reachmedia.co.nz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:ea:88:c8:2c:0f:fc:9c:0e:53:c5:c2:63:96:84:86:4b:15 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=reachmedia.co.nz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ea:88:c8:2c:0f:fc:9c:0e:53:c5:c2:63:96:84:86:4b:15Serial Number (int): 428257031947031666442114643145642494806805
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ab:f9:7c:36:e0:62:c8:74:03:3d:34:f2:56:46:45:b5:9a:36:a5:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 32:f4:4d:82:1e:ce:36:4b:cf:4f:72:99:0a:b1:d2:6d:bf:58:8a:b8
Fingerprint (sha256): b4:b7:2f:3f:24:41:65:a6:9e:19:29:73:87:fa:bc:5f:c7:3a:40:a2:3f:e0:5b:aa:9a:4c:36:c6:18:bf:dc:68
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate reachmedia.co.nz
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for reachmedia.co.nz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
reachmedia.co.nz
Other certificates including the domain name reachmedia.co.nz
(limited to 100 certificates)
reach.nz
sandbox.rpcadmin.sauvara.com
www.reachmedia.co.nz
aquacontrol.in
federiquitos.com
reachmedia.co.nz
reachmedia.co.nz
enquiries.reachmedia.co.nz
sputnik.reachmedia.co.nz
*.reachmedia.co.nz
sputnik.reachmedia.co.nz
quote.reachmedia.co.nz
*.reachmedia.co.nz
auditustec.com
www.rotsonsolitaire.com
www.mcareauto.com
federiquitos.com
www.gomyapp.com
reach.nz
reach.nz
engage.reachmedia.co.nz
app.yours.work.life
*.reachmedia.co.nz
www.3pondsdigital.io
www.aircache.app
engage.reachmedia.co.nz
*.reachmedia.co.nz
www.reachmedia.co.nz
sputnik.reachmedia.co.nz
epicgames.12traits.com
djanblom.dk
enquiries.reachmedia.co.nz
givebee.co
web.journee.live
reachmedia.co.nz
quote.reachmedia.co.nz
enquiries.reachmedia.co.nz
d-olympus.store
www.jayuyastem.org
lms.reachmedia.co.nz
construtoramayor.com.br
reachmedia.co.nz
web.journee.live
blockdrop.app
physician.hotfix.lifemd.com
construtoramayor.com.br
*.reachmedia.co.nz
bodymap.ai
member.toothpicprelive.com
sputnik.reachmedia.co.nz
olive.olivos.cl
reach.nz
admin.vojo.com.br
www.riingo.com
*.reachmedia.co.nz
reachmedia.co.nz
pinpoint-latest-wpba.cox2m.com
bodymap.ai
www.ryancorb.in
reach.nz
www.ryancorb.in
*.reachmedia.co.nz
reachmedia.co.nz
www.reachmedia.co.nz
www.mcareauto.com
couriers.reachmedia.co.nz
www-nutrigenomix-test.mixxmac.com
engage.reachmedia.co.nz
lms.reachmedia.co.nz
*.reachmedia.co.nz
ta.dn2me.com
hyper.hanak.in
fonts.typogram.co
www.reachmedia.co.nz
www.blate.app
ta.dn2me.com
reachmedia.co.nz
reach.nz
portal-uat.hastingsdeering.com.au
admin.vojo.com.br
sandbox.rpcadmin.sauvara.com
www.reachmedia.co.nz
aquacontrol.in
federiquitos.com
reachmedia.co.nz
reachmedia.co.nz
enquiries.reachmedia.co.nz
sputnik.reachmedia.co.nz
*.reachmedia.co.nz
sputnik.reachmedia.co.nz
quote.reachmedia.co.nz
*.reachmedia.co.nz
auditustec.com
www.rotsonsolitaire.com
www.mcareauto.com
federiquitos.com
www.gomyapp.com
reach.nz
reach.nz
engage.reachmedia.co.nz
app.yours.work.life
*.reachmedia.co.nz
www.3pondsdigital.io
www.aircache.app
engage.reachmedia.co.nz
*.reachmedia.co.nz
www.reachmedia.co.nz
sputnik.reachmedia.co.nz
epicgames.12traits.com
djanblom.dk
enquiries.reachmedia.co.nz
givebee.co
web.journee.live
reachmedia.co.nz
quote.reachmedia.co.nz
enquiries.reachmedia.co.nz
d-olympus.store
www.jayuyastem.org
lms.reachmedia.co.nz
construtoramayor.com.br
reachmedia.co.nz
web.journee.live
blockdrop.app
physician.hotfix.lifemd.com
construtoramayor.com.br
*.reachmedia.co.nz
bodymap.ai
member.toothpicprelive.com
sputnik.reachmedia.co.nz
olive.olivos.cl
reach.nz
admin.vojo.com.br
www.riingo.com
*.reachmedia.co.nz
reachmedia.co.nz
pinpoint-latest-wpba.cox2m.com
bodymap.ai
www.ryancorb.in
reach.nz
www.ryancorb.in
*.reachmedia.co.nz
reachmedia.co.nz
www.reachmedia.co.nz
www.mcareauto.com
couriers.reachmedia.co.nz
www-nutrigenomix-test.mixxmac.com
engage.reachmedia.co.nz
lms.reachmedia.co.nz
*.reachmedia.co.nz
