svenskarnashus.se
Issued by R3
About this certificate
This digital certificate with serial number 04:ce:50:53:6c:46:f4:0b:67:3d:13:59:ae:76:91:67:b2:72 was issued on by Let's Encrypt.
With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=svenskarnashus.se
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ce:50:53:6c:46:f4:0b:67:3d:13:59:ae:76:91:67:b2:72Serial Number (int): 418654082709178098418965966574087293088370
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 55:4f:9b:79:89:11:dc:5c:a5:f9:c0:88:c9:df:79:35:0b:d6:5f:26
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): af:0b:a7:74:bf:fe:d2:ca:68:6d:a9:ca:61:aa:cf:5f:79:ad:94:72
Fingerprint (sha256): b2:b2:de:54:52:05:4c:ce:49:01:74:ae:49:a7:30:f2:bb:fe:95:83:2b:91:16:f5:85:ec:21:8a:a3:56:f5:54
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate svenskarnashus.se
19
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for svenskarnashus.se
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
atlantahomeimprovements.com
bidirectionalconverter.com
bridecheer.com
coldwaterrealestate.com
crystal-awards.com
deify.fm
faithfullyeducatingamerica.org
faithfulshepherds.net
ironlighthouse.org
lawrencemitchell.com
pilotground.com
rallscounty.com
renewableenergyandpower.com
securachild.com
shopjohnny.com
sktch.com
svenskarnashus.se
tenteci.com
triallaw.net
bidirectionalconverter.com
bridecheer.com
coldwaterrealestate.com
crystal-awards.com
deify.fm
faithfullyeducatingamerica.org
faithfulshepherds.net
ironlighthouse.org
lawrencemitchell.com
pilotground.com
rallscounty.com
renewableenergyandpower.com
securachild.com
shopjohnny.com
sktch.com
svenskarnashus.se
tenteci.com
triallaw.net
Other certificates including the domain name svenskarnashus.se
(limited to 100 certificates)
svenskarnashus.se
elizabethkeogh.ca
www.retirefund.us
svenskarnashus.se
svenskarnashus.se
onthemarks.ca
svenskarnashus.se
svenskarnashus.se
sni.cloudflaressl.com
museumof.bible
svenskarnashus.se
svenskarnashus.se
svenskarnashus.se
enerpactoolgroup.co.za
kudzoo.media
svenskarnashus.se
sni.cloudflaressl.com
museumof.bible
museumof.bible
azulprofundo.yoga
elizabethkeogh.ca
www.retirefund.us
svenskarnashus.se
svenskarnashus.se
onthemarks.ca
svenskarnashus.se
svenskarnashus.se
sni.cloudflaressl.com
museumof.bible
svenskarnashus.se
svenskarnashus.se
svenskarnashus.se
enerpactoolgroup.co.za
kudzoo.media
svenskarnashus.se
sni.cloudflaressl.com
museumof.bible
museumof.bible
azulprofundo.yoga
Certificate
The complete raw certificate details for svenskarnashus.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISBM5QU2xG9AtnPRNZrnaRZ7JyMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMjYwODM0NDVaFw0yNDA0MjUwODM0NDRaMBwxGjAYBgNVBAMT EXN2ZW5za2FybmFzaHVzLnNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxgGajtLsoqdzAfVh6DPEefiaikvVygVIa1Ht1eXath+tZ0TPshCdSyam+RF HblT+q9x/Txaa1Ao442lswe87kAR7QYQltmyefE383c9PRnT40ko8i0Sq0ItLeVN 0E2ozKY4fc6cE0vhXy3T6bbh7a3f9Z/MRz0iZfEct2RHV1zQ+HNFSfb/XPBo7/rO tX6Q0kPTTrToBeWXc6oAxe03gXIYokB5JwAGdetq9R06K1uXNuAxXygJX6+Z/bCE TAhZ3KInlXfoDUoZCEm372Q+OLO7ltbVKmRwh/A8rFn2fda4xemuqBuKGD4AQ3y8 hmjxXBGc2NmwNreNM1DK4aUHQQIDAQABo4IDfzCCA3swDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBRVT5t5iRHcXKX5wIjJ33k1C9ZfJjAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzCCAYcGA1UdEQSCAX4wggF6ghthdGxhbnRhaG9tZWltcHJvdmVtZW50cy5j b22CGmJpZGlyZWN0aW9uYWxjb252ZXJ0ZXIuY29tgg5icmlkZWNoZWVyLmNvbYIX Y29sZHdhdGVycmVhbGVzdGF0ZS5jb22CEmNyeXN0YWwtYXdhcmRzLmNvbYIIZGVp ZnkuZm2CHmZhaXRoZnVsbHllZHVjYXRpbmdhbWVyaWNhLm9yZ4IVZmFpdGhmdWxz aGVwaGVyZHMubmV0ghJpcm9ubGlnaHRob3VzZS5vcmeCFGxhd3JlbmNlbWl0Y2hl bGwuY29tgg9waWxvdGdyb3VuZC5jb22CD3JhbGxzY291bnR5LmNvbYIbcmVuZXdh YmxlZW5lcmd5YW5kcG93ZXIuY29tgg9zZWN1cmFjaGlsZC5jb22CDnNob3Bqb2hu bnkuY29tgglza3RjaC5jb22CEXN2ZW5za2FybmFzaHVzLnNlggt0ZW50ZWNpLmNv bYIMdHJpYWxsYXcubmV0MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHW eQIEAgSB9ASB8QDvAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMA AAGNRR8lCgAABAMARzBFAiEAsfBVrV4AVo4t/qxP2oFBGhmeNprML70CVzaIv7RZ ViICIGa+oGWdG8fC9kFVr249pGTE1L5yZAhO7ofMGlqsXDUoAHUAouK/1h7eLy8H oNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGNRR8loQAABAMARjBEAiB82/ZhCIMD NCdzs6cZneSfR0KAHo15UIo2Wg/Dr1T+SgIgALlLcDz1kdEIl2B2/yQoLazciuwT NEYgFFWOuIUGxyQwDQYJKoZIhvcNAQELBQADggEBAGUHP9/qmOKBJA0rlorpyfgr whI+qIIc9BlRybXfzZkwAAF70cguzynFpbKXFgAtv26+dEFmjbopLDdYNDTtiXdL AgDDGTuhOau9GFhT7NS16Pgpse7jQ9dUGcYN6juZoPmouAwBfhClNtqj1fWrv2k/ Mm6wng8kNxSeGQYYnG1dCcW57zxgcrTuTh/MkhnRIdXudbANLHwhgDOaMQ9Dh5I3 PPkyyLHwoOAy1LcaS34NDH5FmwuZlmPa/yqQCibx7cw9TC1aQSTeao8GMxjdsYSN QdzhmuAHCMavtWhdlCStfCpDCuXAOkIOn+2WXdqqE4PYngPkhhN5GTA7oqB+HCU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxgGajtLsoqdzAfVh6DP EefiaikvVygVIa1Ht1eXath+tZ0TPshCdSyam+RFHblT+q9x/Txaa1Ao442lswe8 7kAR7QYQltmyefE383c9PRnT40ko8i0Sq0ItLeVN0E2ozKY4fc6cE0vhXy3T6bbh 7a3f9Z/MRz0iZfEct2RHV1zQ+HNFSfb/XPBo7/rOtX6Q0kPTTrToBeWXc6oAxe03 gXIYokB5JwAGdetq9R06K1uXNuAxXygJX6+Z/bCETAhZ3KInlXfoDUoZCEm372Q+ OLO7ltbVKmRwh/A8rFn2fda4xemuqBuKGD4AQ3y8hmjxXBGc2NmwNreNM1DK4aUH QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 418654082709178098418965966574087293088370 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 08:34:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 08:34:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'svenskarnashus.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25638223105990566882528844905804712501651631216102446131552852124755644025899164553290739212902671738860397184589884181777997977039414762384678434635514759309397128825130623956270952762566516517968326756077512593657593185329154716663641796638044992653585302118281309000553150778747941352654130449382438357440507820632862941802499921571891748915502420985903203829307872014890814656834291612834890855512040233828827709646054617093434638438168565354176605114867258902987110793785509490248982133152679768098558841685679397210238469796880606665232111029594466725868132446886234081516566395038214545997024377949382418696001 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 554f9b798911dc5ca5f9c088c9df79350bd65f26 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (382 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantahomeimprovements.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidirectionalconverter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridecheer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coldwaterrealestate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystal-awards.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deify.fm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithfullyeducatingamerica.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithfulshepherds.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironlighthouse.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawrencemitchell.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilotground.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallscounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewableenergyandpower.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securachild.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopjohnny.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sktch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svenskarnashus.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenteci.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triallaw.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d451f250a0000040300473045022100b1f055ad5e00568e2dfeac4fda81411a199e369acc2fbd02573688bfb4595622022066bea0659d1bc7c2f64155af6e3da464c4d4be7264084eee87cc1a5aac5c3528007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d451f25a1000004030046304402207cdbf661088303342773b3a7199de49f4742801e8d79508a365a0fc3af54fe4a022000b94b703cf591d108976076ff24282dacdc8aec1334462014558eb88506c724 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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