campaign.clio.com
Issued by R10
About this certificate
This digital certificate with serial number 03:08:17:a1:55:ca:6a:f0:6d:88:f5:5c:b4:ac:c1:89:57:dd was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=campaign.clio.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:08:17:a1:55:ca:6a:f0:6d:88:f5:5c:b4:ac:c1:89:57:ddSerial Number (int): 264090526674387526028679212688753629419485
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 83:11:99:26:2d:71:2c:f9:1f:32:d2:0e:f5:e5:0f:85:3d:ca:6c:ad
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8
Fingerprint (sha1): 4c:61:8b:38:23:74:02:76:91:65:1f:9d:bb:17:c6:c1:3e:47:8d:d6
Fingerprint (sha256): 0b:7e:5e:32:06:35:e2:49:2b:1e:73:1e:e0:8c:a8:b6:03:2c:d8:4c:3f:65:cc:09:e0:b1:14:81:62:48:61:8b
Issuing Certificate URL: http://r10.i.lencr.org/
Revocation information
OCSP Server: http://r10.o.lencr.orgCheck the revocation status for certificate campaign.clio.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for campaign.clio.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
campaign.clio.com
Other certificates including the domain name clio.com
(limited to 100 certificates)
statuspage.io
cloudmarketplace.status.symantec.com
app.sandbox.clio.systems
statuspage.io
statuspage.io
billing.clio.services
statuspage.io
cloudstatus.protel.net
staging.accounting.clio.com
eu.iwb-add-on-service.status.ricoh.com
nginx-api.beta.clio.com
eu.status.grow.clio.com
us.grow.clio.com
eu.iwb-add-on-service.status.ricoh.com
files.clio.com
eu.status.grow.clio.com
statuspage.io
eu.status.grow.clio.com
support.clio.com
staging.annotations.draft.clio.com
au.grow.clio.com
salesloft-tracking.clio.com
statuspage.io
community.clio.com
staging.connect.probono.clio.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
cloudstatus.protel.net
ca.status.clio.com
cancel.clio.com
statuspage.io
store.clio.com
cloudstatus.protel.net
allowlist.sterda.com
support.clio.com
statuspage.io
cloudstatus.protel.net
eu.status.grow.clio.com
eu.iwb-add-on-service.status.ricoh.com
statuspage.io
forhandlerstatus.flexfone.dk
docs.developers.clio.com
eu.iwb-add-on-service.status.ricoh.com
statuspage.io
allowlist.sterda.com
cloudstatus.protel.net
files.clio.com
statuspage.io
statuspage.io
account.clio.com
eu.iwb-add-on-service.status.ricoh.com
ca.status.clio.com
eu.iwb-add-on-service.status.ricoh.com
campaign.clio.com
statuspage.io
cancel.clio.com
app.clio.com
account.clio.com
cloudmarketplace.status.symantec.com
staging-proxy.grow.clio.services
eu.status.grow.clio.com
statuspage.io
*.beta.clio.com
statuspage.io
statuspage.io
ca.status.clio.com
forhandlerstatus.flexfone.dk
support.clio.com
allowlist.sterda.com
allowlist.sterda.com
statuspage.io
salesloft-tracking.clio.com
forhandlerstatus.flexfone.dk
statuspage.io
au.status.clio.com
app.clio.com
statuspage.io
developer.clio.com
forhandlerstatus.flexfone.dk
salesloft-tracking.clio.com
forhandlerstatus.flexfone.dk
support.clio.com
salesloft-tracking.clio.com
eu.iwb-add-on-service.status.ricoh.com
statuspage.io
au.app.clio.com
allowlist.sterda.com
