sobczyk.eu
Issued by R3
About this certificate
This digital certificate with serial number 03:b4:7b:89:fa:cd:40:9b:8a:97:2e:6c:b9:e9:8c:53:81:90 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=sobczyk.eu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b4:7b:89:fa:cd:40:9b:8a:97:2e:6c:b9:e9:8c:53:81:90Serial Number (int): 322751895316064996593979184581314790785424
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 52:77:f6:3c:b5:08:b2:3a:7d:5d:ae:5d:e8:97:00:7f:08:80:41:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 63:c6:7f:2a:85:61:63:7f:b0:2e:3b:da:04:dc:c6:9f:93:5f:e1:77
Fingerprint (sha256): 0f:7a:8b:d0:27:6f:33:e9:25:a1:23:3f:88:d6:6b:5e:24:14:45:e8:85:07:cd:b9:8c:5d:f6:04:24:d3:ab:b5
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sobczyk.eu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sobczyk.eu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sobczyk.eu
www.sobczyk.eu
www.sobczyk.eu
Other certificates including the domain name sobczyk.eu
(limited to 100 certificates)
srv191.sobczyk.eu
mx.sobczyk.eu
vpn69.sobczyk.eu
www.sobczyk.eu
www.sobczyk.eu
webmail.sobczyk.eu
www.sobczyk.eu
iot.sobczyk.eu
iot.sobczyk.eu
srv221.sobczyk.eu
webmail.sobczyk.eu
sobczyk.eu
srv191.sobczyk.eu
srv191.sobczyk.eu
srv191.sobczyk.eu
webmail.sobczyk.eu
srv191.sobczyk.eu
srv221.sobczyk.eu
webmail.sobczyk.eu
iot.sobczyk.eu
webmail.sobczyk.eu
srv191.sobczyk.eu
webmail.sobczyk.eu
webmail.sobczyk.eu
srv191.sobczyk.eu
webmail.sobczyk.eu
iot.sobczyk.eu
iot.sobczyk.eu
webmail.sobczyk.eu
manager.sobczyk.eu
srv191.sobczyk.eu
srv191.sobczyk.eu
webmail.sobczyk.eu
webmail.sobczyk.eu
srv221.sobczyk.eu
www.sobczyk.eu
webmail.sobczyk.eu
www.sobczyk.eu
www.sobczyk.eu
webmail.sobczyk.eu
srv191.sobczyk.eu
webmail.sobczyk.eu
iot.sobczyk.eu
www.sobczyk.eu
webmail.sobczyk.eu
iot.sobczyk.eu
srv221.sobczyk.eu
srv221.sobczyk.eu
srv191.sobczyk.eu
srv189.sobczyk.eu
www.sobczyk.eu
webmail.sobczyk.eu
iot.sobczyk.eu
srv191.sobczyk.eu
www.sobczyk.eu
webmail.sobczyk.eu
www.sobczyk.eu
sobczyk.eu
webmail.sobczyk.eu
www.sobczyk.eu
www.sobczyk.eu
srv221.sobczyk.eu
srv221.sobczyk.eu
webmail.sobczyk.eu
sobczyk.eu
srv221.sobczyk.eu
www.sobczyk.eu
webmail.sobczyk.eu
www.sobczyk.eu
iot.sobczyk.eu
iot.sobczyk.eu
webmail.sobczyk.eu
www.sobczyk.eu
mx.sobczyk.eu
beta.med.sobczyk.eu
sobczyk.eu
webmail.sobczyk.eu
zaplecze.sobczyk.eu
webmail.sobczyk.eu
sobczyk.eu
www.sobczyk.eu
srv191.sobczyk.eu
srv191.sobczyk.eu
sobczyk.eu
sobczyk.eu
srv191.sobczyk.eu
www.sobczyk.eu
srv191.sobczyk.eu
webmail.sobczyk.eu
www.sobczyk.eu
www.sobczyk.eu
mx.sobczyk.eu
vpn69.sobczyk.eu
www.sobczyk.eu
www.sobczyk.eu
webmail.sobczyk.eu
www.sobczyk.eu
iot.sobczyk.eu
iot.sobczyk.eu
srv221.sobczyk.eu
webmail.sobczyk.eu
sobczyk.eu
srv191.sobczyk.eu
srv191.sobczyk.eu
srv191.sobczyk.eu
webmail.sobczyk.eu
srv191.sobczyk.eu
srv221.sobczyk.eu
webmail.sobczyk.eu
iot.sobczyk.eu
webmail.sobczyk.eu
srv191.sobczyk.eu
webmail.sobczyk.eu
webmail.sobczyk.eu
srv191.sobczyk.eu
webmail.sobczyk.eu
iot.sobczyk.eu
iot.sobczyk.eu
webmail.sobczyk.eu
manager.sobczyk.eu
srv191.sobczyk.eu
srv191.sobczyk.eu
webmail.sobczyk.eu
webmail.sobczyk.eu
srv221.sobczyk.eu
www.sobczyk.eu
webmail.sobczyk.eu
www.sobczyk.eu
www.sobczyk.eu
webmail.sobczyk.eu
srv191.sobczyk.eu
webmail.sobczyk.eu
iot.sobczyk.eu
www.sobczyk.eu
webmail.sobczyk.eu
iot.sobczyk.eu
srv221.sobczyk.eu
srv221.sobczyk.eu
srv191.sobczyk.eu
srv189.sobczyk.eu
www.sobczyk.eu
webmail.sobczyk.eu
iot.sobczyk.eu
srv191.sobczyk.eu
www.sobczyk.eu
webmail.sobczyk.eu
www.sobczyk.eu
sobczyk.eu
webmail.sobczyk.eu
www.sobczyk.eu
www.sobczyk.eu
srv221.sobczyk.eu
srv221.sobczyk.eu
webmail.sobczyk.eu
sobczyk.eu
srv221.sobczyk.eu
www.sobczyk.eu
webmail.sobczyk.eu
www.sobczyk.eu
iot.sobczyk.eu
iot.sobczyk.eu
webmail.sobczyk.eu
www.sobczyk.eu
mx.sobczyk.eu
beta.med.sobczyk.eu
sobczyk.eu
webmail.sobczyk.eu
zaplecze.sobczyk.eu
webmail.sobczyk.eu
sobczyk.eu
www.sobczyk.eu
