bybane.com
Issued by R3
About this certificate
This digital certificate with serial number 04:c5:9e:25:56:04:c4:47:17:aa:3b:5a:ad:7e:78:0e:d6:fb was issued on by Let's Encrypt.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bybane.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c5:9e:25:56:04:c4:47:17:aa:3b:5a:ad:7e:78:0e:d6:fbSerial Number (int): 415694981893448529956834995420144006518523
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: b1:c7:2c:e0:35:93:1f:94:b4:2d:12:17:0d:87:52:69:e6:f0:04:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 61:0c:4b:86:1c:bf:5d:ba:c2:2c:c6:8a:07:d5:a6:6b:b3:ba:bc:07
Fingerprint (sha256): 08:45:89:95:a5:e3:a5:eb:b3:0b:b5:d6:0b:35:40:99:17:60:8f:8b:a5:70:6f:ae:47:ac:7e:e6:0e:a8:52:aa
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate bybane.com
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bybane.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bccredito.com
buitinetechnika.com
bybane.com
collisiondamage.com
multilaser.com
newportclubs.org
newyorknude.com
telefoninionline.com
understanding.vc
www.bccredito.com
www.buitinetechnika.com
www.bybane.com
www.collisiondamage.com
www.multilaser.com
www.newportclubs.org
www.newyorknude.com
www.telefoninionline.com
www.understanding.vc
www.xn--5dbebc3b.com
xn--5dbebc3b.com
buitinetechnika.com
bybane.com
collisiondamage.com
multilaser.com
newportclubs.org
newyorknude.com
telefoninionline.com
understanding.vc
www.bccredito.com
www.buitinetechnika.com
www.bybane.com
www.collisiondamage.com
www.multilaser.com
www.newportclubs.org
www.newyorknude.com
www.telefoninionline.com
www.understanding.vc
www.xn--5dbebc3b.com
xn--5dbebc3b.com
Other certificates including the domain name bybane.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for bybane.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGoTCCBYmgAwIBAgISBMWeJVYExEcXqjtarX54Dtb7MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjAyMjgyMTA0MTRaFw0yMjA1MjkyMTA0MTNaMBUxEzARBgNVBAMT CmJ5YmFuZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJ7ne /s1gZcYV3qVzeYH0tuacowCpvOBUbufqTMJeABESCOIvDazs49w0Vs/7pHPgy7TG mcDb+EMpDrta1pG/NONeCIZlAA9+IpVVcSOSj4Qg3kMo1sKtZ26SzvZ0rXmXkuqk 2UXlG79Z4BLzGluRGw7VOH3gL3kRkZKZNvNjvhx5ar9Hud89EMyiOZBZIs3iEqKC m5OkP6jUTY05mt8JXdUPNxf58JPicxWgAydQqGvHspUV+pTF7voIxCj3XjtZ4TC2 ODcehZ0KAXkydGJsFjDOzAWVRM7PqmxKr3S4BQs2ziu1mzUiOWzqGW1Fj8rjj9FK Y5dhEysGsvOqRqYnAgMBAAGjggPMMIIDyDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FLHHLOA1kx+UtC0SFw2HUmnm8AR7MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIB mQYDVR0RBIIBkDCCAYyCDWJjY3JlZGl0by5jb22CE2J1aXRpbmV0ZWNobmlrYS5j b22CCmJ5YmFuZS5jb22CE2NvbGxpc2lvbmRhbWFnZS5jb22CDm11bHRpbGFzZXIu Y29tghBuZXdwb3J0Y2x1YnMub3Jngg9uZXd5b3JrbnVkZS5jb22CFHRlbGVmb25p bmlvbmxpbmUuY29tghB1bmRlcnN0YW5kaW5nLnZjghF3d3cuYmNjcmVkaXRvLmNv bYIXd3d3LmJ1aXRpbmV0ZWNobmlrYS5jb22CDnd3dy5ieWJhbmUuY29tghd3d3cu Y29sbGlzaW9uZGFtYWdlLmNvbYISd3d3Lm11bHRpbGFzZXIuY29tghR3d3cubmV3 cG9ydGNsdWJzLm9yZ4ITd3d3Lm5ld3lvcmtudWRlLmNvbYIYd3d3LnRlbGVmb25p bmlvbmxpbmUuY29tghR3d3cudW5kZXJzdGFuZGluZy52Y4IUd3d3LnhuLS01ZGJl YmMzYi5jb22CEHhuLS01ZGJlYmMzYi5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEw NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j cnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBGpVXrdfqRIDC1oolp 9PN9ESxBdL79SbiFq/L8cP5tRwAAAX9CXNbuAAAEAwBIMEYCIQD5DoexscuHwjgs YQ+rElIDIuqKsSYmpAbimTKlyBCpzwIhAIzFC0oJgbe2avqTEoZrgW5jMEdg9IZK EKbPU9MPinFeAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAF/ QlzYlwAABAMARzBFAiEAs2rjoRnECJ3JPjLlnMfyQy1XtaocqcxwH+WsVI/j4pYC IBsY9dVZoIm3t8eWP1a162dUVt/8IYBe5MqeYbNgphcZMA0GCSqGSIb3DQEBCwUA A4IBAQCvaS7duqxqcZT5OxdpaM1XQ/U/d/qUonZZTq8vfVsfEdPVGBf6U7dQsphs 