.com
desk.zurot.org
support.ameritrex.net
support.signalmash.com
support.gamingedge.net
support.niveshonline.com
support.lingo4all.com
zoho.silvprop.com
support.lingo4all.com
support.whiteoakpartners.com
help.gogappi.com
helpdesk.miadistribution.com.au
www.unvs.club
support.goliveus.com
support.lingo4all.com
support.lingo4all.com
support.lingo4all.com
desk.zurot.org
support.lingo4all.com
support.lingo4all.com
support.whiteoakpartners.com
support.lingo4all.com
support.lingo4all.com
support.niveshonline.com
www.unvs.club
support.lingo4all.com
support.ameritrex.net
support.niveshonline.com
support.lingo4all.com
zoho.silvprop.com
faapplications.goliveus.com
support.gresnickrealty.com
support.lingo4all.com
nexsource-sbo.nexus-sr.com
support.lingo4all.com
support.goliveus.com
support.lingo4all.com
zoho.silvprop.com
*.goliveus.com
support.lingo4all.com
support.niveshonline.com
servicedesk.onex.co
support.gamingedge.net
zoho.silvprop.com
support.lingo4all.com
helpdesk.miadistribution.com.au
help.gogappi.com
servicedesk.onex.co
support.lingo4all.com
support.lingo4all.com
support.onmon.global
desk.rickandnix.com
support.lingo4all.com
support.lingo4all.com
support.whiteoakpartners.com
support.lingo4all.com
Certificate
The complete raw certificate details for *.goliveus.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISBJHXUMajA6zjY4D0SirhSTg/MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTAwOTMzNTRaFw0yNDA3MDkwOTMzNTNaMBkxFzAVBgNVBAMM DiouZ29saXZldXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA qpkVM3Vmk9za0uK9EZm7jzt+adV0sm0elSSX72kdchGrNyUU8UbK0DwPUBMoKZwN +cmblyAU4p2O5Y4PTzHvoqckfcQF1wvQKk3lygfskgJjuxw1A9FINE3yApbIAKu/ oSHfbQTQBLl3lH9xR+DoA3mD96W9kvts7zLwJGN52qhPeyEQDEEH0oNSdXTEOp4/ z7+d8EfOel7RvA8DnGrES8Am4KBYYvLKU04wD9JFdYQhMrGf/moZpjV/1k352syD ioOcJS8uVUfYCrOsYGgz4obsC71P1Uer8QeN3lei+kNlnaq1rfQ9RKrg0REYYr/e 6s4DcuFL4ek/Jz+cN5tHtwIDAQABo4ICHjCCAhowDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBQ8w4BKALGvohp7Luvdfb8t7e9oHzAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzAnBgNVHREEIDAegg4qLmdvbGl2ZXVzLmNvbYIMZ29saXZldXMuY29tMBMGA1Ud IAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAdv+IPwq2 +5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGOx5I/fAAABAMARzBFAiEA7P4m PtT+QhcrZi2FtSpQUIm/s8J3nh4J23GxlQvtTMUCIAP7YehWgYiV8bdNYtwsMCu/ Dhtx9Xb6L9Xdg5jrwd5bAHYAGZgQcQnw1lIuMIDSnj9ku4NuKMz5D1KO7t/OSj8W tMoAAAGOx5I/VwAABAMARzBFAiEA6arP4bwSSTM6+AtAbBT2fMIn7MDspsPzSTB4 WFW0eCACIA/ri2+GbuU+kY4M+3jSOeP7ZpPtoqkN2NEd5yLMvI60MA0GCSqGSIb3 DQEBCwUAA4IBAQAtQldOvd8sKEyxANmpIqW5JNxk5wSCtmvQ87UMRzKeNSGfnkEW 5SMdwFkDRzI9sPIEa0+MxoRPEce+yPDS5NdMSPVM9uLdJALm22oFuw8a/jtX5NQi WV8EDynTv2q7C0MDp6QgEP+vjECb/fteaAugW6b+1oqJ8GY7htEehgwiqXKMdc5R DnNi64n5L+2JInlnRRBBOatSuaHLtjgn+cVTsO1KRDBIdFJDewJd5blh/M456LYk WbP3H3LNTjJn4sIL998L2w1WP9E0e2z7XTzkTFmM8ZPPkuo8okEzv77fnjcU/RHA DyR2QjTumAxCyZ2pu3782FRfbEaadGYFt7Xs -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpkVM3Vmk9za0uK9EZm7 jzt+adV0sm0elSSX72kdchGrNyUU8UbK0DwPUBMoKZwN+cmblyAU4p2O5Y4PTzHv oqckfcQF1wvQKk3lygfskgJjuxw1A9FINE3yApbIAKu/oSHfbQTQBLl3lH9xR+Do A3mD96W9kvts7zLwJGN52qhPeyEQDEEH0oNSdXTEOp4/z7+d8EfOel7RvA8DnGrE S8Am4KBYYvLKU04wD9JFdYQhMrGf/moZpjV/1k352syDioOcJS8uVUfYCrOsYGgz 4obsC71P1Uer8QeN3lei+kNlnaq1rfQ9RKrg0REYYr/e6s4DcuFL4ek/Jz+cN5tH twIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 398076290362251932964508497174317203273791 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 09:33:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-09 09:33:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.goliveus.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21535999794493859394754541154830657422414576325170899928167982074433848220900212494644023649746476801613740501435529617351388228890291802249832838494135151134322129146901308907445228180297332277131473616382199267559237546847122579340574298861021810882065964778787344713483946488156785176354649175805423150663818465410256006501895772369906189583642082174812925794971436117590640763055066314415125600741532043723079539763810749688573947132499328147377300978570286128587279950349917428736859468300311576472546237997167788114018129832497042479105964533551973794272759164090956385306671505933641861256902503004172128569271 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3cc3804a00b1afa21a7b2eebdd7dbf2dedef681f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goliveus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goliveus.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ec7923f7c0000040300473045022100ecfe263ed4fe42172b662d85b52a505089bfb3c2779e1e09db71b1950bed4cc5022003fb61e856818895f1b74d62dc2c302bbf0e1b71f576fa2fd5dd8398ebc1de5b0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ec7923f570000040300473045022100e9aacfe1bc1249333af80b406c14f67cc227ecc0eca6c3f34930785855b4782002200feb8b6f866ee53e918e0cfb78d239e3fb6693eda2a90dd8d11de722ccbc8eb4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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