noviogroup.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d5:e7:a0:fb:e3:cd:c3:15:df:19:ad:1b:85:01:c2:3f:2a was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=noviogroup.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d5:e7:a0:fb:e3:cd:c3:15:df:19:ad:1b:85:01:c2:3f:2aSerial Number (int): 334124889492897597474772486071154020335402
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: fb:26:7c:85:f9:51:e7:3c:ad:66:c1:ed:91:58:e5:1f:3a:f5:9c:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a8:a9:98:0b:bb:99:cd:fc:f3:2a:33:92:bd:80:1a:13:f6:62:1c:23
Fingerprint (sha256): 83:76:97:d5:50:6c:90:e2:f5:60:5f:ce:2f:41:70:ac:79:8d:9c:92:31:80:c0:bb:84:86:3e:fa:bc:a0:45:50
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate noviogroup.com
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for noviogroup.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.noviogroup.com
cpanel.noviogroup.com
mail.noviogroup.com
noviogroup.com
webdisk.noviogroup.com
webmail.noviogroup.com
www.noviogroup.com
cpanel.noviogroup.com
mail.noviogroup.com
noviogroup.com
webdisk.noviogroup.com
webmail.noviogroup.com
www.noviogroup.com
Other certificates including the domain name noviogroup.com
(limited to 100 certificates)
suporte.delab.com.br
creative.noviogroup.com
creative.noviogroup.com
creative.noviogroup.com
noviogroup.com
noviogroup.com
creative.noviogroup.com
support.noviogroup.com
noviogroup.com
valdez.noviogroup.com
ayuda.adobedemandcenter.com
noviogroup.com
helpdesk.movingwalls.com
noviogroup.com
support.btech.ky
noviogroup.com
creative.noviogroup.com
devopssupport.bdoindia.net
spccomply-support.medicines.ie
ayuda.adobedemandcenter.com
suporte.delab.com.br
creative.noviogroup.com
noviogroup.com
creative.noviogroup.com
smb.noviogroup.com
ayuda.adobedemandcenter.com
helpdesk.movingwalls.com
helpdesk.movingwalls.com
noviogroup.com
mail.wavefront-research.com
creative.noviogroup.com
support.ahltv.com
spccomply-support.medicines.ie
support.itfl.services
support.ahltv.com
fracttal.eams-global.com
noviogroup.com
helpdesk.movingwalls.com
fracttal.eams-global.com
spccomply-support.medicines.ie
noviogroup.com
noviogroup.com
suporte.delab.com.br
helpdesk.movingwalls.com
noviogroup.com
helpdesk.movingwalls.com
noviogroup.com
creative.noviogroup.com
fracttal.eams-global.com
creative.noviogroup.com
creative.noviogroup.com
creative.noviogroup.com
noviogroup.com
noviogroup.com
creative.noviogroup.com
support.noviogroup.com
noviogroup.com
valdez.noviogroup.com
ayuda.adobedemandcenter.com
noviogroup.com
helpdesk.movingwalls.com
noviogroup.com
support.btech.ky
noviogroup.com
creative.noviogroup.com
devopssupport.bdoindia.net
spccomply-support.medicines.ie
ayuda.adobedemandcenter.com
suporte.delab.com.br
creative.noviogroup.com
noviogroup.com
creative.noviogroup.com
smb.noviogroup.com
ayuda.adobedemandcenter.com
helpdesk.movingwalls.com
helpdesk.movingwalls.com
noviogroup.com
mail.wavefront-research.com
creative.noviogroup.com
support.ahltv.com
spccomply-support.medicines.ie
support.itfl.services
support.ahltv.com
fracttal.eams-global.com
noviogroup.com
helpdesk.movingwalls.com
fracttal.eams-global.com
spccomply-support.medicines.ie
noviogroup.com
noviogroup.com
suporte.delab.com.br
helpdesk.movingwalls.com
noviogroup.com
helpdesk.movingwalls.com
noviogroup.com
creative.noviogroup.com
fracttal.eams-global.com
Certificate
