marathonpourtous.paris2024.org
Issued by R3
About this certificate
This digital certificate with serial number 04:da:ca:b3:28:af:82:73:80:1b:45:39:25:5c:c2:63:3e:1e was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=marathonpourtous.paris2024.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:da:ca:b3:28:af:82:73:80:1b:45:39:25:5c:c2:63:3e:1eSerial Number (int): 422900134017293487630758404949772597411358
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: da:1b:9b:2e:1b:ed:24:8f:9b:c5:93:0d:78:12:64:b0:d1:e9:b2:78
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 29:42:13:f4:7d:cb:83:5e:eb:14:1f:3c:0b:45:5f:2c:72:b0:4c:75
Fingerprint (sha256): 2b:bf:44:e9:cc:3e:ca:b1:f5:2e:0d:9d:98:e3:bd:99:af:e0:f7:2d:df:1c:4d:8e:40:9d:f6:f5:e8:05:2d:d8
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate marathonpourtous.paris2024.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for marathonpourtous.paris2024.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
marathonpourtous.paris2024.org
Other certificates including the domain name paris2024.org
(limited to 100 certificates)
concertation.paris2024.org
mulesoft-tkt.paris2024.org
*.paris2024.org
medical.paris2024.org
actualites.wiztopic.com
bo-cms-sbp.ew.paris2024.org
paris2024.org
oms.paris2024.org
api.academie.paris2024.org
actualites.wiztopic.com
actualites.wiztopic.com
ensembleonfaitlesjeux.paris2024.org
celebrations-pp.paris2024.org
image.email.novartis.es
www.terredejeux.paris2024.org
spectrum-booking-portal.paris2024.org
cert00033-azurecdn.akamaized.net
alerte.paris2024.org
bo.ew-dev.paris2024.org
concertation.paris2024.org
marathonpourtous.paris2024.org
*.paris2024.org
communautemarathonpourtous.paris2024.org
boutique-heritage.paris2024.org
registrations.marathonpourtous.paris2024.org
vdp.paris2024.org
rejoindre.paris2024.org
iextranet.oodrive.paris2024.org
ctp.paris2024.org
pressoperations.paris2024.org
spectrum-booking-portal-dev.paris2024.org
vdp.paris2024.org
image.email.novartis.es
boutique-terredejeux.paris2024.org
api.centredepreparation.paris2024.org
orah.paris2024.org
questionnaire-volontaire.paris2024.org
delegation-pp.paris2024.org
hospitalityguestregistration.paris2024.org
joly.paris2024.org
actualites.wiztopic.com
concertation.paris2024.org
waiting.paris2024.org
projet93.paris2024.org
ctp.paris2024.org
delegation.paris2024.org
tickets.paris2024.org
gigya.celebrations.paris2024.org
corporatehospitality.paris2024.org
data-accompagnement-impact.paris2024.org
actualites.wiztopic.com
actualites.wiztopic.com
aap-impact.paris2024.org
www.boutique-celebrations.paris2024.org
sslcertificate7.queue-it.net
shop.paris2024.org
bo.spectrum-booking-portal.cms.paris2024.org
san-2-s50.tlsprovisioning.exacttarget.com
shop.paris2024.org
t.tickets.paris2024.org
t.tickets.paris2024.org
api.centredepreparation.paris2024.org
vdp.paris2024.org
actualites.wiztopic.com
vdp.paris2024.org
cominterne.paris2024.org
marathonpourtous.paris2024.org
marathonpourtous.paris2024.org
hrpaccount.paris2024.org
api.academie.paris2024.org
reglementmptc.paris2024.org
actualites.wiztopic.com
revealrelais.paris2024.org
de.newsletter.events.renault.com
marathonpourtous.paris2024.org
waiting.paris2024.org
api.centredepreparation.paris2024.org
marathonpourtous.paris2024.org
