tw.genelife.asia
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:13:64:c5:eb:88:8c:53:47:b7:54:fe:74:f7:c6:17:1f:96 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tw.genelife.asia
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:13:64:c5:eb:88:8c:53:47:b7:54:fe:74:f7:c6:17:1f:96Serial Number (int): 267936173226022909234979432037159930371990
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: db:6f:66:68:a7:5f:b5:02:0c:df:f3:d6:b9:89:71:45:0d:22:67:18
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 86:92:40:77:f3:ae:9b:26:fe:ad:d8:f1:01:ae:c9:71:2c:6d:a7:c1
Fingerprint (sha256): 81:8b:a3:15:88:4b:3c:f5:c1:c8:18:24:0d:97:5a:92:2b:7c:67:ad:31:fd:53:14:b2:9c:06:d0:c6:4d:67:36
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate tw.genelife.asia
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tw.genelife.asia
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tw.genelife.asia
Other certificates including the domain name genelife.asia
(limited to 100 certificates)
twblog.genelife.asia
www.genelife.asia
sgshop.genelife.asia
sgshop.genelife.asia
tw.genelife.asia
www.genelife.asia
sgshop.genelife.asia
sgshop.genelife.asia
shop.genelife.asia
sgshop.genelife.asia
sgshop.genelife.asia
twblog.genelife.asia
sgshop.genelife.asia
www.genelife.asia
sgshop.genelife.asia
twblog.genelife.asia
twblog.genelife.asia
tw.genelife.asia
www.genelife.asia
twblog.genelife.asia
www.genelife.asia
tw.genelife.asia
*.genelife.asia
tw.genelife.asia
sgshop.genelife.asia
*.genelife.asia
tw.genelife.asia
twblog.genelife.asia
twblog.genelife.asia
twblog.genelife.asia
tw.genelife.asia
twblog.genelife.asia
shop.genelife.asia
sgshop.genelife.asia
tw.genelife.asia
*.genelife.asia
genelife.asia
*.genelife.asia
tw.genelife.asia
tw.genelife.asia
www.genelife.asia
www.genelife.asia
twblog.genelife.asia
sgshop.genelife.asia
genelife.asia
tw.genelife.asia
twblog.genelife.asia
twblog.genelife.asia
genelife.asia
tw.genelife.asia
*.genelife.asia
sgshop.genelife.asia
www.genelife.asia
sgshop.genelife.asia
sgshop.genelife.asia
tw.genelife.asia
www.genelife.asia
sgshop.genelife.asia
sgshop.genelife.asia
shop.genelife.asia
sgshop.genelife.asia
sgshop.genelife.asia
twblog.genelife.asia
sgshop.genelife.asia
www.genelife.asia
sgshop.genelife.asia
twblog.genelife.asia
twblog.genelife.asia
tw.genelife.asia
www.genelife.asia
twblog.genelife.asia
www.genelife.asia
tw.genelife.asia
*.genelife.asia
tw.genelife.asia
sgshop.genelife.asia
*.genelife.asia
tw.genelife.asia
twblog.genelife.asia
twblog.genelife.asia
twblog.genelife.asia
tw.genelife.asia
twblog.genelife.asia
shop.genelife.asia
sgshop.genelife.asia
tw.genelife.asia
*.genelife.asia
genelife.asia
*.genelife.asia
tw.genelife.asia
tw.genelife.asia
www.genelife.asia
www.genelife.asia
twblog.genelife.asia
sgshop.genelife.asia
genelife.asia
tw.genelife.asia
twblog.genelife.asia
twblog.genelife.asia
genelife.asia
tw.genelife.asia
*.genelife.asia
sgshop.genelife.asia
Certificate
The complete raw certificate details for tw.genelife.asia in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgISAxNkxeuIjFNHt1T+dPfGFx+WMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjEyMjAyNTlaFw0x OTExMTkyMjAyNTlaMBsxGTAXBgNVBAMTEHR3LmdlbmVsaWZlLmFzaWEwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDL3MkaEs4XZ38D/2XfY5TsJKECH9EJ enicDCxPH7Ys2BoYeVy3mr82+1NyiIYYKGjTc5F71gX6diqeOWljy09N/gXKLl+a RzihvS7Me29nGT2HyIfyOCiqEk4GsiZBon7ETnenSeMovIh/7pifoceOFmuKQtxq y/G4pC6MnMmosoMLZle8mTGXQnG5f9rkefKCFdwyxfUNJFP0ZX24A2LwEmdT2zbw rNCJUldCNz1pPq2vUz0Kflr+0Amf0x/sN+CpCbB78slp2ukGNBERxIjAPE9oVhpz oKMTLXYZerTmm4wEG8scEIYHeHqchYIDtGBX5myTUYfNTt34Y1qa/jtV5/uV3AMK wSf9Wq9Vif1r7Fx6Y8X2ydFCoJW6xmmtOHteL6u9P8Ce/J5p1pliB9NrupSbi6Uv 75hWgLdcEFzsWiMVNjGZHkoKeYujUJoKmmAL7Uu/5MlsMxK6Npi15ZPnHQHvJWQL XW49YPEyQmecQLU6l+ez+r5HfFs2Pprk37ruCA6TCPcBz5TBHUvKmRWN3J+uBrdN lzlR3zhQnF6xsS2Un3QZ4d8ieBk77bmtzlJGlm4Zx6Z+ouTRErsovHf0Qd5LbURY ShZR27+26EO0IDlbjrsYH80t0tMLZEQN71PX03+7PNClPgyRcNXUyt4kVOqACZEf +fFM7RP2BbkkwwIDAQABo4ICZjCCAmIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTb b2Zop1+1Agzf89a5iXFFDSJnGDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHR3LmdlbmVsaWZlLmFz aWEwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC BIH2BIHzAPEAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWy2 a0X3AAAEAwBHMEUCIQCIheUKBc+8VmgKkmlTc5wxoqjaUGFk4ErII8uZXqSQTAIg RYTEAXh5CWuud1SKr1lzSgfiwZRUYUfZBnM/yEJCevAAdwBj8tvN6DvMLM8LcoQn V2szpI1hd4+9daY4scdoVEvYjQAAAWy2a0fbAAAEAwBIMEYCIQC5kSnQiPeAxach fQXu0WAKQgr/fw9rhvZN2StZK0vr9gIhAKlty1vj2by/kBI28iu5p+SD5MCCddWr 6iKcF5SpIQcbMA0GCSqGSIb3DQEBCwUAA4IBAQATHsWzd//TK9ErC0JJcfCO3xkZ 0k0bq99rloiOnQeUjAy9JgxV2GNRoiIB8/vZVgI98MXzlx+OauYao5c2vZQJ2Ybf vCTb3MLhiS9ijGp9jNZgEAyk+lSc+CuVmqDWOFNv/min7+VPq0pgxF4f/x8ReEAP RBkH3uz2OC473ysHcQtgkHcXUPsTgslaVCYBABMfwh+/jjMpSpo601fytVlLRHVE CSAvxV0bYfaXINlYOGMVupix+5h7b2L+K0biDHpWbSoXmilrzSUmioe1BpAElxD7 m8uTbCGyVgyG+gY3Y7MpEjryZo9TVUR2fBNLwMzZA2jw5PgYAnfXPgXNcc5Y -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy9zJGhLOF2d/A/9l32OU 7CShAh/RCXp4nAwsTx+2LNgaGHlct5q/NvtTcoiGGCho03ORe9YF+nYqnjlpY8tP Tf4Fyi5fmkc4ob0uzHtvZxk9h8iH8jgoqhJOBrImQaJ+xE53p0njKLyIf+6Yn6HH jhZrikLcasvxuKQujJzJqLKDC2ZXvJkxl0JxuX/a5HnyghXcMsX1DSRT9GV9uANi 8BJnU9s28KzQiVJXQjc9aT6tr1M9Cn5a/tAJn9Mf7DfgqQmwe/LJadrpBjQREcSI wDxPaFYac6CjEy12GXq05puMBBvLHBCGB3h6nIWCA7RgV+Zsk1GHzU7d+GNamv47 Vef7ldwDCsEn/VqvVYn9a+xcemPF9snRQqCVusZprTh7Xi+rvT/AnvyeadaZYgfT a7qUm4ulL++YVoC3XBBc7FojFTYxmR5KCnmLo1CaCppgC+1Lv+TJbDMSujaYteWT 5x0B7yVkC11uPWDxMkJnnEC1Opfns/q+R3xbNj6a5N+67ggOkwj3Ac+UwR1LypkV jdyfrga3TZc5Ud84UJxesbEtlJ90GeHfIngZO+25rc5SRpZuGcemfqLk0RK7KLx3 9EHeS21EWEoWUdu/tuhDtCA5W467GB/NLdLTC2REDe9T19N/uzzQpT4MkXDV1Mre JFTqgAmRH/nxTO0T9gW5JMMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 267936173226022909234979432037159930371990 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-21 22:02:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 22:02:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tw.genelife.asia' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831686208605297055123948977371278251776431839388566549356829065086043352661141896072636452458243840206035828683875280625857787652556387566171736486112270525158381870257876456596395533637858139342572579509215012858066718562289240276508173415238953429422527969753293497082683802476488831617992863956280551975722512042497546036715238183728258958918215411137121800842918059800492918549237451557466707929601188752448251367179015990237909929207743737285001211431906199675032395253950824630786646066670299383582700065371329588154925453481321875678092098871727311175622478367533718519388626875412410987863060706239939375904826788161974975400815142068983624786337697472024381528878473825720449985026126681927484576890238213947260482467425540408645534353123663265055631404454088831644046527293027609745532476372347083329441099076520296023132216840269586074721017707671226305761027778615654483656228961395843084543242456233153324377863860346577618509416057796791208111288826250606736549143805487652199135464819969480379208882414266756345086337347897774368551252619269857109277081471704293207284285167196582527950208820076878067681162756427863160030529825101981101568644870947689489764997351460188816512646993238517812783901900200759306042811587 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) db6f6668a75fb5020cdff3d6b98971450d226718 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.genelife.asia' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cb66b45f700000403004730450221008885e50a05cfbc56680a926953739c31a2a8da506164e04ac823cb995ea4904c02204584c4017879096bae77548aaf59734a07e2c194546147d906733fc842427af000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cb66b47db0000040300483046022100b99129d088f780c5a7217d05eed1600a420aff7f0f6b86f64dd92b592b4bebf6022100a96dcb5be3d9bcbf901236f22bb9a7e483e4c08275d5abea229c1794a921071b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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