magasinpluss.no
Issued by R11
About this certificate
This digital certificate with serial number 03:4c:95:66:49:d7:82:36:24:bf:46:11:93:bc:0a:33:3a:10 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=magasinpluss.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:4c:95:66:49:d7:82:36:24:bf:46:11:93:bc:0a:33:3a:10Serial Number (int): 287396903764613840694512324095169516485136
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 64:db:e1:0b:88:d2:fb:d0:15:f5:43:ef:67:c8:64:99:f2:57:83:6d
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9
Fingerprint (sha1): df:72:c6:16:06:91:51:64:26:b8:90:9d:d5:a5:e5:31:f4:23:3d:1c
Fingerprint (sha256): a0:15:51:76:6c:64:f2:73:0c:04:97:be:e7:86:e0:80:ab:4b:e9:a7:39:39:5a:88:57:d4:34:a0:df:e2:e0:5f
Issuing Certificate URL: http://r11.i.lencr.org/
Revocation information
OCSP Server: http://r11.o.lencr.orgCheck the revocation status for certificate magasinpluss.no
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for magasinpluss.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
magasinpluss.no
www.magasinpluss.no
www.magasinpluss.no
Other certificates including the domain name magasinpluss.no
(limited to 100 certificates)
magasinpluss.no
id.aboutme.schibsted.com
kundeweb-ssl.snd.no
id.adressa.no
kundeweb.aftenposten.no
22.session-service.identity-pre.schibsted.com
id.magasinpluss.no
magasinpluss.no
aftenposten.no
magasinpluss.no
kundeweb-ssl.snd.no
magasinpluss.no
magasinpluss.no
kundeweb-ssl.snd.no
id.tek.no
kundeweb-ssl.snd.no
id-pre.magasinpluss.no
id.dolen.no
id.magasinpluss.no
magasinpluss.no
kundeweb.aftenposten.no
magasinpluss.no
id.aboutme.schibsted.com
aftenposten.no
id.aboutme.schibsted.com
magasinpluss.no
magasinpluss.no
magasinpluss.no
kundeweb-ssl.snd.no
id.dolen.no
aftenposten.no
id.aboutme.schibsted.com
id-pre.adressa.no
kundeweb.aftenposten.no
kundeweb-ssl.snd.no
kundeweb-ssl.snd.no
magasinpluss.no
id.tv.nu
kundeweb-ssl.snd.no
magasinpluss.no
kundeweb-ssl.snd.no
kundeweb-ssl.snd.no
magasinpluss.no
kundeweb-ssl.snd.no
id.aboutme.schibsted.com
id-pre.ebok.no
kundeweb-ssl.snd.no
kundeweb.aftenposten.no
id-pre.tv.nu
aftenposten.no
id.aboutme.schibsted.com
magasinpluss.no
bestilling.magasinpluss.no
id.aboutme.schibsted.com
magasinpluss.no
kundeweb.aftenposten.no
id.schibsted.no
id.aboutme.schibsted.com
magasinpluss.no
id.aboutme.schibsted.com
id.aboutme.schibsted.com
magasinpluss.no
id-pre.bsnett.no
kundeweb.aftenposten.no
id-pre.tv.nu
magasinpluss.no
kundeweb.aftenposten.no
id.dolen.no
magasinpluss.no
id.aboutme.schibsted.com
kundeweb-ssl.snd.no
id.schibsted.no
aftenposten.no
magasinpluss.no
id-pre.byas.no
id.ebok.no
id.tv.nu
magasinpluss.no
id.aboutme.schibsted.com
magasinpluss.no
kundeweb.aftenposten.no
id.dolen.no
magasinpluss.no
id-pre.ebok.no
magasinpluss.no
magasinpluss.no
magasinpluss.no
kundeweb-ssl.snd.no
id.magasinpluss.no
magasinpluss.no
kundeweb-ssl.snd.no
id.aboutme.schibsted.com
