opkey.com
Issued by R3
About this certificate
This digital certificate with serial number 03:35:a1:6d:7f:b8:80:9b:27:a6:1d:14:71:15:f2:19:c8:09 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=opkey.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:35:a1:6d:7f:b8:80:9b:27:a6:1d:14:71:15:f2:19:c8:09Serial Number (int): 279586397500253233473562077629336226744329
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1d:73:b7:10:b4:5b:6a:4d:f3:e1:fe:a2:13:88:00:ca:a2:fa:fe:34
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 6a:b4:1c:2d:fa:ac:f0:32:02:69:5f:f3:90:66:b8:10:12:a0:16:53
Fingerprint (sha256): c5:30:94:67:cb:40:73:4f:53:5d:43:73:eb:11:40:a2:b7:6e:a2:fe:e7:82:b5:65:6a:4e:3e:3e:be:a7:2f:17
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate opkey.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for opkey.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
opkey.com
Other certificates including the domain name opkey.com
(limited to 100 certificates)
*.opkey.com
sugarcrm.opkey.com
idempiere.opkey.com
backup.opkey.com
*.opkey.com
itsupport.nationalable.org
idempiere.opkey.com
itsupport.nationalable.org
fergusonsupport.opkey.com
odoo.opkey.com
ls.opkey.com
support.redmop.com
*.support.opkey.com
idempiere.opkey.com
idempiere.opkey.com
helpdesk.vacorp.com
sugarcrm.opkey.com
opkey.com
odoo.opkey.com
odoo.opkey.com
backup.opkey.com
support.opkey.com
odoo.opkey.com
itsupport.nationalable.org
odoo.opkey.com
*.opkey.com
fergusonsupport.opkey.com
*.sugarcrm.opkey.com
*.backup.opkey.com
*.staging.opkey.com
sugarcrm.opkey.com
opkey.com
*.helpdocs.opkey.com
*.opkey.com
www.testui.opkey.com
backup.opkey.com
openproject.opkey.com
openproject.opkey.com
ls.opkey.com
*.sugarcrm.opkey.com
backup.opkey.com
atencion.traffilog.mx
getit.saiapex.in
*.support.opkey.com
studentsupport.atpstar.com
support.opkey.com
www.account.opkey.com
*.openproject.opkey.com
getit.saiapex.in
itsupport.nationalable.org
idempiere.opkey.com
*.opkey.com
idempiere.opkey.com
opkey.com
opkey.com
getit.saiapex.in
support.ksportusa.com
support.opkey.com
pfizer.opkey.com
opkey.com
sales.miraclesmind.site
*.helpdocs.opkey.com
opkey.com
odoo.opkey.com
staging.opkey.com
backup.opkey.com
openproject.opkey.com
sugarcrm.opkey.com
openproject.opkey.com
sales.miraclesmind.site
*.openproject.opkey.com
sales.miraclesmind.site
getit.saiapex.in
support.egicat.com
sugarcrm.opkey.com
opkey.com
odoo.opkey.com
ls.opkey.com
idempiere.opkey.com
fergusonsupport.opkey.com
opkey.com
sugarcrm.opkey.com
openproject.opkey.com
support.tekxiph.com
backup.opkey.com
www.ct.opkey.com
ct.opkey.com
*.staging.opkey.com
www.testui.opkey.com
opkey.com
support.egicat.com
fergusonsupport.opkey.com
opkey.com
m.opkey.com
*.opkey.com
m.opkey.com
openproject.opkey.com
openproject.opkey.com
*.opkey.com
sales.miraclesmind.site
sugarcrm.opkey.com
idempiere.opkey.com
backup.opkey.com
*.opkey.com
itsupport.nationalable.org
idempiere.opkey.com
itsupport.nationalable.org
fergusonsupport.opkey.com
odoo.opkey.com
ls.opkey.com
support.redmop.com
*.support.opkey.com
idempiere.opkey.com
idempiere.opkey.com
helpdesk.vacorp.com
sugarcrm.opkey.com
opkey.com
odoo.opkey.com
odoo.opkey.com
backup.opkey.com
support.opkey.com
odoo.opkey.com
itsupport.nationalable.org
odoo.opkey.com
*.opkey.com
fergusonsupport.opkey.com
*.sugarcrm.opkey.com
*.backup.opkey.com
*.staging.opkey.com
sugarcrm.opkey.com
opkey.com
*.helpdocs.opkey.com
*.opkey.com
www.testui.opkey.com
backup.opkey.com
openproject.opkey.com
openproject.opkey.com
ls.opkey.com
*.sugarcrm.opkey.com
backup.opkey.com
atencion.traffilog.mx
getit.saiapex.in
*.support.opkey.com
studentsupport.atpstar.com
support.opkey.com
www.account.opkey.com
*.openproject.opkey.com
getit.saiapex.in
itsupport.nationalable.org
idempiere.opkey.com
*.opkey.com
idempiere.opkey.com
opkey.com
opkey.com
getit.saiapex.in
support.ksportusa.com
support.opkey.com
pfizer.opkey.com
opkey.com
sales.miraclesmind.site
*.helpdocs.opkey.com
opkey.com
odoo.opkey.com
staging.opkey.com
backup.opkey.com
openproject.opkey.com
sugarcrm.opkey.com
openproject.opkey.com
sales.miraclesmind.site
*.openproject.opkey.com
sales.miraclesmind.site
