app.unizdrav.sk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d0:88:cd:dd:b0:31:42:e8:8a:82:37:40:91:de:61:61:f2 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=app.unizdrav.sk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d0:88:cd:dd:b0:31:42:e8:8a:82:37:40:91:de:61:61:f2Serial Number (int): 332297434039490613200891468695324208488946
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d6:3c:24:4a:06:1e:43:8f:31:59:63:9a:90:27:f5:b2:8d:c1:fc:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a8:71:9c:ba:68:2e:ce:36:e2:92:09:3d:35:cb:93:bd:02:52:9e:dc
Fingerprint (sha256): a0:59:22:1d:f8:31:88:3a:3a:d7:c6:6e:00:ec:10:0f:9d:14:4a:d7:26:48:15:e1:01:0f:a1:fb:f8:b6:91:dd
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate app.unizdrav.sk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for app.unizdrav.sk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
app.unizdrav.sk
Other certificates including the domain name unizdrav.sk
(limited to 100 certificates)
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
Certificate
The complete raw certificate details for app.unizdrav.sk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgISA9CIzd2wMULoioI3QJHeYWHyMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MDUyMTAxMDBaFw0x OTEwMDMyMTAxMDBaMBoxGDAWBgNVBAMTD2FwcC51bml6ZHJhdi5zazCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBALa27YZaYfFwaebsfOowt/V96cFAZ7SR IxFsMkuFkYeXhm+np7sfOQS6n5QVeX1UO8fVxX0irHoN1qDzVI8TPV8H9hQzyNbL 3uFCF64WMUjYDjVxLxs5Mi70cM+fHJ5wr4LvnDfwLDXrH/rbUiFMyoS5FVSEq4L/ XxGmMLEw4eEeairYYtkXMx5g5JJHnEKz2/GggU2LK8xrEcyuuPewXp15oTuCFvuV JT9ldcCOvzRsabEkqcQbaNyyMRxYoX/J+Bauy8K3WtgeqpISvyhRl05EkCwPeooq GmZECqWxGVhcPrkzTdwx42Bdt07NgSTaNIt8fLc3sI6aPc14e3g5mHhopmVF+Nk4 3AlUFV6Yp1wV7mY9B9cshYAe4UH1CoX3TEpJOCjcybxpLY1F8WkH609G0ZEj4XVv aDAK7t/X1iZAZgrpyfCG471sgcwMFrdINKYhwXyb+oJwzodCn8L+Dhi/sMWrIPsY wcvD6tC60hHDR0a+8yOHMKQ37d6mGj+JnSfz2mQXZKg2m6zFCA24AqW4nGlW5NdK VWNRGB3cIEsjEzuO5Y4753mDx8wxW5jYcCFXtdnFxu1Ef8ZP+kAmJF5qqpgC82K6 yeCMQwEkKJVbh1ZWk6p0F4czazG9vlx56fA3OoaPng5CntxqGu3NgUU3J/Ht/yV6 56aQnWJy1usRAgMBAAGjggJjMIICXzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNY8 JEoGHkOPMVljmpAn9bKNwfxAMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPYXBwLnVuaXpkcmF2LnNr MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB 9ASB8QDvAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFrxCel YQAABAMARjBEAiB+BQlPrXQJSfPcdbjJhq1qhf8oQo/Hw539fpK4xqLcUQIgIAJJ 9nFKBdzEsE1uwBus+GUKUkdkZyOeY1W0JqT1ITUAdgBj8tvN6DvMLM8LcoQnV2sz pI1hd4+9daY4scdoVEvYjQAAAWvEJ6VUAAAEAwBHMEUCIFU9C+edJvGBK5wajJp9 jT01OL7fZap8F/kn57HATYPMAiEAvIhS2beXkFwZISwJn9fzzOdyl1gLSqJ9pepc QfnY35cwDQYJKoZIhvcNAQELBQADggEBABCg7kFCumRnrdxJxOCPscKcgf5wwXGD bJzdRyAKEe4Qj8z8OYYFH33oKObneS1/oCPMeqrumucyNQNBTa4JBEKF3sqMHIFI h27KWTv8a3cba/WJWfj6W50i3fZYTZsKvnyuHQrTaywd0VFIjqoYlm79VFGJb943 mJTF8so+4yvkow/gH2DgJ7VuoQtQn1oUlkIG00MPVpRyCBDj9VC3kKq9qVPTiAOA AdE4/XAKUD6vMwtJCuRpuqQ23XkiEb/YQbM9rC8fCiNRkw8uo2tULwBoWRrE68Nv