villageoffice.ch
Issued by R3
About this certificate
This digital certificate with serial number 03:be:13:9d:65:f1:ec:47:66:7a:2c:bb:5c:5c:3e:85:b0:b7 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=villageoffice.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:be:13:9d:65:f1:ec:47:66:7a:2c:bb:5c:5c:3e:85:b0:b7Serial Number (int): 326016580100476233282178281096515831574711
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ef:e8:88:5f:5a:cc:30:e6:b8:64:22:1c:1d:84:68:dd:b0:21:a6:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 5c:55:24:8a:6f:8a:f7:52:f0:45:ae:89:37:4c:92:0b:36:66:70:f5
Fingerprint (sha256): 21:8a:51:84:9b:3e:56:99:6d:e2:c8:2c:35:43:80:77:ce:20:13:67:9e:3e:1d:96:c8:90:1c:fd:f8:ff:8f:86
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate villageoffice.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for villageoffice.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
villageoffice.ch
www.villageoffice.ch
www.villageoffice.ch
Other certificates including the domain name villageoffice.ch
(limited to 100 certificates)
app.villageoffice.ch
app.villageoffice.ch
intranet.villageoffice.ch
villageoffice.ch
servicedesk.ondeso.com
events.claever.academy
guias.aerme.com
support.digitalxraid.com
survey.eitep.de
surveys.lombardinternational.com
survey.khaoscontrol.com
account.villageoffice.ch
support.greendaisycleaningservices.co.uk
zoho.profitroom.com
events.claever.academy
www.charlasdam.com
event.happiness-at-work.be
survey.sheshtech.com
encuestas.caetanoretail.es
app.villageoffice.ch
villageoffice.ch
support.reflektis.com
survey.eitep.de
survey.sheshtech.com
survey.wildling.shoes
villageoffice.ch
survey.sheshtech.com
survey.eitep.de
support.villageoffice.ch
support.ethos.ltd
eval.softworld.dk
booking.villageoffice.ch
survey.sweet-move.com
customer-survey.castoredc.com
events.wearemhabitat.com
survey.sheshtech.com
survey.sheshtech.com
villageoffice.ch
survey.atonespot.com
survey.epitop-medical.com
survey.larsenhowie.co.uk
survey.eitep.de
zoho.profitroom.com
survey.lawbite.co.uk
survey.ziggurattaaltrainingen.nl
account.villageoffice.ch
survey.sheshtech.com
events.fortislaw.co.uk
zoho.teslanow.de
my.villageoffice.ch
www.villageoffice.ch
villageoffice.ch
survey.sheshtech.com
members.uferbau.villageoffice.ch
zoho.profitroom.com
survey.eitep.de
survey.eitep.de
support.roboyousa.com
partner.villageoffice.ch
survey.bimequity.dk
support.aidaform.com
villageoffice.ch
villageoffice.ch
zoho.profitroom.com
villageoffice.ch
partner.villageoffice.ch
survey.sheshtech.com
zoho.profitroom.com
survey.sheshtech.com
survey.sheshtech.com
survey.eitep.de
survey.rizouana.cf
app.villageoffice.ch
survey.bsg.io
customer-survey.castoredc.com
my.villageoffice.ch
survey.sheshtech.com
survey.villageoffice.ch
members.uferbau.villageoffice.ch
events.claever.academy
survey.custom-gateway.co.uk
account.villageoffice.ch
survey.porsche-informatik.com
survey.sheshtech.com
events.dsavltd.co.uk
survey.diversitystudygroup.com
events.ncdigital.co.uk
support.techfabrica.com
eventos.caetanoretail.es
events.claever.academy
