www.culturatech.com
Issued by R3
About this certificate
This digital certificate with serial number 04:7f:6f:e5:22:26:ae:7a:19:34:cb:d7:b6:02:b8:f4:8a:a9 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.culturatech.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:7f:6f:e5:22:26:ae:7a:19:34:cb:d7:b6:02:b8:f4:8a:a9Serial Number (int): 391813738362179496283154256663200889342633
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: b1:9d:4d:6e:84:e3:e2:aa:75:60:7f:c0:8b:34:6d:35:3b:10:e1:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): d6:14:85:3f:a9:eb:5b:ca:cf:f8:3a:ff:3b:3b:fa:bc:aa:ae:e6:14
Fingerprint (sha256): 1e:c5:d9:df:d9:fe:33:64:48:20:82:8a:8e:c4:ea:7f:13:63:cf:78:c2:18:0c:7c:27:7c:12:5d:93:86:be:9d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.culturatech.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.culturatech.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
culturatech.com
www.culturatech.com
www.culturatech.com
Other certificates including the domain name culturatech.com
(limited to 100 certificates)
access.ourvolaris.com
fsus-7.freshservice.com
rapids.culturatech.com
fsus-7.freshservice.com
fsus-7.freshservice.com
*.culturatech.com
rapids.culturatech.com
servicedesk.culturatech.com
culturatech.com
helpdesk.cavium.com
access.ourvolaris.com
rapidstest.culturatech.com
mail.ourvolaris.com
culturatech.com
access.ourvolaris.com
webext.ourvolaris.com
access.ourvolaris.com
www.culturatech.com
access.ourvolaris.com
helpdesk.culturatech.com
go.culturatech.com
fsus-7.freshservice.com
mygrower.culturatech.com
fsus-7.freshservice.com
helpdesk.cavium.com
access.ourvolaris.com
fsus-7.freshservice.com
webext.ourvolaris.com
culturatech.com
jira.culturatech.com
culturatech.com
access.ourvolaris.com
helpdesk.cavium.com
access.ourvolaris.com
webext.ourvolaris.com
fsus-7.freshservice.com
testinsight.culturatech.com
access.ourvolaris.com
go.culturatech.com
helpdesk.culturatech.com
access.ourvolaris.com
ftp.culturatech.com
fsus-7.freshservice.com
jira.culturatech.com
go.culturatech.com
culturatech.com
fsus-7.freshservice.com
*.culturatech.com
webext.ourvolaris.com
fsus-7.freshservice.com
culturatech.com
access.ourvolaris.com
helpdesk.culturatech.com
helpdesk.culturatech.com
access.ourvolaris.com
servicedesk.culturatech.com
ais.culturatech.com
webext.ourvolaris.com
fsus-7.freshservice.com
ftp.culturatech.com
jira.culturatech.com
fsus-7.freshservice.com
vpn.culturatech.com
webext.ourvolaris.com
vpn.culturatech.com
culturatech.com
access.ourvolaris.com
helpdesk.cavium.com
go.culturatech.com
mygrower.culturatech.com
webext.ourvolaris.com
webext.ourvolaris.com
access.ourvolaris.com
webext.ourvolaris.com
webext.ourvolaris.com
access.ourvolaris.com
fsus-7.freshservice.com
*.culturatech.com
access.ourvolaris.com
access.ourvolaris.com
fsus-7.freshservice.com
rapids.culturatech.com
webext.ourvolaris.com
culturatech.com
*.culturatech.com
access.ourvolaris.com
admrapids.culturatech.com
fsus-7.freshservice.com
webext.ourvolaris.com
webext.ourvolaris.com
access.ourvolaris.com
fsus-7.freshservice.com
