petrusville.co.za
Issued by R3
About this certificate
This digital certificate with serial number 03:0f:da:9f:5a:72:02:82:44:c9:ad:23:0b:90:4a:b5:70:11 was issued on by Let's Encrypt.
With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=petrusville.co.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:0f:da:9f:5a:72:02:82:44:c9:ad:23:0b:90:4a:b5:70:11Serial Number (int): 266731692411826086900202141362037355540497
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4e:c8:b8:ba:8c:b6:fe:ec:ab:32:36:5c:a3:b6:27:4d:f9:f2:8c:05
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 62:49:19:c9:cf:d6:45:d7:dd:8c:13:c1:60:10:98:e8:73:fe:69:f2
Fingerprint (sha256): 60:a3:a0:de:92:37:e0:36:01:4f:99:ca:10:09:96:75:c4:31:3c:78:23:8a:80:58:e3:bc:e5:b3:17:b4:0e:d5
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate petrusville.co.za
23
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for petrusville.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
abbysmyth.com
apersonals.com
aspectium.tel
bikanersweets.in
cashewchicken.com
chubby-couture.net
crushedcrete.com
edencottage.com
empiretoolrentalflorida.com
ezqu.com
gastronomy.co.in
gayutopia.info
glucosefingerprint.com
good-inflation-investments.com
hkn.co.in
ivkerrville.com
olympiclighting.com
petrusville.co.za
procraftroofing.com
resetivclinic.co
tuckercounty.com
www.netzerocertified.com
xzone.in
apersonals.com
aspectium.tel
bikanersweets.in
cashewchicken.com
chubby-couture.net
crushedcrete.com
edencottage.com
empiretoolrentalflorida.com
ezqu.com
gastronomy.co.in
gayutopia.info
glucosefingerprint.com
good-inflation-investments.com
hkn.co.in
ivkerrville.com
olympiclighting.com
petrusville.co.za
procraftroofing.com
resetivclinic.co
tuckercounty.com
www.netzerocertified.com
xzone.in
Other certificates including the domain name petrusville.co.za
(limited to 100 certificates)
Certificate
The complete raw certificate details for petrusville.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgISAw/an1pyAoJEya0jC5BKtXARMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTUwOTA0MTFaFw0yNDA3MTQwOTA0MTBaMBwxGjAYBgNVBAMT EXBldHJ1c3ZpbGxlLmNvLnphMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qFcugk8q39dhIU3AI+ts+ha4HMSSffviUQtMEoYc2Xh5WZqKHF9B+I0ryRV NqLn87EvvDhD1QA4mk0CKA67c9xDkxiQx1CGQjVjDxTpHmKsKx2ZH8yq3nYxw7GF vjOJP/403DoGc0kJhDvSwb0e7MPI8nqW43VCJHsDOr8+C/YqjNAebfg+oLIxRYKv +tWSqV9PGl10gEYUJR3huLbZVzNEC81dC8xmggi3Ver4SO0Pd0qgsXA2Jw56Fo+C yfDaNZqZIDlv3JkicBK69aKB8yQKPR3xfjl118FdhYxIQ24L5dmfdwoqhITCjZf0 ZoXQqNFz7xoSBEXist/KSwkHcQIDAQABo4IDsjCCA64wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBROyLi6jLb+7KsyNlyjtidN+fKMBTAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzCCAbkGA1UdEQSCAbAwggGsgg1hYmJ5c215dGguY29tgg5hcGVyc29uYWxz LmNvbYINYXNwZWN0aXVtLnRlbIIQYmlrYW5lcnN3ZWV0cy5pboIRY2FzaGV3Y2hp Y2tlbi5jb22CEmNodWJieS1jb3V0dXJlLm5ldIIQY3J1c2hlZGNyZXRlLmNvbYIP ZWRlbmNvdHRhZ2UuY29tghtlbXBpcmV0b29scmVudGFsZmxvcmlkYS5jb22CCGV6 cXUuY29tghBnYXN0cm9ub215LmNvLmlugg5nYXl1dG9waWEuaW5mb4IWZ2x1Y29z ZWZpbmdlcnByaW50LmNvbYIeZ29vZC1pbmZsYXRpb24taW52ZXN0bWVudHMuY29t ggloa24uY28uaW6CD2l2a2VycnZpbGxlLmNvbYITb2x5bXBpY2xpZ2h0aW5nLmNv bYIRcGV0cnVzdmlsbGUuY28uemGCE3Byb2NyYWZ0cm9vZmluZy5jb22CEHJlc2V0 aXZjbGluaWMuY2+CEHR1Y2tlcmNvdW50eS5jb22CGHd3dy5uZXR6ZXJvY2VydGlm aWVkLmNvbYIIeHpvbmUuaW4wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEE AdZ5AgQCBIH1BIHyAPAAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7Phk bgAAAY7hNtclAAAEAwBHMEUCIDUg149iLN7oyF+ZLjbmzGhzHA8/z2G9O9vuIhJa ySGTAiEAnL+IXfqhDBE3K/JpJTkT0zJ1JaLwD6FQAOm0pqNeIUUAdgB2/4g/Crb7 lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY7hNtd2AAAEAwBHMEUCIB7z4b8S q0haOuApqWCqGi9TPL/MLDZI2x4JDoVKoujVAiEAs3OkiFH7IGvomi3YeDTIQg/j l6Lnonf0jEelMW4fqKEwDQYJKoZIhvcNAQELBQADggEBAIXacfUfPkV3J6yYaT1r IV34uOAM3wsJaZtJlJQS3GyKNy2OYXpKWePWRZU5pdc9UAHqCDzuwETYcb8e0J23 