stories.bc.edu
Issued by R3
About this certificate
This digital certificate with serial number 04:46:63:31:0f:37:2b:24:e1:41:84:b1:1c:72:68:c3:58:3a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=stories.bc.edu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:46:63:31:0f:37:2b:24:e1:41:84:b1:1c:72:68:c3:58:3aSerial Number (int): 372400757714242499340455572780324338489402
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: b1:52:b4:7e:2e:41:fd:97:9f:1d:bf:22:d1:69:09:d5:6e:2c:50:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 0c:d7:dd:84:1e:90:cb:86:e3:87:8b:eb:73:ee:07:e3:69:58:3c:07
Fingerprint (sha256): 08:14:d0:ce:a2:77:af:77:a5:36:a3:24:68:e6:97:c5:1e:39:e7:7f:5f:20:26:64:79:16:21:a0:a2:f9:e8:2f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate stories.bc.edu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stories.bc.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
stories.bc.edu
Other certificates including the domain name bc.edu
(limited to 100 certificates)
pops.bc.edu
sfunder1cert.net
sparkreportsstg.bc.edu
login.bc.edu
www2.bc.edu
cdil.bc.edu
bcservices.bc.edu
naturalenvironment.library.domain.bc.edu
uconnectlabs.com
myreports.bc.edu
services.bc.edu
capricorn.bc.edu
dev.domain.bc.edu
uconnectlabs.com
raven.bc.edu
hunnicutt2.bc.edu
events.bc.edu
arc.bc.edu
ginko.bc.edu
sfunder19cert.net
webtech.domain.bc.edu
click.alumni.bc.edu
newspapers.bc.edu
lira.bc.edu
uconnectlabs.com
cluster.technolutions.net
mail.bc.edu
about-mdev.jstor.org
uconnectlabs.com
irm.bc.edu
domain.bc.edu
web.offcampuspartners.com
uconnectlabs.com
reslife.bc.edu
imi.bc.edu
itservice.bc.edu
dauntless.bc.edu
library.domain.bc.edu
n001.offcampuspartners.com
escholarship.bc.edu
dibpmdev.bc.edu
2101commonwealth.bc.edu
bclsco.bc.edu
ejournals.bc.edu
elvis.bc.edu
lawdigitalcommons.bc.edu
uconnectlabs.com
cluster.technolutions.net
bcgradwoods.bc.edu
mba.bc.edu
infowanted.bc.edu
bclawnet.bc.edu
gambon.bc.edu
lawdigitalcommons.bc.edu
agora.bc.edu
test.cte.domain.bc.edu
stories.bc.edu
tourcms.bc.edu
api.bc.edu
impactreport.bc.edu
wfcawp.bc.edu
pilotvpn.bc.edu
conference.bc.edu
answers.bc.edu
sfunder1cert.net
raven.bc.edu
bcmba.bc.edu
publicplans.crr.bc.edu
on.bc.edu
uconnectlabs.com
sfunder19cert.net
cds1.cvent.com
sonndosa.domain.bc.edu
portalsignon.bc.edu
newspapers.bc.edu
dlib.bc.edu
cluster.technolutions.net
ccc.bc.edu
bettyadmin.bc.edu
sfunder1cert.net
cluster.technolutions.net
admission.bc.edu
elvis.bc.edu
jennybaglivo.bc.edu
uconnectlabs.com
cte.bc.edu
cluster.technolutions.net
testpsnam.bc.edu
jesuitsources.bc.edu
ccc.bc.edu
phoebe.bc.edu
uconnectlabs.com
vespa.domain.bc.edu
cluster.technolutions.net
scenery.bc.edu
lawguides.bc.edu
jesuitonlinelibrary.bc.edu
web.offcampuspartners.com
ganister.bc.edu
idesweb.bc.edu
sfunder1cert.net
sparkreportsstg.bc.edu
login.bc.edu
www2.bc.edu
cdil.bc.edu
bcservices.bc.edu
naturalenvironment.library.domain.bc.edu
uconnectlabs.com
myreports.bc.edu
services.bc.edu
capricorn.bc.edu
dev.domain.bc.edu
uconnectlabs.com
raven.bc.edu
hunnicutt2.bc.edu
events.bc.edu
arc.bc.edu
ginko.bc.edu
sfunder19cert.net
webtech.domain.bc.edu
click.alumni.bc.edu
newspapers.bc.edu
lira.bc.edu
uconnectlabs.com
cluster.technolutions.net
mail.bc.edu
about-mdev.jstor.org
uconnectlabs.com
irm.bc.edu
domain.bc.edu
web.offcampuspartners.com
uconnectlabs.com
reslife.bc.edu
imi.bc.edu
itservice.bc.edu
dauntless.bc.edu
library.domain.bc.edu
n001.offcampuspartners.com
escholarship.bc.edu
dibpmdev.bc.edu
2101commonwealth.bc.edu
bclsco.bc.edu
ejournals.bc.edu
elvis.bc.edu
lawdigitalcommons.bc.edu
uconnectlabs.com
cluster.technolutions.net
bcgradwoods.bc.edu
mba.bc.edu
infowanted.bc.edu
bclawnet.bc.edu
gambon.bc.edu
lawdigitalcommons.bc.edu
agora.bc.edu
test.cte.domain.bc.edu
stories.bc.edu
tourcms.bc.edu
api.bc.edu
impactreport.bc.edu
wfcawp.bc.edu
pilotvpn.bc.edu
conference.bc.edu
answers.bc.edu
sfunder1cert.net
raven.bc.edu
bcmba.bc.edu
publicplans.crr.bc.edu
on.bc.edu
uconnectlabs.com
sfunder19cert.net
cds1.cvent.com
sonndosa.domain.bc.edu
portalsignon.bc.edu
newspapers.bc.edu
dlib.bc.edu
cluster.technolutions.net
ccc.bc.edu
