*.springernature.com
Issued by R3
About this certificate
This digital certificate with serial number 03:4e:62:37:39:d8:f7:53:27:90:8c:5b:96:9b:34:2e:d8:80 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.springernature.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:4e:62:37:39:d8:f7:53:27:90:8c:5b:96:9b:34:2e:d8:80Serial Number (int): 288009433508315255097413009309388694804608
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2a:f3:0d:6a:2c:db:5e:79:17:5b:18:a1:96:e5:5b:9c:b5:1e:02:91
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 92:d8:12:39:c4:8e:be:29:9e:24:c0:54:9d:ea:aa:10:e7:2e:0d:f8
Fingerprint (sha256): 0a:a7:25:60:6e:9e:e7:ed:ee:11:d5:dd:60:c3:48:c8:5f:6d:8f:80:f1:9a:9d:4c:14:b5:a0:9e:84:46:88:ff
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.springernature.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.springernature.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.springernature.com
Other certificates including the domain name springernature.com
(limited to 100 certificates)
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
www.highq.com
auth.springernature.com
springer2.map.fastly.net
*.springernature.com
springer3.map.fastly.net
springer2.map.fastly.net
more-media.springernature.com
sn-prod-simac-alarm-01.springernature.com
support.khipu-networks.com
idtest.springernature.com
vanity4.jiveon.com
springer2.map.fastly.net
*.springer.com
authorservices.springernature.com
vpn-africa.springernature.com
adportal.springernature.com
sustainabilitycommunity.springernature.com
dns-vetting1i.map.fastly.net
uim.springernature.com
protocolsmethods.springernature.com
liferay-dev.springernature.com
scim-1password.springernature.com
uxresearch.springernature.com
vanity4.jiveon.com
bflux-stage-es-02.springernature.com
mee-uat.springernature.com
springer2.map.fastly.net
*.springernature.com
communities.springernature.com
shopify-qa.springernature.com
springer2.map.fastly.net
images.passendo.com
*.chef.tools.cm.springernature.com
springer2.map.fastly.net
dev.springernature.com
springer2.map.fastly.net
staging-scigraph.springernature.com
dns-vetting1i.map.fastly.net
vpn-aus.springernature.com
grandchallenges.springernature.com
springer2.map.fastly.net
vanity4.jiveon.com
vpn-gcp.springernature.com
authorservices.springernature.com
support.khipu-networks.com
support.springernature.com
secureimap.springernature.com
*.springer.com
springer2.map.fastly.net
springer2.map.fastly.net
authorservices.springernature.com
vpn-ro.springernature.com
springer2.map.fastly.net
*.jiveon.com
staging.moody.springernature.com
authorservices.springernature.com
integration-sn-insights.springernature.com
images.passendo.com
springernature.com
www.highq.com
dns-vetting1i.map.fastly.net
dns-vetting1i.map.fastly.net
www.highq.com
vpn-ro.springernature.com
dns-vetting1i.map.fastly.net
trust.springernature.com
images.passendo.com
dns-vetting1i.map.fastly.net
springer3.map.fastly.net
springer2.map.fastly.net
api.more-media.springernature.com
www.highq.com
securesmtp.springernature.com
nature-ww.springernature.com
*.springer.com
protocolsmethods.springernature.com
vpn.springernature.com
vpn.springernature.com
springer2.map.fastly.net
authorservices.springernature.com
springer2.map.fastly.net
images.passendo.com
*.springer.com
springer2.map.fastly.net
www.highq.com
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
hub.springernature.com
springer2.map.fastly.net
researchdata.springernature.com
dns-vetting1i.map.fastly.net
delivery.staging-cms.springernature.com
dev.springernature.com
dns-vetting1i.map.fastly.net
springer3.map.fastly.net
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
springer2.map.fastly.net
springer2.map.fastly.net
www.highq.com
auth.springernature.com
springer2.map.fastly.net
*.springernature.com
springer3.map.fastly.net
springer2.map.fastly.net
more-media.springernature.com
sn-prod-simac-alarm-01.springernature.com
support.khipu-networks.com
idtest.springernature.com
vanity4.jiveon.com
springer2.map.fastly.net
*.springer.com
authorservices.springernature.com
vpn-africa.springernature.com
adportal.springernature.com
sustainabilitycommunity.springernature.com
dns-vetting1i.map.fastly.net
uim.springernature.com
protocolsmethods.springernature.com
liferay-dev.springernature.com
scim-1password.springernature.com
uxresearch.springernature.com
vanity4.jiveon.com
bflux-stage-es-02.springernature.com
mee-uat.springernature.com
springer2.map.fastly.net
*.springernature.com
communities.springernature.com
shopify-qa.springernature.com
springer2.map.fastly.net
images.passendo.com
*.chef.tools.cm.springernature.com
springer2.map.fastly.net
dev.springernature.com
springer2.map.fastly.net
staging-scigraph.springernature.com
dns-vetting1i.map.fastly.net
vpn-aus.springernature.com
grandchallenges.springernature.com
springer2.map.fastly.net
vanity4.jiveon.com
vpn-gcp.springernature.com
authorservices.springernature.com
support.khipu-networks.com
support.springernature.com
secureimap.springernature.com
*.springer.com
springer2.map.fastly.net
