lets.gofroliic.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:72:31:57:6b:20:94:59:a1:f9:4f:5f:fd:d0:dd:61:a5:cd was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lets.gofroliic.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:72:31:57:6b:20:94:59:a1:f9:4f:5f:fd:d0:dd:61:a5:cdSerial Number (int): 300194633698686919114409033976962902762957
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 03:b6:8a:1d:10:45:0a:e7:bd:42:ff:ec:b9:d3:7d:be:7c:fd:d0:0d
Fingerprint (sha256): ac:49:1a:98:9e:54:bd:c4:3d:80:ab:92:c2:95:45:e6:a1:29:9f:bc:ac:09:f8:db:06:93:a2:23:82:cc:75:33
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate lets.gofroliic.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lets.gofroliic.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lets.gofroliic.com
Other certificates including the domain name gofroliic.com
(limited to 100 certificates)
qa-admin.sasta.app
signum.app
app.beachbodytracker.com
yolocar.jagusz.pl
smatchapp.com
cocopetites.com
tahado.app
sourcethe.coffee
manager.gofroliic.com
hackventory.com
www.bdr7r.club
myaccount-dev.owletcare.com
admin.dexer.app
gofroliic.com
gofroliic.com
www.easteden.app
www.thefab.co
manage-dev.gofroliic.com
gofroliic.com
dev.talsho.com
sumitk.xyz
gofroliic.com
firebase.apptite.de
support.gofroliic.com
www.veeyeselectronics.com
gofroliic.com
trackmate.app
nativemind.agency
gofroliic.com
admin.gofroliic.com
gofroliic.com
dev.talsho.com
fitness.baswanders.com
www.boazmatoki.com
www.jkallunki.net
bursik-stavby.cz
www.switchboard.ws
gestify.io
erauqsh.com
www.mouselabs.com.br
ingalsa.com.es
itqan.app
panel.queue.e-ceos.com.br
www.brighthabits.app
www.collectionbecm2018.com
collegediary.in
tim.vanderlee.family
admin-dev.gofroliic.com
lets.gofroliic.com
www.mimions.com
gofroliic.com
account.gigxam.com
www.thefab.co
task.laxmidental.com
widget.tapperuse.nl
app.teste3.refiltek.com.br
smatchapp.com
team.16ahead.com
gofroliic.com
pay.halal.ad
beacons.ai
gofroliic.com
www.easteden.app
manage-dev.gofroliic.com
manage.gofroliic.com
sourcethe.coffee
nativemind.agency
alohahealth.app
qa.sandhillsne.mylnk.app
admin.jinxzt.com
support.gofroliic.com
bursik-stavby.cz
auth.dojonaut.com
tv.signaturecookbook.com
www.quickplan.app
innocation.co
www.boazmatoki.com
www.seishak.com
gofroliic.com
www.veeyeselectronics.com
qa.sandhillsne.mylnk.app
run.matryoshka.app
clip.codes
gofroliic.com
charaplus.com
criptocrew.com
signum.app
app.beachbodytracker.com
yolocar.jagusz.pl
smatchapp.com
cocopetites.com
tahado.app
sourcethe.coffee
manager.gofroliic.com
hackventory.com
www.bdr7r.club
myaccount-dev.owletcare.com
admin.dexer.app
gofroliic.com
gofroliic.com
www.easteden.app
www.thefab.co
manage-dev.gofroliic.com
gofroliic.com
dev.talsho.com
sumitk.xyz
gofroliic.com
firebase.apptite.de
support.gofroliic.com
www.veeyeselectronics.com
gofroliic.com
trackmate.app
nativemind.agency
gofroliic.com
admin.gofroliic.com
gofroliic.com
dev.talsho.com
fitness.baswanders.com
www.boazmatoki.com
www.jkallunki.net
bursik-stavby.cz
www.switchboard.ws
gestify.io
erauqsh.com
www.mouselabs.com.br
ingalsa.com.es
itqan.app
panel.queue.e-ceos.com.br
www.brighthabits.app
www.collectionbecm2018.com
collegediary.in
tim.vanderlee.family
admin-dev.gofroliic.com
lets.gofroliic.com
www.mimions.com
gofroliic.com
account.gigxam.com
www.thefab.co
task.laxmidental.com
widget.tapperuse.nl
