farmerjoe.com
Issued by R3
About this certificate
This digital certificate with serial number 04:63:37:cc:0d:77:f7:96:25:de:6a:7a:9d:62:fd:32:e3:56 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=farmerjoe.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:63:37:cc:0d:77:f7:96:25:de:6a:7a:9d:62:fd:32:e3:56Serial Number (int): 382211265093717306449014009535243557725014
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 3a:29:84:5d:ef:52:75:67:0f:40:32:ce:c5:0f:f2:d4:ad:83:42:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): aa:eb:51:01:27:9c:bc:ee:1e:22:56:f2:88:24:27:7b:4d:e7:46:db
Fingerprint (sha256): 4f:3f:19:a3:85:0e:d8:c3:dd:79:4f:35:d3:3b:34:3e:ac:5b:6e:bf:6b:67:e8:0a:e8:28:c6:e7:5e:c0:53:28
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate farmerjoe.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for farmerjoe.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
farmerjoe.com
www.farmerjoe.com
www.farmerjoe.com
Other certificates including the domain name farmerjoe.com
(limited to 100 certificates)
boituvastone.com.br
adelmuursepp.work
www.harithwickramasinghe.com
novacycling.com
garage-sale.griffithnet.com
farmerjoe.com
alasdairhendry.uk
yospdesv.com
ansrii.space
www.fresh4you.app
dev.dashpool.fr
www.seestadt.city
thiruvarur.droptaxitime2time.com
www.farmerjoe.com
skydea.co
aihighway.org
api.farmerjoe.com
arbot2.cryptovation.co
www.jumbomumbo.chat
www.prodo.ai
farmerjoe.com
skydea.co
dev.etraderex.com
drumnow.com
encarnacion.ca
bi-portal-dev.mmdsmart.com
mdo.axiosi.com.br
trading.sportsiq.ai
www.farmerjoe.com
go.b2b.innov.ridegoshare.com
arbot2.cryptovation.co
pfs.rabot.us
valx.ca
firebase.m2suite.at
pokemongo.dasamon.com
links.papajohns.by
www.internet-of-unthings.com
www.halal.ad
farmerjoe.com
tracy.eventxtra.com
hamropatro.app
jeykey.space
staging.farmerjoe.com
farmerjoe.com
jarehon.app
www.pushups.no
joystickgaming.co.uk
ling-pocket.com
nootnoot.art
dev.etraderex.com
farmerjoe.com
www.creaze.ml
farmerjoe.com
boituvastone.com.br
musicuat.inyarwanda.com
cdn.plattform.app
www.cinemarathon.ch
gangnamspa.org
labs.farmerjoe.com
ciatechn.com
phnxglobal.com
orders.plsolutions.co.za
bennypowers.com
www.newemperium.com
ansrii.space
share.moodwork.co
merakisolutions.com.mx
links.openbet-demo.com
software.bicg.com
cnxtrivia.com
zoom.unitz.app
kajimotomusic.paris
williamson.jordannewlands.me
rsti.eu
fire.alilishan.com
vincent.demo.movello.se
namastic.com.co
jovempentecostal.com
arbot2.cryptovation.co
tipsypeachtreecorners.com
trouverpdl.com
www.fresh4you.app
musicuat.inyarwanda.com
relute.cddc.com.br
onyourway.app
arbot2.cryptovation.co
mcleod.stage.parade.ai
farmerjoe.com
portal.chaserhq.com
coffy.co.uk
www.amadeleite.com.br
web.farmerjoe.com
panel.sellent.com.br
damishael.com
www.invoicehub.co
dyce.cephasresearch.com
tempocasa.demo.movello.se
ling-pocket.com
coffy.co.uk
www.newemperium.com
adelmuursepp.work
www.harithwickramasinghe.com
novacycling.com
garage-sale.griffithnet.com
farmerjoe.com
alasdairhendry.uk
yospdesv.com
ansrii.space
www.fresh4you.app
dev.dashpool.fr
www.seestadt.city
thiruvarur.droptaxitime2time.com
www.farmerjoe.com
skydea.co
aihighway.org
api.farmerjoe.com
arbot2.cryptovation.co
www.jumbomumbo.chat
www.prodo.ai
farmerjoe.com
skydea.co
dev.etraderex.com
drumnow.com
encarnacion.ca
bi-portal-dev.mmdsmart.com
mdo.axiosi.com.br
trading.sportsiq.ai
www.farmerjoe.com
go.b2b.innov.ridegoshare.com
arbot2.cryptovation.co
pfs.rabot.us
valx.ca
firebase.m2suite.at
pokemongo.dasamon.com
links.papajohns.by
www.internet-of-unthings.com
www.halal.ad
farmerjoe.com
tracy.eventxtra.com
hamropatro.app
jeykey.space
staging.farmerjoe.com
farmerjoe.com
jarehon.app
www.pushups.no
joystickgaming.co.uk
ling-pocket.com
nootnoot.art
dev.etraderex.com
farmerjoe.com
www.creaze.ml
farmerjoe.com
boituvastone.com.br
musicuat.inyarwanda.com
cdn.plattform.app
www.cinemarathon.ch
gangnamspa.org
labs.farmerjoe.com
ciatechn.com
phnxglobal.com
orders.plsolutions.co.za
bennypowers.com
www.newemperium.com
ansrii.space
share.moodwork.co
merakisolutions.com.mx
links.openbet-demo.com
software.bicg.com
cnxtrivia.com
zoom.unitz.app
kajimotomusic.paris
williamson.jordannewlands.me
rsti.eu
fire.alilishan.com
vincent.demo.movello.se
