faqtruth.org
Issued by R3
About this certificate
This digital certificate with serial number 04:cd:20:c1:cd:d8:bb:f7:d0:db:1f:78:74:02:bb:f0:20:2f was issued on by Let's Encrypt.
With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=faqtruth.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:cd:20:c1:cd:d8:bb:f7:d0:db:1f:78:74:02:bb:f0:20:2fSerial Number (int): 418250570530057611265634523995009404903471
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 4e:f2:70:b9:3e:71:df:5c:7a:6e:7d:01:67:8e:3e:76:61:20:19:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 35:14:57:e4:dd:49:be:aa:af:09:71:aa:1e:8f:f3:92:a5:39:17:8d
Fingerprint (sha256): 78:bd:26:e2:f5:ae:7d:00:c3:5c:79:0d:53:3e:0b:c4:7e:48:5e:5d:8e:3e:91:bb:8b:3b:06:8d:bf:a2:fe:f2
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate faqtruth.org
17
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for faqtruth.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bonus2buyers.com
canibuild.in
ccrdiver.com
computernerd.io
ecurrencyexchange.net
faqtruth.org
fkh.co.in
koreastockfund.com
luxmatica.com
ostomyintimates.com
pottawatomie.com
reginaangelorum-press.org
seeemeee.com
takeactionusa.net
tenicorusa.com
varnd.com
wyattpark.com
canibuild.in
ccrdiver.com
computernerd.io
ecurrencyexchange.net
faqtruth.org
fkh.co.in
koreastockfund.com
luxmatica.com
ostomyintimates.com
pottawatomie.com
reginaangelorum-press.org
seeemeee.com
takeactionusa.net
tenicorusa.com
varnd.com
wyattpark.com
Other certificates including the domain name faqtruth.org
(limited to 100 certificates)
5272653.ca
cng.world
pureindulgence.org
faqtruth.org
appropriations.online
dumptruck.ca
5272653.ca
dumptruck.ca
faqtruth.org
faqtruth.org
5272653.ca
faqtruth.org
bake.vc
5272653.ca
5272653.ca
faqtruth.org
i-loveradio.de
cng.world
faqtruth.org
faqtruth.org
5272653.ca
5272653.ca
homes.world
dumptruck.ca
learnthe.bible
lease.club
5272653.ca
5272653.ca
5272653.ca
sculpit.cafe
sculpit.guide
5272653.ca
faqtruth.org
5272653.ca
vacations.vc
5272653.ca
cng.world
5272653.ca
lease.club
homes.world
homes.world
cng.world
pureindulgence.org
faqtruth.org
appropriations.online
dumptruck.ca
5272653.ca
dumptruck.ca
faqtruth.org
faqtruth.org
5272653.ca
faqtruth.org
bake.vc
5272653.ca
5272653.ca
faqtruth.org
i-loveradio.de
cng.world
faqtruth.org
faqtruth.org
5272653.ca
5272653.ca
homes.world
dumptruck.ca
learnthe.bible
lease.club
5272653.ca
5272653.ca
5272653.ca
sculpit.cafe
sculpit.guide
5272653.ca
faqtruth.org
5272653.ca
vacations.vc
5272653.ca
cng.world
5272653.ca
lease.club
homes.world
homes.world
Certificate
The complete raw certificate details for faqtruth.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgISBM0gwc3Yu/fQ2x94dAK78CAvMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MDgwNTA2MjNaFw0yNDA4MDYwNTA2MjJaMBcxFTATBgNVBAMT DGZhcXRydXRoLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKP0 u7nv9Bmy49aaiyA8UQumlYQ4NLJYC56BDi7TulvtVsO+4rfDCTpzI28kXH3PbOEY keFdKVAH8RUybFmKcQqDn3VPAMgxx3FK5XOB6uoHGSqxyfVjxY+0WJ42J/sWCDZg E2OxJ4KijkmJN5xX1tQD75Ig1HEleHiKmg39M7kOqXQ2AUHNMP9A35WGDf9QCUM0 4EZ5epS7iI0NyF2BM32SNhmAhm/RGviXCwcW9l/mdC95K5UvxrmQ/aKxMTgSO9oI wybqkTXHrdvr6eztSyLBu1cHZ08WLty0JAbcAqj+3xJgNAtjNrIvgZYuQ9v3ec40 AcdaL7tpxfFYWknRtNcCAwEAAaOCAyYwggMiMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUTvJwuT5x31x6bn0BZ44+dmEgGZIwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w ggEsBgNVHREEggEjMIIBH4IQYm9udXMyYnV5ZXJzLmNvbYIMY2FuaWJ1aWxkLmlu ggxjY3JkaXZlci5jb22CD2NvbXB1dGVybmVyZC5pb4IVZWN1cnJlbmN5ZXhjaGFu Z2UubmV0ggxmYXF0cnV0aC5vcmeCCWZraC5jby5pboISa29yZWFzdG9ja2Z1bmQu Y29tgg1sdXhtYXRpY2EuY29tghNvc3RvbXlpbnRpbWF0ZXMuY29tghBwb3R0YXdh dG9taWUuY29tghlyZWdpbmFhbmdlbG9ydW0tcHJlc3Mub3JnggxzZWVlbWVlZS5j b22CEXRha2VhY3Rpb251c2EubmV0gg50ZW5pY29ydXNhLmNvbYIJdmFybmQuY29t gg13eWF0dHBhcmsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHW eQIEAgSB9gSB8wDxAHcAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4A AAGPVs9nRwAABAMASDBGAiEAhMT8rikT0XN2EisJn0OGvZu4NgORrhRoQ2Jvipkj wO0CIQCNwWNnby/UA+tSJVCv+QJfyGvloPkYcspL1D85cmuy/QB2AEiw42vapkc0 D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABj1bPZ0wAAAQDAEcwRQIhAJAcw5gl iBtMltgStHGes5ZLlO0ydyAWBTXHvt8jFKMxAiBwADvwyx5Yp8ZLmgGjJsN4xhVl Xy1ms6tfuP9mmtqQ4zANBgkqhkiG9w0BAQsFAAOCAQEAkpB49TQ0YveQ/c334081 2xtxzAQvAUO8dWfby3+z8N8HU/Ne5ajKhiseUQuPS1TSBDRe5/17kWhDbFGSqb9J 22fvn9jx8Z9wYPIg+1eTwwY17vJLFhm9NdmkOccFmPiAb59RtfOOSVWzquQOcQoT diHKoO8s3G/hVLfNWsd5SNOFL4L8iDhrvNT2cqjHxldgaW/kkhWlNFlrx81Gd5gN 4YvZIwSXN8Is4EMzf4i+OAegDM7b4EaZrAo4aKvwOWfwCbeKAbkbyIUp6ACAkxhF BAKhPd+E4lMhtbjG0E17v4DOFi2GVHQlOs/liXjO268FCOZj+2o/0XYuaFtmBuWW /A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/S7ue/0GbLj1pqLIDxR C6aVhDg0slgLnoEOLtO6W+1Ww77it8MJOnMjbyRcfc9s4RiR4V0pUAfxFTJsWYpx CoOfdU8AyDHHcUrlc4Hq6gcZKrHJ9WPFj7RYnjYn+xYINmATY7EngqKOSYk3nFfW 1APvkiDUcSV4eIqaDf0zuQ6pdDYBQc0w/0DflYYN/1AJQzTgRnl6lLuIjQ3IXYEz fZI2GYCGb9Ea+JcLBxb2X+Z0L3krlS/GuZD9orExOBI72gjDJuqRNcet2+vp7O1L IsG7VwdnTxYu3LQkBtwCqP7fEmA0C2M2si+Bli5D2/d5zjQBx1ovu2nF8VhaSdG0 1wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 418250570530057611265634523995009404903471 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 05:06:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 05:06:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'faqtruth.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20697526200518848682971835497500182303545940114113030015385944847806054249723757316497490894552411517893262643864987838567778281097765571596262657509881981362539987252139340928125553810924400349494110623405086800959208398114285809147473540971711721324262556084676983032382750177206510777680775288411132597986270155233248298504128242404623210190481257420844438137663189086740451209077166550970800785689921835347153003770661425435270735515878093538005973677582339144991043981416513865203682654875544222280333656018507608707453250080354057131878930790829915453525735391738536519705520786636298112892344614258621218403543 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4ef270b93e71df5c7a6e7d01678e3e7661201992 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (291 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonus2buyers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccrdiver.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computernerd.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecurrencyexchange.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faqtruth.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fkh.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koreastockfund.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxmatica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostomyintimates.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pottawatomie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reginaangelorum-press.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeemeee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takeactionusa.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenicorusa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varnd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyattpark.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f56cf6747000004030048304602210084c4fcae2913d17376122b099f4386bd9bb8360391ae146843626f8a9923c0ed0221008dc163676f2fd403eb522550aff9025fc86be5a0f91872ca4bd43f39726bb2fd00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f56cf674c0000040300473045022100901cc39825881b4c96d812b4719eb3964b94ed327720160535c7bedf2314a331022070003bf0cb1e58a7c64b9a01a326c378c615655f2d66b3ab5fb8ff669ada90e3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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