halfmarathons.club
Issued by R3
About this certificate
This digital certificate with serial number 03:a2:be:b4:ed:5c:78:ae:97:69:d1:18:3e:1d:5b:31:cb:8d was issued on by Let's Encrypt.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=halfmarathons.club
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a2:be:b4:ed:5c:78:ae:97:69:d1:18:3e:1d:5b:31:cb:8dSerial Number (int): 316716093983363857591821941532070035704717
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 53:8d:5b:51:38:97:41:21:69:93:ed:99:99:bc:f9:cc:63:71:da:0f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): e7:0b:e4:da:7d:f6:89:6b:f9:10:d3:7b:80:2f:b0:60:70:ff:42:4d
Fingerprint (sha256): 88:8e:9b:3b:84:0b:e9:87:81:20:89:ca:35:3c:97:29:b7:86:5f:d2:a6:5e:9d:b1:4f:c2:e6:cd:f1:98:02:73
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate halfmarathons.club
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for halfmarathons.club
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
arbitrageur.fr
beelieveyoucan.com
epundit.in
getition.com
greatfitness.org
greenleecounty.com
groceryrabbit.com
halfmarathons.club
ideastreet.com
lindelllegaloffensefund.com
palmdesertrealtor.com
peptideasaplatform.com
purse.bdsmsecurity.com
realestateindustrynews.com
sexmoies.com
sue3.com
texasnetworksystems.com
tyrochristianpreschool.net
websitethumbnail.com
www.ivkerrville.com
beelieveyoucan.com
epundit.in
getition.com
greatfitness.org
greenleecounty.com
groceryrabbit.com
halfmarathons.club
ideastreet.com
lindelllegaloffensefund.com
palmdesertrealtor.com
peptideasaplatform.com
purse.bdsmsecurity.com
realestateindustrynews.com
sexmoies.com
sue3.com
texasnetworksystems.com
tyrochristianpreschool.net
websitethumbnail.com
www.ivkerrville.com
Other certificates including the domain name halfmarathons.club
(limited to 100 certificates)
halfmarathons.club
halfmarathons.club
halfmarathons.club
officeafter.com.baleis.com.halfmarathons.club
zkidsmusic.com.halfmarathons.club
discord-teespring.hacker.rehab
halfmarathons.club
halfmarathons.club
halfmarathons.club
halfmarathons.club
halfmarathons.club
halfmarathons.club
halfmarathons.club
halfmarathons.club
halfmarathons.club
halfmarathons.club
officeafter.com.baleis.com.halfmarathons.club
zkidsmusic.com.halfmarathons.club
discord-teespring.hacker.rehab
halfmarathons.club
halfmarathons.club
halfmarathons.club
halfmarathons.club
halfmarathons.club
halfmarathons.club
halfmarathons.club
halfmarathons.club
Certificate
The complete raw certificate details for halfmarathons.club in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgISA6K+tO1ceK6XadEYPh1bMcuNMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMjkxMTE0MTdaFw0yNDA1MjkxMTE0MTZaMB0xGzAZBgNVBAMT EmhhbGZtYXJhdGhvbnMuY2x1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFBDLpgWRZL7XikxSxQHnuIq6r4BvRo1B3lR75YPrSJQQEWVV6bfZklOXdE JdGtIfW2yaULwnlR49LwiEQQ44Gsbpsvs9J67i3veRET9HteQndSTxXgr/RKKTk1 0Z80kdElKw9elwfjNvaQv71XFKo7AlshCBK7uCiQqJRbWvm+YHN1hoSjL6anG/aF jq1cMyx3Hr/01QbXo7nd5gdaYQ8JvrnUXEPmWQ/s6VUPotJXR+PfhndFvVYDYCzT uXVRdxhMbJvVk3t2yT5qRhfwytleYsa/C9DrLVnfju0UjdMQ10Q0LITDwYOeklKn zO5Eh0tj971Fyr9vdfoo8DC/Cn0CAwEAAaOCA5gwggOUMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUU41bUTiXQSFpk+2Zmbz5zGNx2g8wHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wggGgBgNVHREEggGXMIIBk4IOYXJiaXRyYWdldXIuZnKCEmJlZWxpZXZl eW91Y2FuLmNvbYIKZXB1bmRpdC5pboIMZ2V0aXRpb24uY29tghBncmVhdGZpdG5l c3Mub3JnghJncmVlbmxlZWNvdW50eS5jb22CEWdyb2NlcnlyYWJiaXQuY29tghJo YWxmbWFyYXRob25zLmNsdWKCDmlkZWFzdHJlZXQuY29tghtsaW5kZWxsbGVnYWxv ZmZlbnNlZnVuZC5jb22CFXBhbG1kZXNlcnRyZWFsdG9yLmNvbYIWcGVwdGlkZWFz YXBsYXRmb3JtLmNvbYIWcHVyc2UuYmRzbXNlY3VyaXR5LmNvbYIacmVhbGVzdGF0 ZWluZHVzdHJ5bmV3cy5jb22CDHNleG1vaWVzLmNvbYIIc3VlMy5jb22CF3RleGFz bmV0d29ya3N5c3RlbXMuY29tghp0eXJvY2hyaXN0aWFucHJlc2Nob29sLm5ldIIU d2Vic2l0ZXRodW1ibmFpbC5jb22CE3d3dy5pdmtlcnJ2aWxsZS5jb20wEwYDVR0g BAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBIsONr2qZH NA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY30yWyRAAAEAwBHMEUCIFbbyY7f 