www.shop.topf-online.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a9:8d:80:58:29:90:ab:67:31:d6:49:68:fa:c0:f5:3a:31 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.shop.topf-online.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a9:8d:80:58:29:90:ab:67:31:d6:49:68:fa:c0:f5:3a:31Serial Number (int): 319032665354468078700682237986183971158577
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 26:85:d4:42:db:89:57:c7:3a:0d:d6:f4:4e:7b:11:c0:20:28:f4:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0c:57:f2:65:18:88:2e:16:eb:79:26:ab:7d:1b:49:80:83:24:3a:2d
Fingerprint (sha256): 19:27:86:1d:60:b6:f9:60:67:07:34:65:4d:55:fc:06:89:dd:c1:57:58:4a:f4:ae:37:89:b6:e0:e2:6c:72:dd
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.shop.topf-online.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.shop.topf-online.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.shop.topf-online.de
Other certificates including the domain name topf-online.de
(limited to 100 certificates)
shop.topf-online.de
topf-online.de
shop.topf-online.de
www.shop.topf-online.de
topf-online.de
topf-online.de
exchange.topf-online.de
shop.topf-online.de
exchange.topf-online.de
shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
schubkastenshop.topf-online.de
shop.topf-online.de
www.shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
schubkastenshop.topf-online.de
www.shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
topf-online.de
shop.topf-online.de
schubkastenshop.topf-online.de
shop.topf-online.de
schubkastenshop.topf-online.de
shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
schubkastenshop.topf-online.de
shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
topf-online.de
topf-online.de
shop.topf-online.de
www.shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
topf-online.de
shop.topf-online.de
www.shop.topf-online.de
topf-online.de
topf-online.de
exchange.topf-online.de
shop.topf-online.de
exchange.topf-online.de
shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
schubkastenshop.topf-online.de
shop.topf-online.de
www.shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
schubkastenshop.topf-online.de
www.shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
topf-online.de
shop.topf-online.de
schubkastenshop.topf-online.de
shop.topf-online.de
schubkastenshop.topf-online.de
shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
schubkastenshop.topf-online.de
shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
topf-online.de
topf-online.de
shop.topf-online.de
www.shop.topf-online.de
shop.topf-online.de
shop.topf-online.de
Certificate
The complete raw certificate details for www.shop.topf-online.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGaDCCBVCgAwIBAgISA6mNgFgpkKtnMdZJaPrA9ToxMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMzEwNDM4MTRaFw0y MDAzMzAwNDM4MTRaMCIxIDAeBgNVBAMTF3d3dy5zaG9wLnRvcGYtb25saW5lLmRl MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsfDmea6bO06I0p3JQw16 bjSJKW2MwSOMiRsKDG16HucztYQ6gVBCsfOJv4cbOizqd/SwJJkwLdIYtH+v9E9h 92siRBw33tpGZxsbuE6vJPfW6+5MV6jqVRs8N1obvJn5jFjpuUt0TV9+pJcUYTNu FkqZ/IAxLnq36BNLK20ern32JGfaiWZ16PVAGbKNw+vx56i4Zx5zqoLhj02VWxXU MGBQfvVPh+gBJ1VZ8DQaNzoSlKTVKJ+ciwGa113pqM8cunvjo+4NhHLqFPOjrqKt I2lpjAXGCCpUAiVHrUgUZFn/7TuNrFbTphXR1eYIhejmM7IREiqV0lAH1tpuzb7e aVkU/Mg0PHIs1GrlLtkKGwEDwvQmxUn71Q12EKH1s421ydvQhdY++QiUOVhfYVHu +LBhyvxo009HLbGKNJGOEj/7P0g0EBKiXONHB1bjrtvw4QqYEK4R/fPJRYyu7acU RZ34L0lKTaRM+x3kz1OVMwth3UHmj4Repd5nN9UTOpDTkLcW/wZibQT6Q9swCKnO E3Ijx3zdMjrql9uocvyN3NWLIQuXfsDUaCZagNCV770dZ/f/eSZKGNiuN5zpol7X AwqKdigsN8G3xhV5bAZCQmnr9Q3HtzvsO60LoglBe4ojvPNZ3i6OIBBs5WNShtlA nLeDm1RXQyMSvic7Zr/wc8UCAwEAAaOCAm4wggJqMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUJoXUQtuJV8c6Ddb0TnsRwCAo9C8wHwYDVR0jBBgwFoAUqEpqYwR93brm 0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8v b2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8v