greatfitness.org
Issued by R3
About this certificate
This digital certificate with serial number 04:1a:55:2f:aa:b0:be:7d:ec:f6:bf:0b:07:bc:63:e5:60:e9 was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=greatfitness.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:1a:55:2f:aa:b0:be:7d:ec:f6:bf:0b:07:bc:63:e5:60:e9Serial Number (int): 357409717146592199232556860320569444622569
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6a:6e:7a:ad:7c:07:f9:69:ee:51:73:6d:9c:12:bc:c2:e4:91:61:25
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): de:30:20:2f:e1:52:27:27:2f:c8:74:09:f0:1c:27:0f:af:56:11:ae
Fingerprint (sha256): 96:76:43:19:53:a9:b1:64:97:90:9d:93:26:e4:32:0b:cf:49:0e:bd:16:d7:73:31:6d:a7:ce:f1:24:33:25:5a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate greatfitness.org
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for greatfitness.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
allaboutarbitrage.com
dyrm.com.crownleads.com
greatfitness.org
howtostartarothira.com
mailboxpayments.com
pinchdao.xyz.frankclips.com
restrain.bdsmsecurity.com
reversemag.net
slimmingjean.com
the-fairgo-casino.com
dyrm.com.crownleads.com
greatfitness.org
howtostartarothira.com
mailboxpayments.com
pinchdao.xyz.frankclips.com
restrain.bdsmsecurity.com
reversemag.net
slimmingjean.com
the-fairgo-casino.com
Other certificates including the domain name greatfitness.org
(limited to 100 certificates)
buyweed.org
lyndra.org
exoniaconsulting.ca
www.avail.world
homeschoolrefugee.org
greatfitness.org
recover.vc
orderofthestarsandbars.org
appropriations.online
autoinsurance.me
exoniaconsulting.ca
hugabee.ca
hugabee.ca
exoniaconsulting.ca
hugabee.ca
exoniaconsulting.ca
hugabee.ca
overcomersrecovery.ca
greatfitness.org
netnegativeemissions.com.mdyer.org
exoniaconsulting.ca
halfmarathons.club
exoniaconsulting.ca
exoniaconsulting.ca
greatfitness.org
impossible.ca
advocates.club
advocates.club
turntableneedle.org
exoniaconsulting.ca
overcomersrecovery.ca
hugabee.ca
exoniaconsulting.ca
faqaboutreligion.org
exoniaconsulting.ca
ownman.vc
exoniaconsulting.ca
sculpit.guide
exoniaconsulting.ca
goldenoldies.ca
exoniaconsulting.ca
greatfitness.org
arbitragers.ca
lyndra.org
exoniaconsulting.ca
www.avail.world
homeschoolrefugee.org
greatfitness.org
recover.vc
orderofthestarsandbars.org
appropriations.online
autoinsurance.me
exoniaconsulting.ca
hugabee.ca
hugabee.ca
exoniaconsulting.ca
hugabee.ca
exoniaconsulting.ca
hugabee.ca
overcomersrecovery.ca
greatfitness.org
netnegativeemissions.com.mdyer.org
exoniaconsulting.ca
halfmarathons.club
exoniaconsulting.ca
exoniaconsulting.ca
greatfitness.org
impossible.ca
advocates.club
advocates.club
turntableneedle.org
exoniaconsulting.ca
overcomersrecovery.ca
hugabee.ca
exoniaconsulting.ca
faqaboutreligion.org
exoniaconsulting.ca
ownman.vc
exoniaconsulting.ca
sculpit.guide
exoniaconsulting.ca
goldenoldies.ca
exoniaconsulting.ca
greatfitness.org
arbitragers.ca
Certificate
The complete raw certificate details for greatfitness.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgISBBpVL6qwvn3s9r8LB7xj5WDpMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA0MDExMjAyMzNaFw0yMzA2MzAxMjAyMzJaMBsxGTAXBgNVBAMT EGdyZWF0Zml0bmVzcy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD/ZgNek3ecB8DzS2QA5xlQKleaAElOC/eoe0III9Yzm2IhYT6ZkWTnOBGo/25z k/gkweqeabXsuxiCIQhRPSjEFjBaW6GNjxPh6XGu341MfveyueVKCwx7iMALYRcv fR0iz8pRfc61B2lD1TzHiroBcaaGo3lheJ8OW6S73RgJkg/yvmz82svbc3zQ8VIx gZv8sYJOLDsB7tzHaCHmyH5VwdhpK9cad4dxzJGZl2FgNBRbcBnqrR7Urq25gNDy /ucDnesLI+uOjv/Ewi8tpK58t1BHkJyYdsKT9KSwFRY5wRMZM4jHBCqfiq2LqESQ 4BWqopEoJfJLQsbLQXZp/St9AgMBAAGjggMbMIIDFzAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFGpueq18B/lp7lFzbZwSvMLkkWElMB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMIHrBgNVHREEgeMwgeCCFWFsbGFib3V0YXJiaXRyYWdlLmNvbYIXZHlybS5j