gaysupplements.com.jeffandmelanie.com
Issued by R3
About this certificate
This digital certificate with serial number 03:1c:8a:6c:0a:52:ff:db:d7:f2:fe:07:83:0b:2a:df:2d:af was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=gaysupplements.com.jeffandmelanie.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1c:8a:6c:0a:52:ff:db:d7:f2:fe:07:83:0b:2a:df:2d:afSerial Number (int): 271048758509946046883427323328172826504623
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2c:6e:d4:8f:cf:3f:a8:46:5f:eb:e4:09:9b:e6:88:31:1b:6a:b3:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 2d:b2:03:3e:10:85:8c:54:59:89:43:04:9d:29:e3:e5:0b:80:d2:55
Fingerprint (sha256): a7:8d:d0:ff:cb:be:a1:ea:5f:6c:89:9d:82:16:d8:4f:2c:0c:99:95:bb:05:3d:65:8f:16:93:2a:13:3f:30:5d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate gaysupplements.com.jeffandmelanie.com
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gaysupplements.com.jeffandmelanie.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
banneradvertisingservices.com.findingtreasure.xyz
catholicfaithhandbook.net
cocoatour.com
ftmorganrealestate.com
gaysupplements.com.jeffandmelanie.com
gospel4asia.org.nz.modalonmain.com
internationalcalls.galandnsoil.us
nayantara.in.scotties.com
ondemandhomes.net
robbfamily.com
supertornado.com
webuyutahproperties.com
catholicfaithhandbook.net
cocoatour.com
ftmorganrealestate.com
gaysupplements.com.jeffandmelanie.com
gospel4asia.org.nz.modalonmain.com
internationalcalls.galandnsoil.us
nayantara.in.scotties.com
ondemandhomes.net
robbfamily.com
supertornado.com
webuyutahproperties.com
Other certificates including the domain name jeffandmelanie.com
(limited to 100 certificates)
egyptomania.com
caremap.org
springfield.work
justwanna.world
wertpapier-register.org
curric.com
bramptonhomebuyers.ca
arbitrageur.vc
portotourguide.com
blueace.com
shamanology.org
loan.tube
gooseandmaple.ca
selfiesin3d.com
blueace.com
springfield.work
healthsound.org
landresource.com
visitvalleywater.org
helpnow.ca
museum.bible
jayride.org
curric.com
mcsglobal.store
dhivya.org
privateschoolfortworth.org
maw.me
ups.ink
whoisthewho.org
ray4.me
curric.com
gaysupplements.com.jeffandmelanie.com
xza.co.za
curric.com
justwanna.world
hugabee.ca
health.clinic
lasvegascannabis.org
curric.com
libra-token.org
musicbingo.ca
curric.com
jamiekirchick.org
springfield.work
caremap.org
springfield.work
justwanna.world
wertpapier-register.org
curric.com
bramptonhomebuyers.ca
arbitrageur.vc
portotourguide.com
blueace.com
shamanology.org
loan.tube
gooseandmaple.ca
selfiesin3d.com
blueace.com
springfield.work
healthsound.org
landresource.com
visitvalleywater.org
helpnow.ca
museum.bible
jayride.org
curric.com
mcsglobal.store
dhivya.org
privateschoolfortworth.org
maw.me
ups.ink
whoisthewho.org
ray4.me
curric.com
gaysupplements.com.jeffandmelanie.com
xza.co.za
curric.com
justwanna.world
hugabee.ca
health.clinic
lasvegascannabis.org
curric.com
libra-token.org
musicbingo.ca
curric.com
jamiekirchick.org
springfield.work
Certificate
The complete raw certificate details for gaysupplements.com.jeffandmelanie.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgISAxyKbApS/9vX8v4Hgwsq3y2vMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMDgxMDA2MDRaFw0yNDA0MDcxMDA2MDNaMDAxLjAsBgNVBAMT JWdheXN1cHBsZW1lbnRzLmNvbS5qZWZmYW5kbWVsYW5pZS5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbmRHBvPrwwmroCwcsRdT+jPiBnjy739V PVdpIbM5XpprylF5IRgJR8xjm4BepeleKY0WQ8aVwdPK0oCqItUIliavC7PyQ8ed 4lT014vc/TUrxMnrxEkrSa/0MTndqX7bZ0lgjD0R5WFMGA9D1eqMD+3MTVmNXMgJ 36bEYXWJr0fln7O1PMYTDO/pug8djZ2tZqKVMhH+BpZ36+rNhCiusLoWcbNVD4fI ITkCqiPCivvL65PJmgH8guUWwaeJTD4ZduPF8scEIFMfmISIYdQoG9YWR3VbRPLo 8gMwucSYHmHpgQR0moYX+u1dz32yh78bT13aKc9KVkv01m7lxqNhAgMBAAGjggNT MIIDTzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCxu1I/PP6hGX+vkCZvmiDEbarMp MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIBWQYDVR0RBIIBUDCCAUyCMWJhbm5l cmFkdmVydGlzaW5nc2VydmljZXMuY29tLmZpbmRpbmd0cmVhc3VyZS54eXqCGWNh dGhvbGljZmFpdGhoYW5kYm9vay5uZXSCDWNvY29hdG91ci5jb22CFmZ0bW9yZ2Fu