cresicor.ai
Issued by R3
About this certificate
This digital certificate with serial number 04:38:b3:3b:9b:46:84:b7:2c:45:0f:70:dc:48:c0:5f:57:3e was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cresicor.ai
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:38:b3:3b:9b:46:84:b7:2c:45:0f:70:dc:48:c0:5f:57:3eSerial Number (int): 367743197580734227442311330377629274429246
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 50:5b:11:cf:d1:46:36:12:2f:7f:1a:b7:3d:8e:26:53:28:36:17:d0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 0c:a6:a5:37:71:1b:5e:79:b1:a5:6e:97:7b:6c:a7:df:b2:97:aa:0c
Fingerprint (sha256): 8b:c8:31:c9:33:d9:32:61:ae:ff:55:61:8b:e3:1a:6d:12:ff:de:ec:bd:1a:d9:5b:03:60:35:1a:df:8c:a6:f8
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate cresicor.ai
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cresicor.ai
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cresicor.ai
Other certificates including the domain name cresicor.ai
(limited to 100 certificates)
feed.marksmen.nl
app.ecotank-pro.com
hatechs.com
skanujijedz.pl
portal.lastplanet.org
staging.kegtracker.co.za
fb1.wiecko.com
vocab.hwilson.dev
jigsawpuzzledeluxe.games235.com
web-dev412.lychee.pro
saarvi.estore.business
analytics-dev.cresicor.ai
www.a2ktechnologies.com
www.marcotolk.nl
my.northstar.ai
praetoriansecurity.adeptly.ai
staging.artometa.ai
hlasovani.socialawards.cz
tienda.dressy.cl
felipe.resende.app
tuttandcarroll.com
praetoriansecurity.adeptly.ai
playground.aripuca.com
university.cresicor.ai
www.arcadeblock.games
valbobadilla.com
vc.coza.org.ng
worthlesss.com
portals.tracker-apps.com
dev-frame.sandbox.realifetech.com
www.picca.app
bitmunchlab.com
scanning.cresicor.ai
www.picu.ge
beta.cresicor.ai
lax-cms-qa.itxi.aero
www.outofmana.be
www.konradstrack.ninja
nz.creatoradar.com
scanning-dev.cresicor.ai
appplepi.com
www.nieuwetijden.tv
cms.ondamx.art
www.acesseimoveis.imb.br
deseasdinero.mx
cresicor.ai
www.malouskusina.com
www.mikeheddes.nl
app.mcip.ml
catalog-dev.solutionmag.cloud
www.metropolique.com
eeclub.jp
www.i4uautomation.com
www.nieuwetijden.tv
www.jayyn.xyz
stte.app
24h.socolive01.tv
shema.bg
emelle.me
capgeminitechchallenge2021.com
bitmunchlab.com
thinvite.app
chqatpjgjx.device.sighub.io
cresicor.ai
app.chkfake.in
collection-films.org.ua
24ok-asia.com
alpha.cresicor.ai
scanning-dev.cresicor.ai
bradysutton.net
tienda.dressy.cl
capacity.parade.ai
www.avionaccounting.com
guide.skhomebuyersguide.ca
www.cresicor.ai
cresicor.ai
casablancalawnservice.com
25secondscreative.com
cms.ondamx.art
register.goodmooddudes.com
somosverdeyblanco.com
cresicor.ai
feed.marksmen.nl
auth.innovationcrib.be
portal.cresicor.ai
app.umkamall.ru
my.northstar.ai
grood.app
fblog.ge
opcom-advisor.cdp.adeo.cloud
smynd.at
m.abinpc.com
truck.brightq.com
www.heebin.shop
tugutaholiday.com
cresicor.ai
web.hairyuu-dojo.com.ar
leadgeneratorbot.com
instore-test.blvrd.de
dmself.shipr.tech
app.ecotank-pro.com
hatechs.com
skanujijedz.pl
portal.lastplanet.org
staging.kegtracker.co.za
fb1.wiecko.com
vocab.hwilson.dev
jigsawpuzzledeluxe.games235.com
web-dev412.lychee.pro
saarvi.estore.business
analytics-dev.cresicor.ai
www.a2ktechnologies.com
www.marcotolk.nl
my.northstar.ai
praetoriansecurity.adeptly.ai
staging.artometa.ai
hlasovani.socialawards.cz
tienda.dressy.cl
felipe.resende.app
tuttandcarroll.com
praetoriansecurity.adeptly.ai
playground.aripuca.com
university.cresicor.ai
www.arcadeblock.games
valbobadilla.com
vc.coza.org.ng
worthlesss.com
portals.tracker-apps.com
dev-frame.sandbox.realifetech.com
www.picca.app
bitmunchlab.com
scanning.cresicor.ai
www.picu.ge
beta.cresicor.ai
lax-cms-qa.itxi.aero
www.outofmana.be
www.konradstrack.ninja
nz.creatoradar.com
scanning-dev.cresicor.ai
appplepi.com
www.nieuwetijden.tv
cms.ondamx.art
www.acesseimoveis.imb.br
deseasdinero.mx
cresicor.ai
www.malouskusina.com
www.mikeheddes.nl
app.mcip.ml
catalog-dev.solutionmag.cloud
www.metropolique.com
eeclub.jp
www.i4uautomation.com
www.nieuwetijden.tv
www.jayyn.xyz
stte.app
24h.socolive01.tv
shema.bg
emelle.me
capgeminitechchallenge2021.com
bitmunchlab.com
thinvite.app
chqatpjgjx.device.sighub.io
cresicor.ai
app.chkfake.in
collection-films.org.ua
24ok-asia.com
alpha.cresicor.ai
scanning-dev.cresicor.ai
bradysutton.net
tienda.dressy.cl
