plaza-s.mdon.jp
Issued by GeoTrust DV SSL CA - G3
About this certificate
This digital certificate with serial number 19:8d:23:44:e9:e9:8f:61:b2:52:f1:7b:1f:e0:65:e9 was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=plaza-s.mdon.jp
GeoTrust Inc.
Organization:
GeoTrust Inc.
Organization unit: Domain Validated SSL
Organization unit: Domain Validated SSL
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 19:8d:23:44:e9:e9:8f:61:b2:52:f1:7b:1f:e0:65:e9Serial Number (int): 33963529095919850401592204321844389353
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77
Fingerprint (sha1): 3f:ea:5c:a3:d7:15:67:21:eb:76:de:02:36:94:b8:74:9d:5c:ac:42
Fingerprint (sha256): 9b:24:58:a3:1c:1a:f4:5e:78:31:b4:c9:19:c4:c5:73:e0:e1:1e:9b:00:ba:3b:50:1b:80:8b:db:f9:7b:ef:01
Issuing Certificate URL: http://gt.symcb.com/gt.crt
Revocation information
OCSP Server: http://gt.symcd.comCRL Distribution Point: http://gt.symcb.com/gt.crl
Check the revocation status for certificate plaza-s.mdon.jp
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for plaza-s.mdon.jp
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
plaza-s.mdon.jp
Other certificates including the domain name mdon.jp
(limited to 100 certificates)
plaza-w.mdon.jp
plaza-m.mdon.jp
plaza-m.mdon.jp
plaza-m.mdon.jp
plaza-w.mdon.jp
plaza-s.mdon.jp
plaza-s.mdon.jp
plaza-m.mdon.jp
plaza-s.mdon.jp
plaza-s.mdon.jp
plaza-w.mdon.jp
plaza-w.mdon.jp
plaza-m.mdon.jp
plaza-s.mdon.jp
plaza-m.mdon.jp
plaza-m.mdon.jp
plaza-w.mdon.jp
plaza-s.mdon.jp
plaza-m.mdon.jp
plaza-w.mdon.jp
plaza-s.mdon.jp
plaza-s.mdon.jp
plaza-w.mdon.jp
plaza-m.mdon.jp
plaza-s.mdon.jp
plaza-w.mdon.jp
plaza-m.mdon.jp
plaza-m.mdon.jp
plaza-m.mdon.jp
plaza-w.mdon.jp
plaza-s.mdon.jp
plaza-s.mdon.jp
plaza-m.mdon.jp
plaza-s.mdon.jp
plaza-s.mdon.jp
plaza-w.mdon.jp
plaza-w.mdon.jp
plaza-m.mdon.jp
plaza-s.mdon.jp
plaza-m.mdon.jp
plaza-m.mdon.jp
plaza-w.mdon.jp
plaza-s.mdon.jp
plaza-m.mdon.jp
plaza-w.mdon.jp
plaza-s.mdon.jp
plaza-s.mdon.jp
plaza-w.mdon.jp
plaza-m.mdon.jp
plaza-s.mdon.jp
plaza-w.mdon.jp
Certificate
The complete raw certificate details for plaza-s.mdon.jp in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIQGY0jROnpj2GyUvF7H+Bl6TANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UECxMU RG9tYWluIFZhbGlkYXRlZCBTU0wxIDAeBgNVBAMTF0dlb1RydXN0IERWIFNTTCBD QSAtIEczMB4XDTE2MDkwNTAwMDAwMFoXDTE3MTIwNTIzNTk1OVowGjEYMBYGA1UE AwwPcGxhemEtcy5tZG9uLmpwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveOR0uUNKT/92vjRZSr2afKuo5n8xxNg7CrF92KXtn1AO+orUUE5TiccNWMl QczBRXWJRkDg6OE828sMAD+wj4QIVFJoaY7ouyLDJfoAtQrKRl7b/E/P4U6vc/mF FvDEDfAfcQgLvmlbXSo1q34Q+nJ1/iLSoYi5GWzRHVP4UneRqMD8gj56hmdQ+ce0 wVecOl02I1UGv/b2RLbze+rODdZvWqSVh1OtPjlhkcag1NjTHx/5vt5mGFzbMFL1 8NJeQrwB+veI46NIRWRFp3m8phEnB1Cj65qtSAFFi6jf8cJHG6ueYFOBH1ve6TuT VndpbSllrfJ9ZXPrkyBMexWj9wIDAQABo4IDIzCCAx8wGgYDVR0RBBMwEYIPcGxh emEtcy5tZG9uLmpwMAkGA1UdEwQCMAAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDov L2d0LnN5bWNiLmNvbS9ndC5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQIBMIGE MD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2Vz L3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2Vv dHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB8GA1UdIwQYMBaA FK1lIoWQ0DvjoUmLN/nxCx1fF6B3MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzAB hhNodHRwOi8vZ3Quc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ3Quc3lt Y2IuY29tL2d0LmNydDCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA3esdK3oN T6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFW+aFhsAAABAMARzBFAiBelUGb hyWs/ej3Tqm+Abw6fbzqCC9jxAxrb9XwaKzoKwIhAP9tmOPNNlIWTi6VJB770qUZ wOu+bATG1jG1Jv3EIRx3AHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN 3BAAAAFW+aFkLAAABAMARzBFAiEApq6GIkftMvbqeecOWfJbdKoyXOnB1T1u5B1F PlKHs58CIFUKjP2FDCeboSnUb6r/pqqbLvCK+ZBS3uknaGRhHgRzAHYAaPaY+B9k gr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QAAAFW+aFjAAAABAMARzBFAiA+h5oF ftBaYW2hF02wOFZzfwGNjsbsngPYOBTOIK6eQAIhAJzthrKQkYB41eJ83zHL198r jTaNcbpbhT+6C2C60xpIMA0GCSqGSIb3DQEBCwUAA4IBAQBv/uD4kZeRKX5qaSnt Zp+mcCGvmG72XXMW+YtrDceslXzyNK82a2rkzpeGJisogumzPb3+KbqUplkmJe8b kku9AK+8n+FS+i2mcg8MrkfXCjEU+7oI/o1CTlxmWIat6LdPDrBx2eZmMRi22ryF 1RcVZPEHbBWneclkzPfEB/V4R22AenNdXHOUc7oxRx0yX7pEGI1KhzO6TWDRs4vS lUi2vuuXG9SoCVYQhxD32qPIfa3PF9Nemmt5jHPCHqQrbCRRpHaREqNw1662rcqb 5KOAC0Pe2lyETiY1HtbIkImb/gNDpcSWv72DUurEtBDnoq9w7xnaYTGx7CaG+qDp CUhK -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveOR0uUNKT/92vjRZSr2 afKuo5n8xxNg7CrF92KXtn1AO+orUUE5TiccNWMlQczBRXWJRkDg6OE828sMAD+w j4QIVFJoaY7ouyLDJfoAtQrKRl7b/E/P4U6vc/mFFvDEDfAfcQgLvmlbXSo1q34Q +nJ1/iLSoYi5GWzRHVP4UneRqMD8gj56hmdQ+ce0wVecOl02I1UGv/b2RLbze+rO DdZvWqSVh1OtPjlhkcag1NjTHx/5vt5mGFzbMFL18NJeQrwB+veI46NIRWRFp3m8 phEnB1Cj65qtSAFFi6jf8cJHG6ueYFOBH1ve6TuTVndpbSllrfJ9ZXPrkyBMexWj 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 33963529095919850401592204321844389353 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'plaza-s.mdon.jp' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23971258402752499788114871680320839539045881858931859745386521729296638639349615873437140924063267944120802040665989625530583679733041897600517772703074983184658374483071223939125614227136711187836149319213445817527262926505550553404160743205787992552559800741409891450983792980420743640362514607998443002204645388217998427436033904280168994275846724582731538880366112560660486207244912928020893103619795529826358467462139523681379487940077397185877498880207608603496660232157039301012530504442841632264174480824572342092404039144029279110487132674130440176276830632094958849081735048839189959911627499101283648119799 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plaza-s.mdon.jp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 0168007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000156f9a161b0000004030047304502205e95419b8725acfde8f74ea9be01bc3a7dbcea082f63c40c6b6fd5f068ace82b022100ff6d98e3cd3652164e2e95241efbd2a519c0ebbe6c04c6d631b526fdc4211c77007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000156f9a1642c0000040300473045022100a6ae862247ed32f6ea79e70e59f25b74aa325ce9c1d53d6ee41d453e5287b39f0220550a8cfd850c279ba129d46faaffa6aa9b2ef08af99052dee9276864611e047300760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000156f9a16300000004030047304502203e879a057ed05a616da1174db03856737f018d8ec6ec9e03d83814ce20ae9e400221009ced86b290918078d5e27cdf31cbd7df2b8d368d71ba5b853fba0b60bad31a48 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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