superleague.com
Issued by R3
About this certificate
This digital certificate with serial number 03:2d:f6:28:62:53:08:d4:74:b2:b9:e6:13:63:ed:7e:ad:26 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=superleague.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:2d:f6:28:62:53:08:d4:74:b2:b9:e6:13:63:ed:7e:ad:26Serial Number (int): 276976764079815212863554432101200011636006
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 14:be:26:9e:6b:08:4e:ca:3c:3e:d9:39:83:de:b1:6f:69:b7:8d:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 66:1f:9f:00:fb:a2:05:47:0d:f8:58:ac:f2:35:e0:13:8b:87:70:7c
Fingerprint (sha256): 34:12:32:4b:df:51:d0:4a:c1:c3:d4:02:e7:67:22:66:7d:1c:61:4b:6a:32:a4:99:87:59:d5:03:07:ee:10:9a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate superleague.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for superleague.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
superleague.com
www.superleague.com
www.superleague.com
Other certificates including the domain name superleague.com
(limited to 100 certificates)
arcade.svc.superleague.com
live.superleague.com
ads.svc.dev.superleague.com
www.itesca.be
*.superleague.com
pm2.superleague.com
live.superleague.com
merchandise-service-prod.superleague.com
ads.svc.dev.superleague.com
app.remoteteambuilding.com
ir.superleague.com
merchandise-service-prod.superleague.com
ir.superleague.com
superleague.com
alcion.design
merchandise-service-dev.superleague.com
beta.superleague.com
arcade.svc.superleague.com
pro.farfel.cx
monitoring.superleague.com
ir.superleague.com
leadership-clarity.com
jenkins-dev.superleague.com
video.superleague.com
helsingborgshem.demo.movello.se
0.superleague.com
merchandise-service-dev.superleague.com
mdc.com.br
rmq.superleague.com
merchandise-service.dev.superleague.com
monitoring.superleague.com
superleague.com
pm2.superleague.com
live.superleague.com
www.akshaysoam.com
live.superleague.com
sensu.superleague.com
duckingyachtclub.com
ir.superleague.com
ir.superleague.com
selby.superleague.com
ads.svc.dev.superleague.com
sensu.superleague.com
live.superleague.com
merchandise-service-prod.superleague.com
ir.superleague.com
*.superleague.com
superleague.com
merchandise-service.dev.superleague.com
ads.svc.superleague.com
ir.superleague.com
monitoring.superleague.com
pm2.superleague.com
live.superleague.com
calist.co
ir.superleague.com
rmq.superleague.com
sensu.superleague.com
selby.superleague.com
merchandise-service.dev.superleague.com
monitoring.superleague.com
sensu.superleague.com
live.superleague.com
superleague.com
arcade.service.superleague.com
live.superleague.com
selby.superleague.com
live.superleague.com
video.superleague.com
insights.superleague.com
*.superleague.com
*.superleague.com
ads.svc.dev.superleague.com
selby.superleague.com
live.superleague.com
monitoring.superleague.com
ir.superleague.com
ir.superleague.com
superleague.com
live.superleague.com
dvptst-link.feliznet.jp
dev.arcade.svc.superleague.com
design.superleague.com
live.superleague.com
catalog.craftfish.pro
app.ascensiondigital.com.br
services-lib.superleague.com
merchandise-service-prod.superleague.com
component-lib.superleague.com
live.superleague.com
merchandise-service-prod.superleague.com
ir.superleague.com
component-lib.superleague.com
live.superleague.com
pm2.superleague.com
ads.svc.superleague.com
*.superleague.com
ir.superleague.com
merchandise-service-prod.superleague.com
grafana.superleague.com
live.superleague.com
ads.svc.dev.superleague.com
www.itesca.be
*.superleague.com
pm2.superleague.com
live.superleague.com
merchandise-service-prod.superleague.com
ads.svc.dev.superleague.com
app.remoteteambuilding.com
ir.superleague.com
merchandise-service-prod.superleague.com
ir.superleague.com
superleague.com
alcion.design
merchandise-service-dev.superleague.com
beta.superleague.com
arcade.svc.superleague.com
pro.farfel.cx
monitoring.superleague.com
ir.superleague.com
leadership-clarity.com
jenkins-dev.superleague.com
video.superleague.com
helsingborgshem.demo.movello.se
0.superleague.com
merchandise-service-dev.superleague.com
mdc.com.br
rmq.superleague.com
merchandise-service.dev.superleague.com
monitoring.superleague.com
superleague.com
pm2.superleague.com
live.superleague.com
www.akshaysoam.com
live.superleague.com
sensu.superleague.com
duckingyachtclub.com
ir.superleague.com
ir.superleague.com
selby.superleague.com
ads.svc.dev.superleague.com
sensu.superleague.com
live.superleague.com
merchandise-service-prod.superleague.com
ir.superleague.com
*.superleague.com
superleague.com
merchandise-service.dev.superleague.com
ads.svc.superleague.com
ir.superleague.com
monitoring.superleague.com
pm2.superleague.com
live.superleague.com
calist.co
ir.superleague.com
rmq.superleague.com
sensu.superleague.com
selby.superleague.com
