reisepodden.no
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:97:21:cc:2b:d3:a6:f6:56:62:c4:de:ac:69:61:3b:87:56 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=reisepodden.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:97:21:cc:2b:d3:a6:f6:56:62:c4:de:ac:69:61:3b:87:56Serial Number (int): 312764419841674918814342366437648159704918
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: eb:9d:a8:b0:f4:de:34:fd:5e:aa:52:e0:1c:c1:df:f5:16:bc:41:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f8:60:c2:e6:9d:ec:c2:15:e6:9c:ba:68:f6:f8:2a:4a:15:f6:13:ac
Fingerprint (sha256): 36:59:7a:69:4a:45:e1:1d:34:b7:9b:72:ea:8f:df:ce:51:59:c2:fd:2a:99:f2:7f:47:9d:8e:52:29:72:6d:82
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate reisepodden.no
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for reisepodden.no
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
reisepodden.no
www.reisepodden.no
www.reisepodden.no
Other certificates including the domain name reisepodden.no
(limited to 100 certificates)
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
Certificate
The complete raw certificate details for reisepodden.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgISA5chzCvTpvZWYsTerGlhO4dWMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMjgyMzAyMTlaFw0x OTA1MjkyMzAyMTlaMBkxFzAVBgNVBAMTDnJlaXNlcG9kZGVuLm5vMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoBjL8fVgQC2obsRX2YPF2pmtZ84cbeVZ cXC9LJteTO5gXIMxu8tR4Mp2f6hlw+8pQy5W7Jv61dzFQKRhXs8rnuYWQR5zxDmE yyXNEGhYiquHu2BbodaQbvJuIzpPzXKzh+Q2/564uemeFWy2rs0xRsqVqNeCLONB T0PQosTOhYzuOHYnCFebCkw6RYp7LfAFr0a8Fzy0dSfYJMIYKu+yfbi38tK/EjYC 9gHx+dng5V6p7UPYbzsJf48qES14ryZOOt9EZEy8S8gNF6a4w1EsoNMYIxfFQd1D jygZYqUJDWP4Oqdu44o4n4VpR7UEbOW7RTGYe2Rt2JK+x472M/w0Ae7e9YK9nTmi hkseH79L21LbC9h3esvIDOZYI09uXq7nlqOHokm8fLWCNjz68wN8kT4wIhjRG/UU 1Tzej2gQOgdPhOo3E+EZ82p/kacYoUorkd/i9pbZNau+r8yFClvx7otMxrxp47cT bTY6vaunChJ33BHn0VnKj+s10DVWffzIL5XkVu4SChlpJNlJXFjpc/GU1x0wPnk3 XHHoe8olh2i5ca+1Th8vB2AherVdSNUR2IdcvFNML/AALXZRsIW+FUzy6SNvuZlS dw6uoY9NTo15/ZMwq3fEepFqNRxvkk6Tn3pB9tGgtcqZm1apSDrlmicJgi09X/No A/qP0gSYAb0CAwEAAaOCAnYwggJyMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU652o sPTeNP1eqlLgHMHf9Ra8QQEwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAtBgNVHREEJjAkgg5yZWlzZXBvZGRlbi5ub4IS d3d3LnJlaXNlcG9kZGVuLm5vMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI +6SPKJMBnd3x2/4AAAFpNo8P2AAABAMARzBFAiEAiSrNZ7HS5LOrRSAARY0ENqxx GXqyK4ZrdCcfY6zckyYCIGHtC00IXst6gb7R8zyrdL/yJzCyCDAydcQkaEMFHrFR AHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFpNo8QJgAABAMA RjBEAiBkIXzL3/NRUcLRrUtYQvdf3+Njpp2H92eInUvUFUKq6QIgXB89hnF2Jw17 bJrEs1Cn5FaOLCrJRYCN+JCcfcg0AJIwDQYJKoZIhvcNAQELBQADggEBABde7Fh8 quv8bZPFxEflazq/s1Qx61qtXNDhxcXDaLpNYmwK71LJQ0uMn6SGP8zXiCj/5IVx eIqZpF8KW6rrQqMRtIc7Vz0b/4suVqxfYXvCtOgON9Yrsl6RdRiqAeyn8Kle0ejL aN0BoT4RD/nQBoyYG4/6lZKRqTSqmBtk6V+9zo30aqcqgndp/DDsr9N5P1pTeVzU s8rsWc1Xy+d0jW+mdjIUImwDyWmnmyw1c+We9FIpXDZWSq+5N5yEngPbZPJXRVL8 dLp5KH5BpZ3XSOVlRHEU2s1hLvX8ARdy5mX3cSqX8KucG5d7Z/0DwHbQOHzDX5Y0 