The complete raw certificate details for noviogroup.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISA9XnoPvjzcMV3xmtG4UBwj8qMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTAxMzI3MzVaFw0y MDA1MTAxMzI3MzVaMBkxFzAVBgNVBAMTDm5vdmlvZ3JvdXAuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hu+VcHLya2tuUZwA9X1/Z14t8sw/+Xy IcQwLvQbVcAFQgTubcV+jBQjx/+29gLJ0EHHWrqM4ZKNqZW/pwvkfRl2sE21E/qa IM8pOQwG/CtXYDYUr0wewgaih677JI5m7UWQeke1Z2UH6IcMxw6PiBq5KGAv2M87 whRmWvP57o4QefhlDQGn3ZshlPZ0j5gCDCs403G/ZrNMUZNjOkZW4a+hgFmIMA1i jzksIr6G71S0tfiDpVCUL1LK3O5XFLQ2zXeK4voD0YVuwfdOKReZ306XjMQZrxP8 ikRJD1/VDUfi6QC2x3WRXgC+4ze4HyjOb13FddcqdZouZy6i87YwhQIDAQABo4IC 8zCCAu8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT7JnyF+VHnPK1mwe2RWOUfOvWc ujAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMIGoBgNVHREEgaAwgZ2CG2F1dG9kaXNjb3Zlci5ub3Zpb2dyb3VwLmNvbYIV Y3BhbmVsLm5vdmlvZ3JvdXAuY29tghNtYWlsLm5vdmlvZ3JvdXAuY29tgg5ub3Zp b2dyb3VwLmNvbYIWd2ViZGlzay5ub3Zpb2dyb3VwLmNvbYIWd2VibWFpbC5ub3Zp b2dyb3VwLmNvbYISd3d3Lm5vdmlvZ3JvdXAuY29tMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUA8JWkWfIA0YJA EC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFwL3+W4AAABAMARjBEAiAn6AvbEVsK v0j0f6zrwIWdapPpxC1+iv5neJKl2Sz1+QIgVxhsjfK/ml34fQ9uoTnz7Psmcdbw Y75gMJ029JCV4EAAdwAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAA AXAvf5cJAAAEAwBIMEYCIQDk98EzrjIAEAxj0Rb7LEjLIEbSFYWcILs7sR880vlu fgIhANPuOg/eQACVirexW1M2ZKTs5/f8Sb0TqRQ/MAISQIzHMA0GCSqGSIb3DQEB CwUAA4IBAQAGH2yYE0j0kTu2zuQuMGeqtWoAynkMfaheqBH8pMpsjmjexIufxODX 7hCYzCTtcByKgTfR5c1/essbgpB3MbZizaWC38XO8KR45fCj79Uy8cTHmPZu20CK jVX/BWk+kKG3JBEY3FX/rzqfdJuHQHPRvGM3vHCFfiquA384Jyn0Sknci8Lzp5VJ k767H38pW49qmD9btBa0o4CJwaNBXzWv1BMn1WvyDT+4TjxbsXZ2Mh+w/SodjNKO HVa4urS91h/2+W/9lIpdu/mYQeuj+eMYCIyGZsfTJmoHGHLMjOQOtbXTg0HF2T+D rIuy/khq1bAxgeaLsSJppZUGWNJnXJOR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hu+VcHLya2tuUZwA9X1 /Z14t8sw/+XyIcQwLvQbVcAFQgTubcV+jBQjx/+29gLJ0EHHWrqM4ZKNqZW/pwvk fRl2sE21E/qaIM8pOQwG/CtXYDYUr0wewgaih677JI5m7UWQeke1Z2UH6IcMxw6P iBq5KGAv2M87whRmWvP57o4QefhlDQGn3ZshlPZ0j5gCDCs403G/ZrNMUZNjOkZW 4a+hgFmIMA1ijzksIr6G71S0tfiDpVCUL1LK3O5XFLQ2zXeK4voD0YVuwfdOKReZ 306XjMQZrxP8ikRJD1/VDUfi6QC2x3WRXgC+4ze4HyjOb13FddcqdZouZy6i87Yw hQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 334124889492897597474772486071154020335402 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 13:27:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-10 13:27:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'noviogroup.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26523724870665119981773861032622607640122827570664210612501593552223477582496254322757950602755596470655193913637526495310257758523088899985275677203826229542367106207335292779983843316842010955467955436883604562842566546451574611564716495594794255149828339073367735068694578550941068469892483781776636908135903447686431641621560876880762215722133787124748081203769612828988736227552478037093659638805636523112532835265346064053987550745383587066694072973159308450667106436401862247656155170008499077995970092782485808598877877782402526447298776595206024166899288963941535039803427135432936296613546524205867127419013 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fb267c85f951e73cad66c1ed9158e51f3af59cba . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.noviogroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.noviogroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.noviogroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noviogroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.noviogroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.noviogroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noviogroup.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001702f7f96e00000040300463044022027e80bdb115b0abf48f47facebc0859d6a93e9c42d7e8afe677892a5d92cf5f9022057186c8df2bf9a5df87d0f6ea139f3ecfb2671d6f063be60309d36f49095e04000770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001702f7f97090000040300483046022100e4f7c133ae3200100c63d116fb2c48cb2046d215859c20bb3bb11f3cd2f96e7e022100d3ee3a0fde4000958ab7b15b533664a4ece7f7fc49bd13a9143f300212408cc7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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