id-pre.adressa.no
id.adressa.no
aftenposten.no
magasinpluss.no
magasinpluss.no
id-pre.byas.no
aftenposten.no
id.ebok.no
id.aboutme.schibsted.com
kundeweb-ssl.snd.no
id.adressa.no
kundeweb.aftenposten.no
22.session-service.identity-pre.schibsted.com
id.magasinpluss.no
magasinpluss.no
aftenposten.no
magasinpluss.no
kundeweb-ssl.snd.no
magasinpluss.no
magasinpluss.no
kundeweb-ssl.snd.no
id.tek.no
kundeweb-ssl.snd.no
id-pre.magasinpluss.no
id.dolen.no
id.magasinpluss.no
magasinpluss.no
kundeweb.aftenposten.no
magasinpluss.no
id.aboutme.schibsted.com
aftenposten.no
id.aboutme.schibsted.com
magasinpluss.no
magasinpluss.no
magasinpluss.no
kundeweb-ssl.snd.no
id.dolen.no
aftenposten.no
id.aboutme.schibsted.com
id-pre.adressa.no
kundeweb.aftenposten.no
kundeweb-ssl.snd.no
kundeweb-ssl.snd.no
magasinpluss.no
id.tv.nu
kundeweb-ssl.snd.no
magasinpluss.no
kundeweb-ssl.snd.no
kundeweb-ssl.snd.no
magasinpluss.no
kundeweb-ssl.snd.no
id.aboutme.schibsted.com
id-pre.ebok.no
kundeweb-ssl.snd.no
kundeweb.aftenposten.no
id-pre.tv.nu
aftenposten.no
id.aboutme.schibsted.com
magasinpluss.no
bestilling.magasinpluss.no
id.aboutme.schibsted.com
magasinpluss.no
kundeweb.aftenposten.no
id.schibsted.no
id.aboutme.schibsted.com
magasinpluss.no
id.aboutme.schibsted.com
id.aboutme.schibsted.com
magasinpluss.no
id-pre.bsnett.no
kundeweb.aftenposten.no
id-pre.tv.nu
magasinpluss.no
kundeweb.aftenposten.no
id.dolen.no
magasinpluss.no
id.aboutme.schibsted.com
kundeweb-ssl.snd.no
id.schibsted.no
aftenposten.no
magasinpluss.no
id-pre.byas.no
id.ebok.no
id.tv.nu
magasinpluss.no
id.aboutme.schibsted.com
magasinpluss.no
kundeweb.aftenposten.no
id.dolen.no
magasinpluss.no
id-pre.ebok.no
magasinpluss.no
magasinpluss.no
magasinpluss.no
kundeweb-ssl.snd.no
id.magasinpluss.no
magasinpluss.no
kundeweb-ssl.snd.no
id.aboutme.schibsted.com
id-pre.adressa.no
id.adressa.no
aftenposten.no
magasinpluss.no
magasinpluss.no
id-pre.byas.no
aftenposten.no
id.ebok.no
Certificate
The complete raw certificate details for magasinpluss.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISA0yVZknXgjYkv0YRk7wKMzoQMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTEwHhcNMjQwNjA3MjEwNTQ4WhcNMjQwOTA1MjEwNTQ3WjAaMRgwFgYDVQQD Ew9tYWdhc2lucGx1c3Mubm8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDO/cjSkQBIMZYb/zEQBOkIaqFIg2r+ORPUcneyWDVVO3hDqkqnwWoq/xioU/CC 9jsTZxKHlbVEdGEJedDZV/nQTispX8MtiN+519pr2xgXeODDfI0Amzvk3cWREUwB q3Q/XAR+gDCSS7ljC184uy/CRZE4yKXLpvzfEJ0KiaWjPYGL4/ZqUKvQ/lqnUVjs K1Hl1f/imjwD8n+UUP5SgaZOTcytQb47uQmj3RyStRUm8AcE4OtgQ3t8a+L+Vgaz YNFLHmn+siAgLjiuX5uh1bFxz8nYXa7oP86MVuhbbuaypjvR6ktsZWZTYiDHrPWe KXpY/XiiOyjjE+RHupquAPOLAgMBAAGjggInMIICIzAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFGTb4QuI0vvQFfVD72fIZJnyV4NtMB8GA1UdIwQYMBaAFMXPRqTq9MPA emyVxC2wXpIvJuO5MFcGCCsGAQUFBwEBBEswSTAiBggrBgEFBQcwAYYWaHR0cDov L3IxMS5vLmxlbmNyLm9yZzAjBggrBgEFBQcwAoYXaHR0cDovL3IxMS5pLmxlbmNy Lm9yZy8wLwYDVR0RBCgwJoIPbWFnYXNpbnBsdXNzLm5vghN3d3cubWFnYXNpbnBs