culture.clio.com
ca.app.clio.com
statuspage.io
us.grow.clio.com
*.beta.clio.com
allowlist.sterda.com
au.status.clio.com
statuspage.io
forhandlerstatus.flexfone.dk
campaign.clio.com
statuspage.io
cloudmarketplace.status.symantec.com
app.sandbox.clio.systems
statuspage.io
statuspage.io
billing.clio.services
statuspage.io
cloudstatus.protel.net
staging.accounting.clio.com
eu.iwb-add-on-service.status.ricoh.com
nginx-api.beta.clio.com
eu.status.grow.clio.com
us.grow.clio.com
eu.iwb-add-on-service.status.ricoh.com
files.clio.com
eu.status.grow.clio.com
statuspage.io
eu.status.grow.clio.com
support.clio.com
staging.annotations.draft.clio.com
au.grow.clio.com
salesloft-tracking.clio.com
statuspage.io
community.clio.com
staging.connect.probono.clio.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
cloudstatus.protel.net
ca.status.clio.com
cancel.clio.com
statuspage.io
store.clio.com
cloudstatus.protel.net
allowlist.sterda.com
support.clio.com
statuspage.io
cloudstatus.protel.net
eu.status.grow.clio.com
eu.iwb-add-on-service.status.ricoh.com
statuspage.io
forhandlerstatus.flexfone.dk
docs.developers.clio.com
eu.iwb-add-on-service.status.ricoh.com
statuspage.io
allowlist.sterda.com
cloudstatus.protel.net
files.clio.com
statuspage.io
statuspage.io
account.clio.com
eu.iwb-add-on-service.status.ricoh.com
ca.status.clio.com
eu.iwb-add-on-service.status.ricoh.com
campaign.clio.com
statuspage.io
cancel.clio.com
app.clio.com
account.clio.com
cloudmarketplace.status.symantec.com
staging-proxy.grow.clio.services
eu.status.grow.clio.com
statuspage.io
*.beta.clio.com
statuspage.io
statuspage.io
ca.status.clio.com
forhandlerstatus.flexfone.dk
support.clio.com
allowlist.sterda.com
allowlist.sterda.com
statuspage.io
salesloft-tracking.clio.com
forhandlerstatus.flexfone.dk
statuspage.io
au.status.clio.com
app.clio.com
statuspage.io
developer.clio.com
forhandlerstatus.flexfone.dk
salesloft-tracking.clio.com
forhandlerstatus.flexfone.dk
support.clio.com
salesloft-tracking.clio.com
eu.iwb-add-on-service.status.ricoh.com
statuspage.io
au.app.clio.com
allowlist.sterda.com
culture.clio.com
ca.app.clio.com
statuspage.io
us.grow.clio.com
*.beta.clio.com
allowlist.sterda.com
au.status.clio.com
statuspage.io
forhandlerstatus.flexfone.dk
campaign.clio.com
statuspage.io
Certificate
The complete raw certificate details for campaign.clio.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgISAwgXoVXKavBtiPVctKzBiVfdMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTAwHhcNMjQwNjIwMDE0MDAxWhcNMjQwOTE4MDE0MDAwWjAcMRowGAYDVQQD ExFjYW1wYWlnbi5jbGlvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKEg4Q/9dNMNumoJ8VwkUOrwd6NfF/llurpqf30PTmbDNq3vQ5udHsjahaIK O8IDe9JUsFbC0CKCl8ZI4zbG5m7YX8H8DRmu2xoHFOErfX91FwYUmEyNSu4k8F9v mxzizivuUlmBHGxw837LemJveRl6ELvHJ4AZGcY9vrueWk/Ixe1H2x09/sY+Nurt KxzOVnObftnMIeJZQf6YaPMCfvr4QPNPRNUb81wetJ5Fi5VAUcEzEp9eMa/Xd8wr q7nxI7SWpNngkX24ggIMiD6lLZkU6eviac6EVWI7OGqdRMzxxUwba5PegjEEUon5 ouSOhUxP1dUTCCMh1HtBvUUebPsCAwEAAaOCAhYwggISMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUgxGZJi1xLPkfMtIO9eUPhT3KbK0wHwYDVR0jBBgwFoAUu7zDR6Xk