psemi.com
Issued by R3
About this certificate
This digital certificate with serial number 04:58:69:b5:23:76:ec:e6:02:d2:7d:8d:2b:15:90:a2:0f:b4 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=psemi.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:58:69:b5:23:76:ec:e6:02:d2:7d:8d:2b:15:90:a2:0f:b4Serial Number (int): 378534501480678958174803828856228862365620
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 85:c8:06:90:96:53:b3:cc:84:53:e8:b3:2b:27:72:0c:67:c4:fc:59
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 01:7f:83:1a:d6:0f:42:6b:20:e1:ee:1b:93:22:bf:a5:6c:ea:52:cb
Fingerprint (sha256): a8:56:62:3e:04:18:a7:f9:32:0c:89:43:4d:59:14:2f:11:41:12:66:1c:68:d6:7e:0b:eb:87:0f:0c:af:fe:db
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate psemi.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for psemi.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
psemi.com
www.psemi.com
www.psemi.com
Other certificates including the domain name psemi.com
(limited to 100 certificates)
trust.iatn.net
trust.iatn.net
support.psemi.com
trust.iatn.net
websip.psemi.com
it-status.psemi.com
support.psemi.com
*.psemi.com
it-status.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
www.psemi.com
support.psemi.com
trust.iatn.net
trust.iatn.net
psemi.com
support.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
support.psemi.com
trust.iatn.net
LyncWeb.psemi.com
*.psemi.com
psemi.com
psemi.com
store.psemi.com
it-status.psemi.com
it-status.psemi.com
trust.complianceds.com
psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
www.psemi.com
support.psemi.com
trust.iatn.net
support.psemi.com
trust.iatn.net
trust.iatn.net
tms1-status.bbpos.com
www.psemi.com
*.psemi.com
*.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
www.psemi.com
trust.iatn.net
store.psemi.com
trust.iatn.net
status.ewaycorp.com
www.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
*.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
psemi.com
www.psemi.com
trust.iatn.net
trust.iatn.net
psemi.com
psemi.com
psemi.com
trust.iatn.net
www.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
www.psemi.com
trust.iatn.net
LyncWeb.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
support.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
psemi.com
trust.iatn.net
support.psemi.com
trust.iatn.net
websip.psemi.com
it-status.psemi.com
support.psemi.com
*.psemi.com
it-status.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
www.psemi.com
support.psemi.com
trust.iatn.net
trust.iatn.net
psemi.com
support.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
support.psemi.com
trust.iatn.net
LyncWeb.psemi.com
*.psemi.com
psemi.com
psemi.com
store.psemi.com
it-status.psemi.com
it-status.psemi.com
trust.complianceds.com
psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
www.psemi.com
support.psemi.com
trust.iatn.net
support.psemi.com
trust.iatn.net
trust.iatn.net
tms1-status.bbpos.com
www.psemi.com
*.psemi.com
*.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
www.psemi.com
trust.iatn.net
store.psemi.com
trust.iatn.net
status.ewaycorp.com
www.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
*.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
psemi.com
www.psemi.com
trust.iatn.net
trust.iatn.net
psemi.com
psemi.com
psemi.com
trust.iatn.net
www.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
www.psemi.com
trust.iatn.net
LyncWeb.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
support.psemi.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
psemi.com
Certificate