merchandise-service.dev.superleague.com
monitoring.superleague.com
sensu.superleague.com
live.superleague.com
superleague.com
arcade.service.superleague.com
live.superleague.com
selby.superleague.com
live.superleague.com
video.superleague.com
insights.superleague.com
*.superleague.com
*.superleague.com
ads.svc.dev.superleague.com
selby.superleague.com
live.superleague.com
monitoring.superleague.com
ir.superleague.com
ir.superleague.com
superleague.com
live.superleague.com
dvptst-link.feliznet.jp
dev.arcade.svc.superleague.com
design.superleague.com
live.superleague.com
catalog.craftfish.pro
app.ascensiondigital.com.br
services-lib.superleague.com
merchandise-service-prod.superleague.com
component-lib.superleague.com
live.superleague.com
merchandise-service-prod.superleague.com
ir.superleague.com
component-lib.superleague.com
live.superleague.com
pm2.superleague.com
ads.svc.superleague.com
*.superleague.com
ir.superleague.com
merchandise-service-prod.superleague.com
grafana.superleague.com
Certificate
The complete raw certificate details for superleague.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAy32KGJTCNR0srnmE2Ptfq0mMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDMyMDQ0MzRaFw0yNDA3MDIyMDQ0MzNaMBoxGDAWBgNVBAMT D3N1cGVybGVhZ3VlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK7KrZcaWdo1S4sa+S5BfUWf0MpV0m+xvfftWVHGbKE6v9Gx1fb+ObQNeD2IGj/E nKP/Kfi68Bciu75cpowMK9kK8nf2wvT/lLaUdz2FJYJaBeVyvl+KY6aK3/rcNJBK UI/e5mP34+d1tlaBr5D6Fwlcb9wQqivxaE5dJK5Pz8KGIMBklwVtZkK18G6lLIfS gbleiNUhAgVS4UvnGsBp6CdgnqjI/XDaZIB86u8HIJQJYLP9bVg1nfB5QFuWwNh9 AM9LDx5FPlDff0YTPWQVhdkEx9viAR9ZaA6hq30Gy9r4eELTJh53iy/9FEKmejdq n/HpBCuQahfwM3LUNL4iwMECAwEAAaOCAicwggIjMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUFL4mnmsITso8Ptk5g96xb2m3jWgwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wLwYDVR0RBCgwJoIPc3VwZXJsZWFndWUuY29tghN3d3cuc3VwZXJsZWFndWUu Y29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx AHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGOpeu+MQAABAMA RzBFAiAXTKrDonmTJC+gJn1D4mtFMvWIsMjMhKmVzN43K9kIigIhAObb+mbwetvs yXv4JrwfkLFJMcPxRgtaeMk5rwMmiMRAAHcAGZgQcQnw1lIuMIDSnj9ku4NuKMz5 D1KO7t/OSj8WtMoAAAGOpeu+awAABAMASDBGAiEA7zse5rqW05RRdHFMRH3/WYRK jpySodCY2+ilwkmQxRcCIQDzmcWr+bX1aXHGYGKAVi/+DYOx3YnbUZGrvqoyEljH 2zANBgkqhkiG9w0BAQsFAAOCAQEAYUnl3farKb+jIJWDiueJ9b+FU0TFMJogNFgz kIqG8MMKN7TaZX7Ix+qZpWPa0HvZWWqbnl+trZCXDhHsuiMQuKdGzT9x0Ms9+3Ii m7KxzruvgXudV6tkzJni5jvip1g2TSS8TWMVdzEf/DBT9vi/NUbgIFzzI/QKLJec 1WyzHKKFf2JeBM5CvH5aQpHEXMfHDwF59cyoUhe84M9XTFkPQ5zF4zeT8Ey8BjVU 7VB6Y3+H7SHu3l216OvIt9lOeTqCGLMJ4GtgrmzCggPg0h7AhCW8Z0TrLfJ3eA+T UX9AmamkIw8yL3L7XEIzBOnWVSlHRkYGQ5Ytwe9kEtgixJ6PEA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsqtlxpZ2jVLixr5LkF9 RZ/QylXSb7G99+1ZUcZsoTq/0bHV9v45tA14PYgaP8Sco/8p+LrwFyK7vlymjAwr 2Qryd/bC9P+UtpR3PYUlgloF5XK+X4pjporf+tw0kEpQj97mY/fj53W2VoGvkPoX CVxv3BCqK/FoTl0krk/PwoYgwGSXBW1mQrXwbqUsh9KBuV6I1SECBVLhS+cawGno J2CeqMj9cNpkgHzq7wcglAlgs/1tWDWd8HlAW5bA2H0Az0sPHkU+UN9/RhM9ZBWF 2QTH2+IBH1loDqGrfQbL2vh4QtMmHneLL/0UQqZ6N2qf8ekEK5BqF/AzctQ0viLA wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 276976764079815212863554432101200011636006 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 20:44:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 20:44:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'superleague.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22065409353718186572935842831012429678845115721995680808130959155662701683165936692277099403540697703679266646249780166259653605962262726382553022485455633783588162250361516105124903544631077137052041480647388129139818927638586059825564234348113033631006076727271887739248659417651271339219168596183510923173908441872803505098240392992720823305505491971396455635444660691272394660339407895033584599207923366688789257932444257129499539293972790904036555964193089617442998961227218833981325118813614216246937037849211672122293588264814470632366296697199565544642441976434307540041817493941294980329148967139837405741249 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 14be269e6b084eca3c3ed93983deb16f69b78d68 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superleague.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superleague.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ea5ebbe3100000403004730450220174caac3a27993242fa0267d43e26b4532f588b0c8cc84a995ccde372bd9088a022100e6dbfa66f07adbecc97bf826bc1f90b14931c3f1460b5a78c939af032688c4400077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ea5ebbe6b0000040300483046022100ef3b1ee6ba96d3945174714c447dff59844a8e9c92a1d098dbe8a5c24990c517022100f399c5abf9b5f56971c6606280562ffe0d83b1dd89db5191abbeaa321258c7db . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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