www.lalive.law
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:7f:32:f0:6f:7a:04:2a:0a:82:90:6c:94:30:d5:29:27:f8 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.lalive.law
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:7f:32:f0:6f:7a:04:2a:0a:82:90:6c:94:30:d5:29:27:f8Serial Number (int): 304620428206289809548627835176878166583288
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 00:21:ff:1f:87:38:cd:11:c7:b9:6c:b4:74:28:a3:7b:f7:8a:cf:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 43:2e:92:24:71:73:5d:af:cb:ce:65:a5:57:ac:fc:2d:44:ad:90:98
Fingerprint (sha256): 7e:d7:a4:ab:9d:22:f8:29:a0:0c:98:b1:5e:c6:9d:69:86:f0:44:1b:b2:70:4d:47:0b:9c:f4:4a:e6:48:51:25
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.lalive.law
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.lalive.law
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
newsite.lalive.law
www.lalive.ch
www.lalive.law
www.lalive.ch
www.lalive.law
Other certificates including the domain name lalive.law
(limited to 100 certificates)
servicedesk.usspeaking.com
www.lalive.law
www.lalive.law
ithelpdesk.dccoilireland.com
helpdesk.hlnsc.ac.uk
servicedesk.usspeaking.com
servicedesk.hafenwien.com
itservice.wearebulletproof.com
servicedesk.lalive.law
*.lalive.law
servicedesk.kuits.com
www.lalive.law
servicedesk.lalive.law
ithelpdesk.ocubis.co.uk
*.lalive.law
ithelpdesk.dccoilireland.com
cau.sas-agri.com
servicedesk.vhg.co.uk
ithelpdesk.dccoilireland.com
www.lalive.law
www.lalive.law
ithelpdesk.dccoilireland.com
ithelpdesk.dccoilireland.com
servicedesk.lalive.law
servicedesk.hafenwien.com
portalgestion.gruposiete.es
*.lalive.law
ithelpdesk.dccoilireland.com
*.lalive.law
techsupport.mickgeorge.co.uk
www.lalive.law
servicedesk.kuits.com
*.lalive.law
ithelpdesk.dccoilireland.com
www.lalive.law
www.lalive.law
*.lalive.law
lalive.law
helpdesk.hlnsc.ac.uk
ithelpdesk.dccoilireland.com
helpdesk.usborne.co.uk
servicedesk.usspeaking.com
servicedesk.usspeaking.com
*.lalive.law
lalive.ch
*.lalive.law
www.lalive.law
servicedesk.fynbus.dk
ithelpdesk.ocubis.co.uk
ithelpdesk.ocubis.co.uk
*.lalive.law
staging2024.lalive.law
lalive.law
helpdesk.hlnsc.ac.uk
*.lalive.law
*.lalive.law
lalive.law
helpdesk.hlnsc.ac.uk
support.claytonglass.co.uk
itsupport.clinisys.com
servicedesk.lalive.law
www.lalive.law
ithelpdesk.ocubis.co.uk
www.lalive.law
www.lalive.law
ithelpdesk.dccoilireland.com
helpdesk.hlnsc.ac.uk
servicedesk.usspeaking.com
servicedesk.hafenwien.com
itservice.wearebulletproof.com
servicedesk.lalive.law
*.lalive.law
servicedesk.kuits.com
www.lalive.law
servicedesk.lalive.law
ithelpdesk.ocubis.co.uk
*.lalive.law
ithelpdesk.dccoilireland.com
cau.sas-agri.com
servicedesk.vhg.co.uk
ithelpdesk.dccoilireland.com
www.lalive.law
www.lalive.law
ithelpdesk.dccoilireland.com
ithelpdesk.dccoilireland.com
servicedesk.lalive.law
servicedesk.hafenwien.com
portalgestion.gruposiete.es
*.lalive.law
ithelpdesk.dccoilireland.com
*.lalive.law
techsupport.mickgeorge.co.uk
www.lalive.law
servicedesk.kuits.com
*.lalive.law
ithelpdesk.dccoilireland.com
www.lalive.law
www.lalive.law
*.lalive.law
lalive.law
helpdesk.hlnsc.ac.uk
ithelpdesk.dccoilireland.com
helpdesk.usborne.co.uk
servicedesk.usspeaking.com
servicedesk.usspeaking.com
*.lalive.law
lalive.ch
*.lalive.law
www.lalive.law
servicedesk.fynbus.dk
ithelpdesk.ocubis.co.uk
ithelpdesk.ocubis.co.uk
*.lalive.law
staging2024.lalive.law
lalive.law
helpdesk.hlnsc.ac.uk
*.lalive.law
*.lalive.law
lalive.law
helpdesk.hlnsc.ac.uk
support.claytonglass.co.uk
itsupport.clinisys.com
servicedesk.lalive.law
www.lalive.law
ithelpdesk.ocubis.co.uk
Certificate