eUxh1SkN4EzcGuw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoBjL8fVgQC2obsRX2YPF 2pmtZ84cbeVZcXC9LJteTO5gXIMxu8tR4Mp2f6hlw+8pQy5W7Jv61dzFQKRhXs8r nuYWQR5zxDmEyyXNEGhYiquHu2BbodaQbvJuIzpPzXKzh+Q2/564uemeFWy2rs0x RsqVqNeCLONBT0PQosTOhYzuOHYnCFebCkw6RYp7LfAFr0a8Fzy0dSfYJMIYKu+y fbi38tK/EjYC9gHx+dng5V6p7UPYbzsJf48qES14ryZOOt9EZEy8S8gNF6a4w1Es oNMYIxfFQd1DjygZYqUJDWP4Oqdu44o4n4VpR7UEbOW7RTGYe2Rt2JK+x472M/w0 Ae7e9YK9nTmihkseH79L21LbC9h3esvIDOZYI09uXq7nlqOHokm8fLWCNjz68wN8 kT4wIhjRG/UU1Tzej2gQOgdPhOo3E+EZ82p/kacYoUorkd/i9pbZNau+r8yFClvx 7otMxrxp47cTbTY6vaunChJ33BHn0VnKj+s10DVWffzIL5XkVu4SChlpJNlJXFjp c/GU1x0wPnk3XHHoe8olh2i5ca+1Th8vB2AherVdSNUR2IdcvFNML/AALXZRsIW+ FUzy6SNvuZlSdw6uoY9NTo15/ZMwq3fEepFqNRxvkk6Tn3pB9tGgtcqZm1apSDrl micJgi09X/NoA/qP0gSYAb0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 312764419841674918814342366437648159704918 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-28 23:02:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 23:02:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reisepodden.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 653138213187555444803377479682922341193039469419836272139415906892206985079688254960349253509012182995179508594076165223328684112592247924533688470509321698706396914336925720695375516567518773250802159150587496398556761269209270327564229228053354818252077685759874271526026751301028736105254837873577578651413368865672030632053082417955856503534847920514016537584183761615153022169975921980755500070420547642823693374779175016936771466385715822611267063268700963195336440131077706111215353715500692609126363774756717551428184846828370092478388967193255819898329733659403642636141993387591938179061260786883246905579134020252916344334744140366999407202080001159645239645024448696174285944293687252639452008060247134636225572270236404277159450971779818486937639460682525131135439492945046361221909849610213256155189889811593900125898377669579092677311776780781611998028215472225300286968857377025369449438305021527042237964818535940078740413116568431831227443078901712556577698737439979717650855736708613479868658480388368423388917435957140574562804267639966589805694409890588930623001821317478043443693775137810613428681727589051252530998825014329900543749456289687971942114107778409621382381581698538756134320558682106615343877718461 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) eb9da8b0f4de34fd5eaa52e01cc1dff516bc4101 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisepodden.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reisepodden.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169368f0fd80000040300473045022100892acd67b1d2e4b3ab452000458d0436ac71197ab22b866b74271f63acdc9326022061ed0b4d085ecb7a81bed1f33cab74bff22730b208303275c4246843051eb15100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169368f10260000040300463044022064217ccbdff35151c2d1ad4b5842f75fdfe363a69d87f767889d4bd41542aae902205c1f3d867176270d7b6c9ac4b350a7e4568e2c2ac945808df8909c7dc8340092 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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