Y2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAiBgNVHREEGzAZghd3d3cuc2hv cC50b3BmLW9ubGluZS5kZTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC AQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKES EoQYdZaBcUVYAAABb1p2OKsAAAQDAEgwRgIhAITKVLeHdxt9+1SLdPNK8/ELZnqD nO9HdJIT4C38jrSoAiEA3yMLZAlbpQyuknWH5Ur3c0vCBLP4i8hPNx3RuKtvJUwA dwCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW9adjikAAAEAwBI MEYCIQDTwM02Q3kOuooUfZjvOIl71q0fAgvAbtGUgDITcMmbxQIhALz4pCXQTM95 xAukzQEtwiihm+CFu3DHaASuQ4mYQecqMA0GCSqGSIb3DQEBCwUAA4IBAQAnKUCW TKGUqfg9dsRvN0xFJ0HPHag24IOIVDvOzZhHhqhHVjFLqHoqh+0ZwZuwYvAGRTKD fGrM+rpgNHv14IdL1sbELnPufgWoSk6cZnUsjV0oFMSsi7/pCwu7GOb8eRvBjSfl hCy5/TK8EOagKG7mFKS3LHoH8PS+7/qre0Bis5M0RP018tJgxkvl3I4EWUhql3Q2 leR6StLF8a3kxZsHo/rGI4c71PcfY6+N9F2kOpolC7fFsqNGSPSwO6p3UBxuv0B4 9aiNJCS0X1g+DvHCTlf7dCdnl8aR/RX6aZZhMayoTz0mGTOD1nxxj6Am9N1AKZzL qwr4laLhZeTG96iW -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsfDmea6bO06I0p3JQw16 bjSJKW2MwSOMiRsKDG16HucztYQ6gVBCsfOJv4cbOizqd/SwJJkwLdIYtH+v9E9h 92siRBw33tpGZxsbuE6vJPfW6+5MV6jqVRs8N1obvJn5jFjpuUt0TV9+pJcUYTNu FkqZ/IAxLnq36BNLK20ern32JGfaiWZ16PVAGbKNw+vx56i4Zx5zqoLhj02VWxXU MGBQfvVPh+gBJ1VZ8DQaNzoSlKTVKJ+ciwGa113pqM8cunvjo+4NhHLqFPOjrqKt I2lpjAXGCCpUAiVHrUgUZFn/7TuNrFbTphXR1eYIhejmM7IREiqV0lAH1tpuzb7e aVkU/Mg0PHIs1GrlLtkKGwEDwvQmxUn71Q12EKH1s421ydvQhdY++QiUOVhfYVHu +LBhyvxo009HLbGKNJGOEj/7P0g0EBKiXONHB1bjrtvw4QqYEK4R/fPJRYyu7acU RZ34L0lKTaRM+x3kz1OVMwth3UHmj4Repd5nN9UTOpDTkLcW/wZibQT6Q9swCKnO E3Ijx3zdMjrql9uocvyN3NWLIQuXfsDUaCZagNCV770dZ/f/eSZKGNiuN5zpol7X AwqKdigsN8G3xhV5bAZCQmnr9Q3HtzvsO60LoglBe4ojvPNZ3i6OIBBs5WNShtlA nLeDm1RXQyMSvic7Zr/wc8UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 319032665354468078700682237986183971158577 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 04:38:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 04:38:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.shop.topf-online.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 725936013540743342332160010507681764985529954163677408892030450747786651382572016007076039776886944063101672939904112608612101175757402376992809033323450903389796854926732416370384381729104465907427212512201202129141992588382882084047836000898350437086583590667551832666698141366145297231430930880509799746098872042366391987649559699317952725627120555488092148013351670614877926445231205784059022885161600233402579131551782322260274872450827129589868585983156608433545325172056958547182696728654262627299968144445962893153030436571242605113544390758138411347796556524442330968791503108170651184220387761278052401187538307488404389712373606303480403133669874462659296880054616360544261471186612770134078533934341441570908015879597952079192902566571049091463743701744946218309675849540406113563353111900409449938354622743109803833559725276875060407530996609803312637661391028268635048093868965449320496415257727292247062863462864288447294504596257457770863335109024922121189587004432994106834741537005729687240047931036952223931187122528019825318722140655938724089019837828208169851544441884322624740582550599820948722119508942178575679160910245878144369323471735062623265853527279941124448672642706290277360018224469680344653014004677 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2685d442db8957c73a0dd6f44e7b11c02028f42f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.topf-online.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f5a7638ab000004030048304602210084ca54b787771b7dfb548b74f34af3f10b667a839cef47749213e02dfc8eb4a8022100df230b64095ba50cae927587e54af7734bc204b3f88bc84f371dd1b8ab6f254c007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f5a7638a40000040300483046022100d3c0cd3643790eba8a147d98ef38897bd6ad1f020bc06ed19480321370c99bc5022100bcf8a425d04ccf79c40ba4cd012dc228a19be085bb70c76804ae43899841e72a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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