access.ourvolaris.com
rapidstest.culturatech.com
webext.ourvolaris.com
fsus-7.freshservice.com
sstintegration.culturatech.com
access.ourvolaris.com
rapidstest.culturatech.com
webext.ourvolaris.com
fsus-7.freshservice.com
rapids.culturatech.com
fsus-7.freshservice.com
fsus-7.freshservice.com
*.culturatech.com
rapids.culturatech.com
servicedesk.culturatech.com
culturatech.com
helpdesk.cavium.com
access.ourvolaris.com
rapidstest.culturatech.com
mail.ourvolaris.com
culturatech.com
access.ourvolaris.com
webext.ourvolaris.com
access.ourvolaris.com
www.culturatech.com
access.ourvolaris.com
helpdesk.culturatech.com
go.culturatech.com
fsus-7.freshservice.com
mygrower.culturatech.com
fsus-7.freshservice.com
helpdesk.cavium.com
access.ourvolaris.com
fsus-7.freshservice.com
webext.ourvolaris.com
culturatech.com
jira.culturatech.com
culturatech.com
access.ourvolaris.com
helpdesk.cavium.com
access.ourvolaris.com
webext.ourvolaris.com
fsus-7.freshservice.com
testinsight.culturatech.com
access.ourvolaris.com
go.culturatech.com
helpdesk.culturatech.com
access.ourvolaris.com
ftp.culturatech.com
fsus-7.freshservice.com
jira.culturatech.com
go.culturatech.com
culturatech.com
fsus-7.freshservice.com
*.culturatech.com
webext.ourvolaris.com
fsus-7.freshservice.com
culturatech.com
access.ourvolaris.com
helpdesk.culturatech.com
helpdesk.culturatech.com
access.ourvolaris.com
servicedesk.culturatech.com
ais.culturatech.com
webext.ourvolaris.com
fsus-7.freshservice.com
ftp.culturatech.com
jira.culturatech.com
fsus-7.freshservice.com
vpn.culturatech.com
webext.ourvolaris.com
vpn.culturatech.com
culturatech.com
access.ourvolaris.com
helpdesk.cavium.com
go.culturatech.com
mygrower.culturatech.com
webext.ourvolaris.com
webext.ourvolaris.com
access.ourvolaris.com
webext.ourvolaris.com
webext.ourvolaris.com
access.ourvolaris.com
fsus-7.freshservice.com
*.culturatech.com
access.ourvolaris.com
access.ourvolaris.com
fsus-7.freshservice.com
rapids.culturatech.com
webext.ourvolaris.com
culturatech.com
*.culturatech.com
access.ourvolaris.com
admrapids.culturatech.com
fsus-7.freshservice.com
webext.ourvolaris.com
webext.ourvolaris.com
access.ourvolaris.com
fsus-7.freshservice.com
access.ourvolaris.com
rapidstest.culturatech.com
webext.ourvolaris.com
fsus-7.freshservice.com
sstintegration.culturatech.com
access.ourvolaris.com
rapidstest.culturatech.com
webext.ourvolaris.com
Certificate
The complete raw certificate details for www.culturatech.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISBH9v5SImrnoZNMvXtgK49IqpMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMzEyMjEzNDlaFw0yNDA2MjkyMjEzNDhaMB4xHDAaBgNVBAMT E3d3dy5jdWx0dXJhdGVjaC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCfBonaSbm5uoq5H9NsrZNDt4WpXXseZ1RaZ5lvAw3aA0MFmunREECYm847 DLkKxVEik+NmqxpsXXvMFPmgkOo63eDGUhfl04KJnKpt8ZBSrRToNCt8EqY3nDIe tWim5GPnJ5cqMLdWLtRd6uwFlGCaFfApvNZiObOA2sQzmXbQdeenHW078UzEDtjs deKRlItMdDODcZAGLFSHAuOs1kU1/5Zum9wV2yg37f2STV0xEO5K11xx7Zx7T2Yi XhqxBTtXm/XzmBj3UMcZ76rypxTU4dvbed6O+1vNwzXq5HFj9ObplyZz4cGQJ8fi