bettyadmin.bc.edu
sfunder1cert.net
cluster.technolutions.net
admission.bc.edu
elvis.bc.edu
jennybaglivo.bc.edu
uconnectlabs.com
cte.bc.edu
cluster.technolutions.net
testpsnam.bc.edu
jesuitsources.bc.edu
ccc.bc.edu
phoebe.bc.edu
uconnectlabs.com
vespa.domain.bc.edu
cluster.technolutions.net
scenery.bc.edu
lawguides.bc.edu
jesuitonlinelibrary.bc.edu
web.offcampuspartners.com
ganister.bc.edu
idesweb.bc.edu
Certificate
The complete raw certificate details for stories.bc.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgISBEZjMQ83KyThQYSxHHJow1g6MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMDkxNDI1NDRaFw0yNDA2MDcxNDI1NDNaMBkxFzAVBgNVBAMT DnN0b3JpZXMuYmMuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA v4f0T8jvW67gUKAbUahWNc1bpqUGtAo59vo+5Tgd/+8TgzQCUkq1QRkzrEDs4YSb h9obIOyKWmu9A6jYr77zErZsKQItk6fhq8i2EA0kSbtNtjQsPCupuLJsRPr5K6Hp +Ypb62R76kKLC4fQAEe4V9iaQNWsjsi6m+IxoZGjCxivQ3lszTo7eiFCUyi9KpFv qBg9n5sS8bik53GSQavZ4DwPs2ezd29f2lIGfx3bMKbv5aV7zbyHe0WuT1r+WBn9 AVinpGWmzUHvNgAJERlenAko+UxHYb44n1n7KuamRkTWmBcEF+18SrisTFNyDVkN 90L8iNmm9XwBCcsDst1WvQIDAQABo4ICEDCCAgwwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBSxUrR+LkH9l58dvyLRaQnVbixQ1DAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzAZBgNVHREEEjAQgg5zdG9yaWVzLmJjLmVkdTATBgNVHSAEDDAKMAgGBmeBDAEC ATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1ADtTd3U+LbmAToswWwb+QDtn2E/D 9Me9AA0tcm/h+tQXAAABjiPR8WoAAAQDAEYwRAIgVUqle/NdKAnL0Z1VGpvNMCd3 2RnMz6TSFJuSxZrDf2cCIF/oNqj2n2T+vtK45J6g0F8K4gOk6g4OvdmRSCwDyzHj AHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGOI9HxcAAABAMA SDBGAiEAvpGEkZyaCkEGYIiBfgxoHf4Nnsx5HX51uVehyX1040UCIQD4hOOLNvE3 vHB/Rp4VfvSfsximxDWUucZvkB1y8CMvsjANBgkqhkiG9w0BAQsFAAOCAQEAl/ze dY7/KmOTmFuNoCNLQipdQmDQK+mUNlvkiNQ/hay60DstER6awZtqkDL/MH02gdGS eC3ELsj61ju1+fjYTK1Bn49pEGkzmn2q63VeyNs/0JXamyKHsurgtjLEr6/e0R5R kSSyLJUVOdz22sOvenywwJhGMmK7g/bPLRbaAsLiY1N/ohXlhkT7GKnCkmRR+dYA qBTULTj+49DambJCzr/alyg4Z1E/hv/tPCs17CKEo3/VjGBlAzVijRE/+Uc9YEDj W1XiYjH0nFmou99yVTtpIRzx+Dnd4ktJ3TZzqhieRh0Y5JsL3jwKgFaTrkzrstqx U48ZyE4n+QMWUejcIg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4f0T8jvW67gUKAbUahW Nc1bpqUGtAo59vo+5Tgd/+8TgzQCUkq1QRkzrEDs4YSbh9obIOyKWmu9A6jYr77z ErZsKQItk6fhq8i2EA0kSbtNtjQsPCupuLJsRPr5K6Hp+Ypb62R76kKLC4fQAEe4 V9iaQNWsjsi6m+IxoZGjCxivQ3lszTo7eiFCUyi9KpFvqBg9n5sS8bik53GSQavZ 4DwPs2ezd29f2lIGfx3bMKbv5aV7zbyHe0WuT1r+WBn9AVinpGWmzUHvNgAJERle nAko+UxHYb44n1n7KuamRkTWmBcEF+18SrisTFNyDVkN90L8iNmm9XwBCcsDst1W vQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 372400757714242499340455572780324338489402 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 14:25:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 14:25:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stories.bc.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24178557833439077722376652753377336358440433786041241420005719465745105487352069634657248208765588515943358219049982094502108135514559558352993135404411604143351801097289683112805062756957349510868062105856958301182048821672782158330164775826627496128999802913839595653025779397622640652149929650366426835527506677011675271610423942867292105532584391638896062247902516333175788713416302152107935451405414911291120903743914106801190851238629903044212628812538359460780023802953659818698452452952580373232098024162108164413536200363442645764407154149217561222978050527634995015458848070298144408797967379765795992983229 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b152b47e2e41fd979f1dbf22d16909d56e2c50d4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stories.bc.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e23d1f16a00000403004630440220554aa57bf35d2809cbd19d551a9bcd302777d919cccfa4d2149b92c59ac37f6702205fe836a8f69f64febed2b8e49ea0d05f0ae203a4ea0e0ebdd991482c03cb31e3007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e23d1f1700000040300483046022100be9184919c9a0a41066088817e0c681dfe0d9ecc791d7e75b957a1c97d74e345022100f884e38b36f137bc707f469e157ef49fb318a6c43594b9c66f901d72f0232fb2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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