lucidworks.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:71:5b:0d:ea:b3:26:23:85:03:13:4f:74:54:55:3c:83:a3 was issued on by Let's Encrypt.
With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lucidworks.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:71:5b:0d:ea:b3:26:23:85:03:13:4f:74:54:55:3c:83:a3Serial Number (int): 387022083196860112970502913158991451030435
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e7:53:c6:66:28:18:bd:8d:0f:58:1c:f8:14:ef:9a:8e:f9:27:bd:1f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e8:7d:ed:e8:5f:18:dd:62:54:ba:83:64:ff:28:fc:1c:a9:ae:d6:3e
Fingerprint (sha256): c8:00:4f:26:21:c6:e2:5a:97:63:af:2f:a6:1b:6d:11:39:aa:52:f3:ad:a8:77:60:bd:86:f7:e6:30:8b:55:db
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate lucidworks.org
21
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lucidworks.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
0rp.com
aipocolypse.com
babybouquets.com
bitgifted.com
certifieddomainname.com
embroideryprinting.com
employmentpalooza.com
equaljusticemarch.com
healthyhomepestdefence.com
hometrouble.com
hommagewatches.com
lekklin.com
lotterymazimizer.com
lucidworks.org
madeyoublush.com
migrainelab.com
mountwave.com
mustachioed.com
octobeard.com
shaaedi.com
termitepipe.com
aipocolypse.com
babybouquets.com
bitgifted.com
certifieddomainname.com
embroideryprinting.com
employmentpalooza.com
equaljusticemarch.com
healthyhomepestdefence.com
hometrouble.com
hommagewatches.com
lekklin.com
lotterymazimizer.com
lucidworks.org
madeyoublush.com
migrainelab.com
mountwave.com
mustachioed.com
octobeard.com
shaaedi.com
termitepipe.com
Other certificates including the domain name lucidworks.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for lucidworks.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGxzCCBa+gAwIBAgISBHFbDeqzJiOFAxNPdFRVPIOjMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDYwMzIzMDFaFw0y MDA3MDUwMzIzMDFaMBkxFzAVBgNVBAMTDmx1Y2lkd29ya3Mub3JnMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R9eXMsMWAVbK9lTDbOoLoauZJ1A+3eW UvV9Za9GrG0SiK39MD+E88V3R3jBK4jm1EQrP51tpmtiQ99vVUJfb6IBKTTvDxHu 1MisCFtUaGGefdNYEkr4NT+qbIELlA9rDCnXry6RhldZ2Lex4mgB335WX04SfzMC IL8c96Om15zoaJ/XHxs/AnyBTOAkBR9fdie8c/8tM/M8LUFRpFPQs095Pn1FyuXw zcx6ZxpoWZerX14W2UkNZJBsKVr/Lbmc+sw0v0Ao29ZcnCws+BVk0s86pkBw0in1 eM5qT6qpWwoPgyINvbarmqHM2GGLbLR/CKKH8ZIInoiNrmuFdowafQIDAQABo4ID 1jCCA9IwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTnU8ZmKBi9jQ9YHPgU75qO+Se9 HzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMIIBiwYDVR0RBIIBgjCCAX6CBzBycC5jb22CD2FpcG9jb2x5cHNlLmNvbYIQ YmFieWJvdXF1ZXRzLmNvbYINYml0Z2lmdGVkLmNvbYIXY2VydGlmaWVkZG9tYWlu bmFtZS5jb22CFmVtYnJvaWRlcnlwcmludGluZy5jb22CFWVtcGxveW1lbnRwYWxv b3phLmNvbYIVZXF1YWxqdXN0aWNlbWFyY2guY29tghpoZWFsdGh5aG9tZXBlc3Rk ZWZlbmNlLmNvbYIPaG9tZXRyb3VibGUuY29tghJob21tYWdld2F0Y2hlcy5jb22C C2xla2tsaW4uY29tghRsb3R0ZXJ5bWF6aW1pemVyLmNvbYIObHVjaWR3b3Jrcy5v cmeCEG1hZGV5b3VibHVzaC5jb22CD21pZ3JhaW5lbGFiLmNvbYINbW91bnR3YXZl LmNvbYIPbXVzdGFjaGlvZWQuY29tgg1vY3RvYmVhcmQuY29tggtzaGFhZWRpLmNv bYIPdGVybWl0ZXBpcGUuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkC wQApBo2yCJo32RMAAAFxTbo4qgAABAMARzBFAiBlenQAV4xNQa216dQlGLNg+t3z t76gefxN9pVfqtYFUwIhAKrS/kItWr7o+840mVOXqds/oX9H1q/el2axwCmu1A40 AHUAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFxTbo4qgAABAMA RjBEAiAg0Y2kHqY6Urr9LKdbeKUWgydJg6nNBqmXKL7wc5Pd8wIgCwXdLBpraNzZ WFFKbWvmamoRUfQdskVkWOFPNydLfJswDQYJKoZIhvcNAQELBQADggEBADsMinnu KLkJ5paV1sLAM0+bbv6j5k3cw721QWQwUy2NV4O3Z90SdHqhp+H24A08Yk99tEhJ 4VoDc6Crds3xTlkVL9ZLF5JVUuDceA6FtCHjsWMtvjcXxRrKWUHR1xVo/eOh6Utz