aMJazWd/QsMuKFEAsSJX2946AroZAgMBAAGjggImMIICIjAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFLGdTW6E4+KqdWB/wIs0bTU7EOH6MB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMC8GA1UdEQQoMCaCD2N1bHR1cmF0ZWNoLmNvbYITd3d3LmN1bHR1cmF0 ZWNoLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUE gfIA8AB1AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjpbKYsYA AAQDAEYwRAIgYXssjHlpqNfq60H+exfJ4KuCqRVjYTUcIQDLB81+AcQCIFHYVYu/ W+yOhhtMK1EEtOkRd7QLHlAOBURvX0Bb8KGXAHcAdv+IPwq2+5VRwmHM9Ye6NLSk zbsp3GhCCp/mZ0xaOnQAAAGOlspi/gAABAMASDBGAiEAtpiT62xISu/bmcyZ8JVj RssSuA/7jNKEBJMJYjLGzkQCIQDD15xTXF4vpDtYJZuhs9tmSV+MEsSWO5fJSwEn scv88TANBgkqhkiG9w0BAQsFAAOCAQEAg7jMon01xPIc8KwJPES/KuBkLWXEqk6a eAhr6M55QYZk2oLs8j2glXmKtubG5t1jgSEibdK/cEurtZmtv6sTHQOXB0XbvlYA uhqqDVNQZ9dYYEx+ydov2AOashpQVUr2VvQQj1kgwvA9b2JAEmdVrhdprmwQM6UJ zC1gdsHGJlReQBj39WY+b8Zzj4x4oMG//3i4t12XQYjalqQpmvyCMkIog/Nme677 NmO3P1niFx88OPovvKM3yT7ncOssFgE5L/U1VcfkOGCpDAiZOQ2KrAdEG6YbDrqO AZJ58Wvf0wqsNIzWY9isibTgRKRKgKp/4byzW5uZeqcpPXqBwHG2wg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwaJ2km5ubqKuR/TbK2T Q7eFqV17HmdUWmeZbwMN2gNDBZrp0RBAmJvOOwy5CsVRIpPjZqsabF17zBT5oJDq Ot3gxlIX5dOCiZyqbfGQUq0U6DQrfBKmN5wyHrVopuRj5yeXKjC3Vi7UXersBZRg mhXwKbzWYjmzgNrEM5l20HXnpx1tO/FMxA7Y7HXikZSLTHQzg3GQBixUhwLjrNZF Nf+WbpvcFdsoN+39kk1dMRDuStdcce2ce09mIl4asQU7V5v185gY91DHGe+q8qcU 1OHb23nejvtbzcM16uRxY/Tm6Zcmc+HBkCfH4mjCWs1nf0LDLihRALEiV9veOgK6 GQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 391813738362179496283154256663200889342633 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 22:13:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-29 22:13:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.culturatech.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20075114737742176644734014698657877144791613168016063106658448153768683294912486107461422257799178959037860880028104349956523347695626510242981465982729306520235257060064656617951715986078827983630823084991166599816215457257017476500059820241502768248696366879824627881217232604987592329239916910544104839785373874962988572370820560837929986617042358147511583379215900848280839291376941621801294468649243717394123727417877361161964661313594049660738322803978675521059654881260742937591234580860992046906493339439558899805663497564366603852049777664473601210938031322162109092808221813564081086027793720996768730233369 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b19d4d6e84e3e2aa75607fc08b346d353b10e1fa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturatech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culturatech.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e96ca62c600000403004630440220617b2c8c7969a8d7eaeb41fe7b17c9e0ab82a9156361351c2100cb07cd7e01c4022051d8558bbf5bec8e861b4c2b5104b4e91177b40b1e500e05446f5f405bf0a19700770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e96ca62fe0000040300483046022100b69893eb6c484aefdb99cc99f0956346cb12b80ffb8cd2840493096232c6ce44022100c3d79c535c5e2fa43b58259ba1b3db66495f8c12c4963b97c94b0127b1cbfcf1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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