The complete raw certificate details for psemi.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISBFhptSN27OYC0n2NKxWQog+0MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjEyMTkwODA3MjdaFw0yMzAzMTkwODA3MjZaMBQxEjAQBgNVBAMT CXBzZW1pLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKGcPD2u nO6ScuMHxKpeZ0ex+x1rr0ZJgVzL6zJX4/3a64TdCwsUrm3w4XOhFUi07SYvYa+W n5UIHdWxR1S4rRQ9Sdx3FsKwyzDAM2mhWtkiBOpX0bWz/QMC4amoyfh4TKu1/C9Z WeFI6BCQYKNWc5GBy9p9kMViMNaWcAt2tCGiMk6bA7FP9HPf9DoBH2OjRyXlbKZe Ggi4KpdKKJJagoORyruigqj0/aeGHvgV9STmHo4hfAEnhDFKz+wPS9XggXD3aYcr 4/aM+ITh/aVgqo2SCNzk5esMySneLEKcJTLjK4v45+dMr3bvjGhypZ3VrXUZbm4p hT1kHmgoZEktdw8CAwEAAaOCAlMwggJPMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU hcgGkJZTs8yEU+izKydyDGfE/FkwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wIwYD VR0RBBwwGoIJcHNlbWkuY29tgg13d3cucHNlbWkuY29tMEwGA1UdIARFMEMwCAYG Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu bGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAb1N2rDHw MRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAGFKaNTjQAABAMARzBFAiEAxIzj vgp2ejiSvT5OfZtoQoBods9qmrlnmQMAflshoZECIFyd54QRczARFK/TEjxOeuXm VuhZpRWzryVeyoGZBgw+AHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvc gooAAAGFKaNThwAABAMARzBFAiEAlhCUBC2qSJS75V3zMdAwOwP+6nFvRkJSvV6o SfJw7MgCIBp1BICMNDGsB9iT0SJOaeY8Jny5qCLH+Suo8rToSNdzMA0GCSqGSIb3 DQEBCwUAA4IBAQCK84/1YxkPXHCzXLMVmZY3VjMkqPz73+t4Tvx7dRHFAXwBjdry /DG+PRhBoKGd+Tz18gC20YuU24WR9TugMzHeniKYmwip5Ly29r0Tihlw9RFDhN0P KQQG8ev+9yCr9fTuLMe11F45N0DC3rAU/Lj01EUsunZCeFlu6M2tQZVt9ZLCY/zW Exep8b7RbJhQNuJ8c5qChq2nJDevi/Mfq81bZgOyaOg6dUxtMSgU7h9S2LdnJ6tS ra+P8GChGXiGdDKIHIoRL03liHKdvyqFHFzE6Ive2ys8hUr0bqAv/Hc5/4pqvAGe ZohCQj4M8WgEN3wkZU6u6DHDf7wc1fGMXAGF -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZw8Pa6c7pJy4wfEql5n R7H7HWuvRkmBXMvrMlfj/drrhN0LCxSubfDhc6EVSLTtJi9hr5aflQgd1bFHVLit FD1J3HcWwrDLMMAzaaFa2SIE6lfRtbP9AwLhqajJ+HhMq7X8L1lZ4UjoEJBgo1Zz kYHL2n2QxWIw1pZwC3a0IaIyTpsDsU/0c9/0OgEfY6NHJeVspl4aCLgql0ooklqC g5HKu6KCqPT9p4Ye+BX1JOYejiF8ASeEMUrP7A9L1eCBcPdphyvj9oz4hOH9pWCq jZII3OTl6wzJKd4sQpwlMuMri/jn50yvdu+MaHKlndWtdRlubimFPWQeaChkSS13 DwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 378534501480678958174803828856228862365620 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-19 08:07:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-19 08:07:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'psemi.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20401409605364155238471343446361800575196695261505484735795629106452798573456445682590371181672461273427623035548280475652923701113332157621360846015275785447567016274309430028331460586721234202348286515235667943965872316875412001563037039982585726893083776329064978022568862798424456921883273942253933843195684543038860610014420752393999095009307880156657976285504048147392569548840950237287033096190847008712735788328229465190469839900905130567112305166568932105433151785586366674897864690395603735366442795796020588645400613799848298831502582943456918398554274980616873916804369359412726786770771896055540654896911 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 85c806909653b3cc8453e8b32b27720c67c4fc59 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psemi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psemi.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000018529a3538d0000040300473045022100c48ce3be0a767a3892bd3e4e7d9b6842806876cf6a9ab9679903007e5b21a19102205c9de7841173301114afd3123c4e7ae5e656e859a515b3af255eca8199060c3e007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018529a353870000040300473045022100961094042daa4894bbe55df331d0303b03feea716f464252bd5ea849f270ecc802201a7504808c3431ac07d893d1224e69e63c267cb9a822c7f92ba8f2b4e848d773 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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