kellnerweg.de
Issued by R3
About this certificate
This digital certificate with serial number 03:e4:ef:cd:ad:d2:8c:a5:a7:56:12:37:d6:d3:fe:03:d2:40 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=kellnerweg.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e4:ef:cd:ad:d2:8c:a5:a7:56:12:37:d6:d3:fe:03:d2:40Serial Number (int): 339239990890641607866901621985741791023680
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 91:32:19:0c:68:43:b8:ad:63:9d:e7:45:f6:f9:f2:c1:8b:40:00:38
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 2a:5f:56:fd:93:c3:1f:da:9e:d8:5a:0b:77:a6:2e:b1:71:13:ae:1f
Fingerprint (sha256): 3c:6a:4f:88:a8:21:f9:84:ae:1e:ba:b9:25:82:b8:71:31:42:dc:2a:cc:af:d2:7f:aa:d4:bb:fc:83:32:de:5d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate kellnerweg.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kellnerweg.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kellnerweg.de
www.kellnerweg.de
www.kellnerweg.de
Other certificates including the domain name kellnerweg.de
(limited to 100 certificates)
kellnerweg.de
vojel.kellnerweg.de
kellnerweg.de
vojel.kellnerweg.de
kellnerweg.de
vojel.kellnerweg.de
ip.gwdg.de
matrix.kellnerweg.de
matrix.kellnerweg.de
matrix.kellnerweg.de
matrix.kellnerweg.de
vojel.kellnerweg.de
vojel.kellnerweg.de
matrix.kellnerweg.de
kellnerweg.de
ip.gwdg.de
kellnerweg.de
marihuana.kellnerweg.de
matrix.kellnerweg.de
vojel.kellnerweg.de
vojel.kellnerweg.de
vojel.kellnerweg.de
matrix.kellnerweg.de
ip.gwdg.de
kellnerweg.de
ip.gwdg.de
ip.gwdg.de
kellnerweg.de
vojel.kellnerweg.de
marihuana.kellnerweg.de
matrix.kellnerweg.de
vojel.kellnerweg.de
matrix.kellnerweg.de
ip.gwdg.de
matrix.kellnerweg.de
vojel.kellnerweg.de
ip.gwdg.de
vojel.kellnerweg.de
vojel.kellnerweg.de
ip.gwdg.de
kellnerweg.de
ip.gwdg.de
matrix.kellnerweg.de
matrix.kellnerweg.de
vojel.kellnerweg.de
vojel.kellnerweg.de
kellnerweg.de
kellnerweg.de
marihuana.kellnerweg.de
kellnerweg.de
vojel.kellnerweg.de
kellnerweg.de
vojel.kellnerweg.de
kellnerweg.de
vojel.kellnerweg.de
ip.gwdg.de
matrix.kellnerweg.de
matrix.kellnerweg.de
matrix.kellnerweg.de
matrix.kellnerweg.de
vojel.kellnerweg.de
vojel.kellnerweg.de
matrix.kellnerweg.de
kellnerweg.de
ip.gwdg.de
kellnerweg.de
marihuana.kellnerweg.de
matrix.kellnerweg.de
vojel.kellnerweg.de
vojel.kellnerweg.de
vojel.kellnerweg.de
matrix.kellnerweg.de
ip.gwdg.de
kellnerweg.de
ip.gwdg.de
ip.gwdg.de
kellnerweg.de
vojel.kellnerweg.de
marihuana.kellnerweg.de
matrix.kellnerweg.de
vojel.kellnerweg.de
matrix.kellnerweg.de
ip.gwdg.de
matrix.kellnerweg.de
vojel.kellnerweg.de
ip.gwdg.de
vojel.kellnerweg.de
vojel.kellnerweg.de
ip.gwdg.de
kellnerweg.de
ip.gwdg.de
matrix.kellnerweg.de
matrix.kellnerweg.de
vojel.kellnerweg.de
vojel.kellnerweg.de
kellnerweg.de
kellnerweg.de
marihuana.kellnerweg.de
kellnerweg.de
Certificate
The complete raw certificate details for kellnerweg.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgISA+Tvza3SjKWnVhI31tP+A9JAMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMjAwMDEyMzBaFw0yNDAzMTkwMDEyMjlaMBgxFjAUBgNVBAMT DWtlbGxuZXJ3ZWcuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDB t/we7iWmWXaghMAJ7wSJN8BRXfi3k9/DBq5oMjxRTLFwQDsTuYIFV1lsXrstyg+U N/Zg8rcZiUSEenNG5ZWXKk1f8S/8V3VOMxP5cBJuynT9AWsYy7CkdMMYtKwjALZd lPF48t1RII4CZyZzzaOQmTvzoeM7P65fblImgC7mC5D4ZiErbdqyeuyUk1SsKTiC Fm5LKv4AZQqtlYIK7R9FuaalrziolyscHo25J4JbMPeO96gwEMQ4NPpIhS2Zo6te gXco7hU1SgYfGfzClJwkBla97p8mN1MSXu2ybiBiQgNHaD/IdYoCS+1ExAEf/D9p xUWwTMK0RAdnyMLshUSItc51kMX0cBsg/DnHNztrmvt2pRxP0fRPpk5YT3GIQQ2E qdsC6FH6t7NuvZDHrTgFVTlA2KK3BVwZHgB5RmLnZWBBH2QDOZFYe47l6URVBeJa 6slJohWK2opG9oB6QhRrz/8tDgIvjCghltltgVW1VMFneF4fary4T+xNsqECJU0v jsIgMWcKsW7Podrn30xcLkxYhP19KUmmeF5Nv17+lQ0whdpDVdnf/3rzS75YqJLx JWZaD5/eL4RV87IAOieQZNPCS0s/96abNULELR4i0TNH3JeUnvIp/cLb//1GsOix xvft6dN2y0UFv/qgSePW5H4kSk4BKzYLwMyAUDYphQIDAQABo4ICIjCCAh4wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBSRMhkMaEO4rWOd50X2+fLBi0AAODAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzArBgNVHREEJDAigg1rZWxsbmVyd2VnLmRlghF3d3cu