vKnGw6RyDBCNojXhyOgwVwYIKwYBBQUHAQEESzBJMCIGCCsGAQUFBzABhhZodHRw Oi8vcjEwLm8ubGVuY3Iub3JnMCMGCCsGAQUFBzAChhdodHRwOi8vcjEwLmkubGVu Y3Iub3JnLzAcBgNVHREEFTATghFjYW1wYWlnbi5jbGlvLmNvbTATBgNVHSAEDDAK MAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AO7N0GTV2xrOxVy3 nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABkDOD6S4AAAQDAEcwRQIgC8Sh3uHitFrI KFe3gzrmJmuhyvogALH0+AX7UM8vPJACIQCC/sZ4Clup65sFjhCqjWzcgvicUttH x2uoCc5u6aNVMwB3AN/hVuuqBa+1nA+GcY2owDJOrlbZbqf1pWoB0cE7vlJcAAAB kDOD6fkAAAQDAEgwRgIhAJE+bSXEYot+W2wDay98IJjdPS/5tB0qSt+TshSJbIJ0 AiEA9noKsPHKSwDN7CFjTc3l+2ILPLSbX0cwVlvVU/I38CIwDQYJKoZIhvcNAQEL BQADggEBAG2kOiwHxWiAqq6rsvVhNV1bOrD2tBwMJq1TMkyFgQ2jZ6FIFEGDcaL2 9G7RiHrpfEqBQSsYr0QBeaUAeGYGA3iq4Znt+3mO1VTL6cA1Dlv37G+/ENuFRzKi 0Gl9I5ePILXPRIK5Kqa/EbOKV5GsyxV+LJxSlsz2hmF0naoA1kVjpnEDK3U7VXPV W0TaOt1xYyXQ8geM1DadV2sOEw7S1ozVMbyHv76ttAp3y6TkWg9tT8GR5ZTh+2wp GI6DrHF1aWRHZzTq4Cyx5fMvUHkbtz9bZI+e6CCa+uvrKaOZN6h9NsygdHZVM9BR YRzG8sIc3gDsGxL0uB91dfeVlSrwjL4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSDhD/100w26agnxXCRQ 6vB3o18X+WW6ump/fQ9OZsM2re9Dm50eyNqFogo7wgN70lSwVsLQIoKXxkjjNsbm bthfwfwNGa7bGgcU4St9f3UXBhSYTI1K7iTwX2+bHOLOK+5SWYEcbHDzfst6Ym95 GXoQu8cngBkZxj2+u55aT8jF7UfbHT3+xj426u0rHM5Wc5t+2cwh4llB/pho8wJ+ +vhA809E1RvzXB60nkWLlUBRwTMSn14xr9d3zCurufEjtJak2eCRfbiCAgyIPqUt mRTp6+JpzoRVYjs4ap1EzPHFTBtrk96CMQRSifmi5I6FTE/V1RMIIyHUe0G9RR5s +wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 264090526674387526028679212688753629419485 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 01:40:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-18 01:40:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campaign.clio.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20340580412796755282408042582638497678000211367453790918414299735697105244751282348497826983735799730557009531185769425666845578445822881991753137618139167427955264549996688157927867111616061458118033000816378630569403209857710234052048165755530463241966911435148318895236117710506704876108152775983651925875500238331745489447136168968731697001964354484349522805378161261571337999862691378195210836823492931593076046398344409722509832007947192716014694080652616311885237808784856551968869615437160190360482823190077921061729623281763231314524806919956467233843893556416701399445677036304322860318679188662078106660091 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 831199262d712cf91f32d20ef5e50f853dca6cad . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.clio.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001903383e92e000004030047304502200bc4a1dee1e2b45ac82857b7833ae6266ba1cafa2000b1f4f805fb50cf2f3c9002210082fec6780a5ba9eb9b058e10aa8d6cdc82f89c52db47c76ba809ce6ee9a35533007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c000001903383e9f90000040300483046022100913e6d25c4628b7e5b6c036b2f7c2098dd3d2ff9b41d2a4adf93b214896c8274022100f67a0ab0f1ca4b00cdec21634dcde5fb620b3cb49b5f4730565bd553f237f022 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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