domrustykalny.pl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b0:a1:4d:14:2c:e6:d4:ba:f2:89:e7:e6:bb:93:bc:db:ed was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=domrustykalny.pl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b0:a1:4d:14:2c:e6:d4:ba:f2:89:e7:e6:bb:93:bc:db:edSerial Number (int): 321440960296751058097718461245152223353837
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 44:1f:1e:7d:88:d6:3c:30:92:80:3d:da:e5:a7:4f:24:45:fa:a8:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c8:a7:d0:8d:a4:ac:c8:79:54:55:98:9a:3e:e9:15:f2:ed:1a:ed:ab
Fingerprint (sha256): 21:88:7e:7f:5c:53:91:34:23:35:b1:e3:1f:db:6f:05:71:98:c6:5c:f9:b7:82:50:ed:5a:66:e1:f1:a7:46:50
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate domrustykalny.pl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for domrustykalny.pl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
domrustykalny.pl
www.domrustykalny.pl
www.domrustykalny.pl
Other certificates including the domain name domrustykalny.pl
(limited to 100 certificates)
domrustykalny.pl
blog.domrustykalny.pl
www.domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
blog.domrustykalny.pl
blog.domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
www.domrustykalny.pl
www.domrustykalny.pl
domrustykalny.pl
www.domrustykalny.pl
domrustykalny.pl
blog.domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
www.domrustykalny.pl
www.domrustykalny.pl
blog.domrustykalny.pl
domrustykalny.pl
blog.domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
blog.domrustykalny.pl
domrustykalny.pl
blog.domrustykalny.pl
blog.domrustykalny.pl
www.domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
blog.domrustykalny.pl
blog.domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
www.domrustykalny.pl
www.domrustykalny.pl
domrustykalny.pl
www.domrustykalny.pl
domrustykalny.pl
blog.domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
www.domrustykalny.pl
www.domrustykalny.pl
blog.domrustykalny.pl
domrustykalny.pl
blog.domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
blog.domrustykalny.pl
domrustykalny.pl
blog.domrustykalny.pl
Certificate
The complete raw certificate details for domrustykalny.pl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgISA7ChTRQs5tS68onn5ruTvNvtMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDIwODE4MjFaFw0x OTEyMzEwODE4MjFaMBsxGTAXBgNVBAMTEGRvbXJ1c3R5a2FsbnkucGwwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC9NVHu+jF9+V+Fund7efufnVnxmK1B l/1eQiBryAiXpdy3WQATYFzXzLjutwyAABvE1nh3o2skSmzl8Wq69ak9YvGK5Q+i r9LbhgdU1C47ahMs9w5YwJGrwS+FO0zxlwQEqpeZQ/cxdFI89F7GxfWp6X4EBqEm jtWoekVZjI/D8VoEilB0VOVmNjFPV4kaumr4m5NEdgMgrxbXcW1eA3fRzWT/Ab61 Mf0J0FKGj/M2AlPVJxsZVhyKCZbzklabYJIi/2l+I3nVZY1ITRQRoQNAAv1qH4ld mKkFG7dd5cJAVIwtkgsZjZbusCyT2G4cnpsA6h3rId8b1HY6GsDFgbwaV7MzDw3J a0j5Vxyc6wm3/EOxZnRORmiZSNJ/xN2W2YdxL20Lrb1hrOwBYGtM5sanD/YvQCQs /Tq95Xf0F5WAfoLqD3aOrJDd8aNyoHXol/lfIqbi1Cqp3vkhV9HHoffX2vp74K39 EUZwOWfukk+1XMBKZGX8gar9cbrFVPNVyzn8RZ3MJMwLQvYBMDXRPGSICgfKzxtC 101wdQGba24gx1H5/TuFjyLFJnyGkU8ynWrzahA9iohsrJjLXpxRVR7VxZiwsVXj PDu1vxGqesGa8T8IrpmzeWextDD4KS2O8UTGp2JvMGpdCSORnlpfS1qPba38EamD J3BXQezmBaYxlwIDAQABo4ICfTCCAnkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRE Hx59iNY8MJKAPdrlp08kRfqoHDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMDEGA1UdEQQqMCiCEGRvbXJ1c3R5a2Fsbnku cGyCFHd3dy5kb21ydXN0eWthbG55LnBsMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA4mlLribo6UAJ6IYbtjuD 1D7n/nSI+6SPKJMBnd3x2/4AAAFti8NlqwAABAMASDBGAiEAl68ongBnDtJpnwY6 oFCDyVmMnL6xR6zaHCg0CKWV7UICIQCpqAX0RYuyDHhoyEa72MLU2sO9aXafYz3k i4EclqVlJwB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABbYvD ZdQAAAQDAEgwRgIhAOyzuHOKdFCbcPjXiLkNkGd94ctwJZZ+4XpDcYST7YYfAiEA poyBABfYbNzZim/WotG/oVALz6rSOIE/pBpKjtzciQMwDQYJKoZIhvcNAQELBQAD ggEBAIi0EhA2m0ay+FysEd9szHx177EP4Q+XJ4V/+U2Kw8NlWN853s5xST2jTbcj 5MSrOvWFl/f494GhJ8xlaV26UZXKBqSfJ+VtwV0fGDj9/9E0zQ8qHn+hw3sIag/Y ge1KwygyWoxmK3/7tGAubjln3+m7tQMeHEUoBkAG8o5mTPka8Z/OeBO6D81lhVJu RQUtWUPxHl4uQAhxVv3nPZVGVIff9Xl45EA0kB216/3ci5pXnVz4rCLHZlBMZPlS USoMEDNmAs4xIZUV0WfhpkoCbr7o3KpsNnq7yjxILLU7eEzdGL+SsrIjilKbmN0k BrlNUdYja2oV+kfL2OWKE7Gs6c4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvTVR7voxfflfhbp3e3n7 n51Z8ZitQZf9XkIga8gIl6Xct1kAE2Bc18y47rcMgAAbxNZ4d6NrJEps5fFquvWp PWLxiuUPoq/S24YHVNQuO2oTLPcOWMCRq8EvhTtM8ZcEBKqXmUP3MXRSPPRexsX1 qel+BAahJo7VqHpFWYyPw/FaBIpQdFTlZjYxT1eJGrpq+JuTRHYDIK8W13FtXgN3 0c1k/wG+tTH9CdBSho/zNgJT1ScbGVYcigmW85JWm2CSIv9pfiN51WWNSE0UEaED QAL9ah+JXZipBRu3XeXCQFSMLZILGY2W7rAsk9huHJ6bAOod6yHfG9R2OhrAxYG8 GlezMw8NyWtI+VccnOsJt/xDsWZ0TkZomUjSf8TdltmHcS9tC629YazsAWBrTObG pw/2L0AkLP06veV39BeVgH6C6g92jqyQ3fGjcqB16Jf5XyKm4tQqqd75IVfRx6H3 19r6e+Ct/RFGcDln7pJPtVzASmRl/IGq/XG6xVTzVcs5/EWdzCTMC0L2ATA10Txk iAoHys8bQtdNcHUBm2tuIMdR+f07hY8ixSZ8hpFPMp1q82oQPYqIbKyYy16cUVUe 1cWYsLFV4zw7tb8RqnrBmvE/CK6Zs3lnsbQw+CktjvFExqdibzBqXQkjkZ5aX0ta j22t/BGpgydwV0Hs5gWmMZcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321440960296751058097718461245152223353837 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-02 08:18:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 08:18:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'domrustykalny.pl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771902443062547514876723106124372828554796771761689749022365417827071175291067849667923409882745016486525086545371572003445700188823943794008527622351541520037694711160219761426818252958858161763624936917798560185964523927797074805891903712981005475463196656744207605009755237156416463898727931388787826862409129242649828520608328495915442655556198415741471733543390554346185962539295523496062040939073743448615717689454179992793540407813971309658157198897249527537536846175925199081679620513358372174233419129626752982252118869331542965538964048912182848004204038575751555271384929141413229117556339639558790512241864350674198765409804560706259167915542308063543892423503012333181324453044686824219995564064887978731509945172148712069786108490820809159689819649972554722450320233710553206170238726947281613374464492580947398547360075903551005532778652150884482141612735784673778438906280806591384795565481799904830734409685926738574234415484015268479978062700947535323885183097608879781165728015705453304523609272439844605899062487267324246888663905287622107094230544877846643221705411817698420486811920564837085764967084307446893952848710004659619242788843987557862228964607077063897307200893040461013422137359565996233888723513751 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 441f1e7d88d63c3092803ddae5a74f2445faa81c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domrustykalny.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domrustykalny.pl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d8bc365ab000004030048304602210097af289e00670ed2699f063aa05083c9598c9cbeb147acda1c283408a595ed42022100a9a805f4458bb20c7868c846bbd8c2d4dac3bd69769f633de48b811c96a56527007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d8bc365d40000040300483046022100ecb3b8738a74509b70f8d788b90d90677de1cb7025967ee17a43718493ed861f022100a68c810017d86cdcd98a6fd6a2d1bfa1500bcfaad238813fa41a4a8edcdc8903 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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