ta.dn2me.com
hyper.hanak.in
fonts.typogram.co
www.reachmedia.co.nz
www.blate.app
ta.dn2me.com
reachmedia.co.nz
reach.nz
portal-uat.hastingsdeering.com.au
admin.vojo.com.br
Certificate
The complete raw certificate details for reachmedia.co.nz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgISBOqIyCwP/JwOU8XCY5aEhksVMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDUwNjI5MzdaFw0y MDAyMDMwNjI5MzdaMBsxGTAXBgNVBAMTEHJlYWNobWVkaWEuY28ubnowggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDItJxWP+jHoD02rDjQ9DgOfI1K41d1 3NzXblXRHdZ1BxhYoEqC5taJudSKaionvGUBhfypEv5mz60rCCJYENBR8UaE1D75 TOuu8eKiHVK2w3eq9UK9+zN41ThQ8/U+Ki2rk7Q6zEUT6RALjhYefUFM7fKS/1hw jcKUG0ZdIubQk5QbZ+kxdIM0FGAndDBE7C76aP9hs4/V+rQf1oLgiGdHoB9nPiUm vHRUf090oqCTnEZC9jAeiMoj4p9YZLUWO00JJo61FMyb+AaJiwyTD5Rh2Cp5sKvb OaXE44dKw2UyMAa/HBzjs70wwlKAM0reoIMovdRp7/BykNywcMk+5YQHAgMBAAGj ggJlMIICYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKv5fDbgYsh0Az008lZGRbWa NqUGMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wGwYDVR0RBBQwEoIQcmVhY2htZWRpYS5jby5uejBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AF6nc/nf VsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbjp4D+wAAAQDAEcwRQIgIkxS xTcfooJk8cd9s/h3SjTmJ4e63kVybNby2oXapXQCIQD8OmQBa2EAg3C8VQPaLb8z epMJ0hu1sRiCEUER4pjCawB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3v i5BeAAABbjp4D+gAAAQDAEcwRQIgX3N5brpR4T933JxrSePJ6WwtWQpqXgnvSFyW foDYOZYCIQDncU++vk+narMlJHuuFMPvJP5hwnYz8nY5e/vJ0s+tVzANBgkqhkiG 9w0BAQsFAAOCAQEAENBLZiav0MkNBZYhH7CxwGAyOkuz8w4pdCnPXjM1cxc3T8Tf jNzW2g1+l11Oh4+6iwTbH8ibtX3VV7zwxIRE0kPY8YAdmTgGA1JEFsuysK5uc2Be jzurU/PVddkOpQ0awY15wmOdQ8EPD+kg317OjkfoSG0+M/kAOowNq1J+9Pjbwm2E biP0CaYAjk/C0LmLQ9oTZCwOJ695zfOtaRvOomHoF6ZxC5wTXASaLtQODGFbvzhV PJNvWPtlTqzrRQzucaXe7sBE2AzHVSr6kI3Ot5jIJCpjYiEcJIT8o11YeWkyllEu rb9sIvHwe2JwxiK6CCnfI/FB7P28PfDrqmdSMw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLScVj/ox6A9Nqw40PQ4 DnyNSuNXddzc125V0R3WdQcYWKBKgubWibnUimoqJ7xlAYX8qRL+Zs+tKwgiWBDQ UfFGhNQ++UzrrvHioh1StsN3qvVCvfszeNU4UPP1Piotq5O0OsxFE+kQC44WHn1B TO3ykv9YcI3ClBtGXSLm0JOUG2fpMXSDNBRgJ3QwROwu+mj/YbOP1fq0H9aC4Ihn R6AfZz4lJrx0VH9PdKKgk5xGQvYwHojKI+KfWGS1FjtNCSaOtRTMm/gGiYsMkw+U YdgqebCr2zmlxOOHSsNlMjAGvxwc47O9MMJSgDNK3qCDKL3Uae/wcpDcsHDJPuWE BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 428257031947031666442114643145642494806805 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 06:29:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 06:29:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reachmedia.co.nz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25336723444378962884144726675423989452388339018684714598293148939039308282174561344075199742524702940075057467050171050284576752836671958546554851398623886431568565814274338850337722760793085544428782668290062119342795139103100613719858259115194438584543356903558734340203689831076233154543872879924998084268872125649474327234471541009218175434313687394413412209679148399919731436710211101699082515446378415814253774271731163261508563791696209579276825278777692504519069100329088257761244660747804246337123577321723754806123941940378497192207462659666463634033313424394073111551988307182457295080819748357150236574727 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) abf97c36e062c874033d34f2564645b59a36a506 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reachmedia.co.nz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e3a780fec00000403004730450220224c52c5371fa28264f1c77db3f8774a34e62787bade45726cd6f2da85daa574022100fc3a64016b61008370bc5503da2dbf337a9309d21bb5b11882114111e298c26b007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e3a780fe8000004030047304502205f73796eba51e13f77dc9c6b49e3c9e96c2d590a6a5e09ef485c967e80d83996022100e7714fbebe4fa76ab325247bae14c3ef24fe61c27633f276397bfbc9d2cfad57 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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