app.teste3.refiltek.com.br
smatchapp.com
team.16ahead.com
gofroliic.com
pay.halal.ad
beacons.ai
gofroliic.com
www.easteden.app
manage-dev.gofroliic.com
manage.gofroliic.com
sourcethe.coffee
nativemind.agency
alohahealth.app
qa.sandhillsne.mylnk.app
admin.jinxzt.com
support.gofroliic.com
bursik-stavby.cz
auth.dojonaut.com
tv.signaturecookbook.com
www.quickplan.app
innocation.co
www.boazmatoki.com
www.seishak.com
gofroliic.com
www.veeyeselectronics.com
qa.sandhillsne.mylnk.app
run.matryoshka.app
clip.codes
gofroliic.com
charaplus.com
criptocrew.com
Certificate
The complete raw certificate details for lets.gofroliic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISA3IxV2sglFmh+U9f/dDdYaXNMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MzAxMjM0MzRaFw0x OTExMjgxMjM0MzRaMB0xGzAZBgNVBAMTEmxldHMuZ29mcm9saWljLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKx8yW5NaPbYQgz5/BAcDw8UYG2D tu8rWWma+PGKkQV1xSswYe8aJNbhn6zj4i+FvWQErDH3nKFvAXCkS+uzRb6kZsVn kHGphx/kpCz7ov5SqZ9tgCYABWP66xWjIyPRdeFuytuLBcRsd/XsHMFKK9RHaO9N U6lLhnBV68POSCrAyJ891xGmypH0ST2Rsqy0IiJHo+klWMEPAfTNQTrzhN5u3GO4 DQjicCZscFtm+21P+N1qydg0bm0kC8rZBu9fXrB+KeAI1YmvjmYhIMKWEbBEIp6M b9zYhYWNaKvg1NgUyY0njOmmWEL1byF/+U/bXWq6bWAzW4kFKMk609tsIa8CAwEA AaOCAmgwggJkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUbHAkQcQZ/UpvGpvVj6IU TiYhEMgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzAdBgNVHREEFjAUghJsZXRzLmdvZnJvbGlpYy5jb20wTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgB0 ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWzivBwIAAAEAwBHMEUC IQCE1m2LLgrN7iUMET+UO5KsiNBgACMv68WdBK0oigwl9AIgcip6qSkVlWVsNu4a 0W9HqmRVDTjdBxZ6ODsnWbN5BpsAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTD DPTlRUf0eAAAAWzivBwcAAAEAwBIMEYCIQDO6cm7ONuUePOmqCVPjHSurP4EfusR v3CjgGz/HYHCmwIhAPAjrHvWxlKSWtN1q+5coPhFMgCGUX0heEnVNdiwSNKpMA0G CSqGSIb3DQEBCwUAA4IBAQBmulVAhxBB8qmFslXWAp50n35Bq8pf07a/PqXoqwps uxPdzdogn7qpSqDVS6XubuqfVMML1im6PgWWwPqW4NIYlp8ksJV4WC1iPrWTVb9s 9nzyOEdmnQhxsFh855RwMIgn6dmi1PC6+CQiQqSdpRwpZck0mV3G0rBBLynxCSXq 3G8vaR9nzJG7a/MSwcGUVsHB0SVfg0X9Loa12SZBGvG2ZmVLqPL2fEVzzUPozQ4m Otu85EnsZKhq0H3RD9UKxI+yTfojffqXHvAq1T2i/KJ6F1rSpj8hUaiwjGpmSH7J /+qaFV/833rN5NIUAiO1Gi08qrvAcKB5A1+Oka/znKBL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor 1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE 3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh rwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 300194633698686919114409033976962902762957 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 12:34:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 12:34:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lets.gofroliic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6c702441c419fd4a6f1a9bd58fa2144e262110c8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lets.gofroliic.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ce2bc1c08000004030047304502210084d66d8b2e0acdee250c113f943b92ac88d06000232febc59d04ad288a0c25f40220722a7aa9291595656c36ee1ad16f47aa64550d38dd07167a383b2759b379069b007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ce2bc1c1c0000040300483046022100cee9c9bb38db9478f3a6a8254f8c74aeacfe047eeb11bf70a3806cff1d81c29b022100f023ac7bd6c652925ad375abee5ca0f845320086517d217849d535d8b048d2a9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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