ipv4africa.com
Issued by R3
About this certificate
This digital certificate with serial number 04:02:7f:09:55:13:8d:de:fb:af:32:2b:da:00:08:e9:4e:3b was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ipv4africa.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:02:7f:09:55:13:8d:de:fb:af:32:2b:da:00:08:e9:4e:3bSerial Number (int): 349298568872573332997355342684277124451899
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 29:cd:cd:d0:5d:2a:1d:4a:75:aa:dd:4b:25:ef:8f:89:d5:48:86:08
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 5c:e9:2f:fa:49:b7:c0:e9:83:c7:04:7a:f5:10:1d:e4:06:81:6b:f6
Fingerprint (sha256): 1c:7e:a5:46:31:dd:52:4b:97:83:d0:22:18:6d:c6:fe:7b:83:db:4a:e6:aa:ea:2a:41:d9:4d:df:81:ed:cc:d0
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ipv4africa.com
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ipv4africa.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
arbitragemaker.com.curepoisonivyitch.net
buyerdesign.com
clayclarkstowergardens.com.webstoregenerator.com
cogentechnologies.com
craftedcarvings.net
domainsidehustle.com
heliportequipment.com
hkj.co.in.hazmatresponse.com
ipv4africa.com
jackphilips.com.coloradointeriors.co
rheast.net
veggiewool.com
buyerdesign.com
clayclarkstowergardens.com.webstoregenerator.com
cogentechnologies.com
craftedcarvings.net
domainsidehustle.com
heliportequipment.com
hkj.co.in.hazmatresponse.com
ipv4africa.com
jackphilips.com.coloradointeriors.co
rheast.net
veggiewool.com
Other certificates including the domain name ipv4africa.com
(limited to 100 certificates)
freelunches.org
freelunches.org
saintflanagan.ie
immerse.marketing
justwanna.world
sculpit.media
ipv4africa.com
arbitrageurs.cc
sculpit.media
saintlouissubdivision.com.ipv4africa.com
modeling.world
jenksamericatoastmasters.club
sculpit.media
electioncrimeunit.org
34755625397.ca
playgolf.club
sculpit.media
jenksamericatoastmasters.club
34755625397.ca
leaselock.me
ipv4africa.com
sapiens.sapia.pe.sapia.pe
justwanna.world
sapiens.sapia.pe.sapia.pe
justwanna.world
allanblock.on.ca
sculpit.media
controlpew2.com
justwanna.world
34725625397.ca
shoredreams.org
ipv4africa.com
evidence4god.org
cbgusa.com.brioche.gold
34755625397.ca
defiantsilver.life.ipv4africa.com
neutriceutical.com.cr4u.org
southnorfolk.email
astrologywizard.org
jenksamericatoastmasters.club
profoundstrategy.org
sapiens.sapia.pe.sapia.pe
mediaberry.ca
profoundstrategy.org
freelunches.org
saintflanagan.ie
immerse.marketing
justwanna.world
sculpit.media
ipv4africa.com
arbitrageurs.cc
sculpit.media
saintlouissubdivision.com.ipv4africa.com
modeling.world
jenksamericatoastmasters.club
sculpit.media
electioncrimeunit.org
34755625397.ca
playgolf.club
sculpit.media
jenksamericatoastmasters.club
34755625397.ca
leaselock.me
ipv4africa.com
sapiens.sapia.pe.sapia.pe
justwanna.world
sapiens.sapia.pe.sapia.pe
justwanna.world
allanblock.on.ca
sculpit.media
controlpew2.com
justwanna.world
34725625397.ca
shoredreams.org
ipv4africa.com
evidence4god.org
cbgusa.com.brioche.gold
34755625397.ca
defiantsilver.life.ipv4africa.com
neutriceutical.com.cr4u.org
southnorfolk.email
astrologywizard.org
jenksamericatoastmasters.club
profoundstrategy.org
sapiens.sapia.pe.sapia.pe
mediaberry.ca
profoundstrategy.org
Certificate
The complete raw certificate details for ipv4africa.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgISBAJ/CVUTjd77rzIr2gAI6U47MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MjAwODE3NTRaFw0yMzEyMTkwODE3NTNaMBkxFzAVBgNVBAMT DmlwdjRhZnJpY2EuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA 32nTBzPDUJU7/rPZ5oac1hWyYm1EaFryDB1wU6kmFe2ObXKRMf+aiaijebAR9muO +r7iRM8XMJUWFwJkGQHEoQoHrm76dg6UNRTVK0FWDA1kpImH+B721uKxCPlXAtc/ xFHnGV+7KfJIGuJZoHNUfTiWEEZ8pM/T4wfh+qTjwG6I71i5ufS+6SMKHN8jxPhq MxaZVLCOE87TydZTiuhvRXAU5JkNQN+BLfx5GJ1C10tjR9+FnSFAv3jCu4p4qrFz rtsYFOeSyrmTQujjGY8EeSJoRyL3d6C7rwO28SWYt1rUzxAMQT7Z5IX9NKwYMBGL P2Hq+I/trl48FgTkRoy6uwIDAQABo4IDPDCCAzgwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBQpzc3QXSodSnWq3Usl74+J1UiGCDAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzCCAUMGA1UdEQSCATowggE2gihhcmJpdHJhZ2VtYWtlci5jb20uY3VyZXBvaXNv