srv191.sobczyk.eu
srv191.sobczyk.eu
sobczyk.eu
sobczyk.eu
srv191.sobczyk.eu
www.sobczyk.eu
srv191.sobczyk.eu
webmail.sobczyk.eu
www.sobczyk.eu
www.sobczyk.eu
Certificate
The complete raw certificate details for sobczyk.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgISA7R7ifrNQJuKly5suemMU4GQMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMjUwNTE2MzJaFw0yNDAzMjQwNTE2MzFaMBUxEzARBgNVBAMT CnNvYmN6eWsuZXUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHZ5h YgehA8szHolID7GX11qzYg4p2yOOgnzOP1GKGAOavp5ZGcU2OqHpvBsmGTNqf94r jvfii85T0uXdV3O3Qc+lSStGgZuVlZLrZjBGYnG1Vpf3HohXGCkPHDsaU2q5V2aA xAEN/oyYGvLYB235U62kBQVzvGk4z6S0px+FaYfFuiIEDd6dmLuAkeWScqbrTL23 sxXu6tF5asi7din7eR+kc3MbKlJ1higqWHFFTuOBom0CbE13khlwG1GFRQVgD9PY nkA0Ht6QajZDw/873WUz8hpf38MG3f1AZPYEHUZF19hWyDfwYrNPGKkpxsX7PsCP LzWtMLVA/IQQGRKXAgMBAAGjggIbMIICFzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FFJ39jy1CLI6fV2uXeiXAH8IgEHLMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCUG A1UdEQQeMByCCnNvYmN6eWsuZXWCDnd3dy5zb2JjenlrLmV1MBMGA1UdIAQMMAow CAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUASLDja9qmRzQP5WoC +p0w6xxSActW3SyB2bu/qznYhHMAAAGMn54t3gAABAMARjBEAiAI8GYCvrZWQT3p TlZsbf+Se9II9qj4irCRNaL4v/kBEwIgSHxOiopJJy3l35Euz6D38FHmVnNby6od hWUDZ2Z06kcAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYyf ni5xAAAEAwBHMEUCICdMDFTJZ2p5YEnVI04Fzy91Q3C9mXyl+Rq4J4jKdr4oAiEA 4P/OLy6jelCnDSlgIpYwBBb/KB6/mzq89WXMHr5cWeMwDQYJKoZIhvcNAQELBQAD ggEBALILb4aixCI4LWAF5a2FOpbWtgFmx6PpmMyjIR2U+taskcbkIi1NjZ8Qo6ux K5gZK2cRLkD+SHSXOcX/QeFWy9wBkVaNHo5HFl2OyphXNxv7hdzyKxA60PTBthnE yAaOVuXNMVb6VxQcFG+vqTx8ha+P2vzbBXns5Fol9llbJWbzU9aHhynVI2Lurgoq 6AcclCG10oD5CBxVqfJeDHhLoUn3chr8Dj06hZpz6u3tBssoNt+DBVTIcD7ijRZV Sm24QqRVRQtDRojkkKDPl50II3aCP0JjNTFGYV3+gAKfKOgbTXTMnkHamqy3GG8x 0Jsnv4NXYCh6l9fg2jFb54ogYM4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh2eYWIHoQPLMx6JSA+x l9das2IOKdsjjoJ8zj9RihgDmr6eWRnFNjqh6bwbJhkzan/eK4734ovOU9Ll3Vdz t0HPpUkrRoGblZWS62YwRmJxtVaX9x6IVxgpDxw7GlNquVdmgMQBDf6MmBry2Adt +VOtpAUFc7xpOM+ktKcfhWmHxboiBA3enZi7gJHlknKm60y9t7MV7urReWrIu3Yp +3kfpHNzGypSdYYoKlhxRU7jgaJtAmxNd5IZcBtRhUUFYA/T2J5ANB7ekGo2Q8P/ O91lM/IaX9/DBt39QGT2BB1GRdfYVsg38GKzTxipKcbF+z7Ajy81rTC1QPyEEBkS lwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 322751895316064996593979184581314790785424 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 05:16:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 05:16:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sobczyk.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21475117356460872160605042299964556347556916023417448113474519050479722800232223620256203961978667032694880895371014610301050514859260645130211077678679225718497100364100940293971741494887170041910482075371852781774504004518360586769834441271742870783968958551217478470758224324413497274115889261103436429229253011614142549568811921400383182670740931534265544618228464499728407445547664925829361155410210662381911775516287666927027647742283898373319123802905301095355812328628647011048184032610255101152663002659464396406713982204903227098151793861204033213488351993372603096910365840782436818079441285779298167886487 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5277f63cb508b23a7d5dae5de897007f088041cb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sobczyk.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sobczyk.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c9f9e2dde0000040300463044022008f06602beb656413de94e566c6dff927bd208f6a8f88ab09135a2f8bff901130220487c4e8a8a49272de5df912ecfa0f7f051e656735bcbaa1d856503676674ea4700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c9f9e2e7100000403004730450220274c0c54c9676a796049d5234e05cf2f754370bd997ca5f91ab82788ca76be28022100e0ffce2f2ea37a50a70d29602296300416ff281ebf9b3abcf565cc1ebe5c59e3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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