9ZDldXUZztCuucfx1LoOr99fhf35afiSim29aO3NJhqSpMkX1cs6X7Nxmu3wsf/y 3jGNCnnLVGw9USaIWLMqNVQSRGncVH5Oabh8gwMBjzBRQuFEX0arGvym3mwTtUK0 P0YZXwpNzZreHD5vNVf5cg83R8VzXiFEjDYyGUD4XRqpsQE9kSjCUNLRuBvK/By+ 76MluiUYyfk6gpRlfVTnynnIVf0eKvvAV25UuITnNzS077rsIazLLqTTNF5aI9oD gpM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qFcugk8q39dhIU3AI+t s+ha4HMSSffviUQtMEoYc2Xh5WZqKHF9B+I0ryRVNqLn87EvvDhD1QA4mk0CKA67 c9xDkxiQx1CGQjVjDxTpHmKsKx2ZH8yq3nYxw7GFvjOJP/403DoGc0kJhDvSwb0e 7MPI8nqW43VCJHsDOr8+C/YqjNAebfg+oLIxRYKv+tWSqV9PGl10gEYUJR3huLbZ VzNEC81dC8xmggi3Ver4SO0Pd0qgsXA2Jw56Fo+CyfDaNZqZIDlv3JkicBK69aKB 8yQKPR3xfjl118FdhYxIQ24L5dmfdwoqhITCjZf0ZoXQqNFz7xoSBEXist/KSwkH cQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 266731692411826086900202141362037355540497 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 09:04:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 09:04:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'petrusville.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27599521155808621123539659197072284850407647796148836304707753223264899676111033240366165776547581562954386194758271577461963807111339090684670581684547998769991383490357837939973405930490175163090236337148392758774824543482939213964151147905185571715265388165866668808771275495277319769211782630457637144315415002175133462975755790520106399674988765390910774486495320243640134651239501326210200743797588423748178735741370696415614020075233881356510386196786462915992021199704425041065708154473698037115687113964228520177332373333351155245584302360695472746771617880931585222778332066646623003278198496250846866114417 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4ec8b8ba8cb6feecab32365ca3b6274df9f28c05 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (432 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbysmyth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apersonals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspectium.tel' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikanersweets.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashewchicken.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chubby-couture.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crushedcrete.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edencottage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empiretoolrentalflorida.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezqu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gastronomy.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayutopia.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glucosefingerprint.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'good-inflation-investments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkn.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivkerrville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympiclighting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petrusville.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procraftroofing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resetivclinic.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuckercounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netzerocertified.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xzone.in' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ee136d725000004030047304502203520d78f622cdee8c85f992e36e6cc68731c0f3fcf61bd3bdbee22125ac921930221009cbf885dfaa10c11372bf269253913d3327525a2f00fa15000e9b4a6a35e214500760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ee136d776000004030047304502201ef3e1bf12ab485a3ae029a960aa1a2f533cbfcc2c3648db1e090e854aa2e8d5022100b373a48851fb206be89a2dd87834c8420fe397a2e7a277f48c47a5316e1fa8a1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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