survey.sheshtech.com
events.onpace.online
invite.brightfish.be
survey.unternehmerbonus.at
survey.eitep.de
survey.sheshtech.com
www.villageoffice.ch
survey.sheshtech.com
villageoffice.ch
customer-survey.castoredc.com
app.villageoffice.ch
intranet.villageoffice.ch
villageoffice.ch
servicedesk.ondeso.com
events.claever.academy
guias.aerme.com
support.digitalxraid.com
survey.eitep.de
surveys.lombardinternational.com
survey.khaoscontrol.com
account.villageoffice.ch
support.greendaisycleaningservices.co.uk
zoho.profitroom.com
events.claever.academy
www.charlasdam.com
event.happiness-at-work.be
survey.sheshtech.com
encuestas.caetanoretail.es
app.villageoffice.ch
villageoffice.ch
support.reflektis.com
survey.eitep.de
survey.sheshtech.com
survey.wildling.shoes
villageoffice.ch
survey.sheshtech.com
survey.eitep.de
support.villageoffice.ch
support.ethos.ltd
eval.softworld.dk
booking.villageoffice.ch
survey.sweet-move.com
customer-survey.castoredc.com
events.wearemhabitat.com
survey.sheshtech.com
survey.sheshtech.com
villageoffice.ch
survey.atonespot.com
survey.epitop-medical.com
survey.larsenhowie.co.uk
survey.eitep.de
zoho.profitroom.com
survey.lawbite.co.uk
survey.ziggurattaaltrainingen.nl
account.villageoffice.ch
survey.sheshtech.com
events.fortislaw.co.uk
zoho.teslanow.de
my.villageoffice.ch
www.villageoffice.ch
villageoffice.ch
survey.sheshtech.com
members.uferbau.villageoffice.ch
zoho.profitroom.com
survey.eitep.de
survey.eitep.de
support.roboyousa.com
partner.villageoffice.ch
survey.bimequity.dk
support.aidaform.com
villageoffice.ch
villageoffice.ch
zoho.profitroom.com
villageoffice.ch
partner.villageoffice.ch
survey.sheshtech.com
zoho.profitroom.com
survey.sheshtech.com
survey.sheshtech.com
survey.eitep.de
survey.rizouana.cf
app.villageoffice.ch
survey.bsg.io
customer-survey.castoredc.com
my.villageoffice.ch
survey.sheshtech.com
survey.villageoffice.ch
members.uferbau.villageoffice.ch
events.claever.academy
survey.custom-gateway.co.uk
account.villageoffice.ch
survey.porsche-informatik.com
survey.sheshtech.com
events.dsavltd.co.uk
survey.diversitystudygroup.com
events.ncdigital.co.uk
support.techfabrica.com
eventos.caetanoretail.es
events.claever.academy
survey.sheshtech.com
events.onpace.online
invite.brightfish.be
survey.unternehmerbonus.at
survey.eitep.de
survey.sheshtech.com
www.villageoffice.ch
survey.sheshtech.com
villageoffice.ch
customer-survey.castoredc.com
Certificate
The complete raw certificate details for villageoffice.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISA74TnWXx7Edmeiy7XFw+hbC3MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMDExMDI0MjhaFw0yMzEyMzAxMDI0MjdaMBsxGTAXBgNVBAMT EHZpbGxhZ2VvZmZpY2UuY2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhlUHM+8PuWMMUglqkbpw8e348QHvDySErLt++B6aSJ3Mdrlz6BnaKCjdsVzD/ H4/+b0J2oqAg0X20TjB/alyyvIOzloqXVpIF3GFwvPu3eQ3r4Y+ExTRSX46i+WKP rCm2RqwjR8SgcIBdcxmblXLkGMpns3iMV8EPHjJHgy+D0K5bS9BuNARtp/5ckhY+ L9+Z6u6h70vPa6vIDuaBu+99jIuPC0YLlfR0R22bO0XbUphNjf6ZGnP3DSMB7sUk oKzcPzc6ijaN9R0up5lFWyAbAIiNNkbu5xCYI+r68vTE654AZ2EuYr2rVPCNafnZ uRomTAPU1vxIFEnvoiaMCPN9AgMBAAGjggIoMIICJDAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFO/oiF9azDDmuGQiHB2EaN2wIaYYMB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMDEGA1UdEQQqMCiCEHZpbGxhZ2VvZmZpY2UuY2iCFHd3dy52aWxsYWdlb2Zm aWNlLmNoMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGK6vuKTAAA BAMASDBGAiEA78xfia1j9r5DCjCUt74nx69vUGojs5V6AR1wREk/EA4CIQDLNnLN NdcSj80VFOxZR8kv7JDSCh8p5Q22og4CMYOSeAB1AOg+0No+9QY1MudXKLyJa8kD 08vREWvs62nhd31tBr1uAAABiur7ij4AAAQDAEYwRAIgd6vwnI6fjqY0LHzgXogu 2Ea5v8DoaUQr9Uc1VGZR4IUCID9TmniYcXQNZlgolMF42+R6b9H2TGh6xmyGTAOf zbWrMA0GCSqGSIb3DQEBCwUAA4IBAQAvI/XhNZCya6BmY/0lY/zlOBmdcCi6b2R8 grtWGc6Qr9U42WY1iuBUF3dzu9IhGl3wNn23VHkHuSpvh2jpUpXO8D1+cJVEEULX Gqt6Oeb7UhLbKx+ShlFP1ejcand8/d4fq+O+vdIhSmQYpenJWVYL0KngRaVPVIup qh72LXzWe+cuQS1bBCT7617Uzdp4Bv2pHCQTx8odSN5VOyEMgxlY5ii6YIYXyLaZ a0E0Tu1oEk6J1Re/PSsFHtWoPlnqNrQT3l45Bm4vWXvivpudeEAC88gP/ehPe4CD kRQzFQ0UIMvRtQ5JuU1KYPG5K/u6zmbgM/9mzoeYx3odRaJp6+BT -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZVBzPvD7ljDFIJapG6c PHt+PEB7w8khKy7fvgemkidzHa5c+gZ2igo3bFcw/x+P/m9CdqKgINF9tE4wf2pc sryDs5aKl1aSBdxhcLz7t3kN6+GPhMU0Ul+Oovlij6wptkasI0fEoHCAXXMZm5Vy 5BjKZ7N4jFfBDx4yR4Mvg9CuW0vQbjQEbaf+XJIWPi/fmeruoe9Lz2uryA7mgbvv fYyLjwtGC5X0dEdtmztF21KYTY3+mRpz9w0jAe7FJKCs3D83Ooo2jfUdLqeZRVsg GwCIjTZG7ucQmCPq+vL0xOueAGdhLmK9q1TwjWn52bkaJkwD1Nb8SBRJ76ImjAjz fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 326016580100476233282178281096515831574711 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 10:24:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 10:24:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'villageoffice.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28477220004014173067103079349690502507388616501825468408382900627205056974643048137867405765570189017370397270864519529130978966170486517134594584003499955670972400759563367414968509287095520218990808557785765770144878702439905621939358348884483901971306773779436184260058179601133226581484926125334168092272078049339708371872479187509798133835899168184055804689322122292495735998977915107143354572944070629031340714084927104412035593387649155234121010654954294496587992257337428311242927402147813398794107773489400367300648317542657618444371884273073530448044323901882542951911347521297143860338678870266187499500413 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) efe8885f5acc30e6b864221c1d8468ddb021a618 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villageoffice.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageoffice.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aeafb8a4c0000040300483046022100efcc5f89ad63f6be430a3094b7be27c7af6f506a23b3957a011d7044493f100e022100cb3672cd35d7128fcd1514ec5947c92fec90d20a1f29e50db6a20e0231839278007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aeafb8a3e0000040300463044022077abf09c8e9f8ea6342c7ce05e882ed846b9bfc0e869442bf54735546651e08502203f539a789871740d66582894c178dbe47a6fd1f64c687ac66c864c039fcdb5ab . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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