bml2eWl0Y2gubmV0gg9idXllcmRlc2lnbi5jb22CMGNsYXljbGFya3N0b3dlcmdh cmRlbnMuY29tLndlYnN0b3JlZ2VuZXJhdG9yLmNvbYIVY29nZW50ZWNobm9sb2dp ZXMuY29tghNjcmFmdGVkY2FydmluZ3MubmV0ghRkb21haW5zaWRlaHVzdGxlLmNv bYIVaGVsaXBvcnRlcXVpcG1lbnQuY29tghxoa2ouY28uaW4uaGF6bWF0cmVzcG9u c2UuY29tgg5pcHY0YWZyaWNhLmNvbYIkamFja3BoaWxpcHMuY29tLmNvbG9yYWRv aW50ZXJpb3JzLmNvggpyaGVhc3QubmV0gg52ZWdnaWV3b29sLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AHoyjFTYty22 IOo44FIe6YQWcDIThU070ivBOlejUutSAAABirHhuQ0AAAQDAEcwRQIhAOD+wJpx /2UdINWsaeQG09MwnJ8YwnyrglyE7R57uXwIAiBDZlR6oH2iayvZeViWR9WlmmLv P7Y7yWVx1M6CI2YvAwB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZ AAABirHhuQYAAAQDAEcwRQIgOxoai8nP9joqBc6+wUqL/O3+sIAqgNDXEz7JPi5a geQCIQCy8yOHj36wATHQTi3CCpKRybTQPM6vPFPWhYW5/99ssDANBgkqhkiG9w0B AQsFAAOCAQEAN5g+Hy1sowC5UjG6HpVz/aDzlKH4w0LApwP9MZTyg7JVzdjYVwvw Yl8Or1ex1FnzNIVG1lDxIXpLpSGlt9/BCGk3gg9IgIx++tR2FJ4LD6c6Y7Xovb1+ jiuGbD9dGoeHnTIceahfLwq124fiDSJ+xBDVzzpQXwaXP+VlVvS3ac4kwrXSyXgG bptLo5rijbuW78fiw+LUKMl+qzulUGLYTBBd4Rfe38gjiPIfa/FUN9qfBEZze6Cy DJ4XRXwPt2J4UlDJ60r7149GQ7Wi6wQO9xnOQb0p6+Gb+voWZIUxyUQmYyOCQLZd 67N0kcBTqhHSgDyyk2KFg73U+Lj+Ysh+iA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32nTBzPDUJU7/rPZ5oac 1hWyYm1EaFryDB1wU6kmFe2ObXKRMf+aiaijebAR9muO+r7iRM8XMJUWFwJkGQHE oQoHrm76dg6UNRTVK0FWDA1kpImH+B721uKxCPlXAtc/xFHnGV+7KfJIGuJZoHNU fTiWEEZ8pM/T4wfh+qTjwG6I71i5ufS+6SMKHN8jxPhqMxaZVLCOE87TydZTiuhv RXAU5JkNQN+BLfx5GJ1C10tjR9+FnSFAv3jCu4p4qrFzrtsYFOeSyrmTQujjGY8E eSJoRyL3d6C7rwO28SWYt1rUzxAMQT7Z5IX9NKwYMBGLP2Hq+I/trl48FgTkRoy6 uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 349298568872573332997355342684277124451899 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 08:17:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 08:17:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ipv4africa.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28203325928808212002259397101127297391677813853282377350655687940078542076878777137752211927197030344553544247870070129358207974175490843499108789783854762059573755140436042838369772363491689478795778137845271397646300352098824009985429952315417434054603103930116292253863036144398120638590622565477432534466382240536933484173640418317622708267141643998542639852142043747909487112344413639696226750260009026825701578568137856341108119606305675137042712101524113862912015913694820479716475033870382480143620802389717991194555505729417763274608004591627321258276177305868914959325373673167517343621877760142028638567099 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 29cdcdd05d2a1d4a75aadd4b25ef8f89d5488608 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (314 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragemaker.com.curepoisonivyitch.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyerdesign.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clayclarkstowergardens.com.webstoregenerator.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogentechnologies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftedcarvings.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainsidehustle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heliportequipment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkj.co.in.hazmatresponse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv4africa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackphilips.com.coloradointeriors.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheast.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veggiewool.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab1e1b90d0000040300473045022100e0fec09a71ff651d20d5ac69e406d3d3309c9f18c27cab825c84ed1e7bb97c0802204366547aa07da26b2bd979589647d5a59a62ef3fb63bc96571d4ce8223662f03007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ab1e1b906000004030047304502203b1a1a8bc9cff63a2a05cebec14a8bfcedfeb0802a80d0d7133ec93e2e5a81e4022100b2f323878f7eb00131d04e2dc20a9291c9b4d03cceaf3c53d68585b9ffdf6cb0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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