rayyan.ai
Issued by R3
About this certificate
This digital certificate with serial number 04:9f:83:9d:18:4b:ae:31:f7:7a:63:c5:38:a3:7e:c6:74:ed was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=rayyan.ai
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:9f:83:9d:18:4b:ae:31:f7:7a:63:c5:38:a3:7e:c6:74:edSerial Number (int): 402728984618298669698426442518089664197869
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 38:0d:0c:29:e2:88:81:14:6b:0a:8b:5b:52:dc:88:fd:87:78:ee:e9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ca:10:cb:7b:6b:5c:a0:09:23:86:bf:ed:7b:35:e6:e1:09:56:85:23
Fingerprint (sha256): 31:a5:6f:37:e9:d5:99:f8:8e:2c:e4:50:5d:0b:24:ba:4d:66:f5:a2:d1:1e:e0:5d:dd:b5:10:a8:66:ef:f3:7e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate rayyan.ai
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rayyan.ai
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rayyan.ai
rayyan.io
rayyan.io
Other certificates including the domain name rayyan.ai
(limited to 100 certificates)
jobs.strong.fitness
connect.aventos.com.br
events.ourteams.org
stage.hb-consulting.website
jobs.strong.fitness
20aniversario.aeh2.es
events.ourteams.org
usaidyouthexcel.yotaweb.org
events.iskala.net
virtualexpo.saknquare.com
20aniversario.aeh2.es
www.asiagolfconvention2023.com
connect.aventos.com.br
careers.rayyan.ai
reclutamiento.maxtalenthr.com
www.brightxa.com
opportunity.pickto.co
20aniversario.aeh2.es
events.aliciavernonspeaks.com
events.humanitarianglobal.com
events.humanitarianglobal.com
auraspeaks.ableaura.com
event.msmescaleup.com
careers.pando.ai
reclutamiento.maxtalenthr.com
rayyan.ai
events.closedtitle.com
www.brightxa.com
events.aliciavernonspeaks.com
careers.virtualink.ca
www.eventati.org
evaluationforum.uky.edu
events.aliciavernonspeaks.com
careers.febno.com
events.aliciavernonspeaks.com
www.innovatewithdata.net
events.virtualpethub.com
events.humanitarianglobal.com
events.wisequarter.com
events.closedtitle.com
event.complexelaprovidence.ca
events.eminae.com
reclutamiento.maxtalenthr.com
careers.damianknowles.com
opportunity.pickto.co
www.dotcybersummit.com
wolfden.wolfpackceo.com
events.humanitarianglobal.com
events.closedtitle.com
backstage.spiritedsolutions.org
nyambu.kyalo.co.ke
rayyan.ai
events.humanitarianglobal.com
reclutamiento.maxtalenthr.com
opportunity.pickto.co
rayyan.ai
emplois.bonjourresidences.com
mitmachen.grenzlotsen.de
careers.printrove.com
eventos.inspiriadental.com
events.myriadas.com
events.humanitarianglobal.com
www.ideandoelaula.cl
reclutamiento.maxtalenthr.com
backstage.spiritedsolutions.org
reclutamiento.maxtalenthr.com
events.salam.sa
careers.pando.ai
events.wisequarter.com
events.springstax.com
www.ateliers-mfpci.com
reclutamiento.maxtalenthr.com
evenements.aqta.ca
reclutamiento.maxtalenthr.com
reclutamiento.maxtalenthr.com
reclutamiento.maxtalenthr.com
auraspeaks.ableaura.com
jobs.okawa.sa
events.humanitarianglobal.com
teams.speakoutillinoisllc.com
events.humanitarianglobal.com
jobs.consumersourcesolutions.com
www.eventati.org
www.ateliers-mfpci.com
events.humanitarianglobal.com
stage.hb-consulting.website
wolfden.wolfpackceo.com
events.humanitarianglobal.com
events.humanitarianglobal.com
