archives.cjr.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e9:c4:c7:0e:81:fc:01:85:87:a9:a2:80:6c:f2:41:97:7e was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=archives.cjr.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e9:c4:c7:0e:81:fc:01:85:87:a9:a2:80:6c:f2:41:97:7eSerial Number (int): 340884211536360253346066765993718598178686
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d7:6d:0d:ab:c6:de:e1:55:24:36:3f:75:7e:3a:52:6c:ce:dc:fc:94
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 39:4b:bc:42:05:b1:6b:0b:79:73:a4:c8:0b:f2:e8:41:db:62:02:a5
Fingerprint (sha256): 79:fa:03:80:15:9a:2f:f0:25:e6:db:60:cd:82:f9:fb:a4:5d:e0:f0:9e:38:cf:67:52:3b:47:6c:1e:91:32:77
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate archives.cjr.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for archives.cjr.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
archives.cjr.org
www.archives.cjr.org
www.archives.cjr.org
Other certificates including the domain name cjr.org
(limited to 100 certificates)
archives2.cjr.org
cjr.org
delta2017.cjr.org
beta.cjr.org
members.cjr.org
archives.cjr.org
sni.cloudflaressl.com
beta.cjr.org
beta.cjr.org
www.kinseyzaire.com
tow.cjr.org
archives2.cjr.org
existential.cjr.org
cjr.org
bathingpanda.com
cjr.org
cjr.org
sni.cloudflaressl.com
archives2.cjr.org
www.cjr.org
beta.cjr.org
members.cjr.org
existential.cjr.org
danzery.com
beta.cjr.org
disinfopoll.cjr.org
www.cjr.org
cdn.cjr.org
cdn.cjr.org
archives2.cjr.org
archives.cjr.org
beta.cjr.org
archives.cjr.org
archives.cjr.org
after-the-uprising.cjr.org
cjr.org
www.cjr.org
delta2017.cjr.org
beta.cjr.org
beta.cjr.org
cjr.org
archives.cjr.org
archives2.cjr.org
analytics.actionableagile.com
www.cjr.org
delta2017.cjr.org
members.cjr.org
beta2017.cjr.org
beyondatonement.cjr.org
www.cjr.org
crow.academy
cjr.org
beta2017.cjr.org
cjr.org
cjr.org
existential.cjr.org
archives2.cjr.org
cjr.org
cdn.cjr.org
cjr.org
cjr.org
galley.cjr.org
cdn.cjr.org
cjr.org
archives.cjr.org
beta2017.cjr.org
archives.cjr.org
www.cjr.org
archives.cjr.org
www.cjr.org
beta2017.cjr.org
beta2017.cjr.org
bathingpanda.com
sni.cloudflaressl.com
archives.cjr.org
archives.cjr.org
cdn.cjr.org
galley.cjr.org
www.cjr.org
archives.cjr.org
cjr.org
archives2.cjr.org
cjr.org
beta2017.cjr.org
beta.cjr.org
beta2017.cjr.org
beta2017.cjr.org
blog.yukarium.net
archives.cjr.org
www.cjr.org
www.dental-health-care.com
fonts.cjr.org
cjr.org
members.cjr.org
cjr.org
beta.cjr.org
fonts.cjr.org
beta2017.cjr.org
www.cjr.org
disinformation.cjr.org
cjr.org
delta2017.cjr.org
beta.cjr.org
members.cjr.org
archives.cjr.org
sni.cloudflaressl.com
beta.cjr.org
beta.cjr.org
www.kinseyzaire.com
tow.cjr.org
archives2.cjr.org
existential.cjr.org
cjr.org
bathingpanda.com
cjr.org
cjr.org
sni.cloudflaressl.com
archives2.cjr.org
www.cjr.org
beta.cjr.org
members.cjr.org
existential.cjr.org
danzery.com
beta.cjr.org
disinfopoll.cjr.org
www.cjr.org
cdn.cjr.org
cdn.cjr.org
archives2.cjr.org
archives.cjr.org
beta.cjr.org
archives.cjr.org
archives.cjr.org
after-the-uprising.cjr.org
cjr.org
www.cjr.org
delta2017.cjr.org
beta.cjr.org
beta.cjr.org
cjr.org
archives.cjr.org
archives2.cjr.org
analytics.actionableagile.com
www.cjr.org
delta2017.cjr.org
members.cjr.org
beta2017.cjr.org
beyondatonement.cjr.org
www.cjr.org
crow.academy
cjr.org
beta2017.cjr.org
cjr.org
cjr.org
existential.cjr.org
archives2.cjr.org
cjr.org
cdn.cjr.org
cjr.org
cjr.org
galley.cjr.org
cdn.cjr.org
cjr.org
archives.cjr.org
beta2017.cjr.org
archives.cjr.org
www.cjr.org
archives.cjr.org
www.cjr.org
beta2017.cjr.org
beta2017.cjr.org
bathingpanda.com
sni.cloudflaressl.com
archives.cjr.org
archives.cjr.org
cdn.cjr.org
galley.cjr.org
www.cjr.org
archives.cjr.org
cjr.org
archives2.cjr.org
cjr.org
beta2017.cjr.org
beta.cjr.org
beta2017.cjr.org
beta2017.cjr.org
blog.yukarium.net
archives.cjr.org
www.cjr.org
www.dental-health-care.com
fonts.cjr.org
cjr.org
members.cjr.org
