brain-library.com
Issued by R3
About this certificate
This digital certificate with serial number 03:bd:aa:78:9b:ca:8e:64:2b:30:cb:f9:4f:b3:c1:58:c8:bb was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=brain-library.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:bd:aa:78:9b:ca:8e:64:2b:30:cb:f9:4f:b3:c1:58:c8:bbSerial Number (int): 325876820138066214773987374885830724733115
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7d:24:26:6f:97:b7:58:87:ff:3a:75:70:d4:d3:84:67:81:0e:ee:01
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 28:6c:e1:c8:12:c6:06:81:4a:7b:b7:f0:a7:72:a5:23:54:ba:b3:2b
Fingerprint (sha256): 46:b6:44:5d:e0:e4:80:77:ee:3b:f3:0a:87:1a:7d:be:ed:d9:d0:3a:63:ec:6b:e1:82:76:f8:20:0e:06:6f:4c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate brain-library.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for brain-library.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
app.brain-library.com
brain-library.com
plus.brain-library.com
plusai.brain-library.com
plusstore.brain-library.com
brain-library.com
plus.brain-library.com
plusai.brain-library.com
plusstore.brain-library.com
Other certificates including the domain name brain-library.com
(limited to 100 certificates)
cdn.galapagosstore.com
cdn.galapagosstore.com
test.brain-library.com
pr.plus.brain-library.com
stg.brain-library.com
cdn.galapagosstore.com
stg.brain-library.com
cdn.galapagosstore.com
brain-library.com
galapagosstore.com
test.brain-library.com
galapagosstore.com
brain-library.com
cdn.galapagosstore.com
test.galapagosstore.com
storeman.galapagosstore.com
test.brain-library.com
brain-library.com
brain-library.com
brain-library.com
cdn.galapagosstore.com
cdn.brain-library.com
cdn.test.galapagosstore.com
cdn.galapagosstore.com
stg.brain-library.com
brain-library.com
cdn.plus.brain-library.com
pr.plus.brain-library.com
cdn.galapagosstore.com
stg.brain-library.com
stg.brain-library.com
cdn.test.galapagosstore.com
test.galapagosstore.com
brain-library.com
cdn.galapagosstore.com
galapagosstore.com
brain-library.com
brain-library.com
brain-library.com
test.brain-library.com
pr.plus.brain-library.com
brain-library.com
cdn.galapagosstore.com
brain-library.com
storeman.galapagosstore.com
brain-library.com
cdn.plus.brain-library.com
test.galapagosstore.com
brain-library.com
stg.brain-library.com
pr.plus.brain-library.com
brain-library.com
cdn.galapagosstore.com
brain-library.com
brain-library.com
brain-library.com
brain-library.com
galapagosstore.com
cdn.plus.brain-library.com
cdn.galapagosstore.com
plus.brain-library.com
test.galapagosstore.com
cdn.plus.brain-library.com
galapagosstore.com
brain-library.com
stg.brain-library.com
brain-library.com
galapagosstore.com
galapagosstore.com
cdn.galapagosstore.com
test.brain-library.com
pr.plus.brain-library.com
stg.brain-library.com
cdn.galapagosstore.com
stg.brain-library.com
cdn.galapagosstore.com
brain-library.com
galapagosstore.com
test.brain-library.com
galapagosstore.com
brain-library.com
cdn.galapagosstore.com
test.galapagosstore.com
storeman.galapagosstore.com
test.brain-library.com
brain-library.com
brain-library.com
brain-library.com
cdn.galapagosstore.com
cdn.brain-library.com
cdn.test.galapagosstore.com
cdn.galapagosstore.com
stg.brain-library.com
brain-library.com
cdn.plus.brain-library.com
pr.plus.brain-library.com
cdn.galapagosstore.com
stg.brain-library.com
stg.brain-library.com
cdn.test.galapagosstore.com
test.galapagosstore.com
brain-library.com
cdn.galapagosstore.com
galapagosstore.com
brain-library.com
brain-library.com
brain-library.com
test.brain-library.com
pr.plus.brain-library.com
brain-library.com
cdn.galapagosstore.com
brain-library.com
storeman.galapagosstore.com
brain-library.com
cdn.plus.brain-library.com
test.galapagosstore.com
brain-library.com
stg.brain-library.com
pr.plus.brain-library.com
brain-library.com
cdn.galapagosstore.com
brain-library.com
brain-library.com
brain-library.com
brain-library.com
galapagosstore.com
cdn.plus.brain-library.com
cdn.galapagosstore.com
plus.brain-library.com
test.galapagosstore.com
cdn.plus.brain-library.com
galapagosstore.com
brain-library.com
stg.brain-library.com
brain-library.com
galapagosstore.com