cmVhbGVzdGF0ZS5jb22CJWdheXN1cHBsZW1lbnRzLmNvbS5qZWZmYW5kbWVsYW5p ZS5jb22CImdvc3BlbDRhc2lhLm9yZy5uei5tb2RhbG9ubWFpbi5jb22CIWludGVy bmF0aW9uYWxjYWxscy5nYWxhbmRuc29pbC51c4IZbmF5YW50YXJhLmluLnNjb3R0 aWVzLmNvbYIRb25kZW1hbmRob21lcy5uZXSCDnJvYmJmYW1pbHkuY29tghBzdXBl cnRvcm5hZG8uY29tghd3ZWJ1eXV0YWhwcm9wZXJ0aWVzLmNvbTATBgNVHSAEDDAK MAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AEiw42vapkc0D+Vq AvqdMOscUgHLVt0sgdm7v6s52IRzAAABjOjARhUAAAQDAEgwRgIhAKIBqQZlS/uH oukkON9Cvmic3jb2GaUTB4ncQ645e72LAiEA4WSVFRAHU9A+4SjZDr1jrJrd/1lY Tvx3nr2NZ/tdELcAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAA AYzowEYYAAAEAwBHMEUCIQDgmrDz+hIiZEyUYjNnODxKBKQD/ol0uStWix35EHNF 7gIgFvOnwf0OtJN3QFqBjbrcaNS5Gdabu6d3s6pYeRvqBiowDQYJKoZIhvcNAQEL BQADggEBAJYTkh9RoFcxkzzuUKyg98aDSqO8KWFB8WsGyV66dSxd0FN4ZPa5+Arn RCGVLF02vmZUwW3Yf1Mq2oJ6he8ipYC5oUXbr3+BLXzbEEEW3r8auVcOAJm+XScv rQXsvVFwleqQ4yywxe7gV8u7n5aHWazYP1T3DftoiZd73Jx3NDubKmhLW5msm7ff fJmxni2a1ql6ZJeW5bD31XxGk3zCNe/Pw6ywlm8DnmicSqfusq7f1vVmFciwJIoh TC0eDjJ5FbTbbj3rYyv0HtKcRpHfwibmXwoTVxwhN4ejci+8bw5sUQJOwnCIQ2rd J9gFfu91momHDlhiUYC/JV3A8iFs14U= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw25kRwbz68MJq6AsHLEX U/oz4gZ48u9/VT1XaSGzOV6aa8pReSEYCUfMY5uAXqXpXimNFkPGlcHTytKAqiLV CJYmrwuz8kPHneJU9NeL3P01K8TJ68RJK0mv9DE53al+22dJYIw9EeVhTBgPQ9Xq jA/tzE1ZjVzICd+mxGF1ia9H5Z+ztTzGEwzv6boPHY2drWailTIR/gaWd+vqzYQo rrC6FnGzVQ+HyCE5Aqojwor7y+uTyZoB/ILlFsGniUw+GXbjxfLHBCBTH5iEiGHU KBvWFkd1W0Ty6PIDMLnEmB5h6YEEdJqGF/rtXc99soe/G09d2inPSlZL9NZu5caj YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 271048758509946046883427323328172826504623 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 10:06:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 10:06:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gaysupplements.com.jeffandmelanie.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24670905648849243350262982803414824910743927149778518230714998434640565100174777013401299596337789823893633320220393662553298743509788418272596829822402942519389908927302847701611412819805125023191220394335746448385549659393093179207231042993701192309547270369724396901492216216155420004813727919090932053371613821295781222488731467872613108137820432548321394892416429886335664403718671463455568175941043986388855332737047488566199067256304419244434917194798525732679951470246679004129040190980469064480282480642727146007126007513019177004701143875834910261443153268369693443682969790728998687731865790868466520466273 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2c6ed48fcf3fa8465febe4099be688311b6ab329 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (336 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banneradvertisingservices.com.findingtreasure.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicfaithhandbook.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocoatour.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftmorganrealestate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaysupplements.com.jeffandmelanie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gospel4asia.org.nz.modalonmain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalcalls.galandnsoil.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nayantara.in.scotties.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondemandhomes.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robbfamily.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supertornado.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webuyutahproperties.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ce8c046150000040300483046022100a201a906654bfb87a2e92438df42be689cde36f619a5130789dc43ae397bbd8b022100e1649515100753d03ee128d90ebd63ac9addff59584efc779ebd8d67fb5d10b7007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ce8c046180000040300473045022100e09ab0f3fa1222644c94623367383c4a04a403fe8974b92b568b1df9107345ee022016f3a7c1fd0eb49377405a818dbadc68d4b919d69bbba777b3aa58791bea062a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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