personskadeforbundet.no
Issued by R3
About this certificate
This digital certificate with serial number 03:72:aa:f7:35:0e:75:cb:82:2b:89:db:8a:6b:6a:6d:94:4b was issued on by Let's Encrypt.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=personskadeforbundet.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:72:aa:f7:35:0e:75:cb:82:2b:89:db:8a:6b:6a:6d:94:4bSerial Number (int): 300356299956988577617053796779758172607563
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 37:fe:15:d7:b1:d7:f3:16:7d:2d:f6:66:bb:22:36:86:33:8b:02:4e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 58:30:a9:ce:45:79:b1:1a:f2:80:07:86:2d:5c:7d:4e:c6:b5:3e:00
Fingerprint (sha256): 07:74:5e:87:eb:a6:1a:1b:82:6d:ee:65:9b:c5:a0:49:d9:ea:b7:b6:26:72:ea:d9:93:8d:94:0a:66:c1:ff:90
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate personskadeforbundet.no
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for personskadeforbundet.no
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
design.tristargroup.nl
eressea.de
geoteknikk.no
jobs.tristargroup.nl
layback.no
newfaction.com
personskadeforbundet.no
santarosalia-resort.no
support.tristargroup.nl
tristargroup.nl
uk.angelsandairwaves.com
wiki.eressea.de
www-staging.signicat.com
www.eressea.de
www.geoteknikk.no
www.layback.no
www.newfaction.com
www.personskadeforbundet.no
www.santarosalia-resort.no
www.tristargroup.nl
eressea.de
geoteknikk.no
jobs.tristargroup.nl
layback.no
newfaction.com
personskadeforbundet.no
santarosalia-resort.no
support.tristargroup.nl
tristargroup.nl
uk.angelsandairwaves.com
wiki.eressea.de
www-staging.signicat.com
www.eressea.de
www.geoteknikk.no
www.layback.no
www.newfaction.com
www.personskadeforbundet.no
www.santarosalia-resort.no
www.tristargroup.nl
Other certificates including the domain name personskadeforbundet.no
(limited to 100 certificates)
personskadeforbundet.no
meshbox.no
personskadeforbundet.no
personskadeforbundet.no
www.nijkleaster.frl
personskadeforbundet.no
www.personskadeforbundet.no
www.vertiseit.se
tristargroup.fr
tristargroup.uk
tristargroup.uk
tristargroup.uk
personskadeforbundet.no
tristargroep.nl
design.tristargroup.nl
www.personskadeforbundet.no
tristargroup.fr
personskadeforbundet.no
personskadeforbundet.no
blog.futtta.be
www.nijkleaster.frl
www.personskadeforbundet.no
personskadeforbundet.no
personskadeforbundet.no
personskadeforbundet.no
meshbox.no
personskadeforbundet.no
personskadeforbundet.no
www.nijkleaster.frl
personskadeforbundet.no
www.personskadeforbundet.no
www.vertiseit.se
tristargroup.fr
tristargroup.uk
tristargroup.uk
tristargroup.uk
personskadeforbundet.no
tristargroep.nl
design.tristargroup.nl
www.personskadeforbundet.no
tristargroup.fr
personskadeforbundet.no
personskadeforbundet.no
blog.futtta.be
www.nijkleaster.frl
www.personskadeforbundet.no
personskadeforbundet.no
personskadeforbundet.no
personskadeforbundet.no
Certificate
The complete raw certificate details for personskadeforbundet.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgISA3Kq9zUOdcuCK4nbimtqbZRLMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA0MTQyMjQzMjRaFw0yMjA3MTMyMjQzMjNaMCIxIDAeBgNVBAMT F3BlcnNvbnNrYWRlZm9yYnVuZGV0Lm5vMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcD QgAEv703cKlEQGOnX2tLKH0JOXaoPgZwEKcjD1gV6cL3wEjU4UuwyHZ6hLYTfS++ 7sOUf0xeXfBPrmBfSrww6wsvtqOCA9owggPWMA4GA1UdDwEB/wQEAwIHgDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUN/4V17HX8xZ9LfZmuyI2hjOLAk4wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w ggGnBgNVHREEggGeMIIBmoIWZGVzaWduLnRyaXN0YXJncm91cC5ubIIKZXJlc3Nl YS5kZYINZ2VvdGVrbmlray5ub4IUam9icy50cmlzdGFyZ3JvdXAubmyCCmxheWJh Y2subm+CDm5ld2ZhY3Rpb24uY29tghdwZXJzb25za2FkZWZvcmJ1bmRldC5ub4IW c2FudGFyb3NhbGlhLXJlc29ydC5ub4IXc3VwcG9ydC50cmlzdGFyZ3JvdXAubmyC