aneveningwithastonmartin.co.uk
Issued by R3
About this certificate
This digital certificate with serial number 04:2f:77:1f:03:39:c7:94:c7:4b:f7:31:b3:cc:09:e3:f4:b0 was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aneveningwithastonmartin.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:2f:77:1f:03:39:c7:94:c7:4b:f7:31:b3:cc:09:e3:f4:b0Serial Number (int): 364600754130451115391202319305728929821872
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 8f:d1:60:44:0c:a5:58:15:18:11:8c:3f:bc:be:a4:96:d5:4e:92:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 37:a6:b0:54:f7:a6:9a:95:0f:e2:a5:8d:5d:42:4b:8b:74:91:df:f4
Fingerprint (sha256): 51:0f:19:fd:b3:13:c1:18:78:17:f3:10:18:82:a8:18:44:3f:bb:6b:91:6d:71:92:88:45:9f:bb:58:d1:19:19
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate aneveningwithastonmartin.co.uk
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aneveningwithastonmartin.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aneveningwithastonmartin.co.uk
mag.autoexpress.co.uk
mag.evo.co.uk
octane-magazine.com
offers.astonmagazine.co.uk
offers.octane-magazine.com
syndication.classicandperformancecar.com
vantagemag.co.uk
www.octane-magazine.com
www.vantagemag.co.uk
mag.autoexpress.co.uk
mag.evo.co.uk
octane-magazine.com
offers.astonmagazine.co.uk
offers.octane-magazine.com
syndication.classicandperformancecar.com
vantagemag.co.uk
www.octane-magazine.com
www.vantagemag.co.uk
Other certificates including the domain name aneveningwithastonmartin.co.uk
(limited to 100 certificates)
adspecs.dennis.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
aneveningwithastonmartin.co.uk
aneveningwithastonmartin.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
subscribe.theweek.co.uk
adspecs.dennis.co.uk
subscribe.theweek.co.uk
adspecs.dennis.co.uk
subscribe.theweek.co.uk
adspecs.dennis.co.uk
aneveningwithastonmartin.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
aneveningwithastonmartin.co.uk
adspecs.dennis.co.uk
aneveningwithastonmartin.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
octane-magazine.com
adspecs.dennis.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
aneveningwithastonmartin.co.uk
aneveningwithastonmartin.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
subscribe.theweek.co.uk
adspecs.dennis.co.uk
subscribe.theweek.co.uk
adspecs.dennis.co.uk
subscribe.theweek.co.uk
adspecs.dennis.co.uk
aneveningwithastonmartin.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
aneveningwithastonmartin.co.uk
adspecs.dennis.co.uk
aneveningwithastonmartin.co.uk
adspecs.dennis.co.uk
adspecs.dennis.co.uk
octane-magazine.com
Certificate
The complete raw certificate details for aneveningwithastonmartin.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGJDCCBQygAwIBAgISBC93HwM5x5THS/cxs8wJ4/SwMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA4MTUwOTAwMTdaFw0yMjExMTMwOTAwMTZaMCkxJzAlBgNVBAMT HmFuZXZlbmluZ3dpdGhhc3Rvbm1hcnRpbi5jby51azCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBALChuPg3G347pS6yeRGHIQ0r3smMwvjKt9Khg6mc7fDx bPXIrgJjD2VdJnyG36LlGCIWo2nogz9FNmO7atVp2nkRL45p0JBGOUmu8wKH8d9D WChGEeHm9POchisdiIkE7UKwjtMtaVzA5hPpMH8VzidSgHncytYeUmCKHQNl6qNJ WFmBuKiZGq2xJ6TAmzOE5IEHoaCYTlbDw9PTMdQdpfhoLkyXbKwFFSOA5wC9Ry4D wr86D82p/V9ZMTLSHQi+yYBRWOeF1ypGmamaIxvLTonrvCBEauoA3G06tWlsAdoq ipYemIgqSPfQoUrpi3lLqBSuJL5eIs6NjPTazuzfE0sCAwEAAaOCAzswggM3MA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUj9FgRAylWBUYEYw/vL6kltVOktQwHwYDVR0j BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6 Ly9yMy5pLmxlbmNyLm9yZy8wggEKBgNVHREEggEBMIH+gh5hbmV2ZW5pbmd3aXRo YXN0b25tYXJ0aW4uY28udWuCFW1hZy5hdXRvZXhwcmVzcy5jby51a4INbWFnLmV2 by5jby51a4ITb2N0YW5lLW1hZ2F6aW5lLmNvbYIab2ZmZXJzLmFzdG9ubWFnYXpp bmUuY28udWuCGm9mZmVycy5vY3RhbmUtbWFnYXppbmUuY29tgihzeW5kaWNhdGlv