reducio.fr
Issued by R3
About this certificate
This digital certificate with serial number 03:11:83:ff:ef:79:67:d3:3f:90:43:50:1c:f4:6d:e9:21:c3 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=reducio.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:11:83:ff:ef:79:67:d3:3f:90:43:50:1c:f4:6d:e9:21:c3Serial Number (int): 267297115793198079455649764212481756570051
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1e:31:5a:31:e0:1b:4a:24:02:bb:0a:bd:42:45:71:30:4a:e7:d0:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 07:cf:55:be:d3:48:99:78:8b:22:0a:42:b4:43:07:df:f7:6e:d8:59
Fingerprint (sha256): 06:a5:8f:03:99:ad:54:75:c0:3d:b6:4c:82:53:16:c5:50:c0:10:12:f2:9e:8a:33:18:b4:73:e0:c7:38:61:26
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate reducio.fr
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for reducio.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
reducio.fr
www.reducio.fr
www.reducio.fr
Other certificates including the domain name reducio.fr
(limited to 100 certificates)
soporte.ts911.com.mx
personal.lrsocialjustice.life
soporte.biotempak.com
people.libertyone.com.br
hr.redbridgecs.com
support.gowaji.com
helpdesk.tricomvoice.com
helpdesk.tricomvoice.com
support.pawsatpeacecremation.com
reducio.fr
expense.360explore.com
helpdesk.tricomvoice.com
internal.froggyslair.com
expense.broxelbroadband.com
support.seqlogic.com
helpdesk.tricomvoice.com
expense.rmgcreditservices.org
newusers.townofplainfield.com
helpdesk.tricomvoice.com
helpdesk.tricomvoice.com
expense.rmgcardservices.org
hr.avisolar.com
support.diverseexcellence.com
helpdesk.tricomvoice.com
asistencia.loftcompany.shop
helpdesk.ccpfresh.com
expense.45z.net
hr.redbridgecs.com
support.readycommunications.net
hr.redbridgecs.com
expense.rmgcreditservices.org
helpdesk.tricomvoice.com
support.dfcloudpbx.com
expense.copymarklaw.com
personal.lrsocialjustice.life
support.readycommunications.net
helpdesk.tricomvoice.com
hr.redbridgecs.com
reducio.fr
help.tatomendoza.ph
reducio.fr
personal.lrsocialjustice.life
talenthub.nimbusnext.com
hr.redbridgecs.com
reducio.fr
rh.curante.net
support.seqlogic.com
support.readycommunications.net
support.thedatabasediva.com
support.caseyandcompany.net
people.libertyone.com.br
support.thedatabasediva.com
rh.curante.net
helpdesk.tricomvoice.com
support.myboxx.app
apexsupport.sdsuacademy.org
support.seqlogic.com
reducio.fr
reducio.fr
asistencia.loftcompany.shop
helpdesk.tricomvoice.com
expense.rmgcreditservices.org
erp.bluepi.in
expense.gupshup.io
support.b1-solutions.com
helpdesk.tricomvoice.com
people.tindosolar.com
helpdesk.tricomvoice.com
ayuda.gaselgallito.com
meeting.luisdevillecpa.com
support.caseyandcompany.net
soporte.biotempak.com
apexsupport.sdsuacademy.org
lilly.direct.reducio.fr
customer-service.thesmstore.com
helpdesk.ccpfresh.com
helpdesk.ccpfresh.com
helpdesk.tricomvoice.com
helpdesk.tricomvoice.com
helpdesk.tricomvoice.com
ticketing.ibml.com
talenthub.nimbusnext.com
support.myboxx.app
helpdesk.tricomvoice.com
apexsupport.sdsuacademy.org
expense.360explore.com
helpdesk.tricomvoice.com
www.reducio.fr
support.pawsatpeacecremation.com
internal.froggyslair.com
