para-gliding.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:aa:12:06:d5:02:0b:e4:c1:73:4f:d3:f2:cf:99:c1:f5:1b was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=para-gliding.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:aa:12:06:d5:02:0b:e4:c1:73:4f:d3:f2:cf:99:c1:f5:1bSerial Number (int): 406321107681621187856520415861194342135067
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 78:96:8c:21:94:9c:fc:75:89:ab:c7:89:0b:c8:1d:8b:66:04:f9:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e0:3d:23:de:c7:ca:7a:8a:1d:fb:81:13:ee:43:ab:34:be:ed:cf:00
Fingerprint (sha256): 21:60:57:c1:a0:dc:05:1d:8e:25:25:66:48:5a:7d:29:64:dc:9e:3f:43:c4:a5:ef:ec:42:f1:1b:2d:12:52:40
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate para-gliding.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for para-gliding.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
para-gliding.com
www.para-gliding.com
www.para-gliding.com
Other certificates including the domain name para-gliding.com
(limited to 100 certificates)
agonda.para-gliding.com
para-gliding.com
pokhara.net
mysecretplanet.com
para-gliding.com
pokhara.net
varkala.info
varkala.info
palolem.net
palolem.net
para-gliding.com
pokhara.net
para-gliding.com
varkala.info
varkala.info
para-gliding.com
agonda.para-gliding.com
mysecretplanet.com
palolem.net
para-gliding.com
varkala.info
para-gliding.com
mysecretplanet.com
mysecretplanet.para-gliding.com
pokhara.net
pokhara.para-gliding.com
agonda.para-gliding.com
agonda.biz
para-gliding.com
palolem.net
home-maintenance.pro
palolem.net
varkala.para-gliding.com
para-gliding.com
agonda.para-gliding.com
para-gliding.com
para-gliding.com
mysecretplanet.com
para-gliding.com
varkala.info
mysecretplanet.com
agonda.para-gliding.com
palolem.para-gliding.com
varkala.info
pokhara.net
home.para-gliding.com
para-gliding.com
pokhara.net
mysecretplanet.com
para-gliding.com
pokhara.net
varkala.info
varkala.info
palolem.net
palolem.net
para-gliding.com
pokhara.net
para-gliding.com
varkala.info
varkala.info
para-gliding.com
agonda.para-gliding.com
mysecretplanet.com
palolem.net
para-gliding.com
varkala.info
para-gliding.com
mysecretplanet.com
mysecretplanet.para-gliding.com
pokhara.net
pokhara.para-gliding.com
agonda.para-gliding.com
agonda.biz
para-gliding.com
palolem.net
home-maintenance.pro
palolem.net
varkala.para-gliding.com
para-gliding.com
agonda.para-gliding.com
para-gliding.com
para-gliding.com
mysecretplanet.com
para-gliding.com
varkala.info
mysecretplanet.com
agonda.para-gliding.com
palolem.para-gliding.com
varkala.info
pokhara.net
home.para-gliding.com
Certificate
The complete raw certificate details for para-gliding.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgISBKoSBtUCC+TBc0/T8s+ZwfUbMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDUwMDE3NDZaFw0y MDAxMDMwMDE3NDZaMBsxGTAXBgNVBAMTEHBhcmEtZ2xpZGluZy5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDCG4rYyERpWhp7Hv+4RaX2hJ7PDo0W jZQJM1i895QkgRHI00rprDZaqYH34rZ0dJDNy5YyCntew9EUvYdprBi3nmUnuK2b 37KEPpW+0gRbXlDfA4zRkFui2oyzb4+Z5cUVzyclX9Rj9CUdVAkWVJdyirgOqQ5W 2vB7xW9SYROj87hkhzlVgK51VxVgpBqZcmgRTV/aNJSek3niUqL/l6G7M5Udcb6Q bQ1K4TRB6IDGC9/AUCY9n0Ja8l4m1I6wUNlYtSHupDLopEpI/QFEfSz/axnvVRTF 8g2uOT2ugP48in/AqwWERhPryXIFJa6187RlCDtEGu0VOLPTj0aMGD6eI8Fhyx+D PnUjrW3fo20eP+umTNlpQ+6WxF2NGE7I96HCdoAcDzHTh6D1sJqv15K04QZ0ekV6 6gLUO7a0EUTHEsiN138NtHtWW9I46jSwV55Dh/arw/Z9Q1LH74CvIlGjoShrE/Bt ylZK7QpkYLNnhS9P1AaiFMJEQIDKyT3JDOSvhVJsFJkGkdYoRdihWFthtAKDaVGi j/FdxxhftBYTmCHwHRpM5vXo+isW72HhmkhJzR44E/lw0wU+djkYuetK1UdPOUHa IMhW13ONbeTD7ikvTsFDznUq4+684pVAkq2yUju3vKlFOEIkK7Tg32QO1PkFSCoI MGUaOmBmwWOCXQIDAQABo4ICejCCAnYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR4 lowhlJz8dYmrx4kLyB2LZgT5NjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMDEGA1UdEQQqMCiCEHBhcmEtZ2xpZGluZy5j