cambridgecandi.org.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:db:4b:36:ea:c7:9c:67:82:32:d1:61:eb:52:04:65:b6:cf was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cambridgecandi.org.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:db:4b:36:ea:c7:9c:67:82:32:d1:61:eb:52:04:65:b6:cfSerial Number (int): 335958673396579149400076563809479652914895
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 93:cf:ac:c6:61:b8:0e:aa:33:b4:12:1e:61:a0:ee:16:4b:4f:1e:f5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e5:60:86:7b:62:b0:df:e5:90:fe:0d:23:8e:5d:15:6d:de:2b:0e:ed
Fingerprint (sha256): 4a:bb:61:1f:5f:b5:36:0e:7d:e4:f3:de:59:b4:c4:9e:b2:6c:0b:4e:33:c7:37:28:7c:9b:b7:1c:ac:3e:23:1e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate cambridgecandi.org.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cambridgecandi.org.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cambridgecandi.org.uk
www.cambridgecandi.org.uk
www.cambridgecandi.org.uk
Other certificates including the domain name cambridgecandi.org.uk
(limited to 100 certificates)
cambridgecandi.org.uk
www.cambridgecandi.org.uk.cci.kisshosts.co.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
live-cambridgecandi.kissdigital.co.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
webdisk.cci.kisshosts.co.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
www.cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cci-new.kissdigital.co.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
webdisk.cci-new.kissdigital.co.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
www.cambridgecandi.org.uk.cci.kisshosts.co.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
live-cambridgecandi.kissdigital.co.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
webdisk.cci.kisshosts.co.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
www.cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cci-new.kissdigital.co.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
webdisk.cci-new.kissdigital.co.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
Certificate
The complete raw certificate details for cambridgecandi.org.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgISA9tLNurHnGeCMtFh61IEZbbPMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMDExMTA4MTlaFw0x OTAxMzAxMTA4MTlaMCAxHjAcBgNVBAMTFWNhbWJyaWRnZWNhbmRpLm9yZy51azCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANqFVXyfZP0+RsK097HQwtai c5lBbDyq3WEDA/5MWHsH82jQO3ADcNlEznOOGeyZhiKrHodjjf2fWRBrCO+5Ixdd J6IAVbzTviNW4QEcCnUbfI6DOVBVUjbmOJ37fIuHtOZs8j3YCTpG/s6lAeCjN+nD yqadjfNRMqSrFEa6h6zOS1ZVYlIpBH89Zy2M2ikhOdEEA6xqYDxwkLQeWHQF1R2b 2jJeYUZ23I2IUXTGkiG01MA6tZco9hoLFk+qIHTUqG3UW0yptp6YNrrTpyzOzCc3 ga0d6UlDPPiWgAqGYCGrKACPsTSZ2yy76xIG3JM8BZuaM3FNJoOFJtIpdNXoT+cC AwEAAaOCAzgwggM0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUk8+sxmG4DqoztBIe YaDuFktPHvUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzA7BgNVHREENDAyghVjYW1icmlkZ2VjYW5kaS5vcmcudWuCGXd3 dy5jYW1icmlkZ2VjYW5kaS5vcmcudWswgf4GA1UdIASB9jCB8zAIBgZngQwBAgEw geYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl bmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1h eSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25s eSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3Vu ZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQQGCisG AQQB1nkCBAIEgfUEgfIA8AB3AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0H E9MMAAABZs8sntMAAAQDAEgwRgIhAOuT1Kj/rRDofvhwhbB4uD+4jiwsiwMjzM56 lCfYjAxRAiEAhg4LIqKvdvp5HiXRDN+YEszlF8UhtBIlxO4epwaJwSEAdQApPFGW VMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWbPLJ8rAAAEAwBGMEQCIFgZ WrXmigBJcBa2UIE96YOmK4kM0a0UUKPvhnar/SbrAiBGTuqtri47RF/w+Tb2//1o gWJM9Xq6E2Z66pw3XsCkFDANBgkqhkiG9w0BAQsFAAOCAQEAMiVz7SevLN9hdTN0 6vRzrQNVj+kYdfA46waUYmVmH7Bf9q6UZQj3+7T+U37bWAFYks0WlLqk02Ii1OXJ dn2231L+FIexe7sISr7a548Y8ljfIuemeABQay5SVawJ3Sf346rAxT/WNayKpM27 X/w1Z70evOnDRJlKoyt3Pv74AVeWUpL+zVFE0GmHezT+AZ0lJ5hqoi9L3MLzM+Qs v8ARMeDAsTb6uSATOawjre3mwT+Yk9Zadyyq72uTrnG0htOjc0Lfbr1WrE/leZdC BhzuQczVDOOEVZklcXQiyJlR3TmVJDtnaCmA6n1CwClPn/RV6OiS8wL73K7AMDjZ tFqXSA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oVVfJ9k/T5GwrT3sdDC 1qJzmUFsPKrdYQMD/kxYewfzaNA7cANw2UTOc44Z7JmGIqseh2ON/Z9ZEGsI77kj F10nogBVvNO+I1bhARwKdRt8joM5UFVSNuY4nft8i4e05mzyPdgJOkb+zqUB4KM3 6cPKpp2N81EypKsURrqHrM5LVlViUikEfz1nLYzaKSE50QQDrGpgPHCQtB5YdAXV HZvaMl5hRnbcjYhRdMaSIbTUwDq1lyj2GgsWT6ogdNSobdRbTKm2npg2utOnLM7M JzeBrR3pSUM8+JaACoZgIasoAI+xNJnbLLvrEgbckzwFm5ozcU0mg4Um0il01ehP 5wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 335958673396579149400076563809479652914895 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-01 11:08:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 11:08:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cambridgecandi.org.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27585699895398601801891685835643265191831857273808115383703313209280293974638047041993389947690858935757438037367120465167557996462426981605878041242095387141944623960736295229981974538639743463418694369467197975764204480747351373250904456544612306722451653724622032299650268131498723185717408676280161936848360464070370198741354487750319426164172241903309967083999300594268467476647363572165321602696995608762959458607591011843167447038774624856617999330405727829893336075665339156995667457591261364755884436523686354166209844413786609934907447045145332961844047519457172506898731415784443646394506475011561476345831 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 93cfacc661b80eaa33b4121e61a0ee164b4f1ef5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgecandi.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgecandi.org.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166cf2c9ed30000040300483046022100eb93d4a8ffad10e87ef87085b078b83fb88e2c2c8b0323ccce7a9427d88c0c51022100860e0b22a2af76fa791e25d10cdf9812cce517c521b41225c4ee1ea70689c121007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166cf2c9f2b0000040300463044022058195ab5e68a00497016b650813de983a62b890cd1ad1450a3ef8676abfd26eb0220464eeaadae2e3b445ff0f936f6fffd6881624cf57aba13667aea9c375ec0a414 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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