faq.ada.fr
Issued by R3
About this certificate
This digital certificate with serial number 03:9f:a7:21:25:06:8d:25:00:e9:7a:b6:b1:96:fc:4a:70:e8 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=faq.ada.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:9f:a7:21:25:06:8d:25:00:e9:7a:b6:b1:96:fc:4a:70:e8Serial Number (int): 315663907307770574661779399301628783390952
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1d:11:ef:94:1d:cd:3e:7f:f7:3a:74:1b:35:fb:00:1c:b4:26:d3:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 79:30:1e:8e:00:66:1f:a0:21:53:4b:6c:60:a5:48:f1:46:0e:6a:90
Fingerprint (sha256): 81:47:c1:6e:b8:f8:29:1b:5b:79:ff:c2:8e:df:47:c6:f0:2c:5b:17:4a:9e:39:8a:c1:ca:bd:f7:56:dc:40:2b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate faq.ada.fr
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for faq.ada.fr
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
faq.ada.fr
faq.moovin.paris
faq.moovin.paris
Other certificates including the domain name ada.fr
(limited to 100 certificates)
qr.hamrocounter.com
applicationmobile.ada.fr
www.ada.fr
avls.preprod.ada.fr
*.ada.fr
*.ada.fr
twitter.narxtech.com
my.ada.fr
applicationmobile.ada.fr
avls.preprod.ada.fr
www.ada.fr
www.ada.fr
faq.ada.fr
*.ada.fr
modularal.space
www.quote-machine.com
*.ada.fr
faq.ada.fr
modularal.space
altintopsarraf.com
www.so-vedant.in
franchise.ada.fr
faq.ada.fr
www.ada.fr
www.ada.fr
faq.ada.fr
chwarthur.com
avls.ada.fr
faq.ada.fr
franchise.ada.fr
faq.ada.fr
*.ada.fr
*.ada.fr
*.ada.fr
daysbymustafa.com
avls.preprod.ada.fr
ada.fr
faq.ada.fr
quickscan.stolwijkkelderman.nl
faq.ada.fr
app.organizedly.io
kijes.com
applicationmobile.ada.fr
quickscan.stolwijkkelderman.nl
franchise.ada.fr
www.ada.fr
*.ada.fr
recettage.autocerti.fr
my.ada.fr
transport.ada.fr
faq.ada.fr
www.ada.fr
avls.ada.fr
faq.ada.fr
*.ada.fr
faq.ada.fr
faq.ada.fr
family.seow.cloud
faq.ada.fr
faq.ada.fr
franchise.ada.fr
twitter.narxtech.com
applicationmobile.ada.fr
www.ada.fr
avls.preprod.ada.fr
*.ada.fr
*.ada.fr
twitter.narxtech.com
my.ada.fr
applicationmobile.ada.fr
avls.preprod.ada.fr
www.ada.fr
www.ada.fr
faq.ada.fr
*.ada.fr
modularal.space
www.quote-machine.com
*.ada.fr
faq.ada.fr
modularal.space
altintopsarraf.com
www.so-vedant.in
franchise.ada.fr
faq.ada.fr
www.ada.fr
www.ada.fr
faq.ada.fr
chwarthur.com
avls.ada.fr
faq.ada.fr
franchise.ada.fr
faq.ada.fr
*.ada.fr
*.ada.fr
*.ada.fr
daysbymustafa.com
avls.preprod.ada.fr
ada.fr
faq.ada.fr
quickscan.stolwijkkelderman.nl
faq.ada.fr
app.organizedly.io
kijes.com
applicationmobile.ada.fr
quickscan.stolwijkkelderman.nl
franchise.ada.fr
www.ada.fr
*.ada.fr
recettage.autocerti.fr
my.ada.fr
transport.ada.fr
faq.ada.fr
www.ada.fr
avls.ada.fr
faq.ada.fr
*.ada.fr
faq.ada.fr
faq.ada.fr
family.seow.cloud
faq.ada.fr
faq.ada.fr
franchise.ada.fr
twitter.narxtech.com
Certificate
The complete raw certificate details for faq.ada.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgISA5+nISUGjSUA6Xq2sZb8SnDoMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTUyMzQxMjVaFw0yNDA3MTQyMzQxMjRaMBUxEzARBgNVBAMT CmZhcS5hZGEuZnIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDCYaVM VsTJdoje5Z0I4XGOdEfpsDq79c/oofyKmCoFiddagyks8avVidqKhIiMIi/zE9c3 G9CkudURxzK+edywDFzVq94FvggRrRDdkqRH84gRvho37p40ZYMUPNE3rYG029eH Krs3bKRO82fVlCW1f6n+GlP5lsVRpUt9wcNIimLkZYoiMxyOeperK1Zjg6ViuuWQ tdkPIf7xe1PrOZ6gVbLF71I/jctemRG+OohCt7/4zIeSXGOW4P7DTXDZgA8M+mfc N0vu/FMzUaZXFEp0sjKM//bRX6v/jf9QhEQBCQQzOWnpSMESpISrgcLpkujl7Xir PVXYIOt2HCZDCL/W7BlSVxDmnYY6lnpZro0oyyqXKKFSeqz9xQb84X0Ji67n7/gK eTNJHSFm9yDrOml+mgoETfHXNwgcOflDYT1XE5nG1QC7rUOCnP6p3nq/S9lhaDtj e/2q+opwsFWMaQe9+FhhAtleWY7d6UQJYLce+UK9XCnoOq4FKPjWeZbXXd2KnuC/ 0um5eFaCC2xzqBVqDx0ML/alVIwYkgHWmQtUKMgnLtBS5pl1GNmzKFszgox2NaKS F2RcAQfzHn4s8AdxYeXl1Al29sOOrsmDRxcI4Et/0xAKhJUlbrR4w40f6V6GFJda TgUH5gClTdUVySGeUL1KWKCpqTGhBwxQysOJ8QIDAQABo4ICHjCCAhowDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBQdEe+UHc0+f/c6dBs1+wActCbTPTAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzAnBgNVHREEIDAeggpmYXEuYWRhLmZyghBmYXEubW9vdmlu LnBhcmlzMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGO5Fn6BQAA BAMASDBGAiEA3wuQJJaa7/V9YA3L9RKdfgUeKNjbQojndgegET8pc/oCIQC/UJm1 YCesNneT7FhDE6NHvcqQzIJLE4w6cjnjmVsQLAB1AN/hVuuqBa+1nA+GcY2owDJO rlbZbqf1pWoB0cE7vlJcAAABjuRZ+tEAAAQDAEYwRAIgGsMD3j7RIlvKwF7w31HU Fm4/3jpoWvvlESaQ/r88VC8CIAyjPpZ41nfc4SA/vsft4OMTKz7xhzy6airmE64l eseYMA0GCSqGSIb3DQEBCwUAA4IBAQCs++8ogVYV/JGmg2lhXpebreriB8hlZCfM EH9LrfX1aB3pbs3DUEOXUAlRIDT4Rs0d23Ih0L4b9OfVybnwZUa11SvPRyz704i6 aqUlT7ly8g8/YSm3UhnDsOUia8JJ+cI42q8qFXYLu3ku0M1bf9d/MTWKRVCDOJOO fbilrmLqqbNBFoBYRs+h8kDzD4n9npLZeFRnzxD+qXG2F6kgOofrFNQ/EyoeW5EM 6UUDFGpXXAsVXNoxCV1xFSM/FeOto0XprPDxjVtsOnwWkP9HfaGHhm1OwMJNLTcj qBk7QM77Cv60KXNSlfLtkCe59QPgImsJUALKtL7k5jXIIdbpJIAP -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwmGlTFbEyXaI3uWdCOFx jnRH6bA6u/XP6KH8ipgqBYnXWoMpLPGr1YnaioSIjCIv8xPXNxvQpLnVEccyvnnc sAxc1aveBb4IEa0Q3ZKkR/OIEb4aN+6eNGWDFDzRN62BtNvXhyq7N2ykTvNn1ZQl tX+p/hpT+ZbFUaVLfcHDSIpi5GWKIjMcjnqXqytWY4OlYrrlkLXZDyH+8XtT6zme oFWyxe9SP43LXpkRvjqIQre/+MyHklxjluD+w01w2YAPDPpn3DdL7vxTM1GmVxRK dLIyjP/20V+r/43/UIREAQkEMzlp6UjBEqSEq4HC6ZLo5e14qz1V2CDrdhwmQwi/ 1uwZUlcQ5p2GOpZ6Wa6NKMsqlyihUnqs/cUG/OF9CYuu5+/4CnkzSR0hZvcg6zpp fpoKBE3x1zcIHDn5Q2E9VxOZxtUAu61Dgpz+qd56v0vZYWg7Y3v9qvqKcLBVjGkH vfhYYQLZXlmO3elECWC3HvlCvVwp6DquBSj41nmW113dip7gv9LpuXhWggtsc6gV ag8dDC/2pVSMGJIB1pkLVCjIJy7QUuaZdRjZsyhbM4KMdjWikhdkXAEH8x5+LPAH cWHl5dQJdvbDjq7Jg0cXCOBLf9MQCoSVJW60eMONH+lehhSXWk4FB+YApU3VFckh nlC9SligqakxoQcMUMrDifECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 315663907307770574661779399301628783390952 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 23:41:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 23:41:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'faq.ada.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793007041714734292288262948820199522190792124003829291848738899550374215764682877371275898014044679267289683635033240828342848529622249740644208082247507693569402603674934039771987930674390109101750457028981678055024300222512388555121770156275022438091359009492020246738404024856984921174815490352351055127072795666057094885489882138976832793902071658675643180206818198093179708839293031761881682071965459441652732117786616952635468677933575821474164058889805323048421044555045932420544241741355282068687336059837628941177254227875453414321476921936876521380420432059478221075868515851167959578467279110332169268887603553810214917143894875219794490332453040481171783867874731153335642240083380033746994167604155327762196244729837406088814401551941352842660384270700998658913334243732504399184870153755703417061903171837262527911489176217068115291219960513273721857931066197092436932347726009649360471418099139829165582272221407533845434045415867053254605622235826837423586446407689354140706498737350150907345969461185488181323402275504903222695510443027094661962314766596085638034970337697684560972743641530014027868179103295780908153204680318765343728921930271975599076579303450892543174365565706555901671951591644830843128206559729 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1d11ef941dcd3e7ff73a741b35fb001cb426d33d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.ada.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.moovin.paris' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ee459fa050000040300483046022100df0b9024969aeff57d600dcbf5129d7e051e28d8db4288e77607a0113f2973fa022100bf5099b56027ac367793ec584313a347bdca90cc824b138c3a7239e3995b102c007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ee459fad1000004030046304402201ac303de3ed1225bcac05ef0df51d4166e3fde3a685afbe5112690febf3c542f02200ca33e9678d677dce1203fbec7ede0e3132b3ef1873cba6a2ae613ae257ac798 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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