vwv.co.za
Issued by R3
About this certificate
This digital certificate with serial number 04:67:8f:08:e6:fc:fd:2e:88:3a:15:39:7f:28:28:1c:0e:bf was issued on by Let's Encrypt.
With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=vwv.co.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:67:8f:08:e6:fc:fd:2e:88:3a:15:39:7f:28:28:1c:0e:bfSerial Number (int): 383688353346667821326534050605869595102911
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: be:82:96:8e:c3:b7:1b:71:9b:b5:cb:f5:cc:b0:de:05:de:cd:d8:33
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 57:71:a9:6f:fd:ab:bf:9c:7b:4c:08:17:ea:1f:44:c1:58:e5:da:a3
Fingerprint (sha256): 86:0b:80:14:a3:27:d7:6c:e7:6a:d4:c3:32:65:f5:92:49:25:70:eb:69:9d:35:0a:a9:d2:21:5e:9b:99:6b:39
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate vwv.co.za
23
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vwv.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blackfemdom.com
canadalegalforms.com
enrightforcoroner.com
extravirginitea.com
fmcap.vc
healthyhomebaths.com
hospitalforvip.com
illinoisbankruptcyattorneys.com
intelligentfoodchoices.com
jdf.co.in
profit-from-inflation.com
recurvecrossbow.com
redrivercounty.com
rfidexperts.com
sanborncounty.com
sellyourcarhere.com
southernutahwellness.com
stpatricksgala.com
topsummercamps.com
usedlithium.com
vwv.co.za
wakeshma.com
yourchurchsolutions.com
canadalegalforms.com
enrightforcoroner.com
extravirginitea.com
fmcap.vc
healthyhomebaths.com
hospitalforvip.com
illinoisbankruptcyattorneys.com
intelligentfoodchoices.com
jdf.co.in
profit-from-inflation.com
recurvecrossbow.com
redrivercounty.com
rfidexperts.com
sanborncounty.com
sellyourcarhere.com
southernutahwellness.com
stpatricksgala.com
topsummercamps.com
usedlithium.com
vwv.co.za
wakeshma.com
yourchurchsolutions.com
Other certificates including the domain name vwv.co.za
(limited to 100 certificates)
Certificate
The complete raw certificate details for vwv.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgISBGePCOb8/S6IOhU5fygoHA6/MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMjUyMjI4NDdaFw0yNDA0MjQyMjI4NDZaMBQxEjAQBgNVBAMT CXZ3di5jby56YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK+V81Fr /edfKQXQDkRLKNg2EC/+B4VUVNwOcKA2hfsM/vagaf/YrwWPKyNv6boUXrFcE5QP M1gewY6LRQx2YzahuCsUhRPzU2kwo7UNWEsMRzI07ibAAQVYoU4UvHNkAVbDH9bz RKHRUJtdyYXQhhx93sMc0WSHk6km0wn5+zGtlpENgGBRb+9Lqfj+wDTA26Z/gvzL VmER397qNbaV4Fa05Rp26xiz3tc0OSDkMQ4Uk5CehLMRDv0ysCg9ydEgUjFNkKdm TMRICYFmg3F9lzw3/29M6GdKZGQl/LX5+5PzsazW4u3FmVD7px0UN+Pie+s0LjWv fxIFY1olUCKUs20CAwEAAaOCA9YwggPSMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU voKWjsO3G3Gbtcv1zLDeBd7N2DMwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggHe BgNVHREEggHVMIIB0YIPYmxhY2tmZW1kb20uY29tghRjYW5hZGFsZWdhbGZvcm1z LmNvbYIVZW5yaWdodGZvcmNvcm9uZXIuY29tghNleHRyYXZpcmdpbml0ZWEuY29t gghmbWNhcC52Y4IUaGVhbHRoeWhvbWViYXRocy5jb22CEmhvc3BpdGFsZm9ydmlw LmNvbYIfaWxsaW5vaXNiYW5rcnVwdGN5YXR0b3JuZXlzLmNvbYIaaW50ZWxsaWdl bnRmb29kY2hvaWNlcy5jb22CCWpkZi5jby5pboIZcHJvZml0LWZyb20taW5mbGF0 aW9uLmNvbYITcmVjdXJ2ZWNyb3NzYm93LmNvbYIScmVkcml2ZXJjb3VudHkuY29t gg9yZmlkZXhwZXJ0cy5jb22CEXNhbmJvcm5jb3VudHkuY29tghNzZWxseW91cmNh cmhlcmUuY29tghhzb3V0aGVybnV0YWh3ZWxsbmVzcy5jb22CEnN0cGF0cmlja3Nn YWxhLmNvbYISdG9wc3VtbWVyY2FtcHMuY29tgg91c2VkbGl0aGl1bS5jb22CCXZ3 di5jby56YYIMd2FrZXNobWEuY29tghd5b3VyY2h1cmNoc29sdXRpb25zLmNvbTAT BgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AEiw 42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjUL0XvkAAAQDAEcwRQIh ALPo/fo3uYptK1yFLOlsmM67SeMnyWPQT23H4yoepkoyAiARGcRcmwooF8TUd/Dk opbMsUk0OgwFVeZSEe34Zdx5FAB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0t cm/h+tQXAAABjUL0XwIAAAQDAEYwRAIgNcp8hS8OjGK1qiJCFRg/OIEi/sFKUicQ BM6cWziXoS8CIFhmCeE0TlOLHKtGBbotGH+giMxwEMjOzKkew9iyD34UMA0GCSqG SIb3DQEBCwUAA4IBAQCL37oQaSCS0DbjWWKSe7uvZnOLvFIUJhqaL8mxuqJriwJ1 