www.watek.at
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:29:12:f0:70:bc:73:ca:a0:bc:3f:97:18:87:70:db:b8:75 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.watek.at
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:29:12:f0:70:bc:73:ca:a0:bc:3f:97:18:87:70:db:b8:75Serial Number (int): 275313609380769999686078180349296085022837
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 56:e9:ad:01:53:a2:cf:4b:a1:dd:14:ef:ad:22:e4:6c:4b:2f:a0:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f8:73:25:05:ae:c8:04:25:7c:27:5a:03:9a:b6:bf:bc:fe:1f:02:c2
Fingerprint (sha256): a6:8e:c6:9b:65:db:25:41:bb:81:67:7c:25:ff:49:be:28:6b:11:19:03:02:4b:15:cd:72:75:ac:c7:44:08:25
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.watek.at
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.watek.at
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
watek.at
www.watek.at
www.watek.at
Other certificates including the domain name watek.at
(limited to 100 certificates)
sunshop.infinite-web.de
*.gamers-hell.de
www.watek.at
www.punktservr.lima-city.de
www.mech.riftscuttler.com
*.physio-bechtold.de
2023.lima-city.eu
www.watek.at
2023.sidbrowser.com
watek.at
*.transitheartproductions.com
watek.at
e-tattoofamily.com
www.watek.at
gpdhjdwxspwbkqz.lima-city.info
*.best-iptv.de
www.geniusthingks.com
*.juma-band.com
www.sausedev.lima-city.de
*.soul-designs.com
tierpraxis-wilke.lima-city.de
www.heiner-sievers.map-invasion.de
www.luzferoz.lima-city.de
pos.sidbrowser.com
www.watek.at
*.secondquest.at
webmail.alarmdisplay.de
*.basketwattwil.ch
watek.at
monopodi.lima-city.de
www.fgrunert.lima-city.de
jake-milton.lima-city.de
www.aze.watek.at
physik.zeinhofer.eu
watek.at
goldsteindesign.eu
lvm-autoversicherung-rechner.pkwversicherung24.eu
crm.derbrocode.de
famzentrum-stalbertus.lima-city.de
watek.at
*.menger-nachtumzug.de
*.dots-it.de
*.gamers-hell.de
www.watek.at
www.punktservr.lima-city.de
www.mech.riftscuttler.com
*.physio-bechtold.de
2023.lima-city.eu
www.watek.at
2023.sidbrowser.com
watek.at
*.transitheartproductions.com
watek.at
e-tattoofamily.com
www.watek.at
gpdhjdwxspwbkqz.lima-city.info
*.best-iptv.de
www.geniusthingks.com
*.juma-band.com
www.sausedev.lima-city.de
*.soul-designs.com
tierpraxis-wilke.lima-city.de
www.heiner-sievers.map-invasion.de
www.luzferoz.lima-city.de
pos.sidbrowser.com
www.watek.at
*.secondquest.at
webmail.alarmdisplay.de
*.basketwattwil.ch
watek.at
monopodi.lima-city.de
www.fgrunert.lima-city.de
jake-milton.lima-city.de
www.aze.watek.at
physik.zeinhofer.eu
watek.at
goldsteindesign.eu
lvm-autoversicherung-rechner.pkwversicherung24.eu
crm.derbrocode.de
famzentrum-stalbertus.lima-city.de
watek.at
*.menger-nachtumzug.de
*.dots-it.de
Certificate
The complete raw certificate details for www.watek.at in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgISAykS8HC8c8qgvD+XGIdw27h1MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMDIwNjExMjJaFw0x OTA1MzEwNjExMjJaMBcxFTATBgNVBAMTDHd3dy53YXRlay5hdDCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAK7BICHiDozFZcMqrZXsBmOYKiNM6NZbQaRb HPS5vV0LTmbP1+nXhxDN+twXztxknwyIB3SaCSDV3fhJHu432TwaN5HokO+WxZo8 Pr21lQGiw/OGJO90ARN/qbh786s5MDW5coIbFkDaE/PWx/JOTegXT6+cJbMLoV2v F5TJWnQZ7v+Masg8cLYMeTxwD4PVnQ+m4fBJTnILqA9xldeaeY0B2cd7U1Uf4tUS ajVyPny0mZBBDWDgY31BWxnMVSCndbfNu/TV0hf0+jmBunYKmBQSQGU9CKvaZava lF0OPpJPBXO+f2CDe86eupE01qt4uoAHPvyHlJXAcJ/wIeyWPNKBoDAzpUKf9nPu k9e3ZdQ3brHG6M/pIuMAd27y2+8j86PgSfdz6Aaz/+FVNufDQzDVD/ZJfjmqratE atyh5Hcma7gMYu3mO8faGnq0XMOoor5kOlLKr9OxydzJJlkJTrDrPEgIhCbo52IM uFwXXeA6TUbNIr4oiFruehonGvnpHGWTFSOpCLqvF/cQRyez8vYfPqEXm/WmC1Fz VW2Q2UXJQXNDbPdrAjXHp6gKbxjZe7Gf2ETzdFMKMaCfTHN5t8BoE1IgJcGQO0g6 Dsl2NbXb3vxG7CKzU47Ii+G6VNN90RKcQgsS6eNx4Z67RBAHf95s2376XnhfjWhV 9x1g1PYPAgMBAAGjggJrMIICZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFbprQFT os9Lod0U760i5GxLL6A/MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wIQYDVR0RBBowGIIId2F0ZWsuYXSCDHd3dy53YXRl