hospitalitytravelpackages.paris2024.org
exploreterredejeux.paris2024.org
spectrum-booking-portal.paris2024.org
actualites.wiztopic.com
concertation.paris2024.org
marathonpourtous.paris2024.org
tickets.paris2024.org
cert00033-azurecdn.akamaized.net
shop.paris2024.org
api.spectrum-booking-portal.cms-dev.paris2024.org
medical-back-pp.paris2024.org
centredepreparation.paris2024.org
concertation.paris2024.org
objets.paris2024.org
alerte.paris2024.org
www.terredejeux.paris2024.org
revealrelais.paris2024.org
spectrum-booking-portal.paris2024.org
actualites.wiztopic.com
cost-tool-preprod.paris2024.org
offline-mediatheque.paris2024.org
data-accompagnement-impact.paris2024.org
mulesoft-tkt.paris2024.org
*.paris2024.org
medical.paris2024.org
actualites.wiztopic.com
bo-cms-sbp.ew.paris2024.org
paris2024.org
oms.paris2024.org
api.academie.paris2024.org
actualites.wiztopic.com
actualites.wiztopic.com
ensembleonfaitlesjeux.paris2024.org
celebrations-pp.paris2024.org
image.email.novartis.es
www.terredejeux.paris2024.org
spectrum-booking-portal.paris2024.org
cert00033-azurecdn.akamaized.net
alerte.paris2024.org
bo.ew-dev.paris2024.org
concertation.paris2024.org
marathonpourtous.paris2024.org
*.paris2024.org
communautemarathonpourtous.paris2024.org
boutique-heritage.paris2024.org
registrations.marathonpourtous.paris2024.org
vdp.paris2024.org
rejoindre.paris2024.org
iextranet.oodrive.paris2024.org
ctp.paris2024.org
pressoperations.paris2024.org
spectrum-booking-portal-dev.paris2024.org
vdp.paris2024.org
image.email.novartis.es
boutique-terredejeux.paris2024.org
api.centredepreparation.paris2024.org
orah.paris2024.org
questionnaire-volontaire.paris2024.org
delegation-pp.paris2024.org
hospitalityguestregistration.paris2024.org
joly.paris2024.org
actualites.wiztopic.com
concertation.paris2024.org
waiting.paris2024.org
projet93.paris2024.org
ctp.paris2024.org
delegation.paris2024.org
tickets.paris2024.org
gigya.celebrations.paris2024.org
corporatehospitality.paris2024.org
data-accompagnement-impact.paris2024.org
actualites.wiztopic.com
actualites.wiztopic.com
aap-impact.paris2024.org
www.boutique-celebrations.paris2024.org
sslcertificate7.queue-it.net
shop.paris2024.org
bo.spectrum-booking-portal.cms.paris2024.org
san-2-s50.tlsprovisioning.exacttarget.com
shop.paris2024.org
t.tickets.paris2024.org
t.tickets.paris2024.org
api.centredepreparation.paris2024.org
vdp.paris2024.org
actualites.wiztopic.com
vdp.paris2024.org
cominterne.paris2024.org
marathonpourtous.paris2024.org
marathonpourtous.paris2024.org
hrpaccount.paris2024.org
api.academie.paris2024.org
reglementmptc.paris2024.org
actualites.wiztopic.com
revealrelais.paris2024.org
de.newsletter.events.renault.com
marathonpourtous.paris2024.org
waiting.paris2024.org
api.centredepreparation.paris2024.org
marathonpourtous.paris2024.org
hospitalitytravelpackages.paris2024.org
exploreterredejeux.paris2024.org
spectrum-booking-portal.paris2024.org
actualites.wiztopic.com
concertation.paris2024.org
marathonpourtous.paris2024.org
tickets.paris2024.org
cert00033-azurecdn.akamaized.net
shop.paris2024.org
api.spectrum-booking-portal.cms-dev.paris2024.org
medical-back-pp.paris2024.org
centredepreparation.paris2024.org
concertation.paris2024.org
objets.paris2024.org
alerte.paris2024.org
www.terredejeux.paris2024.org
