kungo.co.ke
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:50:f9:b2:5a:11:39:41:43:33:7f:05:d2:69:17:f9:7b:2a was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kungo.co.ke
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:50:f9:b2:5a:11:39:41:43:33:7f:05:d2:69:17:f9:7b:2aSerial Number (int): 288891350975528542903092008255844314086186
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 74:62:d2:d4:ef:50:35:63:e4:75:1d:3a:2e:45:f5:db:f2:21:67:f2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a8:fb:7a:f5:aa:56:de:c4:ef:be:bf:88:b6:a3:98:3c:71:b5:d6:16
Fingerprint (sha256): 66:82:44:81:70:a4:6f:cb:d3:0f:63:98:54:cb:8e:e9:af:dc:b9:1b:22:98:aa:20:99:8a:03:ce:f9:eb:f6:ab
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate kungo.co.ke
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kungo.co.ke
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cpanel.kungo.co.ke
kungo.co.ke
mail.kungo.co.ke
webdisk.kungo.co.ke
webmail.kungo.co.ke
www.kungo.co.ke
kungo.co.ke
mail.kungo.co.ke
webdisk.kungo.co.ke
webmail.kungo.co.ke
www.kungo.co.ke
Other certificates including the domain name kungo.co.ke
(limited to 100 certificates)
kungo.co.ke
manage.kungo.co.ke
www.kungo.co.ke
kungo.co.ke
operators.kungo.co.ke
kungo.co.ke
myhome.kungo.co.ke
www.kungo.co.ke
kungo.co.ke
kungo.co.ke
kungo.co.ke
manage.kungo.co.ke
kungo.co.ke
partner.kungo.co.ke
movers.kungo.co.ke
partner.kungo.co.ke
kungo.co.ke
movers.kungo.co.ke
book.kungo.co.ke
myhome.kungo.co.ke
kungo.co.ke
moving.kungo.co.ke
kungo.co.ke
partner.kungo.co.ke
partner.kungo.co.ke
manage.kungo.co.ke
kungo.co.ke
moving.kungo.co.ke
www.kungo.co.ke
moving.kungo.co.ke
partners.kungo.co.ke
manage.kungo.co.ke
kungo.co.ke
book.kungo.co.ke
myhotel.kungo.co.ke
safaris.kungo.co.ke
kungo.co.ke
partner.kungo.co.ke
manage.kungo.co.ke
manage.kungo.co.ke
kungo.co.ke
movers.kungo.co.ke
kungo.co.ke
movers.kungo.co.ke
movers.kungo.co.ke
moving.kungo.co.ke
manage.kungo.co.ke
manage.kungo.co.ke
manage.kungo.co.ke
movers.kungo.co.ke
kungo.co.ke
moving.kungo.co.ke
kungo.co.ke
kungo.co.ke
kungo.co.ke
movers.kungo.co.ke
manage.kungo.co.ke
www.kungo.co.ke
kungo.co.ke
operators.kungo.co.ke
kungo.co.ke
myhome.kungo.co.ke
www.kungo.co.ke
kungo.co.ke
kungo.co.ke
kungo.co.ke
manage.kungo.co.ke
kungo.co.ke
partner.kungo.co.ke
movers.kungo.co.ke
partner.kungo.co.ke
kungo.co.ke
movers.kungo.co.ke
book.kungo.co.ke
myhome.kungo.co.ke
kungo.co.ke
moving.kungo.co.ke
kungo.co.ke
partner.kungo.co.ke
partner.kungo.co.ke
manage.kungo.co.ke
kungo.co.ke
moving.kungo.co.ke
www.kungo.co.ke
moving.kungo.co.ke
partners.kungo.co.ke
manage.kungo.co.ke
kungo.co.ke
book.kungo.co.ke
myhotel.kungo.co.ke
safaris.kungo.co.ke
kungo.co.ke
partner.kungo.co.ke
manage.kungo.co.ke
manage.kungo.co.ke
kungo.co.ke
movers.kungo.co.ke
kungo.co.ke
movers.kungo.co.ke
movers.kungo.co.ke
moving.kungo.co.ke
manage.kungo.co.ke
manage.kungo.co.ke
manage.kungo.co.ke
movers.kungo.co.ke
kungo.co.ke
moving.kungo.co.ke
kungo.co.ke
kungo.co.ke
kungo.co.ke
movers.kungo.co.ke
Certificate
The complete raw certificate details for kungo.co.ke in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISA1D5sloROUFDM38F0mkX+XsqMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMjIwMTA0MThaFw0x OTA1MjMwMTA0MThaMBYxFDASBgNVBAMTC2t1bmdvLmNvLmtlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHHWnjf/sn4b5IoR1RfW+ar+vxsh6SgOrsRd ScODpdSN8GLO0eyIOdOwa/li9W8/QLVP3se0cCwKULli78BbahYL95eHeTEuG2by WZvbF4Zbier4hfZ1NaFndd1HGHx2mIjYfybOOFeN83JiIoNNHNUmgdiuYw5IGFlN eRR6jdLnBzDFnynjcLZ9NAV17FaMptSt2ZoRl4DGhDB8Pn60sF+wNvuWKytjUcbe OwPqCuMQxq3pvrJBVss9DuPDhMLf29XVBPfHg4UuxVhfJyqld9gcYua2T3nZAtlV