www.yodo.ch
Issued by R3
About this certificate
This digital certificate with serial number 04:89:6f:74:f0:b6:6b:4a:62:1d:fb:b3:ad:8e:ed:83:cf:76 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.yodo.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:89:6f:74:f0:b6:6b:4a:62:1d:fb:b3:ad:8e:ed:83:cf:76Serial Number (int): 395215979491408307056778705874142529572726
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6f:3b:9a:6c:71:c8:07:c7:f3:43:eb:64:26:74:3b:c7:43:96:7a:16
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): fc:29:5d:c1:01:08:ac:29:e6:c7:51:a9:c2:94:ca:e9:40:75:7d:f1
Fingerprint (sha256): 10:b8:d7:3d:b9:f1:5e:03:96:4c:67:a0:ec:52:fb:53:53:10:eb:6a:0a:57:29:4e:03:ee:41:a5:cd:0b:e0:14
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.yodo.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.yodo.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.yodo.ch
yodo.ch
yodo.ch
Other certificates including the domain name yodo.ch
(limited to 100 certificates)
meditech-trading.com
bamboodigital.in
reduceri1.eveoptic.ro
prazskabojovka.cz
v9.allaccessadvance.com
cs.tn
muramotors.com
lululiv.com
ggx01006-013.gadabout.games
demo.uprisecg.com
cirasee.com
u.artistpass.com.au
cast.koovik.com
link.wholesale05.com
twenty2apps.com
taxi.zoberma.sk
wijin-academy.fr
www.yodo.ch
formulary.medicalinfo.gr
app.production.pro
www.etherity.org
haavun.in
jualbronjong.online
thisisoriflame.com
taxi.zoberma.sk
www.recycledsets.com
marcosfuenmayor.com
reclutamiento.mapler.cl
www.tldrworldnews.com
ngsoft.nl
skysushi.mewo.es
beta.igesia.co
verify.livelifeapp.com
www.yodo.ch
yssolutions.org
thinkers.developwithmaw.com
demo.processshop.com
manbropharma.com
app.production.pro
petrofree.com.br
host.bulbul.tv
aventuraextrema.com.co
yalcinayasli.net
nagapattinam.droptaxioneway.com
www.comokitchens.uk
www.mtxelectronics.com
app.dutygroup.com.br
www.9plums.com
www.thebrickstudio.net
nawawich96.com
www.dirtygoldfish.com
blog.joseaponte.dev
fit.jannik-loeffler.com
www.monopolesystems.com
go.yodo.ch
proxyweb.xyz
www.wev-app.fr
tannda.kz
www.yodo.ch
molgress.com
invite.safor.com
www.karstenbygg.no
cirasee.com
peakwoodpackers.com
www.vinhomessymphony.info
www.toldositajuba.com.br
www.ithrasync.com
www.yodo.ch
pagos.corntech.com.mx
www.picu.ge
www.layons.com.br
dev.sportscards.io
www.ask-jogi.com
ericsson.quiz.thrive.uk.com
www.makeamove.com
negotiation.adeptly.ai
www.footable.me
luverdenseimoveis.com.br
woofeey.com
petrofree.com.br
olimpiafisioterapia.es
reminder.colorhub.online
dykt.app
utmetropolitana.lapieza.io
merrudhe.com
postburro.com
soik.me
soik.me
verify.livelifeapp.com
www.timeloggerapp.com
www.chouchoutop.com
svetanyc.com
timelybid.com
www.alobaid.co
thefewnessofthesaved.com
driver.codedmile.com
admin.ppdb.edutech.web.id
www.recycledsets.com
fire.bimgames.com
uat.ichitanoneshop.com
bamboodigital.in
reduceri1.eveoptic.ro
prazskabojovka.cz
v9.allaccessadvance.com
cs.tn
muramotors.com
lululiv.com
ggx01006-013.gadabout.games
demo.uprisecg.com
cirasee.com
u.artistpass.com.au
cast.koovik.com
link.wholesale05.com
twenty2apps.com
taxi.zoberma.sk
wijin-academy.fr
www.yodo.ch
formulary.medicalinfo.gr
app.production.pro
www.etherity.org
haavun.in
jualbronjong.online
thisisoriflame.com
taxi.zoberma.sk
www.recycledsets.com
marcosfuenmayor.com
reclutamiento.mapler.cl
www.tldrworldnews.com
ngsoft.nl
skysushi.mewo.es
beta.igesia.co
verify.livelifeapp.com
www.yodo.ch
yssolutions.org
thinkers.developwithmaw.com
demo.processshop.com
manbropharma.com
app.production.pro
petrofree.com.br
host.bulbul.tv
aventuraextrema.com.co
yalcinayasli.net
nagapattinam.droptaxioneway.com
www.comokitchens.uk
www.mtxelectronics.com
app.dutygroup.com.br
www.9plums.com
www.thebrickstudio.net
nawawich96.com
www.dirtygoldfish.com
blog.joseaponte.dev
fit.jannik-loeffler.com
www.monopolesystems.com
go.yodo.ch
proxyweb.xyz
www.wev-app.fr
tannda.kz
www.yodo.ch
molgress.com
invite.safor.com
www.karstenbygg.no
cirasee.com
peakwoodpackers.com
www.vinhomessymphony.info
www.toldositajuba.com.br
www.ithrasync.com
www.yodo.ch
pagos.corntech.com.mx
www.picu.ge
www.layons.com.br
dev.sportscards.io
www.ask-jogi.com
ericsson.quiz.thrive.uk.com
www.makeamove.com