D3RyaXN0YXJncm91cC5ubIIYdWsuYW5nZWxzYW5kYWlyd2F2ZXMuY29tgg93aWtp LmVyZXNzZWEuZGWCGHd3dy1zdGFnaW5nLnNpZ25pY2F0LmNvbYIOd3d3LmVyZXNz ZWEuZGWCEXd3dy5nZW90ZWtuaWtrLm5vgg53d3cubGF5YmFjay5ub4ISd3d3Lm5l d2ZhY3Rpb24uY29tght3d3cucGVyc29uc2thZGVmb3JidW5kZXQubm+CGnd3dy5z YW50YXJvc2FsaWEtcmVzb3J0Lm5vghN3d3cudHJpc3Rhcmdyb3VwLm5sMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx AHcA36Veq2iCTx9sre64X04+WurNohKkal6OOxLAIERcKnMAAAGAKnXNIgAABAMA SDBGAiEA20QwA0pcWfaj47zzNpcPmMNLQS0Gphz0dTaBpdHu+eMCIQD+fzE/EWej IzKvDFUm9F0UDisWI5tvWm+DJDqckOpG2AB2ACl5vvCeOTkh8FZzn2Old+W+V32c YAr4+U1dJlwlXceEAAABgCp1zS8AAAQDAEcwRQIgMxqCJpcCR9Opwin18sfJdTFs OWPawxgdrOG9dcGe7pUCIQCzIQkvFsQoR1D3LA6YzkJSBkTQaWsRgNZn5cGEzC64 KjANBgkqhkiG9w0BAQsFAAOCAQEAgPRTvOLU/9+1DXxb+xOYjDyZ4Qt54cC3I2p6 wGZvDeLKOjYtykUlWrAIqcvvti0AQ3za7KQf9LCtAoEZWqjepkbaoj+pBVBtuL/7 BAE09WKjm8QC/IyQOO+HCTtDknYMsKSCXwl4wZL+sUa4LKyGMgtZtQ0Xm9K6Rs31 Wa1TKKUKsb0NVkwiRkz3srsqzIUNmnbunvECxFmZMs9sajXRw/DDRbOSrbwAed4u j3v0O1FkNePrvpqEMF0wwiwpzRsnkqLYK2qdFYKGHEIRooq6d80bYQmymgcAeylM giGOKUXSzEyWbn6wcVeKm3G8pWEo65opE7+gHi0IWCRMlYOIHA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEv703cKlEQGOnX2tLKH0JOXaoPgZw EKcjD1gV6cL3wEjU4UuwyHZ6hLYTfS++7sOUf0xeXfBPrmBfSrww6wsvtg== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 300356299956988577617053796779758172607563 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-14 22:43:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-13 22:43:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'personskadeforbundet.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004bfbd3770a9444063a75f6b4b287d093976a83e067010a7230f5815e9c2f7c048d4e14bb0c8767a84b6137d2fbeeec3947f4c5e5df04fae605f4abc30eb0b2fb6 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 37fe15d7b1d7f3167d2df666bb223686338b024e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (414 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design.tristargroup.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eressea.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoteknikk.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.tristargroup.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'layback.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newfaction.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personskadeforbundet.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santarosalia-resort.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tristargroup.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tristargroup.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.angelsandairwaves.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.eressea.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-staging.signicat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eressea.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geoteknikk.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.layback.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newfaction.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.personskadeforbundet.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santarosalia-resort.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tristargroup.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001802a75cd220000040300483046022100db4430034a5c59f6a3e3bcf336970f98c34b412d06a61cf4753681a5d1eef9e3022100fe7f313f1167a32332af0c5526f45d140e2b16239b6f5a6f83243a9c90ea46d80076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001802a75cd2f00000403004730450220331a8226970247d3a9c229f5f2c7c975316c3963dac3181dace1bd75c19eee95022100b321092f16c4284750f72c0e98ce42520644d0696b1180d667e5c184cc2eb82a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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