energiewelt.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:1d:50:3c:59:ed:59:a8:ca:d3:42:78:b1:8f:aa:3c:d0:7e was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=energiewelt.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:1d:50:3c:59:ed:59:a8:ca:d3:42:78:b1:8f:aa:3c:d0:7eSerial Number (int): 358423983969161784850529671042702595903614
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 8a:6a:65:b3:e0:a8:bf:5f:ce:3f:af:aa:e2:20:7f:fd:92:14:f2:18
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e1:22:09:20:6c:30:62:4b:d7:4f:ca:61:36:c1:61:17:7d:ed:36:69
Fingerprint (sha256): 79:82:02:94:77:0e:75:f6:3f:02:d7:5a:ce:01:c7:6b:0a:84:aa:16:13:ab:dc:c7:af:58:3a:0a:1b:30:dc:30
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate energiewelt.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for energiewelt.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
energiewelt.ch
Other certificates including the domain name energiewelt.ch
(limited to 100 certificates)
energiewelt.ch
vse-umfrage.energiewelt.ch
energiewelt.ch
www.thefund.app
vse-umfrage.energiewelt.ch
energiewelt.ch
currents.fm
vse-umfrage.energiewelt.ch
boardgames.richardbell.me.uk
vse-umfrage.energiewelt.ch
www.energiewelt.ch
energiewelt.ch
vse-umfrage.energiewelt.ch
www.energiewelt.ch
rx.onebluecloud.com
ar-card.realityreach.com
mytulip.fr
www.energiewelt.ch
rg.vaihde.io
currents.fm
social.tecxprt.com
energiewelt.ch
energiewelt.ch
energiewelt.ch
energiewelt.ch
vse-umfrage.energiewelt.ch
go.ambrook.ag
www.hisab.co
www.energiewelt.ch
arbafoundation.tilawah.my
www.thefund.app
energiewelt.ch
www.buddyrecs.com
www.energiewelt.ch
ar-card.realityreach.com
www.thelcnfirm.com
energiewelt.ch
altakya.com
vse-umfrage.energiewelt.ch
www.energiewelt.ch
www.energiewelt.ch
vse-umfrage.energiewelt.ch
scd-uat.order.place
vse-umfrage.energiewelt.ch
energiewelt.ch
www.thefund.app
vse-umfrage.energiewelt.ch
energiewelt.ch
currents.fm
vse-umfrage.energiewelt.ch
boardgames.richardbell.me.uk
vse-umfrage.energiewelt.ch
www.energiewelt.ch
energiewelt.ch
vse-umfrage.energiewelt.ch
www.energiewelt.ch
rx.onebluecloud.com
ar-card.realityreach.com
mytulip.fr
www.energiewelt.ch
rg.vaihde.io
currents.fm
social.tecxprt.com
energiewelt.ch
energiewelt.ch
energiewelt.ch
energiewelt.ch
vse-umfrage.energiewelt.ch
go.ambrook.ag
www.hisab.co
www.energiewelt.ch
arbafoundation.tilawah.my
www.thefund.app
energiewelt.ch
www.buddyrecs.com
www.energiewelt.ch
ar-card.realityreach.com
www.thelcnfirm.com
energiewelt.ch
altakya.com
vse-umfrage.energiewelt.ch
www.energiewelt.ch
www.energiewelt.ch
vse-umfrage.energiewelt.ch
scd-uat.order.place
Certificate
The complete raw certificate details for energiewelt.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgISBB1QPFntWajK00J4sY+qPNB+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjgwNDMxNTlaFw0y MDA1MjgwNDMxNTlaMBkxFzAVBgNVBAMTDmVuZXJnaWV3ZWx0LmNoMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6eWKaPlAw8eaML1FubOJF1gyRhls9Rb8 CKBYioLexCBCWNdrlV2OeEiq44KS3ovNRcvPV3+oyJDbT4IoJhM4etTOtZLxipgo 8Xx77Mjqk4Ip4CZK8/GVXWMh1yonLk4NuAYjKZTkXaODZYNJXCYRLI95sW/s9C2g ji1Tl41+39z5lqSWWFm1/jtwUSf5awDtXzti7W1GGWF0S/0FR/jNiPLRX5G3rrBC gsXfJ5cJN/Y00kqaB6w9qdqFF51DzLl6Xm8y+9U+OeZbMfotNu/D8UUAiItYS5jA R0P77/G4nOX3dst+05SY7lntuAR0H6lgAMdv8jfu2mup9zJJMrcqUj0YJBdqupQq qt06dMLobP4qwCoapWNBMLKXRAN+SLoZR2qAJOnvLHJABNMv7yLcl3TNEgaq+u/0 twnbbYu2FM1675Y8vqt15dRoNMKQoPkxK9GeAqca+7e2GVwwsBA9iR0HqR9r79pu bgyONPeaS1MvzM47DaUR9b0/qvdbSoJYQVatLPu46EN79O/0i263FEgYZBq1lKwD 8M2BS0yCdYtFCSaPXflOXv0+WFNFtXpKdVKjx/avcQ2eB+FDSyCFkVAmSMQTeQTj f5l/RNiH4Zo22tSd0seFdYigLWB74dikP/1Jn7fAuyogBTyA8qCqJsuKRki2tt+P gehfwA23OR0CAwEAAaOCAmQwggJgMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUimpl s+Cov1/OP6+q4iB//ZIU8hgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5lbmVyZ2lld2VsdC5jaDBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYE gfMA8QB3APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABcIpHtLcA AAQDAEgwRgIhAJXRi7pXFTXGTRWdJBSvfBwqGW5fjuqOWnqKbJNplt/cAiEAwrlX JXo1z+HBWTlWYpt1P6kaGL8OY42ov5a7B+y2NEMAdgCyHgXMi6LNiiBOh2b5K7mK JSBna9r6cOeySVMt74uQXgAAAXCKR7SpAAAEAwBHMEUCIBfGNhKU1FoTjdnCYF2R Nx7LaaE53wTjJk0JeURnUlAYAiEAqzHp1ZdClxWCLvyG30O2HMWBEyAUINW5tuOV 2Xqi3SgwDQYJKoZIhvcNAQELBQADggEBAFFxmUQgccux7rhz1lEVPONIultadA4m 4nW2oi73Fx5TkYN/HfxpqU7G0m39VxxQfjWK1Q3sd2JwlzLkQuWQtrczHmpOcXLN auR6qUaaDu3f80Y5nhiDcgpmPuU5A5/WuEsYxMDbhOoKkmwKmsAEEmax34mPcWaG STIRPThMR367QLvshnFqC5/tXohchBsAGEei3JoF/28vUXl0YZ+tX3eR0U+A7zri tkEOG3VgFK6JVPZNH1Xvh1UWPzswwgQT4gAxLiCnLaovm1b9eVDXZVICsKaHMnbc HsHrQ1Oo5Oa0D83R5FDdeusJK/DCYfJ+AQl1FnL6hT/elAbK9eEPjnU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6eWKaPlAw8eaML1FubOJ F1gyRhls9Rb8CKBYioLexCBCWNdrlV2OeEiq44KS3ovNRcvPV3+oyJDbT4IoJhM4 etTOtZLxipgo8Xx77Mjqk4Ip4CZK8/GVXWMh1yonLk4NuAYjKZTkXaODZYNJXCYR LI95sW/s9C2gji1Tl41+39z5lqSWWFm1/jtwUSf5awDtXzti7W1GGWF0S/0FR/jN iPLRX5G3rrBCgsXfJ5cJN/Y00kqaB6w9qdqFF51DzLl6Xm8y+9U+OeZbMfotNu/D 8UUAiItYS5jAR0P77/G4nOX3dst+05SY7lntuAR0H6lgAMdv8jfu2mup9zJJMrcq Uj0YJBdqupQqqt06dMLobP4qwCoapWNBMLKXRAN+SLoZR2qAJOnvLHJABNMv7yLc l3TNEgaq+u/0twnbbYu2FM1675Y8vqt15dRoNMKQoPkxK9GeAqca+7e2GVwwsBA9 iR0HqR9r79pubgyONPeaS1MvzM47DaUR9b0/qvdbSoJYQVatLPu46EN79O/0i263 FEgYZBq1lKwD8M2BS0yCdYtFCSaPXflOXv0+WFNFtXpKdVKjx/avcQ2eB+FDSyCF kVAmSMQTeQTjf5l/RNiH4Zo22tSd0seFdYigLWB74dikP/1Jn7fAuyogBTyA8qCq JsuKRki2tt+PgehfwA23OR0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 358423983969161784850529671042702595903614 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 04:31:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-28 04:31:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'energiewelt.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 954215053041507374087155639653690241414010151311738643265599890445169925660525880598334434082640561944511912560639443251605885193465991512331134960477008765156262541503732223808680570149875610422327028965187273778011934400135792963648657094879869030747489601574942153229277153843289209605295886023079652467141402134764591272566522359327970088502570489187213505924762619623393749891957580050743727277628835989869527873922145353861871450469068200079838276054547815885490243309241680243010049839645435206189666191681726117978709203173014140987374552425762071649767997205259165809331036538569594287335430949445072578618684870400957250307076129113460567348315864746575072232903073667914926817649425042110864423739577242939306790731641442393957830762273969264097303345084052849688280911744092963671167893549405199506505676247538468836596243910837437869676771972065889280918806075007387064594268624697402269355751286844711416181797528839900525675241428167625432401865525575530847166266975465190504608185721551592934875480397798605986009719534646869266619107768377277313213967900673247260519280090859491441704288243683281399720721196521214148797586501262242471506051727149733894881326411682569466079208429164368159499639388198115050568235293 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8a6a65b3e0a8bf5fce3fafaae2207ffd9214f218 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energiewelt.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001708a47b4b7000004030048304602210095d18bba571535c64d159d2414af7c1c2a196e5f8eea8e5a7a8a6c936996dfdc022100c2b957257a35cfe1c1593956629b753fa91a18bf0e638da8bf96bb07ecb63443007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001708a47b4a90000040300473045022017c6361294d45a138dd9c2605d91371ecb69a139df04e3264d09794467525018022100ab31e9d597429715822efc86df43b61cc58113201420d5b9b6e395d97aa2dd28 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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