88/xBTTLsbGxoK+g7HIcXAVNY/70Himo7zd5AiEAmYokzY5xcvHlkU47AsRDCRsJ Y/t6dOnwiklPkK1tds8AdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1 mwAAAY30yWyOAAAEAwBGMEQCIGyC6oS17QmZXVmiuxQRpHaxITQxi3JPV8t7HUcj 3uNIAiAceNBKdACdT27ytG1bHUvBlArdq2sLRjc/isEmAvSatTANBgkqhkiG9w0B AQsFAAOCAQEASaATLZzSZ7oZ3ph8G0ub/H5qQ/IoHxR+XmdAmm4jB25OwEj0LG0/ 90JfEl7ZLzckQhvU3RmifKfJcDNAWhk6bEwybGymJM0VNko/wMpXJwZ4/BwJFrpW QH5c/qjNPyYzEsxGnDzvOPm1yVBmGJQIR31PQfV8fZrW2nFpc/+HU9CIScTLzGNB z0+BnQFC0xsZXuE5HN6nzJnD8QCite9m1iytQsRDQI86KLJm9FWwIpDihAiSeKoR NtERthyczwNN9dAKyHPz+XgenSsOxPcmw5TBwtOJdeqXxD1AMnnLsZs0jlsXMPfE fn47P2IwiTA7yUdbXVu8FsKmkbseJGvXxQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUEMumBZFkvteKTFLFAe e4irqvgG9GjUHeVHvlg+tIlBARZVXpt9mSU5d0Ql0a0h9bbJpQvCeVHj0vCIRBDj gaxumy+z0nruLe95ERP0e15Cd1JPFeCv9EopOTXRnzSR0SUrD16XB+M29pC/vVcU qjsCWyEIEru4KJColFta+b5gc3WGhKMvpqcb9oWOrVwzLHcev/TVBtejud3mB1ph Dwm+udRcQ+ZZD+zpVQ+i0ldH49+Gd0W9VgNgLNO5dVF3GExsm9WTe3bJPmpGF/DK 2V5ixr8L0OstWd+O7RSN0xDXRDQshMPBg56SUqfM7kSHS2P3vUXKv291+ijwML8K fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316716093983363857591821941532070035704717 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 11:14:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 11:14:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'halfmarathons.club' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22376257190904958205027384743576804591689335103631171662638352435327613575426135381865329813007643268279360854796763951037537306504162249274918234048219639904575865805234161618895553041588753608445106153860130172216615566576538144836589368265054379711608368737430229811886062498633549585523477823356116074870186005076774899626501724597608701432494332779563341939124946369805408381591468379868239692761096186626455801015703702162546385765488513614487395231051330606846217172304113813301710898412378261135632076767022398222628421824241511712299954068069560319540966706161698667692702051952549974162875099880701799893629 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 538d5b51389741216993ed9999bcf9cc6371da0f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (407 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageur.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beelieveyoucan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epundit.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getition.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatfitness.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenleecounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groceryrabbit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfmarathons.club' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideastreet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindelllegaloffensefund.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmdesertrealtor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peptideasaplatform.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purse.bdsmsecurity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateindustrynews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexmoies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sue3.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasnetworksystems.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyrochristianpreschool.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websitethumbnail.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ivkerrville.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df4c96c910000040300473045022056dbc98edff3cff10534cbb1b1b1a0afa0ec721c5c054d63fef41e29a8ef3779022100998a24cd8e7172f1e5914e3b02c443091b0963fb7a74e9f08a494f90ad6d76cf007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018df4c96c8e000004030046304402206c82ea84b5ed09995d59a2bb1411a476b12134318b724f57cb7b1d4723dee34802201c78d04a74009d4f6ef2b46d5b1d4bc1940addab6b0b46373f8ac12602f49ab5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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