bi5jbGFzc2ljYW5kcGVyZm9ybWFuY2VjYXIuY29tghB2YW50YWdlbWFnLmNvLnVr ghd3d3cub2N0YW5lLW1hZ2F6aW5lLmNvbYIUd3d3LnZhbnRhZ2VtYWcuY28udWsw TAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcC ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0 BIHxAO8AdQDfpV6raIJPH2yt7rhfTj5a6s2iEqRqXo47EsAgRFwqcwAAAYKg8mvN AAAEAwBGMEQCIAJU/Doi/lxbLzaZqzhLDj9zTYwuNcdma6wr0f+TZaNFAiBXXUOb h5gdJbyJTFeZCFNDcAc2r09HKqWhgEuYdMnWTQB2ACl5vvCeOTkh8FZzn2Old+W+ V32cYAr4+U1dJlwlXceEAAABgqDya78AAAQDAEcwRQIhAKozyXYN/Csw0odX7z3p 3EJyT7RpFl4JElZop6p2M8YCAiBlDR2hgYfSfRVP/sH44u7CRBDqBdNxfpuOXsWo qEuOfDANBgkqhkiG9w0BAQsFAAOCAQEABb6RyaIQ95gXyy0engwdm1sfKY34As1a LTgzri4Lpw0dwEuq4efiqfw7SIXc8bYgaG8D08sKTgT6Wpt8JK5R/ADtVF2LX0aj zBSfWsiL++ytTyzacrFMOYev8cXVR4t1MEje00Yyev4uWenqs6lb2vZOocPSo6l8 067AkqQIEyC/pL+jX9S8jy10ku/H+Vws58/0VvV1V1L+BvQiHpCWrRVfruZeFlrt AVAJ1SsCQt/qQU6F+W1xuvSUgJpGYqkEKD5tdVy0pdmlHSVHPd+PWZLteDPauklS y7FGQnsDB47sNnK3iOgz4q4Cx95ze8x++9fxhw9pDj2pQSMb2A56jw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKG4+DcbfjulLrJ5EYch DSveyYzC+Mq30qGDqZzt8PFs9ciuAmMPZV0mfIbfouUYIhajaeiDP0U2Y7tq1Wna eREvjmnQkEY5Sa7zAofx30NYKEYR4eb085yGKx2IiQTtQrCO0y1pXMDmE+kwfxXO J1KAedzK1h5SYIodA2Xqo0lYWYG4qJkarbEnpMCbM4TkgQehoJhOVsPD09Mx1B2l +GguTJdsrAUVI4DnAL1HLgPCvzoPzan9X1kxMtIdCL7JgFFY54XXKkaZqZojG8tO ieu8IERq6gDcbTq1aWwB2iqKlh6YiCpI99ChSumLeUuoFK4kvl4izo2M9NrO7N8T SwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 364600754130451115391202319305728929821872 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-15 09:00:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-13 09:00:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aneveningwithastonmartin.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22297690029511898471558444716253263161556591293674971146153018077148500278531845471520790263531339099440875990790646911075366434614536840784480109940583520337017894211678296904168462461491800462067366645313833871723246492994571119962082933278907211375433605981827112043167384269736835858465103411556936106420660489253236183719190105384842376633533411075572238999822202198997310737519507535001178341694590443543536084136030014706281470216113786983380227924311645723090734392898668073831874576085499276993694250005571470930709115252287052980759180827181512205084260398454498563596505768122918095736525971186214428939083 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8fd160440ca5581518118c3fbcbea496d54e92d4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (257 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aneveningwithastonmartin.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.autoexpress.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.evo.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'octane-magazine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.astonmagazine.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.octane-magazine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syndication.classicandperformancecar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantagemag.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.octane-magazine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vantagemag.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000182a0f26bcd000004030046304402200254fc3a22fe5c5b2f3699ab384b0e3f734d8c2e35c7666bac2bd1ff9365a3450220575d439b87981d25bc894c5799085343700736af4f472aa5a1804b9874c9d64d0076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000182a0f26bbf0000040300473045022100aa33c9760dfc2b30d28757ef3de9dc42724fb469165e09125668a7aa7633c6020220650d1da18187d27d154ffec1f8e2eec24410ea05d3717e9b8e5ec5a8a84b8e7c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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