revealrelais.paris2024.org
spectrum-booking-portal.paris2024.org
actualites.wiztopic.com
cost-tool-preprod.paris2024.org
offline-mediatheque.paris2024.org
data-accompagnement-impact.paris2024.org
Certificate
The complete raw certificate details for marathonpourtous.paris2024.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEFjCCAv6gAwIBAgISBNrKsyivgnOAG0U5JVzCYz4eMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA2MjkyMTEzMzVaFw0yMzA5MjcyMTEzMzRaMCkxJzAlBgNVBAMT Hm1hcmF0aG9ucG91cnRvdXMucGFyaXMyMDI0Lm9yZzCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBANzrAzNLGm2bX9VV88bHHlcmQlnI14T6jyB3IW+mnF1O kysNADtZ67ZTTTC/55OJsGij6N2o2IIdhHLAfSwJdRgCuewFo2Jz22/wXAWjhlWC mDVXDA3PIvp+dJy6O983dZwByHSLPJ+E3YTLp4DjUD9heC8PpX+HWm8ZdMbegp+2 1w1qJ9j/2AWj1UKqVjja39IweTJCIa4udm5m4L6hqnBvJzxVd9PdJGtLzoWtbDTS gRMoRVaFiL4ectE65+mNKmZFjTG4S6N0pVCJtZJqL2FD7tM2reN7QRBUNYGiH7b8 r+uoGS9P2TDXismVopzhq6UNNn/wP1nqgpcnlgSBx5UCAwEAAaOCAS0wggEpMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQU2hubLhvtJI+bxZMNeBJksNHpsngwHwYDVR0j BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6 Ly9yMy5pLmxlbmNyLm9yZy8wKQYDVR0RBCIwIIIebWFyYXRob25wb3VydG91cy5w YXJpczIwMjQub3JnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMBMGCisGAQQB1nkCBAMB Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC6a3mg7P/JOV65q7WtzP5KGtBkFRvN SI0E2tOcQAij/MC5mMJoDT3IlPrTncogxwQsIONovCxZpwyNBSC7jU3BXhMnPCSl sg08D01NtiCvZmWLK4mNb4yFgALdyMTy+0XeHhpp0XaGbvfRuUj78LbLPBD24RKJ a520Ic9Gfnpgs5qTqYT3uYgSkWnVGKOdAphkdCjSZCQaheoI7HDfD25qJWfc0ku6 K1CUCTty4XgEVd4JZ4mD2YK431B8Gsb0ocbRm170yQblCEjnfNLqiKW/qOgJs2n5 8jf9fpxtP+5ZX6Ptg1frJ9BUUr/SzB8456tJJRxWPjJnq5Ae4/WynCbE -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OsDM0sabZtf1VXzxsce VyZCWcjXhPqPIHchb6acXU6TKw0AO1nrtlNNML/nk4mwaKPo3ajYgh2EcsB9LAl1 GAK57AWjYnPbb/BcBaOGVYKYNVcMDc8i+n50nLo73zd1nAHIdIs8n4TdhMungONQ P2F4Lw+lf4dabxl0xt6Cn7bXDWon2P/YBaPVQqpWONrf0jB5MkIhri52bmbgvqGq cG8nPFV3090ka0vOha1sNNKBEyhFVoWIvh5y0Trn6Y0qZkWNMbhLo3SlUIm1kmov YUPu0zat43tBEFQ1gaIftvyv66gZL0/ZMNeKyZWinOGrpQ02f/A/WeqClyeWBIHH lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 422900134017293487630758404949772597411358 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 21:13:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 21:13:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marathonpourtous.paris2024.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27888316076227010563071773182973312966441314694461971583497476964466808957456050068452695829766553220297311478722013932737095235709869915995003077273968862002309313545635036384353081602952343812293814532515856451482135410926045005668030993849644272072576227357549176010173818650127968263932500267620962140526407915510282172006618819104487199421231532275209537678155816515652119299907632798975043746651121238850231108927718564752878970738001270745188659479814497976540674547587460048820600653615664128159441297294623528919456860743723028385302596425889697268851222746132231345316120882964759428900351616819111840040853 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) da1b9b2e1bed248f9bc5930d781264b0d1e9b278 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marathonpourtous.paris2024.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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