cjr.org
beta.cjr.org
fonts.cjr.org
beta2017.cjr.org
www.cjr.org
disinformation.cjr.org
Certificate
The complete raw certificate details for archives.cjr.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISA+nExw6B/AGFh6migGzyQZd+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjQwNTIyMTJaFw0y MDA0MjMwNTIyMTJaMBsxGTAXBgNVBAMTEGFyY2hpdmVzLmNqci5vcmcwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbCGE8jalsN7we7IMppH/bMhf1Wwo jFbSLkULu6cmJJW4nYMFx0pWfuvTcHXOqVj7s+CXXFsuxTMsXjNjVq4mxBMtqZ1Z QHeS0IBIIgGA3JWRry62yNUg82XK4GbcgeXyr1TnbtuXu88epWnApzuoAa9w165B koqNwCZLVnf5tjZudGBsmEw/984gfGFfnCTeNn4BvbilbvgjNSF6pOFSqKsJmHUP Iq8tf+xOeo6vcUk0dFvAXFxCAtQMHUE4p/E72rmfNjs857F1sPtdCHqTyVlPaQqQ wg8HFrBlO9DXZQd88r8pYcG129Ymx/zB4lPfSJS6qB8igUwpgARN1S29AgMBAAGj ggJ8MIICeDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNdtDavG3uFVJDY/dX46UmzO 3PyUMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wMQYDVR0RBCowKIIQYXJjaGl2ZXMuY2pyLm9yZ4IUd3d3LmFyY2hpdmVz LmNqci5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEE AdZ5AgQCBIH2BIHzAPEAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQ XgAAAW/WNxhfAAAEAwBHMEUCIAmJpXbvJNgtCFDW/QOL3Og2cubPI/Kh7PMKCaSc 51MrAiEAo3igPxCz3foFv5swChhlspHtalhOvRGVLNGzcFzaAMAAdwDwlaRZ8gDR gkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW/WNxxQAAAEAwBIMEYCIQCVGBeD 8OYfw9UtmweACNAxx6a4kQMUEPbNWGObH/OtDwIhAIHwD5DpNeBFffEtLlZtGSHf N3r1tGNzZpcpdEkd+Ep+MA0GCSqGSIb3DQEBCwUAA4IBAQBW3VBxNFTd3EzmErTv TxpOXXoW8Dif4DMOpdHd7XKnzO3jAuBL1DS+lHMW48Pth/QCIhHTW3DsAw92ZzdG +Y4kwFHV03FMYakWTjPk0hMKU0+V9yvh7hK7dFgQPb0do9u7Je88NKor+z+P0m5Q 9omfud4jj8qgA2qx0a7oAyZ2a5LOGODtlQrvoGCyQy6QvGvyG6f848YvGE0vzqB3 SQdh35BY4J4zdDh69SYhh+Xkw43x9BcPnJf7J67fktW1FfG4/gioC3EMXU21c+rN rBAk69X72G/PmzjvNzImfURpC2y6Wl3SkyJrEzxbFsN03P3gfrKk10KFoiPz9DA5 L4bQ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2whhPI2pbDe8HuyDKaR /2zIX9VsKIxW0i5FC7unJiSVuJ2DBcdKVn7r03B1zqlY+7Pgl1xbLsUzLF4zY1au JsQTLamdWUB3ktCASCIBgNyVka8utsjVIPNlyuBm3IHl8q9U527bl7vPHqVpwKc7 qAGvcNeuQZKKjcAmS1Z3+bY2bnRgbJhMP/fOIHxhX5wk3jZ+Ab24pW74IzUheqTh UqirCZh1DyKvLX/sTnqOr3FJNHRbwFxcQgLUDB1BOKfxO9q5nzY7POexdbD7XQh6 k8lZT2kKkMIPBxawZTvQ12UHfPK/KWHBtdvWJsf8weJT30iUuqgfIoFMKYAETdUt vQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340884211536360253346066765993718598178686 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 05:22:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-23 05:22:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'archives.cjr.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25174744039532799945736052859363322049160151393397017954024346235155895260691459802440776804117808606814610335232564042485799738818098038453565042996324731700521573248535586865560355963777461994262533548760442768596288199988536636490686189167093217998340667952735840352550513775742381907314318015225714188031692376469965327378895413694942141530913381411619696256996015770259911272001161053004187449422124385517152086734041972399911743414362595881626650540010183081703882135553368555325374108709583401220082663472702711600758120544915613709121806000239181975203117081717481725849570167413004552118673663898996182429117 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d76d0dabc6dee15524363f757e3a526ccedcfc94 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archives.cjr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archives.cjr.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fd637185f000004030047304502200989a576ef24d82d0850d6fd038bdce83672e6cf23f2a1ecf30a09a49ce7532b022100a378a03f10b3ddfa05bf9b300a1865b291ed6a584ebd11952cd1b3705cda00c0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fd6371c50000004030048304602210095181783f0e61fc3d52d9b078008d031c7a6b891031410f6cd58639b1ff3ad0f02210081f00f90e935e0457df12d2e566d1921df377af5b4637366972974491df84a7e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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