*.baino.es
Issued by Encryption Everywhere DV TLS CA - G1
About this certificate
This digital certificate with serial number 0a:49:9a:3b:9c:c4:fe:f5:05:47:31:e2:a0:f2:17:37 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.baino.es
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:49:9a:3b:9c:c4:fe:f5:05:47:31:e2:a0:f2:17:37Serial Number (int): 13674445842580566838455575261628995383
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 21:12:73:8f:b7:b8:77:a3:fc:16:3d:d1:ba:e9:66:a6:29:95:74:9f
AuthorityKeyId: 55:74:4f:b2:72:4f:f5:60:ba:50:d1:d7:e6:51:5c:9a:01:87:1a:d7
Fingerprint (sha1): 30:e8:53:60:73:d6:d0:04:8a:3c:a7:84:7c:4e:96:1f:1b:7b:99:da
Fingerprint (sha256): 4b:2a:44:63:38:7f:e2:8e:a7:98:36:50:da:f9:b8:bc:0b:ba:29:47:67:87:2b:da:55:9d:ad:e2:db:72:d1:48
Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCheck the revocation status for certificate *.baino.es
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.baino.es
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.baino.es
baino.es
baino.es
Other certificates including the domain name baino.es
(limited to 100 certificates)
hr.lewenet.com
consultants.degunfactor.com
zpeople.morewayshealthcare.com
people.refocusit.com
*.baino.es
rh.locster.fr
*.baino.es
people.refocusit.com
myhr.ollyandseb.com
people.refocusit.com
people.christian.education
hr.adcouncil.org.uk
intra.twisper.pt
zoho.londonappworks.co.uk
hr.bubblecitea.com
hrm.twin-gmbh.de
personnel.theomegagroup.co.uk
*.baino.es
people.refocusit.com
people.refocusit.com
people.refocusit.com
*.baino.es
zohopeople.moneyline-uk.com
baino.es
*.baino.es
people.refocusit.com
atletehub.atl10n.com
*.baino.es
myhr.algidcards.co.uk
*.baino.es
hr.bubblecitea.com
people.dataplan.be
intra.twisper.com
hr.op-rate.com
people.unison-rde.org.uk
people.madsense.com
myhr.doskon.com
*.baino.es
people.refocusit.com
*.baino.es
people.refocusit.com
people.cogitor.co.uk
people.refocusit.com
*.baino.es
hr.bubblecitea.com
baino.es
hr.amlltd.co.uk
*.baino.es
staff.calipology.co.uk
hr.mymeleon.com
people.servicesquared.co.uk
people.baino.es
people.custom-intelligence.com
people.refocusit.com
*.baino.es
*.baino.es
hris.bynaric.net
*.baino.es
people.aliceandbob.company
people.refocusit.com
*.baino.es
*.baino.es
people.refocusit.com
people.refocusit.com
*.baino.es
hrm.spasoul.com
myhr.omegabikes.com
crew.nectere.co.uk
peopleportal.schoolhubhire.com
*.baino.es
consultants.degunfactor.com
zpeople.morewayshealthcare.com
people.refocusit.com
*.baino.es
rh.locster.fr
*.baino.es
people.refocusit.com
myhr.ollyandseb.com
people.refocusit.com
people.christian.education
hr.adcouncil.org.uk
intra.twisper.pt
zoho.londonappworks.co.uk
hr.bubblecitea.com
hrm.twin-gmbh.de
personnel.theomegagroup.co.uk
*.baino.es
people.refocusit.com
people.refocusit.com
people.refocusit.com
*.baino.es
zohopeople.moneyline-uk.com
baino.es
*.baino.es
people.refocusit.com
atletehub.atl10n.com
*.baino.es
myhr.algidcards.co.uk
*.baino.es
hr.bubblecitea.com
people.dataplan.be
intra.twisper.com
hr.op-rate.com
people.unison-rde.org.uk
people.madsense.com
myhr.doskon.com
*.baino.es
people.refocusit.com
*.baino.es
people.refocusit.com
people.cogitor.co.uk
people.refocusit.com
*.baino.es
hr.bubblecitea.com
baino.es
hr.amlltd.co.uk
*.baino.es
staff.calipology.co.uk
hr.mymeleon.com
people.servicesquared.co.uk
people.baino.es
people.custom-intelligence.com
people.refocusit.com
*.baino.es
*.baino.es
hris.bynaric.net
*.baino.es
people.aliceandbob.company
people.refocusit.com
*.baino.es
*.baino.es
people.refocusit.com
people.refocusit.com
*.baino.es
hrm.spasoul.com
myhr.omegabikes.com
crew.nectere.co.uk
peopleportal.schoolhubhire.com
*.baino.es
Certificate