a2VsbG5lcndlZy5kZTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkC BAIEgfUEgfIA8AB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAAB jITIBjkAAAQDAEcwRQIgEbMQtONLbOCXZGMAKJC8vo/i6yBavKP3tUq0TELWzmEC IQCofbdkETlX+CCUHAgiqldvTwC3lFFhDFipFXkDbTpi5gB2ADtTd3U+LbmATosw Wwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjITIBjAAAAQDAEcwRQIgALXolNu8u/i2 9sRWqNAcAFAroMMZOV+iDnpUaF9NAg4CIQDcc9SNluI5MgNtXbMkcxKIZvWmPGom KE1H9GoAANtU2DANBgkqhkiG9w0BAQsFAAOCAQEAfSY4PyLYdDMG9z3I6ZcPEjh7 uLAYqdolTjFwrr2Y9OK3uD+zJXmuZztNTnaAYVIV94I7UrPUVqHRE5/oMK8VIfhk ZcgCXVekT3P9diIEVuyRE0hHhbyxWNsrhkW5GIDUurF1BO+BHh9YfsT9wSYWjABm qs4RMFAP0vFQQRAIdwhkTL4XlspwJf2/rMOhgtoeWwMaAwFMLVrtXjKBg5Xh18sG AOPa/yRu5Pwek/e+NP1Xp/0aE8DLDNlM1X0dsibC15mPIz9bA3C5Z5dCVWvlP9vk nZHM/mEAlzJrcjBoC/rCetrXkPSrWURN+e2DlKTJu1flcM+J/P4jz9D8aJTytQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwbf8Hu4lpll2oITACe8E iTfAUV34t5PfwwauaDI8UUyxcEA7E7mCBVdZbF67LcoPlDf2YPK3GYlEhHpzRuWV lypNX/Ev/Fd1TjMT+XASbsp0/QFrGMuwpHTDGLSsIwC2XZTxePLdUSCOAmcmc82j kJk786HjOz+uX25SJoAu5guQ+GYhK23asnrslJNUrCk4ghZuSyr+AGUKrZWCCu0f Rbmmpa84qJcrHB6NuSeCWzD3jveoMBDEODT6SIUtmaOrXoF3KO4VNUoGHxn8wpSc JAZWve6fJjdTEl7tsm4gYkIDR2g/yHWKAkvtRMQBH/w/acVFsEzCtEQHZ8jC7IVE iLXOdZDF9HAbIPw5xzc7a5r7dqUcT9H0T6ZOWE9xiEENhKnbAuhR+rezbr2Qx604 BVU5QNiitwVcGR4AeUZi52VgQR9kAzmRWHuO5elEVQXiWurJSaIVitqKRvaAekIU a8//LQ4CL4woIZbZbYFVtVTBZ3heH2q8uE/sTbKhAiVNL47CIDFnCrFuz6Ha599M XC5MWIT9fSlJpnheTb9e/pUNMIXaQ1XZ3/9680u+WKiS8SVmWg+f3i+EVfOyADon kGTTwktLP/emmzVCxC0eItEzR9yXlJ7yKf3C2//9RrDoscb37enTdstFBb/6oEnj 1uR+JEpOASs2C8DMgFA2KYUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 339239990890641607866901621985741791023680 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 00:12:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 00:12:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kellnerweg.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790303307821240742889260080753812461256845319060701945753639178071178969287772711727211394706898927461004864900483353022435633545280469475619600698208991979971346463237087366158760321737758562959125427554218358246999811582309774705817739659129464116684195822504325007069869081794225279314183493376504541960079377586053044636452864837447397014777341790865622227858016170200838361375443218141842873319973476679462916791572526163413450366155688534973649917703425716998224039209414353793881724760424582225746952198307279459265507318305037295371607111457809910090316557510119514941496471540282281608202942383339189003030659152741899623602373563070353617359943477445409028108492533390244496592204606136685043985833611899895742413899384144428326711480779807438998575984469050665337279487346496765553542548345670268993033520612657133965318371263794464533876283269428664721314128591157501032024700717940344007476218126748220604938666444623590465684491081479947223150406731237597812196181574069557995362163839422436866929673783122616716803654119235137634993581529666064399624906100202929066692361902197639217296275780510176373667154724850358141743145218945330317470725912090289733533426630108486974296238972727840857477608667029273435388127621 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9132190c6843b8ad639de745f6f9f2c18b400038 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellnerweg.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kellnerweg.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c84c806390000040300473045022011b310b4e34b6ce0976463002890bcbe8fe2eb205abca3f7b54ab44c42d6ce61022100a87db764113957f820941c0822aa576f4f00b79451610c58a91579036d3a62e60076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c84c806300000040300473045022000b5e894dbbcbbf8b6f6c456a8d01c00502ba0c319395fa20e7a54685f4d020e022100dc73d48d96e23932036d5db32473128866f5a63c6a26284d47f46a0000db54d8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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