ay5hdDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkC BAIEgfUEgfIA8AB2AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAAB aT0+PicAAAQDAEcwRQIhANsxmPCs2V7YC1NAF54JMC9t0loEDC5Y9SH4pG5W3L3h AiAqwqIS1UAa/Z7qMKl9bHXqEIjOV5eXwED6DmdH5YHsNAB2AGPy283oO8wszwty hCdXazOkjWF3j711pjixx2hUS9iNAAABaT0+PDIAAAQDAEcwRQIgBM0TfOZGyhlL 0+umuOJGuE+y8bSCz9Ji68dvdeCX9qkCIQC28bjMis2t4Sw2Lh2+bNbaYlvVqGYL O9i2LOMesp9SmzANBgkqhkiG9w0BAQsFAAOCAQEACaLpLXz50d77jl2jquFH9Fd2 jBEqu/px1Ug7j0QLNiXNZvvJfSMuSe0CcaSnv24w3HGtBBnv8n8C4FLZX3ba9r9c szZG4TYrjdOJjKJdccakPLRlDOT9+5KzEf7iWvCQDti0hkFalIAbmrqhVeLHpLQJ rNzJtGFuswsxHtanOHNGCyJtZ/gsvWn5yIVBPUQGEFoKnG841wP1zZD7O+wXBZNH qtdV8KBRxZCGWcdqRnwxGFkA3uuXY6Km0D3hfPd31T0RZhqZIDtafHbuO3f3FsWA YkDVwb6xAeOZMBJHVelk8xUWPttNt/h1GwcRPPQO/fPUJXO18wFf5HVRO/JvUg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArsEgIeIOjMVlwyqtlewG Y5gqI0zo1ltBpFsc9Lm9XQtOZs/X6deHEM363BfO3GSfDIgHdJoJINXd+Eke7jfZ PBo3keiQ75bFmjw+vbWVAaLD84Yk73QBE3+puHvzqzkwNblyghsWQNoT89bH8k5N 6BdPr5wlswuhXa8XlMladBnu/4xqyDxwtgx5PHAPg9WdD6bh8ElOcguoD3GV15p5 jQHZx3tTVR/i1RJqNXI+fLSZkEENYOBjfUFbGcxVIKd1t8279NXSF/T6OYG6dgqY FBJAZT0Iq9plq9qUXQ4+kk8Fc75/YIN7zp66kTTWq3i6gAc+/IeUlcBwn/Ah7JY8 0oGgMDOlQp/2c+6T17dl1Dduscboz+ki4wB3bvLb7yPzo+BJ93PoBrP/4VU258ND MNUP9kl+Oaqtq0Rq3KHkdyZruAxi7eY7x9oaerRcw6iivmQ6Usqv07HJ3MkmWQlO sOs8SAiEJujnYgy4XBdd4DpNRs0iviiIWu56Gica+ekcZZMVI6kIuq8X9xBHJ7Py 9h8+oReb9aYLUXNVbZDZRclBc0Ns92sCNcenqApvGNl7sZ/YRPN0UwoxoJ9Mc3m3 wGgTUiAlwZA7SDoOyXY1tdve/EbsIrNTjsiL4bpU033REpxCCxLp43HhnrtEEAd/ 3mzbfvpeeF+NaFX3HWDU9g8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 275313609380769999686078180349296085022837 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-02 06:11:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-31 06:11:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.watek.at' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712935737249055989155890254195662102556177719902233666342278946336912783369930155305058451921064926915931751816733158014296376978705762020731956655311165970073133153048947089763847675540914478510439418412238051386286177316619404667709406981270259110283340457772012533432061522095765404998028764663263475150681184213745511389071392633129511855395257407789267564217887882434984526500717189003114552577409616938371350461711628594029263263513491052823277366256683688471563210182566028446109158061867788433817775790297669355413453666195621054985891882895356393924721181537673639348581205466493725108389452120060368846937774881048711815585951195308891128953250723022022412919449072991024117020212899038280316262429625660346919462944938461372820689363902620962589779819572050480629563892573331021881826059549847187704629176166444171816967657228638262984771103527574824895011180855391249447487735896769632343158815810932813524475257552746296624391348952898542164767217610498845918271083942108214937245595171403590930327555474527739982316708956229441869348194145769046992081686074028625170252031329983653493962004387491912836096051641732954847397746127062094864989729711694259887974925642085795360331456253019076625052095329904241375735772687 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 56e9ad0153a2cf4ba1dd14efad22e46c4b2fa03f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watek.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watek.at' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001693d3e3e270000040300473045022100db3198f0acd95ed80b5340179e09302f6dd25a040c2e58f521f8a46e56dcbde102202ac2a212d5401afd9eea30a97d6c75ea1088ce579797c040fa0e6747e581ec3400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001693d3e3c320000040300473045022004cd137ce646ca194bd3eba6b8e246b84fb2f1b482cfd262ebc76f75e097f6a9022100b6f1b8cc8acdade12c362e1dbe6cd6da625bd5a8660b3bd8b62ce31eb29f529b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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