getit.saiapex.in
support.egicat.com
sugarcrm.opkey.com
opkey.com
odoo.opkey.com
ls.opkey.com
idempiere.opkey.com
fergusonsupport.opkey.com
opkey.com
sugarcrm.opkey.com
openproject.opkey.com
support.tekxiph.com
backup.opkey.com
www.ct.opkey.com
ct.opkey.com
*.staging.opkey.com
www.testui.opkey.com
opkey.com
support.egicat.com
fergusonsupport.opkey.com
opkey.com
m.opkey.com
*.opkey.com
m.opkey.com
openproject.opkey.com
openproject.opkey.com
*.opkey.com
sales.miraclesmind.site
Certificate
The complete raw certificate details for opkey.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAzWhbX+4gJsnph0UcRXyGcgJMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA4MjcwMjU0MjdaFw0yMjExMjUwMjU0MjZaMBQxEjAQBgNVBAMT CW9wa2V5LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANuwMn2s fSoznFchH2VcovgnAHPVY48Q7ulnGMAnkN9ORhoO1BbnIlfw5ftfOSvy7s2zw+6Y 0TwbQNFSAuaGUgi/nmFtdCOyd9IXrOgR8pvvyqyjMf1KW0hyn8OmZ6vfca4idZXb DJcEYJjZk2f/8rlKqfrwPera/cIZN3EmcIrvld+LLRHrIsZRZTFgPv66uTIabzjb /eoJUNg2jUBKVkdfv/9Y5Wb63LMyO1kEZC9WNlQPXtT9Y8SiiupCjCGM4qduNgJD kF7O36iNbULRjVwd5hkEk9+vfV2dpdfbiMZkoKw5TUM6fizrE7IIbCqzP7pcVcLh 5bCxGV+UqkNFsUECAwEAAaOCAkUwggJBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU HXO3ELRbak3z4f6iE4gAyqL6/jQwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wFAYD VR0RBA0wC4IJb3BrZXkuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcARqVV63X6kSAwtaKJafTzfREsQXS+ /Um4havy/HD+bUcAAAGC3W/KewAABAMASDBGAiEAkzXF8p4YKeBT0z8Y0I2mzYGL 7K6uEfrjWTLtuRoK+e8CIQD8BFcfWKiEAgI3vYT2gEmihBDGpeFs64aO06fakj8J bgB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABgt1vzBEAAAQD AEcwRQIgSi1YPYQIuKWBzv/qjWMu0C9EMa2ZcsNqpCoOGbYiVqsCIQDXSW5B63M0 GBrLX6x2Rd0mJ6Pgs1yIHrpohAY6n+j+gjANBgkqhkiG9w0BAQsFAAOCAQEALMj/ RC8y+F17/MzAei1KPgvDg8yJnJjlM8b2g7levhSS68lFE7nF1EHCQGU8mSIv5t4p 91+Q70tTXLvZdbnUgdNmm5HiF7gGGWYYdOqJuqX9RHIEJD161xHbhWzqBe16f8YI x4Z59bWmXJYemaXZtLzgRLXCpTcH5O9UB7pWxC21W0UEZ8LoHOlPPlCwXKDyOJQ+ Uzj/HNwQJYRwgJPVtZX4FeXmra3Cby0sVN1qOLo+O6S2fchgvHXsJPSQcuU8v6Nh HkU01ojp3+QM7FCp2oBEsJdErYV6mgNrQ24vqHfgi+8j2J7f5r0q5trUCb9HTisX mV6o+BwDnUmpQFCBcQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27Ayfax9KjOcVyEfZVyi +CcAc9VjjxDu6WcYwCeQ305GGg7UFuciV/Dl+185K/LuzbPD7pjRPBtA0VIC5oZS CL+eYW10I7J30hes6BHym+/KrKMx/UpbSHKfw6Znq99xriJ1ldsMlwRgmNmTZ//y uUqp+vA96tr9whk3cSZwiu+V34stEesixlFlMWA+/rq5MhpvONv96glQ2DaNQEpW R1+//1jlZvrcszI7WQRkL1Y2VA9e1P1jxKKK6kKMIYzip242AkOQXs7fqI1tQtGN XB3mGQST3699XZ2l19uIxmSgrDlNQzp+LOsTsghsKrM/ulxVwuHlsLEZX5SqQ0Wx QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279586397500253233473562077629336226744329 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-27 02:54:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-25 02:54:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opkey.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27733074880032843018058205360692709110339904964639588331154293556749280329009769195117652283996157817858955753682388033435420698533842276136585713343794329389588356702752581043635811441926735401764109129612946343026681770932380738926183173887871662752246132242876624135005846642284122769275227610478129812312514819846876614426678145230895809409192579216987893339891109464143186725829607177936438140570398994440726896158285678290582063564601825035699564908068654034685083976764408965170536012678846053714568885841574952493803252890565922307076217382409203182672452811850266798217540599171846258601961863765174530715969 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1d73b710b45b6a4df3e1fea2138800caa2fafe34 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opkey.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000182dd6fca7b00000403004830460221009335c5f29e1829e053d33f18d08da6cd818becaeae11fae35932edb91a0af9ef022100fc04571f58a884020237bd84f68049a28410c6a5e16ceb868ed3a7da923f096e0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000182dd6fcc11000004030047304502204a2d583d8408b8a581ceffea8d632ed02f4431ad9972c36aa42a0e19b62256ab022100d7496e41eb7334181acb5fac7645dd2627a3e0b35c881eba6884063a9fe8fe82 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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