The complete raw certificate details for *.baino.es in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgIQCkmaO5zE/vUFRzHioPIXNzANBgkqhkiG9w0BAQsFADBu MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS0wKwYDVQQDEyRFbmNyeXB0aW9uIEV2ZXJ5d2hlcmUg RFYgVExTIENBIC0gRzEwHhcNMTkwMzA0MDAwMDAwWhcNMjAwMzAzMTIwMDAwWjAV MRMwEQYDVQQDDAoqLmJhaW5vLmVzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxH/c+y/EkaOM+zp90frpJLmoeOaG0gwE6ypGpsiOZXLR8DJPfjOlqmvi zCNQrrk5PyKF9tgqGXh9RuNUYcVomNUgMvrte0IavaPYFw2X6FbKAtI079k6N85n fHmODikOEFFeo1HLmJ2vxEpIMI9BjAmueoTr8CFfa+AYPPpgvFacRcj3BrR2piCs WWdZVbLmK5+3b2jM7eAnpcJSb4Bv6fZwfFLmvkKsxsnm3SSRHHeM6NKnI41W0xe5 upF3NdA1wJL780W/1TPVVONfAwZTSgi4f5bzMdrZX4LbtMRqFORxHrwkKiVVFwep Lu3itOUdOjps+AbU/Or6y+cGhVOwRwIDAQABo4ICeTCCAnUwHwYDVR0jBBgwFoAU VXRPsnJP9WC6UNHX5lFcmgGHGtcwHQYDVR0OBBYEFCESc4+3uHej/BY90brpZqYp lXSfMB8GA1UdEQQYMBaCCiouYmFpbm8uZXOCCGJhaW5vLmVzMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTAYDVR0gBEUwQzA3 BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQu Y29tL0NQUzAIBgZngQwBAgEwgYAGCCsGAQUFBwEBBHQwcjAkBggrBgEFBQcwAYYY aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEoGCCsGAQUFBzAChj5odHRwOi8vY2Fj ZXJ0cy5kaWdpY2VydC5jb20vRW5jcnlwdGlvbkV2ZXJ5d2hlcmVEVlRMU0NBLUcx LmNydDAJBgNVHRMEAjAAMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAu9nfvB+K cbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFpSUYlxgAABAMARzBFAiBS21ur Ago2fG8ek4NeK6PwIKTEeuQLNFNoaSrriHOuZgIhAJfT/SE8rGm0rF7mcr8SGDpm glFAJntoNUy1vIr5yaRdAHcAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16g gw8AAAFpSUYnBgAABAMASDBGAiEA8qy1rsmtdfEgY3V1oUcijSDxlxD1ZEhyp2fZ jXDa5wACIQC3w/JE2zI+SQgRLBbXyKRN7coqcq4q2xuq4CScFfanTjANBgkqhkiG 9w0BAQsFAAOCAQEAl8Jgd10H9MoqXGR3RqJ1+A5Ly9cYLN1lhThh2haxvhuJm+UO OPK4DegPXMfbPE91pcWr0UHnctLDwG1NEpD58ZNgopqSiyqKLyfTSBagRoHtdggf f/s+OorgQSmEgB+JZ8byYfnc/pTBG9gal9eplaTz9kLGmU9YYPo32qTQusPg1mDx FTbqyFylOeYwxvZ39FKO3O70TpQK2/8Olf4nhT02Fi1VHMmfy464F53mtcnegeCM Gzd7begaohtqC2tOEUszs2gLMV3ADTRkaQ9GZqSOVRSvo5OA4ZoRP1qcTSRDu0SE K/PW3xWI5aOBcHAdte7FhDXOgnNKyK4TexN3Ig== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH/c+y/EkaOM+zp90frp JLmoeOaG0gwE6ypGpsiOZXLR8DJPfjOlqmvizCNQrrk5PyKF9tgqGXh9RuNUYcVo mNUgMvrte0IavaPYFw2X6FbKAtI079k6N85nfHmODikOEFFeo1HLmJ2vxEpIMI9B jAmueoTr8CFfa+AYPPpgvFacRcj3BrR2piCsWWdZVbLmK5+3b2jM7eAnpcJSb4Bv 6fZwfFLmvkKsxsnm3SSRHHeM6NKnI41W0xe5upF3NdA1wJL780W/1TPVVONfAwZT Sgi4f5bzMdrZX4LbtMRqFORxHrwkKiVVFwepLu3itOUdOjps+AbU/Or6y+cGhVOw RwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13674445842580566838455575261628995383 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.baino.es' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24805759471084224222328773804648594164200784662834505744411446423554737542800360117679320631347533206690903564982641508564733255474410183632255189560489499404234283402863977142864952631635029664027813203578283189187495510985203941147104946725164650081185598459692039360184923418400884246497035719996278332643348461231974451505725919612782835436336884840036431555715961688881967966137301087274222506444043686801918964782198683065493032432963677314072946939240174216213201844084349190097354821823315305819087815298218883280016311631554900213294231802873339055978804823512429828793519349276704143948626005323426664001607 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55744fb2724ff560ba50d1d7e6515c9a01871ad7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2112738fb7b877a3fc163dd1bae966a62995749f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baino.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baino.es' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000169494625c60000040300473045022052db5bab020a367c6f1e93835e2ba3f020a4c47ae40b345368692aeb8873ae6602210097d3fd213cac69b4ac5ee672bf12183a66825140267b68354cb5bc8af9c9a45d0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000169494627060000040300483046022100f2acb5aec9ad75f120637575a147228d20f19710f5644872a767d98d70dae700022100b7c3f244db323e4908112c16d7c8a44dedca2a72ae2adb1baae0249c15f6a74e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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