n7m88/pMDDnhsjFaqAJ8qh2tnni2Spcv1Z+fzHq/AGG7jMUYLow7FXo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtrbthlph8XBp5ux86jC3 9X3pwUBntJEjEWwyS4WRh5eGb6enux85BLqflBV5fVQ7x9XFfSKseg3WoPNUjxM9 Xwf2FDPI1sve4UIXrhYxSNgONXEvGzkyLvRwz58cnnCvgu+cN/AsNesf+ttSIUzK hLkVVISrgv9fEaYwsTDh4R5qKthi2RczHmDkkkecQrPb8aCBTYsrzGsRzK6497Be nXmhO4IW+5UlP2V1wI6/NGxpsSSpxBto3LIxHFihf8n4Fq7Lwrda2B6qkhK/KFGX TkSQLA96iioaZkQKpbEZWFw+uTNN3DHjYF23Ts2BJNo0i3x8tzewjpo9zXh7eDmY eGimZUX42TjcCVQVXpinXBXuZj0H1yyFgB7hQfUKhfdMSkk4KNzJvGktjUXxaQfr T0bRkSPhdW9oMAru39fWJkBmCunJ8IbjvWyBzAwWt0g0piHBfJv6gnDOh0Kfwv4O GL+wxasg+xjBy8Pq0LrSEcNHRr7zI4cwpDft3qYaP4mdJ/PaZBdkqDabrMUIDbgC pbicaVbk10pVY1EYHdwgSyMTO47ljjvneYPHzDFbmNhwIVe12cXG7UR/xk/6QCYk XmqqmALzYrrJ4IxDASQolVuHVlaTqnQXhzNrMb2+XHnp8Dc6ho+eDkKe3Goa7c2B RTcn8e3/JXrnppCdYnLW6xECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 332297434039490613200891468695324208488946 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 21:01:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-03 21:01:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.unizdrav.sk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745410378355834395280849158579781860239311182656700287477867048061974299169599764549246030687404318965806877611148648531894653862668519540822922052685171241652170909237896233665380198666197871802611778907114229270687131230089535910065407777487688950648731941191120887196147194814624646692888756948646282641060971996753535359554057442511307527311222201339265795633535196203574485578522525672342589266359002889687340128732031668424053299687813675444091016593412647975167700176435390844439687151995617915645970790720948761063866515129939529186357632717168548692508006267834760168353460894227887976116959375693370004388346635027347059572730191228739837411279739498604548951159692464891112529891826718069004143572179208769145689773635772200518993047942082808845340478017877608891590111871227974526682342428172434507536980839623994472815861701956433572220656221399220222005416046965229804127029134599979475634457811737530914382937771070959535857567064757156023446617129897449962711233716953117343998537138385604033143545428042527890706760560827386796919750573909394178521150200611260982920141526682275218403066957925549837042306186309556640810252034022136518202410989024269548915894620607503181292373799544334695052111943315523429910113041 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d63c244a061e438f3159639a9027f5b28dc1fc40 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.unizdrav.sk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bc427a561000004030046304402207e05094fad740949f3dc75b8c986ad6a85ff28428fc7c39dfd7e92b8c6a2dc510220200249f6714a05dcc4b04d6ec01bacf8650a52476467239e6355b426a4f5213500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bc427a55400000403004730450220553d0be79d26f1812b9c1a8c9a7d8d3d3538bedf65aa7c17f927e7b1c04d83cc022100bc8852d9b797905c19212c099fd7f3cce77297580b4aa27da5ea5c41f9d8df97 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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