login.staging.brezelkoenig.ch
Issued by GTS CA 1D4
About this certificate
This digital certificate with serial number 9b:e5:f6:98:5a:49:19:94:09:5d:8d:ce:02:f7:bb:ee was issued on by Google Trust Services LLC.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=login.staging.brezelkoenig.ch
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 9b:e5:f6:98:5a:49:19:94:09:5d:8d:ce:02:f7:bb:eeSerial Number (int): 207224376870651659564835153445597461486
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: ec:f1:c1:b7:0b:12:b5:78:eb:f1:04:3f:c1:89:da:03:6f:53:6e:5c
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92
Fingerprint (sha1): 7e:4c:5c:16:1c:b9:ae:fa:13:0d:c6:09:bc:d4:f2:75:01:d0:29:ca
Fingerprint (sha256): 33:6e:cb:6d:8a:05:6d:06:d3:ba:bd:0f:42:bd:e5:22:33:8f:2b:bc:46:a5:85:d7:bf:c9:5c:82:dc:63:4e:e3
Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1d4/SeVCtw5uPp4CRL Distribution Point: http://crls.pki.goog/gts1d4/70euuecskYk.crl
Check the revocation status for certificate login.staging.brezelkoenig.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for login.staging.brezelkoenig.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
login.staging.brezelkoenig.ch
Other certificates including the domain name brezelkoenig.ch
(limited to 100 certificates)
brezelkoenig.ch
ditsch.de
webmail.brezelkoenig.ch
brezelkoenig.ch
tezaaa.com
ditsch.de
brezelkoenig.ch
the22murdersofmadisonmay.com
app-staging.getayra.com
brezelkoenig.ch
github-topstars.cawpea.me
octosdigital.com
webmail.brezelkoenig.ch
ditsch.de
sriharsha.dev
ghneurosurgicalalliance.org
www.marcosdourado.com
login.staging.brezelkoenig.ch
aarnavjindal.com
gokulamdroptaxi.com
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
www.softwarelc.com
brezelkoenig.ch
brezelkoenig.ch
ditsch.de
remote.brezelkoenig.ch
brezelkoenig.ch
www.scandiac.us
login-test.new.de
www.mairimed.com
auth.gluegroups.com
webmail.brezelkoenig.ch
tumascota2022.com
brezelkoenig.ch
ditsch.de
brezelkoenig.ch
brezelkoenig.ch
tezaaa.com
www.zmy.pw
algoritmo9.site
ghneurosurgicalalliance.org
login.staging.brezelkoenig.ch
oivis.com
brezelkoenig.ch
ditsch.de
app.brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
*.brezelkoenig.ch
web.feedad.com
ditsch.de
www.allinonefitness.ch
bingo.remotesocial.app
design.joybird.com
brezelkoenig.ch
app.caddygo.ru
brezelkoenig.ch
webmail.brezelkoenig.ch
www.raugh.club
brezelkoenig.ch
ditsch.de
blog.pirika.org
brezelkoenig.ch
brezelkoenig.ch
letspark.gr
brezelkoenig.ch
brezelkoenig.ch
webmail.brezelkoenig.ch
0xgn.com
*.brezelkoenig.ch
gamescoin.pacta-cloud.app
brezelkoenig.ch
firatkirmizi.com
brezelkoenig.ch
cv.hofs.dev
ditsch.de
webmail.brezelkoenig.ch
ditsch.de
ditsch.de
dev.developer.viviware.com
ditsch.de
ditsch.de
staging-admin.lvmhcomplianceescape.com
brezelkoenig.ch
ditsch.de
remote.brezelkoenig.ch
ditsch.de
webmail.brezelkoenig.ch
brezelkoenig.ch
tezaaa.com
ditsch.de
brezelkoenig.ch
the22murdersofmadisonmay.com
app-staging.getayra.com
brezelkoenig.ch
github-topstars.cawpea.me
octosdigital.com
webmail.brezelkoenig.ch
ditsch.de
sriharsha.dev
ghneurosurgicalalliance.org
www.marcosdourado.com
login.staging.brezelkoenig.ch
aarnavjindal.com
gokulamdroptaxi.com
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
www.softwarelc.com
brezelkoenig.ch
brezelkoenig.ch
ditsch.de
remote.brezelkoenig.ch
brezelkoenig.ch
www.scandiac.us
login-test.new.de
www.mairimed.com
auth.gluegroups.com
webmail.brezelkoenig.ch
tumascota2022.com
brezelkoenig.ch
ditsch.de
brezelkoenig.ch
brezelkoenig.ch
tezaaa.com
www.zmy.pw
algoritmo9.site
ghneurosurgicalalliance.org
login.staging.brezelkoenig.ch
oivis.com
brezelkoenig.ch
ditsch.de
app.brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
*.brezelkoenig.ch
web.feedad.com
ditsch.de
www.allinonefitness.ch
bingo.remotesocial.app
design.joybird.com
brezelkoenig.ch
app.caddygo.ru
brezelkoenig.ch
webmail.brezelkoenig.ch
www.raugh.club
brezelkoenig.ch