T6ekJuN42F/5O381eTa9KoInWEif3Fjx9IlaR61AlwYmhi2NPT4V++71YJ3wOCJA o1yTHQLHInkmHm4SXwnQcfntHZMwO77uW3DHMuEdGXBGp1dEksoLhazemN6p8wXi 32L1TBxO+ROBvN9PRwl0jS2fxcT2/gWWCBoZA8BGmmtT0lSVNQzGoD5AtQwVLSUu MwHs9PBb4k2eBrbcZslquH3rBzsY81eyIm9qvEFNcFeytQHnW2dDSGusNOTJS36t ezUBljb83lSZ+ea/V8kmBK9qjFI7pLWY8zRpC9VB -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5XzUWv9518pBdAOREso 2DYQL/4HhVRU3A5woDaF+wz+9qBp/9ivBY8rI2/puhResVwTlA8zWB7BjotFDHZj NqG4KxSFE/NTaTCjtQ1YSwxHMjTuJsABBVihThS8c2QBVsMf1vNEodFQm13JhdCG HH3ewxzRZIeTqSbTCfn7Ma2WkQ2AYFFv70up+P7ANMDbpn+C/MtWYRHf3uo1tpXg VrTlGnbrGLPe1zQ5IOQxDhSTkJ6EsxEO/TKwKD3J0SBSMU2Qp2ZMxEgJgWaDcX2X PDf/b0zoZ0pkZCX8tfn7k/OxrNbi7cWZUPunHRQ34+J76zQuNa9/EgVjWiVQIpSz bQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 383688353346667821326534050605869595102911 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 22:28:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 22:28:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vwv.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22165646697358283133857978310667830393316897118874316739866548804754067018085970391014994797206486345032555221468703412554543919917820618647992924749885041363878211590700775130834592506655173486724456551290275134263516321730546755679743135436626632193767431783952847703093333920715296262249102279254893490058851234078512189720854259873388731231400264267944883358754179932456390846311161199285513631190376828977686437746446317155475337860339936463504774119304812218620113774186843438285896227483805930681376586714613341282864248027267416207562931926815913276206940163767255360805209346802527344073735515219550734168941 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) be82968ec3b71b719bb5cbf5ccb0de05decdd833 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (469 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackfemdom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadalegalforms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrightforcoroner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extravirginitea.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmcap.vc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomebaths.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospitalforvip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoisbankruptcyattorneys.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligentfoodchoices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdf.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profit-from-inflation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recurvecrossbow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redrivercounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfidexperts.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanborncounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellyourcarhere.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernutahwellness.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatricksgala.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsummercamps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedlithium.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwv.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakeshma.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourchurchsolutions.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d42f45ef90000040300473045022100b3e8fdfa37b98a6d2b5c852ce96c98cebb49e327c963d04f6dc7e32a1ea64a3202201119c45c9b0a2817c4d477f0e4a296ccb149343a0c0555e65211edf865dc79140075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d42f45f020000040300463044022035ca7c852f0e8c62b5aa224215183f388122fec14a52271004ce9c5b3897a12f0220586609e1344e538b1cab4605ba2d187fa088cc7010c8cecca91ec3d8b20f7e14 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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