hfr6hLoJwE+oU+EHU+apVlBvVoKIeTzpcKM/M5VIjAQKSNU1ALb+N6W6WXVlU+oU gtYta9rS53+g4RwLj0Kl8ArwGAJNACkJxE9c+Uxb/n/ZdlG8YeU6NQD7gaYHXuN1 5WBUVH+vekc2YqbVCd+uSHLxUKxuU5/It2h4VANAm5oILy6F8vc2sszJtH5zuVpN /AQcc2P5QDrcGGw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R9eXMsMWAVbK9lTDbOo LoauZJ1A+3eWUvV9Za9GrG0SiK39MD+E88V3R3jBK4jm1EQrP51tpmtiQ99vVUJf b6IBKTTvDxHu1MisCFtUaGGefdNYEkr4NT+qbIELlA9rDCnXry6RhldZ2Lex4mgB 335WX04SfzMCIL8c96Om15zoaJ/XHxs/AnyBTOAkBR9fdie8c/8tM/M8LUFRpFPQ s095Pn1FyuXwzcx6ZxpoWZerX14W2UkNZJBsKVr/Lbmc+sw0v0Ao29ZcnCws+BVk 0s86pkBw0in1eM5qT6qpWwoPgyINvbarmqHM2GGLbLR/CKKH8ZIInoiNrmuFdowa fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 387022083196860112970502913158991451030435 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 03:23:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 03:23:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lucidworks.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28419087052221720316302033245802335246830720297853891314898186357015221519051739680290802934560199191391262732229202203987754452098684392727141030019272252368442232934260490014713618964468129837863835573708666113599001147490995422800476670271652957561295104633145370961715544800307121446168760648621314201757250921739514517296893562591526819392393557247799131683281289395908022221495860893592664592418831333167864539782730788370712558275809265309652874877354757639931338627794718715955740553635873507239019633737863524354981803902265609181400055987940049845937044136062973197052368235728036278809390327473691893176957 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e753c6662818bd8d0f581cf814ef9a8ef927bd1f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (386 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0rp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aipocolypse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babybouquets.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitgifted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifieddomainname.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embroideryprinting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employmentpalooza.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equaljusticemarch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomepestdefence.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hometrouble.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hommagewatches.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lekklin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotterymazimizer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucidworks.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeyoublush.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migrainelab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountwave.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mustachioed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'octobeard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaaedi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'termitepipe.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001714dba38aa00000403004730450220657a7400578c4d41adb5e9d42518b360faddf3b7bea079fc4df6955faad60553022100aad2fe422d5abee8fbce34995397a9db3fa17f47d6afde9766b1c029aed40e3400750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001714dba38aa0000040300463044022020d18da41ea63a52bafd2ca75b78a51683274983a9cd06a99728bef07393ddf302200b05dd2c1a6b68dcd958514a6d6be66a6a1151f41db2456458e14f37274b7c9b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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