visverbi.sk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1d:fe:30:29:e2:76:59:3e:f9:46:f8:fe:05:52:45:e0:ad was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=visverbi.sk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1d:fe:30:29:e2:76:59:3e:f9:46:f8:fe:05:52:45:e0:adSerial Number (int): 271542920426687519284637466007285952536749
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ac:9a:b1:28:ba:62:ba:9e:7f:2d:70:2e:a7:3f:b2:31:30:73:33:d8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 43:d7:fc:14:ff:c0:70:ee:2c:4a:e8:75:7a:08:8e:61:70:ed:6a:4b
Fingerprint (sha256): 50:66:e0:dd:7b:3b:9b:4d:be:74:50:79:0a:64:df:b9:65:9f:8a:10:83:9a:c1:88:5e:63:e6:91:e0:d8:8c:6e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate visverbi.sk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for visverbi.sk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
visverbi.sk
www.visverbi.sk
www.visverbi.sk
Other certificates including the domain name visverbi.sk
(limited to 100 certificates)
visverbi.sk
visverbi.sk
*.visverbi.sk
www.visverbi.sk
visverbi.sk
visverbi.sk
www.visverbi.sk
www.visverbi.sk
visverbi.sk
www.visverbi.sk
*.visverbi.sk
*.visverbi.sk
www.visverbi.sk
visverbi.sk
audioknihy.visverbi.sk
visverbi.sk
www.visverbi.sk
www.visverbi.sk
www.visverbi.sk
visverbi.sk
visverbi.sk
*.visverbi.sk
visverbi.sk
audioknihy.visverbi.sk
visverbi.sk
*.visverbi.sk
audioknihy.visverbi.sk
www.visverbi.sk
www.visverbi.sk
audioknihy.visverbi.sk
visverbi.sk
audioknihy.visverbi.sk
audioknihy.visverbi.sk
audioknihy.visverbi.sk
www.visverbi.sk
www.visverbi.sk
audioknihy.visverbi.sk
visverbi.sk
audioknihy.visverbi.sk
www.visverbi.sk
audioknihy.visverbi.sk
audioknihy.visverbi.sk
*.visverbi.sk
visverbi.sk
audioknihy.visverbi.sk
www.visverbi.sk
visverbi.sk
visverbi.sk
audioknihy.visverbi.sk
www.visverbi.sk
audioknihy.visverbi.sk
visverbi.sk
*.visverbi.sk
www.visverbi.sk
visverbi.sk
visverbi.sk
www.visverbi.sk
www.visverbi.sk
visverbi.sk
www.visverbi.sk
*.visverbi.sk
*.visverbi.sk
www.visverbi.sk
visverbi.sk
audioknihy.visverbi.sk
visverbi.sk
www.visverbi.sk
www.visverbi.sk
www.visverbi.sk
visverbi.sk
visverbi.sk
*.visverbi.sk
visverbi.sk
audioknihy.visverbi.sk
visverbi.sk
*.visverbi.sk
audioknihy.visverbi.sk
www.visverbi.sk
www.visverbi.sk
audioknihy.visverbi.sk
visverbi.sk
audioknihy.visverbi.sk
audioknihy.visverbi.sk
audioknihy.visverbi.sk
www.visverbi.sk
www.visverbi.sk
audioknihy.visverbi.sk
visverbi.sk
audioknihy.visverbi.sk
www.visverbi.sk
audioknihy.visverbi.sk
audioknihy.visverbi.sk
*.visverbi.sk
visverbi.sk
audioknihy.visverbi.sk
www.visverbi.sk
visverbi.sk
visverbi.sk
audioknihy.visverbi.sk
www.visverbi.sk
audioknihy.visverbi.sk
Certificate
The complete raw certificate details for visverbi.sk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGEjCCBPqgAwIBAgISAx3+MCnidlk++Ub4/gVSReCtMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MjMyMTAxMDVaFw0x ODA4MjEyMTAxMDVaMBYxFDASBgNVBAMTC3Zpc3ZlcmJpLnNrMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1/8MDFjwPoYwIfpdQ1achTpx7RyQY+7cAya dlnCzLWrzlgEUUnI6YOaD7BWCtJsfM24ihYvwtxa1ymbseR2mcfxC1QRQgs9iEIk MJ6hc/5RsHifBGCTb00YIsBHvmrAY/rVf3ro9mFNbJcMoBg5X6MSyt1OdKkcbQII BhSgxloBQqV4YEaHEaqyOOPvxahA3KetmtBk6MxVyYora9pM6CTNauXqL6eT6Vse WGc7pZm7gh3TuqM0fzDLU2G7jigpuMHjCzlaVGswCve1pe9/47R5uSmcAfG3swEr no7zbP0YzjoBwttL1UU+u43jQY3uL4eW6J61UQbfZ8GueFqs2wIDAQABo4IDJDCC AyAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSsmrEoumK6nn8tcC6nP7IxMHMz2DAf BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv MCcGA1UdEQQgMB6CC3Zpc3ZlcmJpLnNrgg93d3cudmlzdmVyYmkuc2swgf4GA1Ud IASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtU aGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlp bmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRp ZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9y ZXBvc2l0b3J5LzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1ANt0r+7LKeyx/so+ cW0s5bmquzb3hHGDx12dTze2H79kAAABY48FFgIAAAQDAEYwRAIgLnHpHHu05cfk +/uDLiO9OjAmWEOfcTHLdvigEePCYmECIGrBNbSwlrEMxvPXxFvSDrEZqwtOPG3E /PfDbtNvJCWnAHcAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFj jwUWHgAABAMASDBGAiEAqwFKQdZifBnnPezuPjURgc3/85UzlQdkQzMmJSVUhgIC IQDmSh+/kxYH2IjB9cXdH8mEHa9KOoMhseUk4SMUrM8/7DANBgkqhkiG9w0BAQsF AAOCAQEANKwh+WKJ6ZdPwMoE/4WZV+qDDObes9l1aTNDVwUnyRiH48VEjNrj4LTS dRuozHhbA8A3wyddXj/T7AU9YodRDYX2KN/duy5pWDX2qCS6lOtuR/kDSg9cx4rW lc3tfhel3Y6tyhvFowWTgpjjDS65aj4qVdnKRZlyDXHf7z2CqAn1mkXmd4909zZ1 NEXhfiISk5Ni4slg2ROUbKMdqAEvPk1ajYP/kPshTK8MsRUxPS8pC51r0DmCFXW4 L04ssbOy41D5YbFbAiUho7rcItRJl4Bvaj2e9V1XS8nfVdHeA8g8E19vaKNJKLP0 fN1qkZnYlnXfWP2YTGaDUttKsIGe/g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1/8MDFjwPoYwIfpdQ1a chTpx7RyQY+7cAyadlnCzLWrzlgEUUnI6YOaD7BWCtJsfM24ihYvwtxa1ymbseR2 mcfxC1QRQgs9iEIkMJ6hc/5RsHifBGCTb00YIsBHvmrAY/rVf3ro9mFNbJcMoBg5 X6MSyt1OdKkcbQIIBhSgxloBQqV4YEaHEaqyOOPvxahA3KetmtBk6MxVyYora9pM 6CTNauXqL6eT6VseWGc7pZm7gh3TuqM0fzDLU2G7jigpuMHjCzlaVGswCve1pe9/ 47R5uSmcAfG3swErno7zbP0YzjoBwttL1UU+u43jQY3uL4eW6J61UQbfZ8GueFqs 2wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 271542920426687519284637466007285952536749 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-23 21:01:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-21 21:01:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'visverbi.sk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21129128951341749327990309783626149801569137692829385254428945777634156668848357272855670226495810099961289932551003331046966357269212863029112683940123608046823238463855174501595304895596879528489669126725463751304694113593843210729911809092511491665800960861148004634307311784598410593962293002801207305340244982045973618881529712248308423659123400622135151881315032469591418465693211237788234716728454933996202291792899429465518774069284526969056437683740251018083792022414949899644892232580902648212608149540270376155194847606859871489158571928291852645884923957417713057691764610756329643932924547483008495168731 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ac9ab128ba62ba9e7f2d702ea73fb231307333d8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visverbi.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visverbi.sk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001638f051602000004030046304402202e71e91c7bb4e5c7e4fbfb832e23bd3a302658439f7131cb76f8a011e3c2626102206ac135b4b096b10cc6f3d7c45bd20eb119ab0b4e3c6dc4fcf7c36ed36f2425a7007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001638f05161e0000040300483046022100ab014a41d6627c19e73decee3e351181cdfff395339507644333262525548602022100e64a1fbf931607d888c1f5c5dd1fc9841daf4a3a8321b1e524e12314accf3fec . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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