capacity.parade.ai
www.avionaccounting.com
guide.skhomebuyersguide.ca
www.cresicor.ai
cresicor.ai
casablancalawnservice.com
25secondscreative.com
cms.ondamx.art
register.goodmooddudes.com
somosverdeyblanco.com
cresicor.ai
feed.marksmen.nl
auth.innovationcrib.be
portal.cresicor.ai
app.umkamall.ru
my.northstar.ai
grood.app
fblog.ge
opcom-advisor.cdp.adeo.cloud
smynd.at
m.abinpc.com
truck.brightq.com
www.heebin.shop
tugutaholiday.com
cresicor.ai
web.hairyuu-dojo.com.ar
leadgeneratorbot.com
instore-test.blvrd.de
dmself.shipr.tech
Certificate
The complete raw certificate details for cresicor.ai in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgISBDizO5tGhLcsRQ9w3EjAX1c+MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMjgwMTE4MTRaFw0yNDA1MjgwMTE4MTNaMBYxFDASBgNVBAMT C2NyZXNpY29yLmFpMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Sa/ kzwH1DSJxVKg6r/lKRR8qipy260g10lGqORlxFKB9FrYnTs+4VF8a0ZWJtiCdXGx XBRhguZMcwPI3GkSXE9RxDgT0F7dLT+yLRLNFyeqJwgObkT1I/ZaP70tfxwnG3kI vxqZH2aD0q5J87kePH2oqwIGO9Y1kpr1PgEsXzGHVdV+S6qWvENnevmCROUYIBeB YIm8RmdxZlnVY2WnuN0Dg98gfZKkKSmQe20cnj5tGA/1JZAn2sfRgZ2/Ul7b6mmc tbM+xdJu+hUplc0aKPyfy7aAXMm2FJBt3NBit1QYwLCEpGRloGduX1wU38HKyHJp uDN1if6UjdPxAaR+QwIDAQABo4ICDjCCAgowDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBRQWxHP0UY2Ei9/Grc9jiZTKDYX0DAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAW BgNVHREEDzANggtjcmVzaWNvci5haTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUG CisGAQQB1nkCBAIEgfYEgfMA8QB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7 v6s52IRzAAABje2BX0oAAAQDAEcwRQIhAPfA7CmbV5ZaqFKWSo0RlPhQ1kZDi5R4 8ajvXbdTPH3FAiB+uDDQjQkIjmHTpGSIDehb37E4TNIfGndD6tHOm5pr6gB3AKLi v9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABje2BX3sAAAQDAEgwRgIh AIwTewhgZPRYyI4P4T9YRHT1TB9gpmWwMwhYuZUlWKkpAiEAp4Ed+SVvWrTxKtg5 KCJ2fC8PxjwtnbHJq7sBV7hLs8MwDQYJKoZIhvcNAQELBQADggEBAHABP/MAoMKc 8rgCJx7Zx3rNFaXchWIRs9U8sJP/YzgriEIeHVNSCcLobANTmNWFXXrRL2EpdBo9 O4K+oz4xgGzr0Z1Np8dg6mCKez0pp8irqPHvF0ms/Ubn7EmfHfJcdn5AzG5tndmz XqnNGIAaaYn3bkam6V6qWcv6ZwS6MrE8a6yO5vwmmitsphHni1kRoFtCXSvSjXn4 fPJOffjixm6xA4qTK2qaUxPOQRr8H8qKkpRzAFdmRtw1BV4xKMkRG106ouW0Sr4P 3buV9CcHtWS0IYnFwYLx/BIiMipTi39oH2k8xdAKInbXCF37p1QyE6prKtudDOyp VVG61VPrwzI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Sa/kzwH1DSJxVKg6r/l KRR8qipy260g10lGqORlxFKB9FrYnTs+4VF8a0ZWJtiCdXGxXBRhguZMcwPI3GkS XE9RxDgT0F7dLT+yLRLNFyeqJwgObkT1I/ZaP70tfxwnG3kIvxqZH2aD0q5J87ke PH2oqwIGO9Y1kpr1PgEsXzGHVdV+S6qWvENnevmCROUYIBeBYIm8RmdxZlnVY2Wn uN0Dg98gfZKkKSmQe20cnj5tGA/1JZAn2sfRgZ2/Ul7b6mmctbM+xdJu+hUplc0a KPyfy7aAXMm2FJBt3NBit1QYwLCEpGRloGduX1wU38HKyHJpuDN1if6UjdPxAaR+ QwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 367743197580734227442311330377629274429246 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 01:18:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 01:18:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cresicor.ai' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27412819696418191844023061056601303301680655658234357172184866619914991179713156838052834759089937775777662752137427232219956913623239789782087965101823898709680922421835190059655028034252840750740659041262492550696034274897362538244235400938939678842332043021007096045802881624898159150772491361064557944382161668231755632548386676179274242411996785206817697045920490832337328904580120875517940151114345988829518509029476907243835878350845872095177083309757476795541148628214482030808903478802834403712498030479359317057634612693823461621664235041039180369375876063898575034877069912535598901684381059227705200115267 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 505b11cfd14636122f7f1ab73d8e2653283617d0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cresicor.ai' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ded815f4a0000040300473045022100f7c0ec299b57965aa852964a8d1194f850d646438b9478f1a8ef5db7533c7dc502207eb830d08d09088e61d3a464880de85bdfb1384cd21f1a7743ead1ce9b9a6bea007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ded815f7b00000403004830460221008c137b086064f458c88e0fe13f584474f54c1f60a665b0330858b9952558a929022100a7811df9256f5ab4f12ad8392822767c2f0fc63c2d9db1c9abbb0157b84bb3c3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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