namastic.com.co
jovempentecostal.com
arbot2.cryptovation.co
tipsypeachtreecorners.com
trouverpdl.com
www.fresh4you.app
musicuat.inyarwanda.com
relute.cddc.com.br
onyourway.app
arbot2.cryptovation.co
mcleod.stage.parade.ai
farmerjoe.com
portal.chaserhq.com
coffy.co.uk
www.amadeleite.com.br
web.farmerjoe.com
panel.sellent.com.br
damishael.com
www.invoicehub.co
dyce.cephasresearch.com
tempocasa.demo.movello.se
ling-pocket.com
coffy.co.uk
www.newemperium.com
Certificate
The complete raw certificate details for farmerjoe.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgISBGM3zA1395Yl3mp6nWL9MuNWMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMzAxMDE3MjBaFw0yNDAzMjkxMDE3MTlaMBgxFjAUBgNVBAMT DWZhcm1lcmpvZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr gtZTJeWTXyd3XZM2W0aU25KS9YrAXTNfmP6PezqsCiVD2GKtMi52fAiyDT6UI1Xw L3BeFxqKrzrEwdPYQ7omK9dwSe1lAd7jkrip1cXx0fF05x+Gkz7MDvwbAGEFB354 vi3XByJER66W4g+J8DiEuTCOvxRRexJJkjdtYrOBx5iaNA2WdA6jHReDulaAUIJ1 GHUtMuzZ9h2TBvrjqzO/shmK84VsP+xy+JdkP61cjLjmh/RkJ7Zgi4N9Ejduzmwd Q5U9MqTNYph8NSC2dZw0bLn13gI9SXzzjhg5rociIuDqdlfqXApgz39RS8DmI+EK p73EY6fBqaJPam8wYtNRAgMBAAGjggIiMIICHjAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFDophF3vUnVnD0AyzsUP8tStg0LnMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv MCsGA1UdEQQkMCKCDWZhcm1lcmpvZS5jb22CEXd3dy5mYXJtZXJqb2UuY29tMBMG A1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAouK/ 1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGMunFdvQAABAMARjBEAiAZ lCCg5NHA5ztEii0HAtKEMfZp+WbMs8sJE/O9732+NwIgRwx4lGNN1v2BmB5E/TSa rCqozIKvSG2+5GEhQehGsHwAdwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlG cR+1mwAAAYy6cV28AAAEAwBIMEYCIQDpJwAVyqJSJhG0wTIE+GMnEUmvXYrnTt4s gNA+ctaAmAIhALPBDQZ0cID54P24viX2i82Ftro+sQlh3xcoWZhs/L8xMA0GCSqG SIb3DQEBCwUAA4IBAQAsqZYxcBaiIX65ltk40w3nyUyhMfTJ2gjzRqS0KyqDof3+ 0w/Go2Gmt6xXWesJG94YadaDo9+zyTwtZDAtJNDaNe8DdUJ9uvMmVlwOyQlJTp8S slP9cl9sDlBoKRhz+14qHxbl+qobbylJsCzRBPOI8EsPPx5rqLoW1vk8gOoNzdk4 lYkObEBRhaAe0xuVlmgqxR73UJICGooyt0bxSVfeTHlwCPeRGDEL6RwcGb8ZjaOF LMAXc/LGUMyvCQji99jUfocYlVv3ZxkhyjBmCMtv1dtjaqhPVWljkAv9/j3UdrWd sB+nu6bdkSNi6UafwoxPN9yOk0gYHPHqw1wBtkyd -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4LWUyXlk18nd12TNltG lNuSkvWKwF0zX5j+j3s6rAolQ9hirTIudnwIsg0+lCNV8C9wXhcaiq86xMHT2EO6 JivXcEntZQHe45K4qdXF8dHxdOcfhpM+zA78GwBhBQd+eL4t1wciREeuluIPifA4 hLkwjr8UUXsSSZI3bWKzgceYmjQNlnQOox0Xg7pWgFCCdRh1LTLs2fYdkwb646sz v7IZivOFbD/scviXZD+tXIy45of0ZCe2YIuDfRI3bs5sHUOVPTKkzWKYfDUgtnWc NGy59d4CPUl8844YOa6HIiLg6nZX6lwKYM9/UUvA5iPhCqe9xGOnwamiT2pvMGLT UQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 382211265093717306449014009535243557725014 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 10:17:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 10:17:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'farmerjoe.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21651268380219538783454883965383613852462973331793306718718199538057792934405418831915629600187826450706987359164098084946939165397199542843369485598061907078152147195594546844179045410693924633547767187258789527241967949525003125488200377392699160442228938867475142170547543275068079535086304338905943579633590834038246790664257985067265242095128526440132651734393434026796111184096265584569471346264598525621726368667598036157946240788654204900266154169804216918250323138009655717494453550187713699398368026336907993387587770548956428048615431132633855277336815688113445887098134480300540947964315542030778114429777 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3a29845def5275670f4032cec50ff2d4ad8342e7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmerjoe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmerjoe.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cba715dbd00000403004630440220199420a0e4d1c0e73b448a2d0702d28431f669f966ccb3cb0913f3bdef7dbe370220470c7894634dd6fd81981e44fd349aac2aa8cc82af486dbee4612141e846b07c007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cba715dbc0000040300483046022100e9270015caa2522611b4c13204f863271149af5d8ae74ede2c80d03e72d68098022100b3c10d06747080f9e0fdb8be25f68bcd85b6ba3eb10961df172859986cfcbf31 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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