springer2.map.fastly.net
authorservices.springernature.com
vpn-ro.springernature.com
springer2.map.fastly.net
*.jiveon.com
staging.moody.springernature.com
authorservices.springernature.com
integration-sn-insights.springernature.com
images.passendo.com
springernature.com
www.highq.com
dns-vetting1i.map.fastly.net
dns-vetting1i.map.fastly.net
www.highq.com
vpn-ro.springernature.com
dns-vetting1i.map.fastly.net
trust.springernature.com
images.passendo.com
dns-vetting1i.map.fastly.net
springer3.map.fastly.net
springer2.map.fastly.net
api.more-media.springernature.com
www.highq.com
securesmtp.springernature.com
nature-ww.springernature.com
*.springer.com
protocolsmethods.springernature.com
vpn.springernature.com
vpn.springernature.com
springer2.map.fastly.net
authorservices.springernature.com
springer2.map.fastly.net
images.passendo.com
*.springer.com
springer2.map.fastly.net
www.highq.com
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
hub.springernature.com
springer2.map.fastly.net
researchdata.springernature.com
dns-vetting1i.map.fastly.net
delivery.staging-cms.springernature.com
dev.springernature.com
dns-vetting1i.map.fastly.net
springer3.map.fastly.net
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
springer2.map.fastly.net
Certificate
The complete raw certificate details for *.springernature.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgISA05iNznY91MnkIxblps0LtiAMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MTcxMjM2MzBaFw0yNDA4MTUxMjM2MjlaMB8xHTAbBgNVBAMM FCouc3ByaW5nZXJuYXR1cmUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAyzavqOIboOJndf5d/c/WOoShGNpxAqYCBr6s9itAnKUjbLq7D281IHcH NYhZTOEMkgSiTjN9OWRgr3WA7NzAlsHzHG0VpnNoCXojMfEwb7PAIVo8/yyPRK0v oQWivR+dZ+jZoRbEaDvsd9yQYKwzCFt5ZypBNpcQkwIjamgOI9V3uyvFnnu2tyxe jj2LvMC1Kj6cTkHMJAhc0L2y/YZXBLv/hAw1fPnd8LfoFHME00/87Rm5K3Ge9kqk s5P1gAxdSN3Y3QUFcKKBCCRnABas9KQrkGS6EYdqOGu3GRZ1EGLbCsqWnorWPR9C 5VZ5PRdH/JxEIeMJlikdAFbZHaMnswIDAQABo4ICFjCCAhIwDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBQq8w1qLNteeRdbGKGW5VuctR4CkTAfBgNVHSMEGDAWgBQULrMX t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0 dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu Y3Iub3JnLzAfBgNVHREEGDAWghQqLnNwcmluZ2VybmF0dXJlLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AD8XS0/XIkdY lB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABj4bEu0gAAAQDAEcwRQIgQTYYTzve db2hlStAjHcB5xnzlZjyXqAfts3NzUJ7T1QCIQC6u1QqmKwgASPJ1MLe4FYIslji 2bairqYKS52w2YxMUQB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0 AAABj4bEu5QAAAQDAEcwRQIhAILHdHTUkpiV/52UYMy/YySPtKNM60QFUt51rlMb LGohAiAuho70VL3udVM2BYFtBIMkoWn5XuZ3xadYJ8qc2UiGzDANBgkqhkiG9w0B AQsFAAOCAQEAOVevJq9KAv6cJej5x/XQIBg/TUIZ3+ODxpatt+Wyze1f8i/E/7YH DLVIqVm16JMuIGLWPjtBYfHKTeKaw6iWYNhg2nUTtpuIph/qbHoRfg01yPvcbqLH AKtH3NTU20AqDn/OH9uHBxXGqXApnqv9MCIC3VJ8Gh/ATElROD92mtwBywciIZgT WIDTeziR/JXHJMMoB3oOfvSGTpqvU1hSePfyu7fVXiaTygNjWQkYSC4jiPou9dRE bcnckjSLOhOiAodIp+iF0XaAUd8vZRqYrkSKS5J1ftvKrAOiiJPRSsUkn+mnBB/P kU5Xzyc22NHniT0HrB/YTI+oI+jLKzbBhA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzavqOIboOJndf5d/c/W OoShGNpxAqYCBr6s9itAnKUjbLq7D281IHcHNYhZTOEMkgSiTjN9OWRgr3WA7NzA lsHzHG0VpnNoCXojMfEwb7PAIVo8/yyPRK0voQWivR+dZ+jZoRbEaDvsd9yQYKwz CFt5ZypBNpcQkwIjamgOI9V3uyvFnnu2tyxejj2LvMC1Kj6cTkHMJAhc0L2y/YZX BLv/hAw1fPnd8LfoFHME00/87Rm5K3Ge9kqks5P1gAxdSN3Y3QUFcKKBCCRnABas 9KQrkGS6EYdqOGu3GRZ1EGLbCsqWnorWPR9C5VZ5PRdH/JxEIeMJlikdAFbZHaMn swIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 288009433508315255097413009309388694804608 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 12:36:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-15 12:36:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.springernature.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25653342663948621704758148604472981991503603950970401176743761782142963939703111868315318790406501278447434011732034020846092372361771050503363394507888485524403941358312963125707698863206697234675899453535759765557146187848495034022452302068230901337543978386788874748162657765040018070699096740052529439753267216975158430777123598266298077080293435167746565626684047539761392865118908251106969283629015402931747826233642627265897990410293794972100422575469428768568159126922469493667678318627704660187390402335585995810619912119644838668159250048322118388593431983263117144783685532167009121730950704390648639989683 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2af30d6a2cdb5e79175b18a196e55b9cb51e0291 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.springernature.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f86c4bb48000004030047304502204136184f3bde75bda1952b408c7701e719f39598f25ea01fb6cdcdcd427b4f54022100babb542a98ac200123c9d4c2dee05608b258e2d9b6a2aea60a4b9db0d98c4c5100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f86c4bb94000004030047304502210082c77474d4929895ff9d9460ccbf63248fb4a34ceb440552de75ae531b2c6a2102202e868ef454bdee75533605816d048324a169f95ee677c5a75827ca9cd94886cc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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