b20uY3Jvd25sZWFkcy5jb22CEGdyZWF0Zml0bmVzcy5vcmeCFmhvd3Rvc3RhcnRh cm90aGlyYS5jb22CE21haWxib3hwYXltZW50cy5jb22CG3BpbmNoZGFvLnh5ei5m cmFua2NsaXBzLmNvbYIZcmVzdHJhaW4uYmRzbXNlY3VyaXR5LmNvbYIOcmV2ZXJz ZW1hZy5uZXSCEHNsaW1taW5namVhbi5jb22CFXRoZS1mYWlyZ28tY2FzaW5vLmNv bTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUF BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIE gfQEgfEA7wB1AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABhzzp lFAAAAQDAEYwRAIgCmgTrVeOfZhRn1IjwtVxrWS2axRA+02UHCmd0nYFKr0CIEUY 5n0DwW89kEYSWCuf1ZaQZGhZ3BKVXE7ZqNJfx8TbAHYArfe++nz/EMiLnT2cHj4Y arRnKV3PsQwkyoWGNOvcgooAAAGHPOmUcgAABAMARzBFAiBrzNJkjvYbm16Wr0wI c1c/lKOxPXdQ80dSGbvx0tAAKgIhANMKhmdoSxrrir15fhVbVRXXxTOds83UILUm fpY9tjFPMA0GCSqGSIb3DQEBCwUAA4IBAQAqNHzaAXq6xp9JbuYy0NSk5H4evn04 mZqCdhzS/EMEbkmDOMGH20DKMWqSSLdcNb8mEwSKdbU65owbd+5d69nqtPRolRqG OOmF6RS+TLqN8a4cE0w3jTB2hjABeMIF0YRAXStm0Nj5qtZIMYAbc1SBiz9aqirY 0pA3cXqiobbmPG2/bymUxhFMD9SbA2Go/8wekBEnjQ2TS+AYKbDrVWcVs9ti2axY 7YT1jEWHokdZCDnvFUmb3xKe/p8UGKhTsMvbdONWsEI7W5xErtA81nNbeI4UQ5M5 mUD+VLXs8fKTGSWbd3ILzpsNPaqs7Cs1sv8U7i9IHWL3kj+dd4thrngJ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/2YDXpN3nAfA80tkAOcZ UCpXmgBJTgv3qHtCCCPWM5tiIWE+mZFk5zgRqP9uc5P4JMHqnmm17LsYgiEIUT0o xBYwWluhjY8T4elxrt+NTH73srnlSgsMe4jAC2EXL30dIs/KUX3OtQdpQ9U8x4q6 AXGmhqN5YXifDluku90YCZIP8r5s/NrL23N80PFSMYGb/LGCTiw7Ae7cx2gh5sh+ VcHYaSvXGneHccyRmZdhYDQUW3AZ6q0e1K6tuYDQ8v7nA53rCyPrjo7/xMIvLaSu fLdQR5CcmHbCk/SksBUWOcETGTOIxwQqn4qti6hEkOAVqqKRKCXyS0LGy0F2af0r fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 357409717146592199232556860320569444622569 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-01 12:02:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 12:02:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'greatfitness.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32241072331337838587827943156580874092258793890160370453237178917806511050230260381387434570477823970003825144424307584887659119735694924366559690629198046237422757408563608821168449516237542130830022113283832851759251697939077103456703148339766024099925755432873102440821762250654349183737457783867502542401586508477599023433880242954703053884230999909520877567784542929140881963087192742600895390927304496631113483502388784807628128645638675604704247068718153876194448100337103796107539007190846910876078606225316763172037967457173003033066828044330397201113274474172519513627924340780294013142219789774521215298429 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6a6e7aad7c07f969ee51736d9c12bcc2e4916125 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (227 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allaboutarbitrage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyrm.com.crownleads.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatfitness.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtostartarothira.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailboxpayments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinchdao.xyz.frankclips.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restrain.bdsmsecurity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reversemag.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slimmingjean.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-fairgo-casino.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001873ce99450000004030046304402200a6813ad578e7d98519f5223c2d571ad64b66b1440fb4d941c299dd276052abd02204518e67d03c16f3d904612582b9fd59690646859dc12955c4ed9a8d25fc7c4db007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001873ce99472000004030047304502206bccd2648ef61b9b5e96af4c0873573f94a3b13d7750f3475219bbf1d2d0002a022100d30a8667684b1aeb8abd797e155b5515d7c5339db3cdd420b5267e963db6314f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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