events.point1wellness.com
jobs.strong.fitness
events.springstax.com
event.msmescaleup.com
rayyan.ai
careers.conciercare.net
events.ybc.club
jobs.strong.fitness
reclutamiento.maxtalenthr.com
events.humanitarianglobal.com
reclutamiento.maxtalenthr.com
connect.aventos.com.br
events.ourteams.org
stage.hb-consulting.website
jobs.strong.fitness
20aniversario.aeh2.es
events.ourteams.org
usaidyouthexcel.yotaweb.org
events.iskala.net
virtualexpo.saknquare.com
20aniversario.aeh2.es
www.asiagolfconvention2023.com
connect.aventos.com.br
careers.rayyan.ai
reclutamiento.maxtalenthr.com
www.brightxa.com
opportunity.pickto.co
20aniversario.aeh2.es
events.aliciavernonspeaks.com
events.humanitarianglobal.com
events.humanitarianglobal.com
auraspeaks.ableaura.com
event.msmescaleup.com
careers.pando.ai
reclutamiento.maxtalenthr.com
rayyan.ai
events.closedtitle.com
www.brightxa.com
events.aliciavernonspeaks.com
careers.virtualink.ca
www.eventati.org
evaluationforum.uky.edu
events.aliciavernonspeaks.com
careers.febno.com
events.aliciavernonspeaks.com
www.innovatewithdata.net
events.virtualpethub.com
events.humanitarianglobal.com
events.wisequarter.com
events.closedtitle.com
event.complexelaprovidence.ca
events.eminae.com
reclutamiento.maxtalenthr.com
careers.damianknowles.com
opportunity.pickto.co
www.dotcybersummit.com
wolfden.wolfpackceo.com
events.humanitarianglobal.com
events.closedtitle.com
backstage.spiritedsolutions.org
nyambu.kyalo.co.ke
rayyan.ai
events.humanitarianglobal.com
reclutamiento.maxtalenthr.com
opportunity.pickto.co
rayyan.ai
emplois.bonjourresidences.com
mitmachen.grenzlotsen.de
careers.printrove.com
eventos.inspiriadental.com
events.myriadas.com
events.humanitarianglobal.com
www.ideandoelaula.cl
reclutamiento.maxtalenthr.com
backstage.spiritedsolutions.org
reclutamiento.maxtalenthr.com
events.salam.sa
careers.pando.ai
events.wisequarter.com
events.springstax.com
www.ateliers-mfpci.com
reclutamiento.maxtalenthr.com
evenements.aqta.ca
reclutamiento.maxtalenthr.com
reclutamiento.maxtalenthr.com
reclutamiento.maxtalenthr.com
auraspeaks.ableaura.com
jobs.okawa.sa
events.humanitarianglobal.com
teams.speakoutillinoisllc.com
events.humanitarianglobal.com
jobs.consumersourcesolutions.com
www.eventati.org
www.ateliers-mfpci.com
events.humanitarianglobal.com
stage.hb-consulting.website
wolfden.wolfpackceo.com
events.humanitarianglobal.com
events.humanitarianglobal.com
events.point1wellness.com
jobs.strong.fitness
events.springstax.com
event.msmescaleup.com
rayyan.ai
careers.conciercare.net
events.ybc.club
jobs.strong.fitness
reclutamiento.maxtalenthr.com
events.humanitarianglobal.com
reclutamiento.maxtalenthr.com
Certificate
The complete raw certificate details for rayyan.ai in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgISBJ+DnRhLrjH3emPFOKN+xnTtMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMDcyMzE0NDVaFw0yNDAyMDUyMzE0NDRaMBQxEjAQBgNVBAMT CXJheXlhbi5haTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALXrrrxA TLXwsP8SgHLMAfVHzqhZZlu34WovtBH6VbsfVAztZv/oPGepmsHrdV+Nz/3JWScs XGPGm6tnlbkyFhFMxC6mTYdw5iatJL5yT9qXAahZbC70HgOWfs9kGqadooDITIXx UpB/7eR6u8ATJhSnpKrCruK2MzpbiMR2/q9ToSvYPYWEvj1dFY1LirJkHCFpwtzT z/8NNO/E7PJVcU9XqZtmvuYOGGRNYEphF3RyKtdYDZXzS1ANQtYaZ4l5BEfYAZB4 