agriculture.com
Issued by R3
About this certificate
This digital certificate with serial number 03:cc:3d:44:1f:c8:6c:33:7b:b4:ad:05:f9:d4:62:e4:fb:82 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=agriculture.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:cc:3d:44:1f:c8:6c:33:7b:b4:ad:05:f9:d4:62:e4:fb:82Serial Number (int): 330835897275715263559442105974758069042050
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 11:46:96:92:51:fa:aa:49:29:c0:2f:8f:9d:8a:45:d1:f5:45:59:4c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 79:b0:ad:0d:79:82:96:4b:76:3d:f8:96:41:ea:25:99:b6:c5:99:81
Fingerprint (sha256): 19:0a:22:c0:99:24:e2:ee:c0:20:b4:f8:4a:13:59:02:66:cc:6b:42:f1:a8:60:cb:41:dc:60:4d:61:73:97:13
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate agriculture.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for agriculture.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.agriculture.com
agriculture.com
agriculture.com
Other certificates including the domain name agriculture.com
(limited to 100 certificates)
payments.meredith.com
secure05.lithium.com
qa4.ugc.marthastewart.com
wpm01.eccmp.com
*.secure.meredith.com
secure.meredith.com
my.meredith.com
sli.dailypaws.com
sli.dailypaws.com
secure05.lithium.com
a-ue1.mydomaine.com
wpm01.eccmp.com
payments.meredith.com
secure05.lithium.com
wpm01.eccmp.com
agriculture.com
wpm01.eccmp.com
wpm01.eccmp.com
agriculture.com
qa4.ugc.marthastewart.com
secure05.lithium.com
specialoffers.meredith.com
sli.dailypaws.com
*.agriculture.com
wpm.eccmp.com
dev.secure.meredith.com
wpm01.eccmp.com
secure05.lithium.com
sli.dailypaws.com
sli.dailypaws.com
secure.meredith.com
secure05.lithium.com
wpm01.eccmp.com
secure05.lithium.com
wpm01.eccmp.com
agriculture.com
mywedding.com
secure.meredith.com
mywedding.com
qa2.ugc.marthastewart.com
a-uw2.mydomaine.com
mdp.api.meredith.com
secure05.lithium.com
secure.meredith.com
wpm01.eccmp.com
secure05.lithium.com
agriculture.com
a-ue1.mydomaine.com
secure05.lithium.com
qa4.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com
secure05.lithium.com
wpm01.eccmp.com
test.payments.meredith.com
secure05.lithium.com
secure.meredith.com
*.agriculture.com
secure05.lithium.com
secure05.lithium.com
wpm01.eccmp.com
sli.dailypaws.com
secure05.lithium.com
secure05.lithium.com
a-ue1.mydomaine.com
wpm01.eccmp.com
qa3.ugc.marthastewart.com
ugc.marthastewart.com
sli.dailypaws.com
secure05.lithium.com
secure05.lithium.com
test.secure.meredith.com
qa3.ugc.marthastewart.com
agriculture.com
links.allrecipes.com
sli.dailypaws.com
agriculture.com
secure05.lithium.com
wpm01.eccmp.com
agriculture.com
cr-iframe.magazine.store
secure05.lithium.com
secure.meredith.com
wpm01.eccmp.com
wpm01.eccmp.com
payments.meredith.com
wpm01.eccmp.com
wpm01.eccmp.com
secure05.lithium.com
wpm01.eccmp.com
*.secure.meredith.com
secure.meredith.com
secure05.lithium.com
qa3.ugc.marthastewart.com
agriculture.com
www.agriculture.com
secure05.lithium.com
cr-iframe.magazine.store
agriculture.com
api.meredith.com
secure05.lithium.com
qa4.ugc.marthastewart.com
wpm01.eccmp.com
*.secure.meredith.com
secure.meredith.com
my.meredith.com
sli.dailypaws.com
sli.dailypaws.com
secure05.lithium.com
a-ue1.mydomaine.com
wpm01.eccmp.com
payments.meredith.com
secure05.lithium.com
wpm01.eccmp.com
agriculture.com
wpm01.eccmp.com
wpm01.eccmp.com
agriculture.com
qa4.ugc.marthastewart.com
secure05.lithium.com
specialoffers.meredith.com
sli.dailypaws.com
*.agriculture.com
wpm.eccmp.com
dev.secure.meredith.com
wpm01.eccmp.com
secure05.lithium.com
sli.dailypaws.com
sli.dailypaws.com
secure.meredith.com
secure05.lithium.com
wpm01.eccmp.com
secure05.lithium.com
wpm01.eccmp.com
agriculture.com
mywedding.com
secure.meredith.com
mywedding.com
qa2.ugc.marthastewart.com
a-uw2.mydomaine.com
mdp.api.meredith.com
secure05.lithium.com
secure.meredith.com
wpm01.eccmp.com
secure05.lithium.com
agriculture.com
a-ue1.mydomaine.com
secure05.lithium.com
qa4.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com
secure05.lithium.com
wpm01.eccmp.com
test.payments.meredith.com
secure05.lithium.com
secure.meredith.com
*.agriculture.com
secure05.lithium.com
secure05.lithium.com
wpm01.eccmp.com
sli.dailypaws.com
secure05.lithium.com
secure05.lithium.com
a-ue1.mydomaine.com
wpm01.eccmp.com
qa3.ugc.marthastewart.com
ugc.marthastewart.com
