refiltek.com.br
Issued by R3
About this certificate
This digital certificate with serial number 03:93:31:64:8b:fa:14:80:fb:97:07:97:3b:2c:42:87:bf:92 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=refiltek.com.br
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:93:31:64:8b:fa:14:80:fb:97:07:97:3b:2c:42:87:bf:92Serial Number (int): 311424019973206329596472508822969467256722
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f0:57:b6:dc:37:e9:ca:d7:6e:dd:ac:ae:c0:a6:dd:e0:ae:5c:8c:59
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 76:45:f1:83:64:ee:f8:b8:71:25:4f:fc:be:61:c3:c4:13:1d:c9:c5
Fingerprint (sha256): 14:e7:a5:ba:c9:90:5e:f4:14:fc:4a:89:46:82:42:1e:94:7a:9c:31:2e:20:9b:52:72:d6:2b:d2:b6:5b:2f:21
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate refiltek.com.br
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for refiltek.com.br
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
refiltek.com.br
www.refiltek.com.br
www.refiltek.com.br
Other certificates including the domain name refiltek.com.br
(limited to 100 certificates)
grocerylist.jamesonsaunders.com
rowedbiker.com
fernandapsol.com.br
refiltek.com.br
incloudusa.com
tech.fan.ai
research.runtime.dev
link-stg.astropay.com
ofertas.buscorepuestos.com
yofardev.fr
oslo.preferablefutures.com
whichvpn.com
lkchapman.com
*.refiltek.com.br
store.acmos.cloud
www.lyfeatlas.app
dev.aff.kidsup.net
referral.staff-clothes.com
dream3d.dreamreality.co.in
app.onfakt.no
inv.dev.usemason.com
www.cannytech.com
refiltek.com.br
links-staging.thisislex.app
app.mikiwame-p.jp
www.connectedtribe.com
sportskicentarindjija.rs
*.refiltek.com.br
dream3d.dreamreality.co.in
www.thecrush.in
ext.crm.srv.br
fernandapsol.com.br
mirasasse.com
www.amst.co.in
birthdaybox.io
app-teste3.refiltek.com.br
www.vitaello.es
tibraqs.com
refiltek.com.br
studiomedico-izzo-arduino.it
www.xaos.ai
navigation.startrip.link
upsquared.com
www.unrealvoodoo.org
rocketroundingapp.com
www.dheehospitals.com
hk3cshowroom.eventxtra.com
ankitgoswami.in
openlab.rthk.uk
s.upbrand.asia
*.refiltek.com.br
www.kunalbattery.com
relearn.fyi
sms.connectbench.lk
www.ionhipster.com
prevoid.dev
ultimatefacts.viyateknoloji.com
kreditkarten360.com
apk.richter.tirol
cwatson.tech
app.shootsandcollabs.com
refiltek.com.br
www.baijs.com
sams.classemo.com
www.agrolocal.co
www.easteden.app
mfxyz.com
www.jolirendezvous.com
serrala.events66.com
www.huma.com
*.refiltek.com.br
serrala.events66.com
core.zuberipay.com
*.refiltek.com.br
scoupar.dev
www.celynxie.com
sm.talleresvym.com
delivery.andersenmaillard.dk
refiltek.com.br
timouss.bio
artist.stanpass.com
auth.heftyverse.xyz
*.refiltek.com.br
refiltek.com.br
dev.talsho.com
proinbro.com.tw
www.farefin.com
spiik.com
litovski.info
jonathandekock.com
ahkili.health
refiltek.com.br
mobile.stent.io
mrsphilippinesinternational.com
caddosupply.com
deeplink-dev.qlash.gg
console.stage.connectsx.com
robotcontrolparty.com
mapmyagent.com
blackboard-dev.klarway.com
rowedbiker.com
fernandapsol.com.br
refiltek.com.br
incloudusa.com
tech.fan.ai
research.runtime.dev
link-stg.astropay.com
ofertas.buscorepuestos.com
yofardev.fr
oslo.preferablefutures.com
whichvpn.com
lkchapman.com
*.refiltek.com.br
store.acmos.cloud
www.lyfeatlas.app
dev.aff.kidsup.net
referral.staff-clothes.com
dream3d.dreamreality.co.in
app.onfakt.no
inv.dev.usemason.com
www.cannytech.com
refiltek.com.br
links-staging.thisislex.app
app.mikiwame-p.jp
www.connectedtribe.com
sportskicentarindjija.rs
*.refiltek.com.br
dream3d.dreamreality.co.in
www.thecrush.in
ext.crm.srv.br
fernandapsol.com.br
mirasasse.com
www.amst.co.in
birthdaybox.io
app-teste3.refiltek.com.br
www.vitaello.es
tibraqs.com
refiltek.com.br
studiomedico-izzo-arduino.it
www.xaos.ai
navigation.startrip.link
upsquared.com
www.unrealvoodoo.org
rocketroundingapp.com
www.dheehospitals.com
hk3cshowroom.eventxtra.com
ankitgoswami.in
openlab.rthk.uk
s.upbrand.asia
*.refiltek.com.br
www.kunalbattery.com
relearn.fyi
sms.connectbench.lk
www.ionhipster.com
prevoid.dev
ultimatefacts.viyateknoloji.com
kreditkarten360.com
apk.richter.tirol
cwatson.tech
app.shootsandcollabs.com
refiltek.com.br
www.baijs.com
sams.classemo.com
www.agrolocal.co
www.easteden.app
mfxyz.com
www.jolirendezvous.com
serrala.events66.com
www.huma.com
*.refiltek.com.br
serrala.events66.com
