communitypub.com
Issued by Amazon
About this certificate
This digital certificate with serial number 09:97:02:65:98:e6:2c:ed:95:ef:9d:9a:c4:2d:42:48 was issued on by Amazon.
With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=communitypub.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:97:02:65:98:e6:2c:ed:95:ef:9d:9a:c4:2d:42:48Serial Number (int): 12747137401886609670244747539706102344
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: eb:2b:14:f4:6c:06:e6:38:9e:bf:f0:98:7b:cc:11:b4:fe:42:fc:82
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 0e:1d:32:ae:b8:ba:58:1f:98:38:ea:31:2d:1f:50:d0:a2:59:b3:79
Fingerprint (sha256): bf:be:7d:9d:4a:82:58:7b:23:56:8d:fb:cb:4b:24:45:d1:6b:4e:d8:6c:f4:bd:5f:92:01:a1:ca:89:54:0c:70
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate communitypub.com
15
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for communitypub.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
communitypub.com
*.communitypub.com
doverpost.com
*.doverpost.com
hockessincommunitynews.com
*.hockessincommunitynews.com
middletowntranscript.com
*.middletowntranscript.com
milfordbeacon.com
*.milfordbeacon.com
scsuntimes.com
*.scsuntimes.com
sussexcountian.com
*.sussexcountian.com
*.newscyclecloud.com
*.communitypub.com
doverpost.com
*.doverpost.com
hockessincommunitynews.com
*.hockessincommunitynews.com
middletowntranscript.com
*.middletowntranscript.com
milfordbeacon.com
*.milfordbeacon.com
scsuntimes.com
*.scsuntimes.com
sussexcountian.com
*.sussexcountian.com
*.newscyclecloud.com
Other certificates including the domain name communitypub.com
(limited to 100 certificates)
ezads.communitypub.com
incapsula.com
incapsula.com
incapsula.com
ezads.communitypub.com
communitypub.com
incapsula.com
communitypub.com
ezads.communitypub.com
incapsula.com
incapsula.com
ezads.communitypub.com
ezads.communitypub.com
incapsula.com
communitypub.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
ezads.communitypub.com
communitypub.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
ezads.communitypub.com
communitypub.com
incapsula.com
communitypub.com
ezads.communitypub.com
incapsula.com
incapsula.com
ezads.communitypub.com
ezads.communitypub.com
incapsula.com
communitypub.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
ezads.communitypub.com
communitypub.com
incapsula.com
Certificate
The complete raw certificate details for communitypub.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgIQCZcCZZjmLO2V752axC1CSDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA4MjcwMDAwMDBaFw0yMDA5Mjcx MjAwMDBaMBsxGTAXBgNVBAMTEGNvbW11bml0eXB1Yi5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCiSnXIBU+JFAFS/q/ZraKfkvojhL8GZNe6mIkl LM8lS7UsJdfCJ3wwYeAQ7pLyJG+f4ibzBXFoOgCh7de9Jbw92Ea46oHEflfWiQ/s MFTEdb1QCwSYQco6knr/pjco3pEs3te8Ul+Ybmp9doB7mly5ovyq0MP4WWjImqx7 xoy36m/JMuT78D8rjrYEIXwZ2b9fSF9wPk7fzduTsknoLIwwG7N/v2Yb+QGJ3M0D AO1qk24uaPcWqdhhHKOivWxA7xU45+NmtKMgdky51eH04AVU9I3AQWkYxJfBFp73 IowlvPb8bWs8vJixY0EprcCrbEi1IAm+Sj9FoxqkKzXDlP7LAgMBAAGjggK9MIIC uTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU6ysU 9GwG5jiev/CYe8wRtP5C/IIwggFNBgNVHREEggFEMIIBQIIQY29tbXVuaXR5cHVi LmNvbYISKi5jb21tdW5pdHlwdWIuY29tgg1kb3ZlcnBvc3QuY29tgg8qLmRvdmVy cG9zdC5jb22CGmhvY2tlc3NpbmNvbW11bml0eW5ld3MuY29tghwqLmhvY2tlc3Np bmNvbW11bml0eW5ld3MuY29tghhtaWRkbGV0b3dudHJhbnNjcmlwdC5jb22CGiou bWlkZGxldG93bnRyYW5zY3JpcHQuY29tghFtaWxmb3JkYmVhY29uLmNvbYITKi5t aWxmb3JkYmVhY29uLmNvbYIOc2NzdW50aW1lcy5jb22CECouc2NzdW50aW1lcy5j b22CEnN1c3NleGNvdW50aWFuLmNvbYIUKi5zdXNzZXhjb3VudGlhbi5jb22CFCou bmV3c2N5Y2xlY2xvdWQuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5z Y2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZI AYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0 dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0 cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB /wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBADPP TfwfmpXrMiYEa3HNt/hk5n5nIij8B+h1njjkXJHbWB7L1C0p24/XcwA7ZkwPmY+N FbpOZZVrkg4lupIjaf/m9ldJMCz3wdyHl4Vlcp0qUgQjVuMNWrDGcTmhvOiJClf1 OeHlE9HOY12zNjIFZlsTfve4SvuKTzBkzdmbW974zfHBnQHEKhHf9eyzZ5JqnsZH eDfBkF91ckFan+WYMx9aQKDUSr6bwdk6gTYzf3fGwNsreC8lQehbLsrBkwjPQf3/ /7rfBFaIfZzCFxWWkp9nXI0gJkMvm+L5rnIjEhhQlXuvOzH2N9rGbZG7WEs5FvWn Dzxh5ayrF8eA/Peox4c= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokp1yAVPiRQBUv6v2a2i n5L6I4S/BmTXupiJJSzPJUu1LCXXwid8MGHgEO6S8iRvn+Im8wVxaDoAoe3XvSW8 PdhGuOqBxH5X1okP7DBUxHW9UAsEmEHKOpJ6/6Y3KN6RLN7XvFJfmG5qfXaAe5pc uaL8qtDD+FloyJqse8aMt+pvyTLk+/A/K462BCF8Gdm/X0hfcD5O383bk7JJ6CyM MBuzf79mG/kBidzNAwDtapNuLmj3FqnYYRyjor1sQO8VOOfjZrSjIHZMudXh9OAF VPSNwEFpGMSXwRae9yKMJbz2/G1rPLyYsWNBKa3Aq2xItSAJvko/RaMapCs1w5T+ ywIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12747137401886609670244747539706102344 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-27 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'communitypub.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20487323040073754379585214783188667677858618300859727833733228643593408634821584179902732148364319293609177468593085627210862073861559106277090084924171464110787716321226880741711056646655176110666239687499575142349594229191366673902453353350023674480239477123541990518180312357267911065286404951096647544901931837036232696424013115920275050067768187336643893741680891247233157156116441265848192260689868060148613264351139437201912264134944233037654572296207545485422363312928962253124315870278573255506193728961573925124288307531593519377448662702174076099137417079663548740635108476082923537252413984437470433181387 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) eb2b14f46c06e6389ebff0987bcc11b4fe42fc82 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (324 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitypub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.communitypub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doverpost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doverpost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockessincommunitynews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hockessincommunitynews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middletowntranscript.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.middletowntranscript.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milfordbeacon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milfordbeacon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scsuntimes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scsuntimes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sussexcountian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sussexcountian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newscyclecloud.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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