elkaso.app
Issued by R3
About this certificate
This digital certificate with serial number 04:ab:43:0d:e0:88:72:93:c2:2d:81:b4:94:05:5f:2b:58:68 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=elkaso.app
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ab:43:0d:e0:88:72:93:c2:2d:81:b4:94:05:5f:2b:58:68Serial Number (int): 406726558800168455395084170833589242124392
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 21:0f:29:dd:b8:75:d3:46:55:6f:60:fe:49:21:81:4e:20:07:31:90
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): a8:c7:13:8b:04:2f:04:11:d0:ec:ad:99:d6:a5:ff:35:31:8f:21:2c
Fingerprint (sha256): 6c:21:05:11:4c:d3:76:96:52:f2:de:df:b6:a5:91:64:2f:d9:84:b9:99:96:fd:bf:37:81:bd:80:39:ef:b5:d3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate elkaso.app
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for elkaso.app
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
elkaso.app
Other certificates including the domain name elkaso.app
(limited to 100 certificates)
jdaqbank.com
soc-author.co.uk
app.litpic.app
inprof.admin.boodscode.ru
hitossy.skd-tf.com
choosy-linking.xyz
app.alfie.co.il
essupport.nightly.pocketpost.life
codesharing.app
www.sucre.app
elkaso.app
docs.heycenter.com
dashboard.rumo.co
payboard.com
matthatters.com
test.netresult.app
m.hizuko.com
tenkasi.droptaxitime2time.com
www.nalinj.com
sandbox-manager.skllzz.com
mamuangcafeemenu.triggersplus.com
app.litpic.app
portal.inq.com.ng
www.becodie.com
connect-ng-carrier-loadboard.rxoconnectmain.rxo.com
mapa.circuitovaledosencantos.com.br
softwares.legalizeseven.com.br
app.varejaodasucata.com.br
app-v2.aiii.ai
captacao.rodenstock.com.br
covidgamenight.com
ocarinatabs.com
www.amazingtastegreatstory.com
membership.ir
www.arttraphotography.com
www.jelinekpetr.com
www.wsen.org
www.mystudentlife.ie
www.auto-sift.com
thepearlscollections.com
backoffice.guide.fm
beta.app.segurolaguinda.com
auth.placehires.com
detalhearte.com
manage.realpartyinfo.com
link-mapp.iaai.com
get.elkaso.app
elkaso.app
www.patchi.dev
campaigns.mailtrap.info
trojanconstructionmanagementllc.com
oneclaim.com
prudentcpa.com
cannaplaner.de
www.intelystate.ca
mvcap.org.uk
jakubd.com
www.rewardwatchers.com
react-formulator.scenid.dev
new-cms.staging.elkaso.app
bsa442.com
android.unprint.pt
shopgabriellamrose.com
elkaso.app
elkaso.app
www.pre-admin.laky.es
www.cavs.app
www.jaramilla.net
www.inthewayec.com
hatimdagit.com
zimmer-test.usbmis.pl
jamaica.murderwatcher.com
share.gq
admin.johirmisszio.hu
borngasyd.posnet.com.au
giovannibozzelli.it
arhang.com
elkaso.app
my.serviz.fi
www.birapt.com
appvantage.io
wolfdeer.com
esim.no
okp4-monitoring.2pilot.dev
sbx-amr-uae-kfc-kiosk.supersonic-fm.com
cms.elkaso.app
icarusinvestments.cloud
ruiz.fyi
dev.highlander.cloud
plantmilkmakers.com
www.rooty.dev
pagenii.com
app.influ360.com
app.raksystems.se
www.mobitier.com
www.amazingtastegreatstory.com
peacefulcontact.pro
lgtm-tech.com
inventory-staging.elkaso.app
lindsborg.column.us
soc-author.co.uk
app.litpic.app
inprof.admin.boodscode.ru
hitossy.skd-tf.com
choosy-linking.xyz
app.alfie.co.il
essupport.nightly.pocketpost.life
codesharing.app
www.sucre.app
elkaso.app
docs.heycenter.com
dashboard.rumo.co
payboard.com
matthatters.com
test.netresult.app
m.hizuko.com
tenkasi.droptaxitime2time.com
www.nalinj.com
sandbox-manager.skllzz.com
mamuangcafeemenu.triggersplus.com
app.litpic.app
portal.inq.com.ng
www.becodie.com
connect-ng-carrier-loadboard.rxoconnectmain.rxo.com
mapa.circuitovaledosencantos.com.br
softwares.legalizeseven.com.br
app.varejaodasucata.com.br
app-v2.aiii.ai
captacao.rodenstock.com.br
covidgamenight.com
ocarinatabs.com
www.amazingtastegreatstory.com
membership.ir
www.arttraphotography.com
www.jelinekpetr.com
www.wsen.org
www.mystudentlife.ie
www.auto-sift.com
thepearlscollections.com
backoffice.guide.fm
beta.app.segurolaguinda.com
auth.placehires.com
detalhearte.com
manage.realpartyinfo.com
link-mapp.iaai.com
get.elkaso.app
elkaso.app
www.patchi.dev
campaigns.mailtrap.info
trojanconstructionmanagementllc.com
oneclaim.com
prudentcpa.com
cannaplaner.de
www.intelystate.ca
mvcap.org.uk
jakubd.com
www.rewardwatchers.com
react-formulator.scenid.dev
new-cms.staging.elkaso.app
bsa442.com
android.unprint.pt
shopgabriellamrose.com
elkaso.app
elkaso.app
www.pre-admin.laky.es
www.cavs.app