expense.360explore.com
expense.360explore.com
support.b1-solutions.com
helpdesk.tricomvoice.com
apexsupport.sdsuacademy.org
people.libertyone.com.br
expense.rmgcreditservices.org
reducio.fr
support.techconcepts.co.uk
soporte.ts911.com.mx
personal.lrsocialjustice.life
soporte.biotempak.com
people.libertyone.com.br
hr.redbridgecs.com
support.gowaji.com
helpdesk.tricomvoice.com
helpdesk.tricomvoice.com
support.pawsatpeacecremation.com
reducio.fr
expense.360explore.com
helpdesk.tricomvoice.com
internal.froggyslair.com
expense.broxelbroadband.com
support.seqlogic.com
helpdesk.tricomvoice.com
expense.rmgcreditservices.org
newusers.townofplainfield.com
helpdesk.tricomvoice.com
helpdesk.tricomvoice.com
expense.rmgcardservices.org
hr.avisolar.com
support.diverseexcellence.com
helpdesk.tricomvoice.com
asistencia.loftcompany.shop
helpdesk.ccpfresh.com
expense.45z.net
hr.redbridgecs.com
support.readycommunications.net
hr.redbridgecs.com
expense.rmgcreditservices.org
helpdesk.tricomvoice.com
support.dfcloudpbx.com
expense.copymarklaw.com
personal.lrsocialjustice.life
support.readycommunications.net
helpdesk.tricomvoice.com
hr.redbridgecs.com
reducio.fr
help.tatomendoza.ph
reducio.fr
personal.lrsocialjustice.life
talenthub.nimbusnext.com
hr.redbridgecs.com
reducio.fr
rh.curante.net
support.seqlogic.com
support.readycommunications.net
support.thedatabasediva.com
support.caseyandcompany.net
people.libertyone.com.br
support.thedatabasediva.com
rh.curante.net
helpdesk.tricomvoice.com
support.myboxx.app
apexsupport.sdsuacademy.org
support.seqlogic.com
reducio.fr
reducio.fr
asistencia.loftcompany.shop
helpdesk.tricomvoice.com
expense.rmgcreditservices.org
erp.bluepi.in
expense.gupshup.io
support.b1-solutions.com
helpdesk.tricomvoice.com
people.tindosolar.com
helpdesk.tricomvoice.com
ayuda.gaselgallito.com
meeting.luisdevillecpa.com
support.caseyandcompany.net
soporte.biotempak.com
apexsupport.sdsuacademy.org
lilly.direct.reducio.fr
customer-service.thesmstore.com
helpdesk.ccpfresh.com
helpdesk.ccpfresh.com
helpdesk.tricomvoice.com
helpdesk.tricomvoice.com
helpdesk.tricomvoice.com
ticketing.ibml.com
talenthub.nimbusnext.com
support.myboxx.app
helpdesk.tricomvoice.com
apexsupport.sdsuacademy.org
expense.360explore.com
helpdesk.tricomvoice.com
www.reducio.fr
support.pawsatpeacecremation.com
internal.froggyslair.com
expense.360explore.com
expense.360explore.com
support.b1-solutions.com
helpdesk.tricomvoice.com
apexsupport.sdsuacademy.org
people.libertyone.com.br
expense.rmgcreditservices.org
reducio.fr
support.techconcepts.co.uk
soporte.ts911.com.mx
Certificate
The complete raw certificate details for reducio.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgISAxGD/+95Z9M/kENQHPRt6SHDMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA3MTMwMzU4MThaFw0yMzEwMTEwMzU4MTdaMBUxEzARBgNVBAMT CnJlZHVjaW8uZnIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWQOz uRF0u8UMPdH9h3Y7UF8T4tZnwMJWPUIj8EGHMEDRUHaaDgR2Pf61w85FjuAUMPk4 CXUA6Q6HQ9p1K/dCYgrYYlmPngzIH81WCtj07snVNhmbED4DOEBmqa7zr67vRpOm BVhdFwJ3Y3HwA8j0h29+JFcfNanif4hDqmd//uZ7QAWWaOA0KgL1WocvtB9NWCY2 j/ZySVlVtAOUaHSC6qQODWEbu8Vj6S7ZF7YUwWV241cPHiDU0ltvZGGBoZFoq/Nz