www.sikla.com
Issued by R3
About this certificate
This digital certificate with serial number 03:ab:c2:bf:87:9c:f8:db:cd:f6:72:1d:af:60:b2:62:fe:2a was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.sikla.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ab:c2:bf:87:9c:f8:db:cd:f6:72:1d:af:60:b2:62:fe:2aSerial Number (int): 319784007249205378878551328302962716114474
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 10:6b:6b:23:6d:a2:54:c3:3f:4f:20:84:5f:e6:fa:17:c0:bb:61:a4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 2a:c8:ab:34:fa:57:45:ab:56:90:30:ef:a9:31:50:f2:c1:f8:8e:7d
Fingerprint (sha256): 44:f0:3c:cf:1f:fe:32:fe:6d:53:f6:06:51:b2:26:48:1a:4d:2c:d3:33:1a:b5:11:5e:90:1c:67:51:b0:55:6d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.sikla.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.sikla.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sikla.com
www.sikla.com
www.sikla.com
Other certificates including the domain name sikla.com
(limited to 100 certificates)
webmail.sikla.com
www.sikla.com
landingpage.sikla.com
webmailer.sikla.com
blog.sikla.com
webmail.sikla.com
www.sikla.com
www.sikla.com
webmail.sikla.com
webmail.sikla.com
webmailer.sikla.com
webmail.sikla.de
www.sikla.com
webmail.sikla.de
webmailer.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
webmail.sikla.com
www.sikla.com
webmailer.sikla.com
webmail.sikla.de
www.sikla.com
www.sikla.com
webmail.sikla.com
landingpage.sikla.com
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
www.sikla.com
www.sikla.com
webmailer.sikla.com
webmailer.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
www.sikla.com
webmail.sikla.com
webmail.sikla.de
webmailer.sikla.com
www.sikla.com
webmail.sikla.de
www.sikla.com
webmail.sikla.com
webmailer.sikla.com
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
www.sikla.com
webmailer.sikla.com
webmailer.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
landingpage.sikla.com
webmailer.sikla.com
blog.sikla.com
webmail.sikla.com
www.sikla.com
www.sikla.com
webmail.sikla.com
webmail.sikla.com
webmailer.sikla.com
webmail.sikla.de
www.sikla.com
webmail.sikla.de
webmailer.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
webmail.sikla.com
www.sikla.com
webmailer.sikla.com
webmail.sikla.de
www.sikla.com
www.sikla.com
webmail.sikla.com
landingpage.sikla.com
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
www.sikla.com
www.sikla.com
webmailer.sikla.com
webmailer.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
www.sikla.com
webmail.sikla.com
webmail.sikla.de
webmailer.sikla.com
www.sikla.com
webmail.sikla.de
www.sikla.com
webmail.sikla.com
webmailer.sikla.com
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
www.sikla.com
webmailer.sikla.com
webmailer.sikla.com
www.sikla.com
webmailer.sikla.com
Certificate
The complete raw certificate details for www.sikla.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLDCCBRSgAwIBAgISA6vCv4ec+NvN9nIdr2CyYv4qMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAzMjAwMTIyMjFaFw0yMzA2MTgwMTIyMjBaMBgxFjAUBgNVBAMT DXd3dy5zaWtsYS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDJ sM8OPzq8e5MRUf6h9vKgQnCMLT48yITsg2DXtSqQmJVkA2a10kwMVuc64Rt2b4E1 FsbrheuxqOdhyZHF/d0q8l+ZioicQIfhiS/CjLzLrVKrshLivFWAEC9Xdu0bA5SB 60r6k/vaqbxRy/rDekn7pVGVnAXy+Q/z9nBlyLMxzYqpU7OHLVkwZGazJfrUpfuV RwtejsadM6e32x4n9cNNElJcziXc4ciWUDr2D+2M5fP+TVZElIWhCMG3eK+VFR4h VF/b9oZJMKjyZQg6T8xIYVSxd8LcNLal+TVFg44Kv66nGevEzXTev+P/6/Ie5QQd +buMWQ7j6lrE1qkSm3QuP8ySx8Z1WoQ6FgxxS7EHAk0k1bks6VIGAGwwp5I1mOZy YJY/JyHduxveVfmHhKOXvGAE6abUEJX6dXG614RyNMcJTkNHeFCJ35Tp0wfNe+8R 5kw3vV7xAKP9lV+ehFyQScVJN2lHn5GCcdOa0wgu/Vjx0y8hV41XOxwPseDhSl4V KO60B6xf+JCTD5heZIgkO64ds6ywabQsPx3OjkpLob2pftE4vvZ1sc/APJWpWJIL Z3kMuvojNWhsG9ErqPDvndWn/rZneBTiT5lKDtb/lTXaSgIWf62lZ/oYCfbEqEJZ NnnEGLGx5+oDaptBdWNiHucuvuCI5xYgb+NGxJcRGwIDAQABo4ICVDCCAlAwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBQQa2sjbaJUwz9PIIRf5voXwLthpDAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzAjBgNVHREEHDAagglzaWtsYS5jb22CDXd3dy5zaWts