ditsch.de
blog.pirika.org
brezelkoenig.ch
brezelkoenig.ch
letspark.gr
brezelkoenig.ch
brezelkoenig.ch
webmail.brezelkoenig.ch
0xgn.com
*.brezelkoenig.ch
gamescoin.pacta-cloud.app
brezelkoenig.ch
firatkirmizi.com
brezelkoenig.ch
cv.hofs.dev
ditsch.de
webmail.brezelkoenig.ch
ditsch.de
ditsch.de
dev.developer.viviware.com
ditsch.de
ditsch.de
staging-admin.lvmhcomplianceescape.com
brezelkoenig.ch
ditsch.de
remote.brezelkoenig.ch
Certificate
The complete raw certificate details for login.staging.brezelkoenig.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjDCCA3SgAwIBAgIRAJvl9phaSRmUCV2NzgL3u+4wDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjQwNDAzMTU1NDQxWhcNMjQwNzAy MTY0ODM1WjAoMSYwJAYDVQQDEx1sb2dpbi5zdGFnaW5nLmJyZXplbGtvZW5pZy5j aDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKQNbihM0Njf5ml1R341 fgsHw+GetL1HIox3jXg3fHk0BGpnWcJ6xBkq3dOfl5iH+TKb5qnYOToJpCw1R9T6 Xlh2dwYW+gdo3Mz/BxF1xIWfTVbYjEohiJRBHdV0QZu55s86cKbVb5qER5KgHEBD v0MLJuG1b/YDziEAsq2HLIGMkQBmW7AioEMMXC6atm0iMUiQg5hv4p8duCqe81Zc 77GwgVdz2+KDDC8kaMwSP/xsrevPsNEBpt2TFoWLhm3BxieNJJBeedpJkbh4U6SE 7IHyV4xv0aFVZswDd/f2oN548wKkDIM4lpISD7U8zIlQzQN/n2n4z9+yeV9cyH3u vAUCAwEAAaOCAZEwggGNMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEF BQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTs8cG3CxK1eOvxBD/BidoDb1Nu XDAfBgNVHSMEGDAWgBQl4hgOsleRlCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRs MGowNQYIKwYBBQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0L1Nl VkN0dzV1UHA0MDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0 cy9ndHMxZDQuZGVyMCgGA1UdEQQhMB+CHWxvZ2luLnN0YWdpbmcuYnJlemVsa29l bmlnLmNoMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0f BDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMWQ0LzcwZXV1ZWNz a1lrLmNybDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA P3jSbSjAaGuAtoStbdd+xMRPv26ukBxySR6TmLjgMY1hT3G5voo/i0EgNcTt7+LH yMOn6cdICQlxk6hAbecNPiPaKbQU+ty6/LMLFry01Obt3ayN6W7DnDOrkPMcwya5 FTpBs0w0DLvT5jJNFO/HAcL8VjfZ9rDuD7SI3NqOjiwSErmwvC5PjVD1USd9T826 8jABULqfX0Ti68Yx6tdsRqAIDEExGj/EuL7DnFVCdjqhtgBp/W1OTlnZIsi8E/mD Rv6bcISu2+4QCf3clPDNZNgtz3DlnIS8FnnW5CO9lnb1TPjBFmb29coOiaWsyzGr 7P9h1hWaY/QHp2eMc2o7mg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA1uKEzQ2N/maXVHfjV+ CwfD4Z60vUcijHeNeDd8eTQEamdZwnrEGSrd05+XmIf5Mpvmqdg5OgmkLDVH1Ppe WHZ3Bhb6B2jczP8HEXXEhZ9NVtiMSiGIlEEd1XRBm7nmzzpwptVvmoRHkqAcQEO/ Qwsm4bVv9gPOIQCyrYcsgYyRAGZbsCKgQwxcLpq2bSIxSJCDmG/inx24Kp7zVlzv sbCBV3Pb4oMMLyRozBI//Gyt68+w0QGm3ZMWhYuGbcHGJ40kkF552kmRuHhTpITs gfJXjG/RoVVmzAN39/ag3njzAqQMgziWkhIPtTzMiVDNA3+fafjP37J5X1zIfe68 BQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 207224376870651659564835153445597461486 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 15:54:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 16:48:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'login.staging.brezelkoenig.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20709704743394405473195108807696615569670135494612790246275456109497572984773014211773332541274946244213161538270214487906164328420259877617081313550210664647624248409291485580960653846127677984146751624465684260865539695680093339239124891024186193042499688708640519370646555352180046705403580043273122535745578343978794825222417742578130084910685500003952215222466922675402771960183802336804813561392265188149960488532027197836846391919753106583491418211022542576243108029696035648683993252497684166820411799704165032946759587099876676810085614283443628763176133579646177051361979501230072773183553418944587081104389 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ecf1c1b70b12b578ebf1043fc189da036f536e5c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/SeVCtw5uPp4' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.staging.brezelkoenig.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/70euuecskYk.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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