sli.dailypaws.com
secure05.lithium.com
secure05.lithium.com
test.secure.meredith.com
qa3.ugc.marthastewart.com
agriculture.com
links.allrecipes.com
sli.dailypaws.com
agriculture.com
secure05.lithium.com
wpm01.eccmp.com
agriculture.com
cr-iframe.magazine.store
secure05.lithium.com
secure.meredith.com
wpm01.eccmp.com
wpm01.eccmp.com
payments.meredith.com
wpm01.eccmp.com
wpm01.eccmp.com
secure05.lithium.com
wpm01.eccmp.com
*.secure.meredith.com
secure.meredith.com
secure05.lithium.com
qa3.ugc.marthastewart.com
agriculture.com
www.agriculture.com
secure05.lithium.com
cr-iframe.magazine.store
agriculture.com
api.meredith.com
Certificate
The complete raw certificate details for agriculture.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISA8w9RB/IbDN7tK0F+dRi5PuCMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDkwODEyMDRaFw0yNDA3MDgwODEyMDNaMBoxGDAWBgNVBAMT D2FncmljdWx0dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALOgcBYvy1F04Lu+eLRaJHCWhw/J01YTmcU0Wd4QWFzKkV57/4Hm+nbTlPGlHP1J Ny3sbQ58myE789BpZoF71ta1rcHBt0lCcuYSZpGp2mJOKrnYCoYsEz7F45YGtLZx bbHDTWmutcaPDOFUcAmInnN++hL0+FMtGTeA9Hi5iExL+gMQHvYmAUobbx73Dqan JlyquewIY5jNrnHHKPFDDTYt8wBUf8EuJg+8Yp48tqFI4O1CfiFdjmyfXfMqvmzG THI5Oryil5PjeOXi1QAaZantYPhMWZ0uvOCk2HdUEH5eN/cZcMaVYAnf6j/Dwzpx jdMynxPc3uPttCTf9eo60dkCAwEAAaOCAiMwggIfMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUEUaWklH6qkkpwC+PnYpF0fVFWUwwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wLQYDVR0RBCYwJIIRKi5hZ3JpY3VsdHVyZS5jb22CD2FncmljdWx0dXJlLmNv bTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2 AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjsIg+IkAAAQDAEcw RQIhAOEXeGZuHbUZJp3unWMJJ7KYNDpqvc8Vqz+zURX1drhgAiB+UVBRIgZ6MvGZ 7PI+c5AvCjBm+UB3ORtclsRHQK5+dgB1ABmYEHEJ8NZSLjCA0p4/ZLuDbijM+Q9S ju7fzko/FrTKAAABjsIg+IUAAAQDAEYwRAIgEA6d7I3t2u5DDW9GgC/G8d+huFja HUvBeBSNqHijfvgCIAYDG/mIiIpSPUX47TJnv8KD17zReJyQDFvAJoq7fZZbMA0G CSqGSIb3DQEBCwUAA4IBAQBANrh2FCTFdFX/ltqQ4NslsH/vfdSJjR1Q6bbsBZya oC0S6CG+ZVqyVlzbijhUcB9P08ZHDkVyJRXdiiX684Sf8mEE7i+iCOVsWIxhRCIE S+1LCEFZd2h+Ny/ScghiR46NrU5em3Ch8wfeB4ZzVcVoZDUKz6qqN2Ewpu8A+iyl lyWP/jr6HSq8qS2uLiiytOn6tltBnetvWaUGl+ZNBBczRqV9p6mqCymPc6rfdAz8 Sm1ttkNYaEYAXpGSVn6/pVCRgtKgVWyAoN3Bq2v8ISxijTGrbF6nlWIhIOfOzW8N NichpKm2mRMGyZgCDH0Onp73QnwLqhVIG+hZoWE2bg+D -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6BwFi/LUXTgu754tFok cJaHD8nTVhOZxTRZ3hBYXMqRXnv/geb6dtOU8aUc/Uk3LextDnybITvz0GlmgXvW 1rWtwcG3SUJy5hJmkanaYk4qudgKhiwTPsXjlga0tnFtscNNaa61xo8M4VRwCYie c376EvT4Uy0ZN4D0eLmITEv6AxAe9iYBShtvHvcOpqcmXKq57AhjmM2uccco8UMN Ni3zAFR/wS4mD7xinjy2oUjg7UJ+IV2ObJ9d8yq+bMZMcjk6vKKXk+N45eLVABpl qe1g+ExZnS684KTYd1QQfl439xlwxpVgCd/qP8PDOnGN0zKfE9ze4+20JN/16jrR 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 330835897275715263559442105974758069042050 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 08:12:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-08 08:12:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agriculture.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22675771435760333082141224477450389963693379279297166930442491302734689863830768504559117066978833222037941955832805037814541225088926113847642401307276039652505816869354574392297817980356557169227258207353940361136931836845020230655972274655192103671177634751146903746637919623875535227765418046733485840329119361660616527874095090523441902474424803221985824140118302599197530202575708740871785603424819492687796631006790665526851251098247197479241738657333084238673191278442178659243571805956699355490403063430778728062801443581266642752486873657450395082599912042234127559332020814905407412542050145301035759620569 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1146969251faaa4929c02f8f9d8a45d1f545594c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agriculture.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ec220f8890000040300473045022100e11778666e1db519269dee9d630927b298343a6abdcf15ab3fb35115f576b86002207e51505122067a32f199ecf23e73902f0a3066f94077391b5c96c44740ae7e760075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ec220f88500000403004630440220100e9dec8deddaee430d6f46802fc6f1dfa1b858da1d4bc178148da878a37ef8022006031bf988888a523d45f8ed3267bfc283d7bcd1789c900c5bc0268abb7d965b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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