YS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5 AgQCBIH2BIHzAPEAdwB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAA AYb80yX0AAAEAwBIMEYCIQDsuYc2sJ2MdZPAY/sqS/ux9b86p/JvOplDuTmMIAiY mgIhAIITO6KQ7XsF6zboOJa1+KHp2N9e14sWXg6bNVwDwA6gAHYA6D7Q2j71BjUy 51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGG/NMl4QAABAMARzBFAiBdGwmsVhMe v7daBOVE//I+kYbQ7ubZAROxGsPqcC4LkgIhAKqf7SOOKiFYA+ecssfNgCIbadhk UTYij0f8n+MPq4iQMA0GCSqGSIb3DQEBCwUAA4IBAQA70L+TDbNCu2tmmb3RSr3A /7OUfAwky7qsO2KLMYvtXsmTSWE8QQYTT4OqOxPve+6KTICo05QdvOuaz8Np5gzq Mu0q2GmwtOQGxzPPP5ys/fsmMnheygEnQd6HKNf/yJJhuwi18g+llamZuPakhFLk asuqY775bS/eCLyTzNfEZFbckorJDdurDSeTW6ZXGywPY2Lz3r67loJi4UebtEfA xYAK3GJyuw2lS68G62MMAn+cIyW0iVCu8kZcHt3ts21DYlGVgcWXzz9J9kR5PJmL GKKoXOipQIDe0srf+7f/AEJKmcmaeZPMqYI0pHIvxDaziCDStjEbl2TYt1GFeiz9 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAybDPDj86vHuTEVH+ofby oEJwjC0+PMiE7INg17UqkJiVZANmtdJMDFbnOuEbdm+BNRbG64XrsajnYcmRxf3d KvJfmYqInECH4Ykvwoy8y61Sq7IS4rxVgBAvV3btGwOUgetK+pP72qm8Ucv6w3pJ +6VRlZwF8vkP8/ZwZcizMc2KqVOzhy1ZMGRmsyX61KX7lUcLXo7GnTOnt9seJ/XD TRJSXM4l3OHIllA69g/tjOXz/k1WRJSFoQjBt3ivlRUeIVRf2/aGSTCo8mUIOk/M SGFUsXfC3DS2pfk1RYOOCr+upxnrxM103r/j/+vyHuUEHfm7jFkO4+paxNapEpt0 Lj/MksfGdVqEOhYMcUuxBwJNJNW5LOlSBgBsMKeSNZjmcmCWPych3bsb3lX5h4Sj l7xgBOmm1BCV+nVxuteEcjTHCU5DR3hQid+U6dMHzXvvEeZMN71e8QCj/ZVfnoRc kEnFSTdpR5+RgnHTmtMILv1Y8dMvIVeNVzscD7Hg4UpeFSjutAesX/iQkw+YXmSI JDuuHbOssGm0LD8dzo5KS6G9qX7ROL72dbHPwDyVqViSC2d5DLr6IzVobBvRK6jw 753Vp/62Z3gU4k+ZSg7W/5U12koCFn+tpWf6GAn2xKhCWTZ5xBixsefqA2qbQXVj Yh7nLr7giOcWIG/jRsSXERsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 319784007249205378878551328302962716114474 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-20 01:22:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-18 01:22:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sikla.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822826102271843948204705024438143142641398866774746452245050794319717857749041481219958559798303243739784897142424075133129001901132381029169990492734447500676773422762140428972227995730613060851176871272014732669976148360155590078073526040649646094829294608083442640088974005857501466270525673020433596010343346127572331856987039432093869610163430961300002443806275462299428110719616372470879680900950080923047917007823918834452066842347676582090816700284751465318044157806236170343103388006597556362140894751789941604498447287564582153906034082114585734211734475251315757250159007219349649452039806379815393288258946442613338292329873811482681194364253858194453906373685726701817379362896813991588814848862919039424071217457821358128816520078583928220508908444966434162285216362873037303920886430787390721954710103651493118338561098650346035985205538582660834787824179146714113408694624829867464107890309979006583510795971178171229195119964415776395792123693741807974944502354946439325401896420565895575508306325706744168857857658676458800573136159682032883111085090144389332304132897108619441399830176578970017861755869135160968533899608513283198519236576684600138090628914511260784202205054365969370010625564843633535294759178523 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 106b6b236da254c33f4f20845fe6fa17c0bb61a4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sikla.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sikla.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186fcd325f40000040300483046022100ecb98736b09d8c7593c063fb2a4bfbb1f5bf3aa7f26f3a9943b9398c2008989a02210082133ba290ed7b05eb36e83896b5f8a1e9d8df5ed78b165e0e9b355c03c00ea0007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186fcd325e1000004030047304502205d1b09ac56131ebfb75a04e544fff23e9186d0eee6d90113b11ac3ea702e0b92022100aa9fed238e2a215803e79cb2c7cd80221b69d8645136228f47fc9fe30fab8890 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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