www.jaramilla.net
www.inthewayec.com
hatimdagit.com
zimmer-test.usbmis.pl
jamaica.murderwatcher.com
share.gq
admin.johirmisszio.hu
borngasyd.posnet.com.au
giovannibozzelli.it
arhang.com
elkaso.app
my.serviz.fi
www.birapt.com
appvantage.io
wolfdeer.com
esim.no
okp4-monitoring.2pilot.dev
sbx-amr-uae-kfc-kiosk.supersonic-fm.com
cms.elkaso.app
icarusinvestments.cloud
ruiz.fyi
dev.highlander.cloud
plantmilkmakers.com
www.rooty.dev
pagenii.com
app.influ360.com
app.raksystems.se
www.mobitier.com
www.amazingtastegreatstory.com
peacefulcontact.pro
lgtm-tech.com
inventory-staging.elkaso.app
lindsborg.column.us
Certificate
The complete raw certificate details for elkaso.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgISBKtDDeCIcpPCLYG0lAVfK1hoMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMDYxOTExNTBaFw0yNDA0MDUxOTExNDlaMBUxEzARBgNVBAMT CmVsa2Fzby5hcHAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnFN1w drS2iMZp0yBHmTRrMq0R6NfD0VjeXNtrYlruBwgOeJoMd13rC1wtlKur2h2dTtbr JQ+WFIWzKyFUYQhX8Us+nikT5pS2jRnZvDAZV6mIkBOkJS/6Se11Zm5BC90wVvKt Em/lmVGz46BXnow05lbjnNulV26HXqr+rZ0N7PNw25ZwkQY99hEKoplNExS4hqFm hDadR9bEi1UY9pc3fzBNVHVvl4MIzwGvqpwd/T0x5uljL6viCrwSYcIHbQqOTpmW lUgGtHrzstjvtg2k5gz3UJNRfDK5la55E+xlJyAqm0ebdRoGptRo8FBfKKncLImV JssDJicBsAjpa03DAgMBAAGjggIMMIICCDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FCEPKd24ddNGVW9g/kkhgU4gBzGQMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMBUG A1UdEQQOMAyCCmVsa2Fzby5hcHAwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgor BgEEAdZ5AgQCBIH1BIHyAPAAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+r OdiEcwAAAYzgZzkuAAAEAwBIMEYCIQD+x/UjGGuh07vRHsM+TZrikaS7KRpFbbvj 5vKo4Vzy7gIhALMEfmuaUclDGlq0332ZmLPQ/wvsiLnLAWW3RGYvY4aIAHUAO1N3 dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGM4Gc5LAAABAMARjBEAiAQ S7xja+yDbGQZ5NP4UiTsUFepZRRKZB8aDcHWYlxXfQIgZMmkBbHwLHxnRj4sVsXF /D0gfPzwW7hBKlPDkgGsqG8wDQYJKoZIhvcNAQELBQADggEBAIPkAB8Gf4aMqV5y kioahzee0NJB+IKN2R8JIWL+gLy+N5h8o0fAnDYtSARGqFZ5im6Ybfp4AzF53xpX n9f8hO3ULVace+DlDW1SZwMo5ScyizEzv1QGZ75Ipz1cc0LR1MM24u499TiKR4zA RL+4lph536XwaWZNdMM3VsyDUueS68i2DskOiUFGFivhK1JNKngTnxu5Q/eWldyd YkfHQiHTEcdJI2A6/2YylxhpXj3JYHGYsIaEaJyi78w3PHQMxC5yPHK7eA9SZyN1 EO9wAxECGv7nM3jI7nGS5L3EDYPpoiUQq6+VcroH2nAIRTF5dX5VT0H9xJK1SP26 RjbTyXg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xTdcHa0tojGadMgR5k0 azKtEejXw9FY3lzba2Ja7gcIDniaDHdd6wtcLZSrq9odnU7W6yUPlhSFsyshVGEI V/FLPp4pE+aUto0Z2bwwGVepiJATpCUv+kntdWZuQQvdMFbyrRJv5ZlRs+OgV56M NOZW45zbpVduh16q/q2dDezzcNuWcJEGPfYRCqKZTRMUuIahZoQ2nUfWxItVGPaX N38wTVR1b5eDCM8Br6qcHf09MebpYy+r4gq8EmHCB20Kjk6ZlpVIBrR687LY77YN pOYM91CTUXwyuZWueRPsZScgKptHm3UaBqbUaPBQXyip3CyJlSbLAyYnAbAI6WtN wwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 406726558800168455395084170833589242124392 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 19:11:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 19:11:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elkaso.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29171337360806066549007607991333702921477130763554879504809699862381971118560162824561830072954823573609449748498404465388917363039690814887714266807937441669472287230327706387337789687999411244095504687328121793015358355646617957929485005614877764893302359860895942332346614970518192182512760677686720681433569080589791253840384981623150114679518746980985200959227734961992550129955676666578108479007817462111293161504066148100353192465773767429579458587665714198459724743289687488231686969049956931842539554926590407387878731120214903658268220936321007697145273154694964465227392930936555659553024657279482178784707 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 210f29ddb875d346556f60fe4921814e20073190 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elkaso.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ce067392e0000040300483046022100fec7f523186ba1d3bbd11ec33e4d9ae291a4bb291a456dbbe3e6f2a8e15cf2ee022100b3047e6b9a51c9431a5ab4df7d9998b3d0ff0bec88b9cb0165b744662f6386880075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ce067392c00000403004630440220104bbc636bec836c6419e4d3f85224ec5057a965144a641f1a0dc1d6625c577d022064c9a405b1f02c7c67463e2c56c5c5fc3d207cfcf05bb8412a53c39201aca86f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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