dXNzLm5vMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB 8QDvAHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGP9LyM2QAA BAMARjBEAiBougUj3+PFB4wEsv7iXSlKk3L/b9AfARl5vkIwYUStUwIgO/ceED1s leqQicPRVNWnKSlaEEFUNo07tws5Q5wZyMUAdgDf4VbrqgWvtZwPhnGNqMAyTq5W 2W6n9aVqAdHBO75SXAAAAY/0vI1cAAAEAwBHMEUCIEN2SpVWHOz3F2bPUWT8PjLR /w4mimB0NTLBa5JnIXyrAiEAscDZmVXB7ktUzbg1V56wRK1hMMIBnSHSxUiM43uz cV8wDQYJKoZIhvcNAQELBQADggEBAK/do8+OtHuyAAOAsOvx/vX7HVF0+lFmIf0x QtbIZjZogP03Mgo3x755lGUJltwBvmIO0e7Tn+V+ErMo4MFVCuads3J4Q/iSGVQh NzOeegesrXNx0pFHUUK6VBALUaJwWzm7sC2GpU/VICj0hJS+/YBkCqlAgNdJlZvi sgIZiDkrKRd0RxEiRO6C1nDr0OcotdDmzCFoyXFxvPQYvJxeSFn7HkewfiOdKztd sr63IxhBhCmKiT7CAYmKpgc/ui7K9QYGsouW55VVbVuOnB1rl6I1XFXPNf4Y+Cec RclpMmUfVyoH7vzdWrVt605yk6xfKXmJgqnYm3VTFIQlgHuubtc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv3I0pEASDGWG/8xEATp CGqhSINq/jkT1HJ3slg1VTt4Q6pKp8FqKv8YqFPwgvY7E2cSh5W1RHRhCXnQ2Vf5 0E4rKV/DLYjfudfaa9sYF3jgw3yNAJs75N3FkRFMAat0P1wEfoAwkku5YwtfOLsv wkWROMily6b83xCdComloz2Bi+P2alCr0P5ap1FY7CtR5dX/4po8A/J/lFD+UoGm Tk3MrUG+O7kJo90ckrUVJvAHBODrYEN7fGvi/lYGs2DRSx5p/rIgIC44rl+bodWx cc/J2F2u6D/OjFboW27msqY70epLbGVmU2Igx6z1nil6WP14ojso4xPkR7qargDz iwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 287396903764613840694512324095169516485136 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 21:05:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 21:05:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magasinpluss.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26130236605954882411299593632181534999541070701267588751962799209432509996461349773321269700764040443665363092585789119745482672202316091732545899784895902081899664106407380695794560781111641626236229442453918598512883405971638625372905070708181724111202904796644817200830915104131719606662472299242863963456764079572893671092512566068354935871763789129017733243692523189393995926083122249069060063745902319514587385089806554199710284211036148686798015476923340130708463084826485132594538335743947245238291808848694974043049998663388800758913379544243626397978316881073758266963265869926919888591380839032789586211723 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 64dbe10b88d2fbd015f543ef67c86499f257836d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magasinpluss.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magasinpluss.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff4bc8cd90000040300463044022068ba0523dfe3c5078c04b2fee25d294a9372ff6fd01f011979be42306144ad5302203bf71e103d6c95ea9089c3d154d5a729295a104154368d3bb70b39439c19c8c5007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ff4bc8d5c0000040300473045022043764a95561cecf71766cf5164fc3e32d1ff0e268a60743532c16b9267217cab022100b1c0d99955c1ee4b54cdb835579eb044ad6130c2019d21d2c5488ce37bb3715f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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