b22CFHd3dy5wYXJhLWdsaWRpbmcuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAXqdz+d9WwOe1Nkh90Eng MnqRmgyEoRIShBh1loFxRVgAAAFtmX58zAAABAMARzBFAiEAqHq+408cnHonWrOe mqoJHLfznQFgNNj8HfObzdmly3ECIBpJl0A5DzvKfsp9SXsqa6xCh0v+6XKElEO4 gUEfs94XAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFtmX58 fAAABAMARjBEAiA1Y6RNrnYYHVnHJVQ0LnWdVX+UOp8zV4PwvLaIbfDgvAIgOKgl i8QC27dpLBT7cUiNXdWraEKX9m2Hv06WNmrAz70wDQYJKoZIhvcNAQELBQADggEB AJIZb0h9NtKRKFrtIazxtgoCjgMeGTS23T1wbsme3Dt8e8axo9LSCrC7zQodtLGU v91kvzhszyTPdsSp3/iD2zbhdjpVT8+vFH/sc2u3Vfo/b9KKHRfZZk649c8bqxXV ZJS6udu0l5+jydiX+lQa45M+SqkDjpITpI0uNYm+DjQgcqmSv8DkukUt8Wn9Ipwk UdhoT50y9wzIJKyHW/q2w0mFNZl6mcPLBAlKR6QcTU/QWI8CuemIJXhPKZ6W2x2A GZUJLrzHJDyvnSiuNVoiniycOeri913Xrv7rBdNJhlD+eDHWhjcSXT+JQu1qpi4m 5/lAENs/Rl3X67J69IguIEs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwhuK2MhEaVoaex7/uEWl 9oSezw6NFo2UCTNYvPeUJIERyNNK6aw2WqmB9+K2dHSQzcuWMgp7XsPRFL2HaawY t55lJ7itm9+yhD6VvtIEW15Q3wOM0ZBbotqMs2+PmeXFFc8nJV/UY/QlHVQJFlSX coq4DqkOVtrwe8VvUmETo/O4ZIc5VYCudVcVYKQamXJoEU1f2jSUnpN54lKi/5eh uzOVHXG+kG0NSuE0QeiAxgvfwFAmPZ9CWvJeJtSOsFDZWLUh7qQy6KRKSP0BRH0s /2sZ71UUxfINrjk9roD+PIp/wKsFhEYT68lyBSWutfO0ZQg7RBrtFTiz049GjBg+ niPBYcsfgz51I61t36NtHj/rpkzZaUPulsRdjRhOyPehwnaAHA8x04eg9bCar9eS tOEGdHpFeuoC1Du2tBFExxLIjdd/DbR7VlvSOOo0sFeeQ4f2q8P2fUNSx++AryJR o6EoaxPwbcpWSu0KZGCzZ4UvT9QGohTCRECAysk9yQzkr4VSbBSZBpHWKEXYoVhb YbQCg2lRoo/xXccYX7QWE5gh8B0aTOb16PorFu9h4ZpISc0eOBP5cNMFPnY5GLnr StVHTzlB2iDIVtdzjW3kw+4pL07BQ851KuPuvOKVQJKtslI7t7ypRThCJCu04N9k DtT5BUgqCDBlGjpgZsFjgl0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 406321107681621187856520415861194342135067 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-05 00:17:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-03 00:17:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'para-gliding.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791889867429332754159624122994614942815867097796496582306396588409569529010903195115833845732214024389138793503270389600920295971944332625423191064289099402779371076729107371742600421545087776076126553292447748373943244243096844072879710626503633451118505936151125417986077754344239744837722888460780017748915954136059304085497008855167529337766473477795611039016598173124223811440810314070748954862633910072851547909475696940406484049977730604478438729294335360480304911092471732564042175803646102232531264609047132673988974284447941132198779290229107612939734337957309407358319172714803676279833893156655872549259625754634240634271833556447396662731671432904241312857893903366463021174457298393221966652454497761430028120208170897536885310448718259229504902476412703072813908968723308542719269657562185306530381139091825624870843254931227922412730304739365616939356474222280956018487722598138413171753497327677927356101054267383303122226767075514443117393122891559178227412813740328921306912367672636869216995530247398322240134413645792259643546335637910784164796521665420736606781966420518819844010448035602010954134888966591911558424102752169328090541495496312246041289783944706498413201479586823935530298469200159462169868730973 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 78968c21949cfc7589abc7890bc81d8b6604f936 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'para-gliding.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.para-gliding.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d997e7ccc0000040300473045022100a87abee34f1c9c7a275ab39e9aaa091cb7f39d016034d8fc1df39bcdd9a5cb7102201a499740390f3bca7eca7d497b2a6bac42874bfee972849443b881411fb3de17007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016d997e7c7c000004030046304402203563a44dae76181d59c72554342e759d557f943a9f335783f0bcb6886df0e0bc022038a8258bc402dbb7692c14fb71488d5dd5ab684297f66d87bf4e96366ac0cfbd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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