The complete raw certificate details for www.lalive.law in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISA38y8G96BCoKgpBslDDVKSf4MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMTcwMjQ5MjJaFw0x OTAzMTcwMjQ5MjJaMBkxFzAVBgNVBAMTDnd3dy5sYWxpdmUubGF3MIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuomvHOxTta05GIXIB3U9ubr5jEP43dw hc+AhHFasLZg/h+9f7I0WmaFnWaAeYS31EN2DcY+LVPHUSuPjQnbhkLim1FfM2d+ G5JdB5tXhnrECnQ+xaZ2+7yqcMNfdKkRRS+atBs6jBvhGH9RqNwjBLXukN8e5gCm stFY1YI74+vbBFxZUfAySqUI3Anp7TFS1x6GIstwoMuyXDy1d5HcBlc3NwnCOuQx DCGzfnbEI5OZPCnteFo6tCa1dw8ogsQm/ZqZBsqDrdyrvTJlBGu6e1FIn7WRQhQ1 qijjmOf8zvGB/Wsp+TqyHDZaR6rwsS6T0xlfQfR/QszJDOrPsTI2xQIDAQABo4IC hjCCAoIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQAIf8fhzjNEce5bLR0KKN794rP cTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMDwGA1UdEQQ1MDOCEm5ld3NpdGUubGFsaXZlLmxhd4INd3d3LmxhbGl2ZS5j aIIOd3d3LmxhbGl2ZS5sYXcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIg CMY3NXnmEHvMVgAAAWe6SFZGAAAEAwBGMEQCIGkCGFueC9fRrHmUcmzyP+MsNzCK osCmonphOdZSWLXqAiA2cBoCwBPrBbofUJfXX4DQqbIXfzfJT/Osjn5SkaHDcQB3 AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABZ7pIVqsAAAQDAEgw RgIhALoh32o5nA/H/72sinkHHWONOoBOpr7t0WAyhs9bjUOEAiEAsYtGQrWrcFzB nYZfbQkQBjNt8mgPTqrV2NmC2jYefrwwDQYJKoZIhvcNAQELBQADggEBAE5hIkvB Yh/baDWdYMuPcwsc6I9HCkKYG1M1n8b+YEmj2Za6gNlyEqWb7r1DVi+HIyKsnUpi OWs63AhcmJ03W9sOrP40WtVKMmlOWBY07QtbcaFvm6wSZn2Sg6NtI+r77KJOvXIX lHQXqS13Fy1QCgJPZVnv4UQoN5ghm0Bh1QrqrMxIPg2oGpjHIbDJLzqYdzEefajW YfYWHImomP3BKnEQ5iKCmdLa7w3GPTeyI7iYNVPxdfHaYO61I6y+BJLEn7YAzT3Z ORd/uBM2hVC3tenEDpXWnVDk1+Ck3NuXx/c45CIEpGj+hh6XTxYKo7SfO0cRUqAM FH5HLUHHm7BT9AI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuomvHOxTta05GIXIB3U 9ubr5jEP43dwhc+AhHFasLZg/h+9f7I0WmaFnWaAeYS31EN2DcY+LVPHUSuPjQnb hkLim1FfM2d+G5JdB5tXhnrECnQ+xaZ2+7yqcMNfdKkRRS+atBs6jBvhGH9RqNwj BLXukN8e5gCmstFY1YI74+vbBFxZUfAySqUI3Anp7TFS1x6GIstwoMuyXDy1d5Hc Blc3NwnCOuQxDCGzfnbEI5OZPCnteFo6tCa1dw8ogsQm/ZqZBsqDrdyrvTJlBGu6 e1FIn7WRQhQ1qijjmOf8zvGB/Wsp+TqyHDZaR6rwsS6T0xlfQfR/QszJDOrPsTI2 xQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 304620428206289809548627835176878166583288 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-17 02:49:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-17 02:49:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lalive.law' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23595789039564937971188800917548002754341677168742333654042935283482740274140416440251131605592579517767829664654182478829970285669124495999265238078573816594972295383181224912754239303682038942772227859845590741820504679474223064423639409823820654334813613110782076248487194328479675466180946813455444073330834206482366363392675934817794697210634483383576434430699460341009047522775411107881977459531781006567569741477572368199190511277590705165516714440981982824097483209403359504243866890015253494038343998205925383562786445668035002954401223189905355345705234199755297994618226105693881542979270463859303751235269 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0021ff1f8738cd11c7b96cb47428a37bf78acf71 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsite.lalive.law' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lalive.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lalive.law' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167ba485646000004030046304402206902185b9e0bd7d1ac7994726cf23fe32c37308aa2c0a6a27a6139d65258b5ea022036701a02c013eb05ba1f5097d75f80d0a9b2177f37c94ff3ac8e7e5291a1c37100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167ba4856ab0000040300483046022100ba21df6a399c0fc7ffbdac8a79071d638d3a804ea6beedd1603286cf5b8d4384022100b18b4642b5ab705cc19d865f6d091006336df2680f4eaad5d8d982da361e7ebc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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