erSxklZLRes7Tj64sY6tvDKun+pv25ErNqmOCWfrMbvl/lmeW1x52Fng/4Hy1yGL jImRdSj6VsxHOLMCAwEAAaOCAhUwggIRMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU OA0MKeKIgRRrCotbUtyI/Yd47ukwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wHwYD VR0RBBgwFoIJcmF5eWFuLmFpgglyYXl5YW4uaW8wEwYDVR0gBAwwCjAIBgZngQwB AgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBIsONr2qZHNA/lagL6nTDrHFIB y1bdLIHZu7+rOdiEcwAAAYusSA5xAAAEAwBHMEUCIQDY/PvSTlf2ttEd/layBIHi 6x2r984kTlrrKGeGY3QrYwIgfgmdNLI4WunScw1l0aErlTYyMQliVVyqawA9x2Dw U/8AdQA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYusSA6aAAAE AwBGMEQCIF65A6INL04aQLrgMe0+MoA42DN+hGhnRYkSceH60L7cAiBxkR5rob5O /lvZE6u1aCqKFSvUpIlOfUV82/3ES7PXGTANBgkqhkiG9w0BAQsFAAOCAQEAenZ0 1pk8MFNwa1EEmKTS8UC/UGNPD81Rb5T5viw/XhNFkW6VRjc02aHqlHqCSDqVnctp VC7JYq8vUlMTC8ZNFRQYQiJ56b3TsIyyA8lwJXf0PB9sCtZmb9BttBrPpO+bcX0q KqWtTyORB+m9YPsxln0KzWtRZxSjnm1lxOxAl6/DwilWIYHz2rF6bmNVZ+4gwYvd hrRfDWGeQ+w/qIKWNlI2kKuSmcxSWAr6jF97LocHbS9IYrnhn/bYlXsQz43eq5i5 kLZ1DtNXaT9hIVP1CSosXMBl2ivP6yRFIzZE3D3mOe0UYU5vve+T9Ht2842CsBaF /pjMszadQt3ZvDLSnw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteuuvEBMtfCw/xKAcswB 9UfOqFlmW7fhai+0EfpVux9UDO1m/+g8Z6mawet1X43P/clZJyxcY8abq2eVuTIW EUzELqZNh3DmJq0kvnJP2pcBqFlsLvQeA5Z+z2Qapp2igMhMhfFSkH/t5Hq7wBMm FKekqsKu4rYzOluIxHb+r1OhK9g9hYS+PV0VjUuKsmQcIWnC3NPP/w0078Ts8lVx T1epm2a+5g4YZE1gSmEXdHIq11gNlfNLUA1C1hpniXkER9gBkHh6tLGSVktF6ztO Prixjq28Mq6f6m/bkSs2qY4JZ+sxu+X+WZ5bXHnYWeD/gfLXIYuMiZF1KPpWzEc4 swIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 402728984618298669698426442518089664197869 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 23:14:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 23:14:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rayyan.ai' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22965352600741592720736045645969308678662975113281056916207799277577931824844342207100378404881236578232734556952050389730070052520986511844188288498554001226539098399192211291095224985429908577371313510738537996125573328571918458332835291760226058074803183425600354654123199270705708984009015273912566908030585738387895301955858439268586516015303049129539908290182238456085816239048890900555320062664217193266506267005670085092745782694181986644547145385775842461340186911336934038916539432758633246727851323206701960093778433582541289103244545856915066458721007541777233084115613804282849958470980022291304959916211 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 380d0c29e28881146b0a8b5b52dc88fd8778eee9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayyan.ai' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayyan.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bac480e710000040300473045022100d8fcfbd24e57f6b6d11dfe56b20481e2eb1dabf7ce244e5aeb28678663742b6302207e099d34b2385ae9d2730d65d1a12b953632310962555caa6b003dc760f053ff0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bac480e9a000004030046304402205eb903a20d2f4e1a40bae031ed3e328038d8337e84686745891271e1fad0bedc022071911e6ba1be4efe5bd913abb5682a8a152bd4a4894e7d457cdbfdc44bb3d719 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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