galapagosstore.com
Certificate
The complete raw certificate details for brain-library.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISA72qeJvKjmQrMMv5T7PBWMi7MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA1MTAyMzU0MTNaFw0yMTA4MDgyMzU0MTNaMBwxGjAYBgNVBAMT EWJyYWluLWxpYnJhcnkuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4gnNhhXwmxYNw15tnPEi1uaXM6v4lzd67JKMczhViml1cfqnbHnGxsbDFMD 6SarBSnjYp1RTG7Ob3hxlqmqi6o+6HXbeAnMSX5oeUVyb57YVFh2+3a1pd8LEgxt P00c8PVOGHtb2kZWdQ8mrmTR8YQ/WayMkqDFGbewyGb/wsSDg+eSXSnuC3cF0Zbv 0aqmUYCugN6c2LT5JQqJ9frSv8T2ko16OY1MFio8MHQm36Ug6E162l1LUqMDTws6 j9iCeO0qsS78FUhnK234YvjKYNwYJDUGu/bwq6uWUkB0es7bm9SPYZSilMRsUpdQ WBZ9Br3GFDn4lFkhniIGZVxgbQIDAQABo4ICszCCAq8wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBR9JCZvl7dYh/86dXDU04RngQ7uATAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzCBggYDVR0RBHsweYIVYXBwLmJyYWluLWxpYnJhcnkuY29tghFicmFpbi1s aWJyYXJ5LmNvbYIWcGx1cy5icmFpbi1saWJyYXJ5LmNvbYIYcGx1c2FpLmJyYWlu LWxpYnJhcnkuY29tghtwbHVzc3RvcmUuYnJhaW4tbGlicmFyeS5jb20wTAYDVR0g BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0 cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA dgBElGUusO7Or8RAB9io/ijA2uaCvtjLMbU/0zOWtbaBqAAAAXlY6s8wAAAEAwBH MEUCIQCQBMfvzgt7zFuvuFkf8gNIlcb88GjlQeLuK8pNd5r6tgIgDZjHUVfEWPLa 1CANMaolSbmwVKpgFyvgRvBufXacKvoAdgD2XJQv0XcwIhRUGAgwlFaO400TGTO/ 3wwvIAvMTvFk4wAAAXlY6s8jAAAEAwBHMEUCIQCovxUwTiwPjnHhYaSEL+hdRuXk mSWOeFC71KUHmhcJ0gIgLkSSy0zvdYLzXUpX6mrHzaRONk+q6QSLEXDxcRRzCRww DQYJKoZIhvcNAQELBQADggEBAAyF8LdJOMmdwhG0HsTMR2gxO4H6fHA3DCGMud6i I5T+kGYPBWMdCJBf35SJR/5eDt7qHplygsOEqS0mgTrwJI2ndDbjAsXElBLK3xef hFt3voMFFDg9qEWwQ+XJyzvdsWp/6SWRJTTJ/BtVuJsSY5beOT6EB4cGoauvF/Ix 4rxVS1lHzABc7Nd3RDU2h/DVL8B5w0+DeMIEbPBQNgNvR2w3JARWP7ucyE6p4bsS m5VXfoie7PIfjE5TR046vvaSVtsEVvrVn428oL1dkUTWkWQWoAWeybUf7Mwu0/WQ LOeEt0RSoTftx2AUQEl2rfx946K8Z33j9/n7o2Mgs2y9fMY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4gnNhhXwmxYNw15tnPE i1uaXM6v4lzd67JKMczhViml1cfqnbHnGxsbDFMD6SarBSnjYp1RTG7Ob3hxlqmq i6o+6HXbeAnMSX5oeUVyb57YVFh2+3a1pd8LEgxtP00c8PVOGHtb2kZWdQ8mrmTR 8YQ/WayMkqDFGbewyGb/wsSDg+eSXSnuC3cF0Zbv0aqmUYCugN6c2LT5JQqJ9frS v8T2ko16OY1MFio8MHQm36Ug6E162l1LUqMDTws6j9iCeO0qsS78FUhnK234YvjK YNwYJDUGu/bwq6uWUkB0es7bm9SPYZSilMRsUpdQWBZ9Br3GFDn4lFkhniIGZVxg bQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 325876820138066214773987374885830724733115 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-10 23:54:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-08 23:54:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brain-library.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25693515538158646222803253546763810624942990230990911753599064008352064997741950560581724066820502382720634635738092963711313068884265853128025352173687398985210055290936050019247161581909701712575994771776517553369481888278772809275417027333406345224041575291249965589210867989972345458163389869032425250398948233637919472460632078736433458812715015523582389566623324347354787676482469600508625397487338649892128773494081360279348932675031872764794253266398667164088525871911443230614224621598095603446489780953584011855869652099763201819358248383981168980737276344643709987004018763693762452914068679073710112268397 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7d24266f97b75887ff3a7570d4d38467810eee01 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.brain-library.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brain-library.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plus.brain-library.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plusai.brain-library.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plusstore.brain-library.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017958eacf3000000403004730450221009004c7efce0b7bcc5bafb8591ff2034895c6fcf068e541e2ee2bca4d779afab602200d98c75157c458f2dad4200d31aa2549b9b054aa60172be046f06e7d769c2afa007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017958eacf230000040300473045022100a8bf15304e2c0f8e71e161a4842fe85d46e5e499258e7850bbd4a5079a1709d202202e4492cb4cef7582f35d4a57ea6ac7cda44e364faae9048b1170f1711473091c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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