wIjVNSk4HxJXugYMCfzuVUqcg0n28JUJrXZjC5ROBY52teaUjQIDAQABo4ICwTCC Ar0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR0YtLU71A1Y+R1HTouRfXb8iFn8jAf BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv MHcGA1UdEQRwMG6CEmNwYW5lbC5rdW5nby5jby5rZYILa3VuZ28uY28ua2WCEG1h aWwua3VuZ28uY28ua2WCE3dlYmRpc2sua3VuZ28uY28ua2WCE3dlYm1haWwua3Vu Z28uY28ua2WCD3d3dy5rdW5nby5jby5rZTBMBgNVHSAERTBDMAgGBmeBDAECATA3 BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy eXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3AOJpS64m6OlACeiGG7Y7 g9Q+5/50iPukjyiTAZ3d8dv+AAABaRLyPBwAAAQDAEgwRgIhALmkA1Vuw313bJvd 0X1Rk1NzzaZnec8NezHt/TAvq3VtAiEA/VY6QXl8s7Cghtg8I3CbrnY6oxXsOXbd iXRTmLZhOMgAdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWkS 8j4RAAAEAwBGMEQCIAaRq4la5YE3lLiGQy7Mx+/J/XERhHizxX9QbYY1Pn0YAiBE mngpS7x/GOLVJBJ9SamP9vnnsafibR+76uDM222chjANBgkqhkiG9w0BAQsFAAOC AQEAGLteoIm/vnHRuMeNGTHz0MErdmuy0EjKQREQ6WTroqPFW1XaZNNX7nobeYGG Fa27h/a/46dPk/yPUMiRGzHNVggqdq9jwBVMBzceSYUJDhLuxuDF4dqoZrtO90Z7 wjdw2vecsULc9gKuyeQCxefUgFNPDuWXEWMSI57/+sPHAxYqCju4wZ/Ag9u9opEK pXDoq/LsjZj/4bUtK46M9rR50/NpkfZpU46Ov9E7KBiKidDjWaxExwtyAjPnkAZO xGzfGtjCNMo1OKzcSO5kot4/PXkWbAgJZFw/pFihFWGmtYNZRixb/2Z/fbGHcx92 5hEWjL2rsnf3MEnquNqSI2kYOQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHHWnjf/sn4b5IoR1RfW +ar+vxsh6SgOrsRdScODpdSN8GLO0eyIOdOwa/li9W8/QLVP3se0cCwKULli78Bb ahYL95eHeTEuG2byWZvbF4Zbier4hfZ1NaFndd1HGHx2mIjYfybOOFeN83JiIoNN HNUmgdiuYw5IGFlNeRR6jdLnBzDFnynjcLZ9NAV17FaMptSt2ZoRl4DGhDB8Pn60 sF+wNvuWKytjUcbeOwPqCuMQxq3pvrJBVss9DuPDhMLf29XVBPfHg4UuxVhfJyql d9gcYua2T3nZAtlVwIjVNSk4HxJXugYMCfzuVUqcg0n28JUJrXZjC5ROBY52teaU jQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 288891350975528542903092008255844314086186 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-22 01:04:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-23 01:04:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kungo.co.ke' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21264171017743467649031389212825832426828727487784742647703881361792176415654750743053552858195162044311373150342744674772217104312037524372254750261574105475710606722919311982321271805802207299566065661260157172008075301395448705835769120615843434001392668516567225583350928568884685988121641424242753973478699128271891544751888232392509646945096934535120977013160053499322631237654310891666549746895382822790326035956598781744982261341483719324948875476630902794733117311811156377391559573135390270376529191909700177080750440589377163404563663055325534656297631435389574329437204443386687050287812770009075404936333 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7462d2d4ef503563e4751d3a2e45f5dbf22167f2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.kungo.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kungo.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kungo.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.kungo.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.kungo.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kungo.co.ke' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016912f23c1c0000040300483046022100b9a403556ec37d776c9bddd17d51935373cda66779cf0d7b31edfd302fab756d022100fd563a41797cb3b0a086d83c23709bae763aa315ec3976dd89745398b66138c8007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016912f23e11000004030046304402200691ab895ae5813794b886432eccc7efc9fd71118478b3c57f506d86353e7d180220449a78294bbc7f18e2d524127d49a98ff6f9e7b1a7e26d1fbbeae0ccdb6d9c86 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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