4G1/2bVdqbHx5jcw0GLVRTHWVycKwX7XGMigmCpZrZUpfnICd6us4PBmNcAifD8A 5dHJg7hbX1hNIDTFmwBgLWnkKY+gb4DIQIKKMdK1KBrvRX6AwPP0hDNKmKIztZ05 c5QGOUDjAgJQvt3nXMGbURB18K+XUZeV71vFkkxuygEbLos564uDwIGl/UG5O/1v /pnIrDrarfNE81L/xLaZumv9+A51GARYWKK12/ircfzvbGqsltDGG6kNJAff5FRM qlEr510zxbu71aos2Gewm6DwteqV -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwie53v7NYGXGFd6lc3mB 9LbmnKMAqbzgVG7n6kzCXgAREgjiLw2s7OPcNFbP+6Rz4Mu0xpnA2/hDKQ67WtaR vzTjXgiGZQAPfiKVVXEjko+EIN5DKNbCrWduks72dK15l5LqpNlF5Ru/WeAS8xpb kRsO1Th94C95EZGSmTbzY74ceWq/R7nfPRDMojmQWSLN4hKigpuTpD+o1E2NOZrf CV3VDzcX+fCT4nMVoAMnUKhrx7KVFfqUxe76CMQo9147WeEwtjg3HoWdCgF5MnRi bBYwzswFlUTOz6psSq90uAULNs4rtZs1Ijls6hltRY/K44/RSmOXYRMrBrLzqkam JwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 415694981893448529956834995420144006518523 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-28 21:04:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-29 21:04:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bybane.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24509820813169571366096470467807483503090835869474072590633318438850493898577764543566515773287571261464075260194540782236113550674692230228539990637785392995229246742388861603545228958717865558222324333961966998427345091892968320212563253402208785682238141715999142940782549406474104359159674863160705765447635097846917432200869530587958856121544149974079838622919513397122397622956691003001146331874935739095879321213520930326976164292879723714681704648768118802080678994652469321537987264838532855954721017109228792517590742487580616779633428900122759205965054044632114655303981897890415234234101540413295255004711 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b1c72ce035931f94b42d12170d875269e6f0047b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (400 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bccredito.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buitinetechnika.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bybane.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collisiondamage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multilaser.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newportclubs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorknude.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telefoninionline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'understanding.vc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bccredito.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buitinetechnika.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bybane.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collisiondamage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.multilaser.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newportclubs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newyorknude.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telefoninionline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.understanding.vc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--5dbebc3b.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--5dbebc3b.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017f425cd6ee0000040300483046022100f90e87b1b1cb87c2382c610fab12520322ea8ab12626a406e29932a5c810a9cf0221008cc50b4a0981b7b66afa9312866b816e63304760f4864a10a6cf53d30f8a715e0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017f425cd8970000040300473045022100b36ae3a119c4089dc93e32e59cc7f2432d57b5aa1ca9cc701fe5ac548fe3e29602201b18f5d559a089b7b7c7963f56b5eb675456dffc21805ee4ca9e61b360a61719 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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