ui.uat.lifestylesolutionsteam.com
Issued by R3
About this certificate
This digital certificate with serial number 03:ea:d1:2f:1a:2a:23:ba:27:0b:8b:44:e6:74:a2:90:59:f9 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ui.uat.lifestylesolutionsteam.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ea:d1:2f:1a:2a:23:ba:27:0b:8b:44:e6:74:a2:90:59:f9Serial Number (int): 341240984874533028485110764271532329949689
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b6:c9:fa:08:1f:e7:f4:6f:7d:62:9e:d0:f7:71:6d:f3:22:8e:73:91
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 90:e9:fd:81:6e:42:c7:47:11:c0:b2:40:2d:08:00:68:ea:bd:c3:bf
Fingerprint (sha256): 14:41:da:1d:40:99:f1:07:91:91:64:a2:2c:2d:e4:20:93:47:d7:98:43:f9:0d:94:79:33:a7:7c:df:89:e8:71
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ui.uat.lifestylesolutionsteam.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ui.uat.lifestylesolutionsteam.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ui.uat.lifestylesolutionsteam.com
events-uat.flyingblue.com
ui.uat.lifestylesolutionsteam.com
events-uat.flyingblue.com
ui.uat.lifestylesolutionsteam.com
Other certificates including the domain name lifestylesolutionsteam.com
(limited to 100 certificates)
events-uat.flyingblue.com
events.flyingblue.com
events-uat.flyingblue.com
ui.uat.lifestylesolutionsteam.com
travel.ticketmaster.com
events.flyingblue.com
www.ghisatest2.prod.lifestylesolutionsteam.com
events.flyingblue.com
events-uat.flyingblue.com
events.flyingblue.com
ui.uat.lifestylesolutionsteam.com
events.flyingblue.com
ui.prod.lifestylesolutionsteam.com
events.flyingblue.com
events.flyingblue.com
events.flyingblue.com
events-uat.flyingblue.com
events.flyingblue.com
events.flyingblue.com
events.flyingblue.com
ui.uat.lifestylesolutionsteam.com
events.flyingblue.com
ui.prod.lifestylesolutionsteam.com
www.ghisatest2.prod.lifestylesolutionsteam.com
api.prod.lifestylesolutionsteam.com
events-uat.flyingblue.com
events.flyingblue.com
www.ghisatest2.prod.lifestylesolutionsteam.com
www.ghisatest2.prod.lifestylesolutionsteam.com
events.flyingblue.com
events.flyingblue.com
ui.test.lifestylesolutionsteam.com
events.flyingblue.com
www.ghisatest2.prod.lifestylesolutionsteam.com
events.flyingblue.com
www.ghisatest2.prod.lifestylesolutionsteam.com
travel.ticketmaster.com
events.flyingblue.com
events.flyingblue.com
events-uat.flyingblue.com
www.ghisatest2.prod.lifestylesolutionsteam.com
events.flyingblue.com
events.flyingblue.com
events.flyingblue.com
events.flyingblue.com
www.ghisatest2.prod.lifestylesolutionsteam.com
ui.uat.lifestylesolutionsteam.com
events.flyingblue.com
ui.uat.lifestylesolutionsteam.com
events.flyingblue.com
events-uat.flyingblue.com
ui.uat.lifestylesolutionsteam.com
travel.ticketmaster.com
events.flyingblue.com
www.ghisatest2.prod.lifestylesolutionsteam.com
events.flyingblue.com
events-uat.flyingblue.com
events.flyingblue.com
ui.uat.lifestylesolutionsteam.com
events.flyingblue.com
ui.prod.lifestylesolutionsteam.com
events.flyingblue.com
events.flyingblue.com
events.flyingblue.com
events-uat.flyingblue.com
events.flyingblue.com
events.flyingblue.com
events.flyingblue.com
ui.uat.lifestylesolutionsteam.com
events.flyingblue.com
ui.prod.lifestylesolutionsteam.com
www.ghisatest2.prod.lifestylesolutionsteam.com
api.prod.lifestylesolutionsteam.com
events-uat.flyingblue.com
events.flyingblue.com
www.ghisatest2.prod.lifestylesolutionsteam.com
www.ghisatest2.prod.lifestylesolutionsteam.com
events.flyingblue.com
events.flyingblue.com
ui.test.lifestylesolutionsteam.com
events.flyingblue.com
www.ghisatest2.prod.lifestylesolutionsteam.com
events.flyingblue.com
www.ghisatest2.prod.lifestylesolutionsteam.com
travel.ticketmaster.com
events.flyingblue.com
events.flyingblue.com
events-uat.flyingblue.com
www.ghisatest2.prod.lifestylesolutionsteam.com
events.flyingblue.com
events.flyingblue.com
events.flyingblue.com
events.flyingblue.com
www.ghisatest2.prod.lifestylesolutionsteam.com
ui.uat.lifestylesolutionsteam.com
events.flyingblue.com
ui.uat.lifestylesolutionsteam.com
