pennylaneproperties.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f4:83:af:c2:56:29:d4:58:ec:d1:71:30:e1:ac:79:6a:43 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pennylaneproperties.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f4:83:af:c2:56:29:d4:58:ec:d1:71:30:e1:ac:79:6a:43Serial Number (int): 344540796785001823281384497002214399240771
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: da:f0:e4:bd:2b:59:2d:fb:43:ec:d1:9e:a0:d6:25:5a:03:e8:7e:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6a:99:a4:6e:23:6b:a4:ef:d6:46:ff:3f:a4:87:19:57:d2:77:da:fd
Fingerprint (sha256): 46:52:68:59:6b:20:44:6f:86:74:84:0e:ba:e8:6d:69:5b:61:1d:b3:59:7a:4f:28:15:f9:91:0e:d4:aa:60:6b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate pennylaneproperties.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pennylaneproperties.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pennylaneproperties.ca
Other certificates including the domain name pennylaneproperties.ca
(limited to 100 certificates)
www.pennylaneproperties.ca
pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
www.pennylaneproperties.ca
pennylaneproperties.ca
www.pennylaneproperties.ca
Certificate
The complete raw certificate details for pennylaneproperties.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgISA/SDr8JWKdRY7NFxMOGseWpDMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA0MDUxNDExNTJaFw0x ODA3MDQxNDExNTJaMCExHzAdBgNVBAMTFnBlbm55bGFuZXByb3BlcnRpZXMuY2Ew ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09IUS5sHpvTFwRcNM1UxD WAZdAomlR0Pjdd8wak50mXsCcc5J0iEQxuT7k+YBd+Xz2xw8Mv/4u0g/kWUmHzYh fZ8/6bvmRcwaixbrMqlzbXzfjlQZROx7VJdl0NRQ0225uTXVBmLmNH1bXHw0Pq4F xUUwzuTnsbLDe5cy+zvFSoEuCWH3aypS5rBPcNfUYa6opPKoKhe3g0Yt1eqzqpkc NxX4GuXwvQ4UOe2AVp/ZYKIc3vJwy6H0s85rTuz+gYN1DPZHesGROVWJoptb02C9 9jpNGfccSh6hxpZtjAP/octXEqhTsxgM/yiC5xtLlC8EVrZwTl6qcBJJQwBJGcsx AgMBAAGjggMdMIIDGTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNrw5L0rWS37Q+zR nqDWJVoD6H7xMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wIQYDVR0RBBowGIIWcGVubnlsYW5lcHJvcGVydGllcy5jYTCB /gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCB ngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkg UmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUg Q2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQu b3JnL3JlcG9zaXRvcnkvMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA23Sv7ssp 7LH+yj5xbSzluaq7NveEcYPHXZ1PN7Yfv2QAAAFill0vJQAABAMARzBFAiEAprKF iBX7ZoU0me6r1WKCPpWQFWxP6iqkryNnV4Ov4D4CIDcc5WmmPRaANbj4peesD2bP SGlSqkc7nzlSRBJ9eMV8AHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH 9HgAAAFill0vPwAABAMARjBEAiBft5H/ruH4MUq2Yoc6Gz2PnF7CUWsVS6JGrimH CLIzCQIgWqKclmEPuSWKKEt1qHvv4gee5xZ12bPDnqmIaYU+FaswDQYJKoZIhvcN AQELBQADggEBACNAlmLDVYxilnYmdhgQA8HeCRWTFOTLbh8wIt+1g3mb5OQF77jf EBN5JBCHcMK1Jf14f/FuUzk6VqWfycrcyDZXuv22mPoKfrtSUIit4+4PEK4iXgiU YMHQQ1qAObg5rWECeDGCFfLibd0SYlb1TMPXYubyFQ9EU52kffX8NwuKUTq1wrQJ SUUomYj7wE8vgeVBz+f37le6qMxrKyhMtfYUWJpl//MwBU4RQF+BFxJfEvt13PIA eHMYLZrUo/hagBY9x6lRCOB3Y8UoNQqTmCTIXsUEUkchfYa62JE7RDDKit69aqd7 VtrRiV5F8uUzpvCNat2PxOO5e0mvfdVuym8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPSFEubB6b0xcEXDTNVM Q1gGXQKJpUdD43XfMGpOdJl7AnHOSdIhEMbk+5PmAXfl89scPDL/+LtIP5FlJh82 IX2fP+m75kXMGosW6zKpc218345UGUTse1SXZdDUUNNtubk11QZi5jR9W1x8ND6u BcVFMM7k57Gyw3uXMvs7xUqBLglh92sqUuawT3DX1GGuqKTyqCoXt4NGLdXqs6qZ HDcV+Brl8L0OFDntgFaf2WCiHN7ycMuh9LPOa07s/oGDdQz2R3rBkTlViaKbW9Ng vfY6TRn3HEoeocaWbYwD/6HLVxKoU7MYDP8ogucbS5QvBFa2cE5eqnASSUMASRnL MQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 344540796785001823281384497002214399240771 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-05 14:11:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-04 14:11:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pennylaneproperties.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22843472110940514016448859920168041243402851558592625083063164390953910255447222322375637306730490319263791937636828558305042302137288480022971824536391031872658905671279382796779666766373704031487669536797079106357488631911831333296155750129991982336435972334065411082192589423486703520998028632023245800432524799775693260857186334883919920303842796788189234936431079516302614937023868237217713275468261668670868555545056109660334905127713838210963333374346071401409195657065125671281703762045565250014909847966515227652466786814099570373284465531925314818091368365027904055000540398028307679780438875616435769035569 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) daf0e4bd2b592dfb43ecd19ea0d6255a03e87ef1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennylaneproperties.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162965d2f250000040300473045022100a6b2858815fb66853499eeabd562823e9590156c4fea2aa4af23675783afe03e0220371ce569a63d168035b8f8a5e7ac0f66cf486952aa473b9f395244127d78c57c007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162965d2f3f000004030046304402205fb791ffaee1f8314ab662873a1b3d8f9c5ec2516b154ba246ae298708b2330902205aa29c96610fb9258a284b75a87befe2079ee71675d9b3c39ea98869853e15ab . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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