negotiation.adeptly.ai
www.footable.me
luverdenseimoveis.com.br
woofeey.com
petrofree.com.br
olimpiafisioterapia.es
reminder.colorhub.online
dykt.app
utmetropolitana.lapieza.io
merrudhe.com
postburro.com
soik.me
soik.me
verify.livelifeapp.com
www.timeloggerapp.com
www.chouchoutop.com
svetanyc.com
timelybid.com
www.alobaid.co
thefewnessofthesaved.com
driver.codedmile.com
admin.ppdb.edutech.web.id
www.recycledsets.com
fire.bimgames.com
uat.ichitanoneshop.com
Certificate
The complete raw certificate details for www.yodo.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgISBIlvdPC2a0piHfuzrY7tg892MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMTcwMTU3MzRaFw0yNDAyMTUwMTU3MzNaMBYxFDASBgNVBAMT C3d3dy55b2RvLmNoMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmxh H0ZmqBL7iILA27U0UE4nReT8QScWc1cN5F4HFIhivvXwYpj0Y5P3lkBGMpgs+XzD K7qtyTPo679TAbPO7K7P0npv+8lf1Wne/BmmUIhDBuXBGiWE13/WaXQYS0A6Lsuf aId+SyToZ/G9ZEcCExE5x5RDUCrzuSOVFE5aA+P0XC6LpZ034hZEu77CY+NKX05t yRy3EmscTRPlrMs01TrikBTOD/VsqFk6OaoTgBYSQunQdIK8j08ROUP3U7Dd09+n B/bGkLOg4h6tuUK8T+P29KQLEX7Jq5A6U20XnkrEGKGWJqbSl+RZG4ULc9viBmPv 1qCPXkv6lmiTjmTMEwIDAQABo4ICFDCCAhAwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBRvO5psccgHx/ND62QmdDvHQ5Z6FjAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAf BgNVHREEGDAWggt3d3cueW9kby5jaIIHeW9kby5jaDATBgNVHSAEDDAKMAgGBmeB DAECATCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AEiw42vapkc0D+VqAvqdMOsc UgHLVt0sgdm7v6s52IRzAAABi9s2XVAAAAQDAEYwRAIgdsrhsnW4jPaNpFJkUw8P 0BI3vg49iSJBXVMjy25cZlsCIGIh9NwSZm2Wuk4UapobPJceojD6nDhRT2FqELdk W7ktAHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGL2zZd/AAA BAMARjBEAiAfMn/UhuQhc7uTiZfApAStUReiUOclCR36orJd0mGjyAIgP2n5zQ/h UCI3s/rKGd44V8LXotzQu2h0VJ2fJvJag7QwDQYJKoZIhvcNAQELBQADggEBAAKf o/JKoRsxun8zNoYAQ5IWFYPzBLPCs3nAABcOo8gzT9UVajyn2ZyIEeE7JvLS9vV2 aUwTvb2UqTR1sGBF7fq6ykqEn7FUVzEFYwbS3jdJQCUm9rminAlbiRq+WOkSkJTM 1aaJ89B68GMnanoAp4qtqgn7DFhZecs7jxkmBmDhfIHuPXsSG3y4RKIfMrS6COQc 8NtKDDwygkDqgPb6BEfiA/KLGF/JBc51j+9SJTKNz7UHFGKRY+gFLVeR3FdkkzEA EtWZzoRFGSfNP9CIZn2iM7548Jl1jAVt3uMinw87/Gap1dCxjiH9gHqvxXgH0Ajq 6hsjBRC0PbHwg6UofZA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmxhH0ZmqBL7iILA27U0 UE4nReT8QScWc1cN5F4HFIhivvXwYpj0Y5P3lkBGMpgs+XzDK7qtyTPo679TAbPO 7K7P0npv+8lf1Wne/BmmUIhDBuXBGiWE13/WaXQYS0A6LsufaId+SyToZ/G9ZEcC ExE5x5RDUCrzuSOVFE5aA+P0XC6LpZ034hZEu77CY+NKX05tyRy3EmscTRPlrMs0 1TrikBTOD/VsqFk6OaoTgBYSQunQdIK8j08ROUP3U7Dd09+nB/bGkLOg4h6tuUK8 T+P29KQLEX7Jq5A6U20XnkrEGKGWJqbSl+RZG4ULc9viBmPv1qCPXkv6lmiTjmTM EwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 395215979491408307056778705874142529572726 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 01:57:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 01:57:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.yodo.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24038721809419707001224332727672369847989409471510771945791456146233374418285932814023092352577899872560651538059890594199595283277224165585951268874084131066869522034332143262450623402192883854982349167619803892607840630146001768109844813767182237030604334049263841945063003135873371336508679757432456720989482171103824444918059011531301493485610089821064671854197592189830773795271634983358254361007190314355777594824790981443271408573586410633373677007312455844895571906132801673305266435175242362038085969442138623252412531047653598238645356037855123427042799132352721920497952395190996095441242461585374913547283 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6f3b9a6c71c807c7f343eb6426743bc743967a16 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yodo.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yodo.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bdb365d500000040300463044022076cae1b275b88cf68da45264530f0fd01237be0e3d8922415d5323cb6e5c665b02206221f4dc12666d96ba4e146a9a1b3c971ea230fa9c38514f616a10b7645bb92d007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bdb365dfc000004030046304402201f327fd486e42173bb938997c0a404ad5117a250e725091dfaa2b25dd261a3c802203f69f9cd0fe1502237b3faca19de3857c2d7a2dcd0bb6874549d9f26f25a83b4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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