ZFb/WGaMMzJ9rNClodxfrITnxhIQSDdHArKuZDjpDm59mvKUBMOtSrPfgThToVLa sn2mFgUsj1dSduYJAgMBAAGjggIcMIICGDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FB4xWjHgG0okArsKvUJFcTBK59AuMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCUG A1UdEQQeMByCCnJlZHVjaW8uZnKCDnd3dy5yZWR1Y2lvLmZyMBMGA1UdIAQMMAow CAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcAejKMVNi3LbYg6jjg Uh7phBZwMhOFTTvSK8E6V6NS61IAAAGJTZ1AuwAABAMASDBGAiEAiAuUFcSvsnPh /rNuzO41CjM1kMADMDrkrYvTX386weoCIQDcUngbPDeiGiwNU8HNbFvoReBuyika HIcAa+vCzO7k3gB1AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAAB iU2dQK4AAAQDAEYwRAIgNVu5LbtXSo+6ofAGC7ZGhPgVIPGDGvhUpAXhlUMgxhUC IG6774X+xgLXWmtu4YF25Tis9KkAHYq2J80PKzy436GMMA0GCSqGSIb3DQEBCwUA A4IBAQAly5JMQil4Ffy1PhuOLsBBOwPZEeAmjdxyDV+WH7hEB1eMUo2s8mKFhSeC og4A97bO9uslTPmQ2H2841koFhon7QYYpYl/N7qGujl2Pwv6oMOtL/3UjL2CdTDS WxQiigBDIGz8mGEqEQX8Wi6GdfFUyUeXgOP0iFSWvdW3m1nkgg/C4BhkWukRAFTN nCkKpXIVkLzPs1Y7xST9SObsXMrglePEHueW5QaIPXsrQEOK5nO7kIGA9xq/Q9tM V9Rf6ualGB6rDGjlFiC1bOjpj/sCBG7gjCcGkppJjgle4z+2vdSrdSlikDk/nveE RUZ1fT0e901RB/mwBUREgA7Md5HL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1kDs7kRdLvFDD3R/Yd2 O1BfE+LWZ8DCVj1CI/BBhzBA0VB2mg4Edj3+tcPORY7gFDD5OAl1AOkOh0PadSv3 QmIK2GJZj54MyB/NVgrY9O7J1TYZmxA+AzhAZqmu86+u70aTpgVYXRcCd2Nx8API 9IdvfiRXHzWp4n+IQ6pnf/7me0AFlmjgNCoC9VqHL7QfTVgmNo/2cklZVbQDlGh0 guqkDg1hG7vFY+ku2Re2FMFlduNXDx4g1NJbb2RhgaGRaKvzc2RW/1hmjDMyfazQ paHcX6yE58YSEEg3RwKyrmQ46Q5ufZrylATDrUqz34E4U6FS2rJ9phYFLI9XUnbm CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 267297115793198079455649764212481756570051 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 03:58:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 03:58:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reducio.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24660364135128529157106392021565290072351952992837564429973683780724513957759383431717686382927651451075259765368341964697694552233301847160563524174895718179292232147364045643900402757980135898849011514773310358404045307387044685169397139458921615860328997106664127872565747052958232647705853952095913582774299923393956909303120747628258959239636615532659693231848262387446038652078104424580437396419222080992972625332830201166882741132167284228442332922126522350442971901779665273146978465503223211829106964139341443047248192042311685770492377716459518395562327829930275486257661204608375709679512063047922276034057 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1e315a31e01b4a2402bb0abd424571304ae7d02e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reducio.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reducio.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001894d9d40bb0000040300483046022100880b9415c4afb273e1feb36eccee350a333590c003303ae4ad8bd35f7f3ac1ea022100dc52781b3c37a21a2c0d53c1cd6c5be845e06eca291a1c87006bebc2cceee4de007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001894d9d40ae00000403004630440220355bb92dbb574a8fbaa1f0060bb64684f81520f1831af854a405e1954320c61502206ebbef85fec602d75a6b6ee18176e538acf4a9001d8ab627cd0f2b3cb8dfa18c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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