Certificate
The complete raw certificate details for ui.uat.lifestylesolutionsteam.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgISA+rRLxoqI7onC4tE5nSikFn5MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA0MTUxMjM1MTZaFw0yMjA3MTQxMjM1MTVaMCwxKjAoBgNVBAMT IXVpLnVhdC5saWZlc3R5bGVzb2x1dGlvbnN0ZWFtLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMe+eKol5REnX78OCq/p95AHtmw2VWGNQNo3VgT+ eCseYNpuGjcN77+tNdnofsHUH1qouDCXoBotJvS5hi5ppE2sG+SowaPO8eafme+Y Xti0LGMlpBzNydjRBcHqVsjhJPhRefrYjYUkZKQLvQHcirpxFw9eQ9LcHBWhpW4V 8PHHaDe3SbdIYmQhI70AGfjxwNEhppKPgwSsH3bOTZqFiMXLrvReBkitW+5nMGA5 M5ECy1BDutTDh8+g3qI68DNjPHwK/gT5ymWBqjVP8OIk0mTOoOe6E0K26zuWty33 v5NKukz4mMZzxQbyD7L1ccUcm51gz7V+ezN9IiOohQ6y1dkCAwEAAaOCApwwggKY MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUtsn6CB/n9G99Yp7Q93Ft8yKOc5EwHwYD VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0 dHA6Ly9yMy5pLmxlbmNyLm9yZy8wbAYDVR0RBGUwY4IjKi51aS51YXQubGlmZXN0 eWxlc29sdXRpb25zdGVhbS5jb22CGWV2ZW50cy11YXQuZmx5aW5nYmx1ZS5jb22C IXVpLnVhdC5saWZlc3R5bGVzb2x1dGlvbnN0ZWFtLmNvbTBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AN+lXqto gk8fbK3uuF9OPlrqzaISpGpejjsSwCBEXCpzAAABgC1vYzEAAAQDAEcwRQIgOZw5 YCN7Zfk4jHKscGQeSTUyH6WezB756CG4uyqEcEICIQDJ2gVb4lbp2AD9GPU/UKof v+ZD8YHPcLSE3trWpDk81wB2AEalVet1+pEgMLWiiWn0830RLEF0vv1JuIWr8vxw /m1HAAABgC1vY3AAAAQDAEcwRQIhANca+QakvEXAYnn5rTWSJOY0RVO80wPjvtHw jh8DnLVEAiBrDz42qG6lAOTCr7N6I3LGApoARE4SNq92/57Uo8+1oTANBgkqhkiG 9w0BAQsFAAOCAQEAnqi5UYPEswYrPN//OnTGg51szj0LSKEhkAFhoB61/cQTySX8 23WBzWBSYuevush+ltTBkA/tZRZ1CxY6VkLH+JK/lWKQwHJSmPVNdznp7Iwupr7v zu1ANlAZ5i9TunGAwCA0N/d+Jab/1RDwSblkbwijtjV/NOKKSmY1nRvb0U9G2TII 06BXbeyhx1n6cqV7MXA2rT1jKVAg9X4DMxQZ967A8gdLioLhZCBNLwhuvzV1OhKd 2H9Zo4Qaca7pqCNHFwDSOk9QbcW5yrysnvYOw+ePnloelwWavwZaLBAQksMy067w IcdS1Xjf883VqPUfO+rEUQ0G0aaGg4iswjGV5Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx754qiXlESdfvw4Kr+n3 kAe2bDZVYY1A2jdWBP54Kx5g2m4aNw3vv6012eh+wdQfWqi4MJegGi0m9LmGLmmk Tawb5KjBo87x5p+Z75he2LQsYyWkHM3J2NEFwepWyOEk+FF5+tiNhSRkpAu9AdyK unEXD15D0twcFaGlbhXw8cdoN7dJt0hiZCEjvQAZ+PHA0SGmko+DBKwfds5NmoWI xcuu9F4GSK1b7mcwYDkzkQLLUEO61MOHz6DeojrwM2M8fAr+BPnKZYGqNU/w4iTS ZM6g57oTQrbrO5a3Lfe/k0q6TPiYxnPFBvIPsvVxxRybnWDPtX57M30iI6iFDrLV 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 341240984874533028485110764271532329949689 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-15 12:35:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-14 12:35:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ui.uat.lifestylesolutionsteam.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25215347609712707075459492040740365028753376159004844733706142850734732890576239944198043530024127318718622814073316903314838719218585283563420167787833458742878261237145349661535264895132523105434921000260165154833262822091806872215148633513133409528759074628326048282179265150369298381520133551684382395962296403323361385891210406200209558252242536234910342818447802478929583820071976940035067181623227612934538719974651062664992392274617810885372860479747027686960285767186498815257770079961931398923924817683000460659120389505531629233319526534444032502170584033438523172428114343501305917668405356977636880078297 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b6c9fa081fe7f46f7d629ed0f7716df3228e7391 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ui.uat.lifestylesolutionsteam.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events-uat.flyingblue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ui.uat.lifestylesolutionsteam.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001802d6f633100000403004730450220399c3960237b65f9388c72ac70641e4935321fa59ecc1ef9e821b8bb2a847042022100c9da055be256e9d800fd18f53f50aa1fbfe643f181cf70b484dedad6a4393cd700760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001802d6f63700000040300473045022100d71af906a4bc45c06279f9ad359224e6344553bcd303e3bed1f08e1f039cb54402206b0f3e36a86ea500e4c2afb37a2372c6029a00444e1236af76ff9ed4a3cfb5a1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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