core.zuberipay.com
*.refiltek.com.br
scoupar.dev
www.celynxie.com
sm.talleresvym.com
delivery.andersenmaillard.dk
refiltek.com.br
timouss.bio
artist.stanpass.com
auth.heftyverse.xyz
*.refiltek.com.br
refiltek.com.br
dev.talsho.com
proinbro.com.tw
www.farefin.com
spiik.com
litovski.info
jonathandekock.com
ahkili.health
refiltek.com.br
mobile.stent.io
mrsphilippinesinternational.com
caddosupply.com
deeplink-dev.qlash.gg
console.stage.connectsx.com
robotcontrolparty.com
mapmyagent.com
blackboard-dev.klarway.com
Certificate
The complete raw certificate details for refiltek.com.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISA5MxZIv6FID7lweXOyxCh7+SMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMDEwMDM1MzdaFw0yNDAxMzAwMDM1MzZaMBoxGDAWBgNVBAMT D3JlZmlsdGVrLmNvbS5icjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AL7cowHyAdHoxoS/1DjjUhiJShBFsLGyy3402yU4wyu2IQ6SY1CIp1KKZismk0b+ yw3xlhTcAtMY4ctM6cEG39rffeKLF3hfWqrhYoywQCbzf0WB7TLPvaH5uyDa2YRn qmDMAKXhxrvdTwwIwikC8oiQrMvOwOCUiKq0q28XJrb7QieTIpcQvgU/zJcX6Zpd LOCHWzUhpPLp/ZNKdcDVdrgwQ2luLMMZP3tRpfXONbxVgI1XpeGMWRmr5S2TsYl9 Zxf6I8cq2IsSPpcYkKlE74cZro95XXDwtbljyjOHM8i305hkhHpbG+sUPtI9ZNy3 apYS6mCGin7JYYQm+nP7uSUCAwEAAaOCAiQwggIgMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQU8Fe23Dfpytdu3ayuwKbd4K5cjFkwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wLwYDVR0RBCgwJoIPcmVmaWx0ZWsuY29tLmJyghN3d3cucmVmaWx0ZWsuY29t LmJyMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADu AHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLiIWUSwAABAMA RjBEAiAWOP6uI0oBXkw4iJxAKJ4yJdrcfkNr08ehKHQK63ymwAIgHmpWDM0jEz8A 7pexQiVPEeiSD6dajaPVRhQaDn3JVJYAdQB2/4g/Crb7lVHCYcz1h7o0tKTNuync aEIKn+ZnTFo6dAAAAYuIhZSUAAAEAwBGMEQCIC+Yhfm9m+05QcVCYRXFBsDRdXhV yweAKhfBqsrtaYQdAiAYP83gPmlPgzbyjOdl46Hf+nVBPdcnVLwrmAgyOIdWpzAN BgkqhkiG9w0BAQsFAAOCAQEAQxBSjASHHZb/0Nheou77Dcbe9z/mlGjof7wgw6cv eGmIUFtLn3FLuvlq+US8ZocYLjAN0rSDYw97ZeJ5h1uarTXV6qGlE9JdqBSLjVR8 2LpYl+psp8AfKUZwF/g8E5prKKnyME+wZ/vLcr1b4OduEklZkM1SLOnquYaqn1fo er3vwfPKLfnvo1BG3OzQlgnuWY6MMix58yOVPSAi6y+KbpeF+IsSH8YydZ7AoQTk 5f2Y4Z26568cvrnTo4f9QtrRInGIkoI12qlfjbWSIzEbEPl+YkP9MN3oDIB7u3RL /utM7tbD3CWVUBL8Wmx4KCLti5DMViUhPrmVbd0USGK8oA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtyjAfIB0ejGhL/UOONS GIlKEEWwsbLLfjTbJTjDK7YhDpJjUIinUopmKyaTRv7LDfGWFNwC0xjhy0zpwQbf 2t994osXeF9aquFijLBAJvN/RYHtMs+9ofm7INrZhGeqYMwApeHGu91PDAjCKQLy iJCsy87A4JSIqrSrbxcmtvtCJ5MilxC+BT/Mlxfpml0s4IdbNSGk8un9k0p1wNV2 uDBDaW4swxk/e1Gl9c41vFWAjVel4YxZGavlLZOxiX1nF/ojxyrYixI+lxiQqUTv hxmuj3ldcPC1uWPKM4czyLfTmGSEelsb6xQ+0j1k3LdqlhLqYIaKfslhhCb6c/u5 JQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 311424019973206329596472508822969467256722 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 00:35:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 00:35:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'refiltek.com.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24094077979236577217864512640445723487989877835192906559289888756035192875443956131239488301570788050393221936349093473584087682920958798408607293411534442861694329478145657638745779989980200999635378689960987307252297504123429246278222412421904339864258038443205319928688571068048044768435132845790017404418027003463190663119842655878137358751304795319822458834168753820872504398573682053331499177299495942685278722693961922886526750718549149944269591056350163754757630296433217288140571474686456399537515657695226272205538990051212897563327087198528003710465508434545199926895878071834020985220462483633769946003749 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f057b6dc37e9cad76eddacaec0a6dde0ae5c8c59 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refiltek.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refiltek.com.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b8885944b000004030046304402201638feae234a015e4c38889c40289e3225dadc7e436bd3c7a128740aeb7ca6c002201e6a560ccd23133f00ee97b142254f11e8920fa75a8da3d546141a0e7dc9549600750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b88859494000004030046304402202f9885f9bd9bed3941c5426115c506c0d1757855cb07802a17c1aacaed69841d0220183fcde03e694f8336f28ce765e3a1dffa75413dd72754bc2b980832388756a7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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