danirod.es
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:51:94:52:01:7b:81:f0:88:24:80:20:86:e1:b5:77:a2:41 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=danirod.es
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:51:94:52:01:7b:81:f0:88:24:80:20:86:e1:b5:77:a2:41Serial Number (int): 289096881057663010829745346612477654704705
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: cb:57:91:1c:7f:eb:38:4a:0b:2a:ce:2a:89:13:04:76:b3:0c:d4:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 45:3b:76:80:c9:41:50:65:ec:83:78:e0:e2:60:b0:83:c1:6c:33:54
Fingerprint (sha256): cc:1d:6a:6f:48:97:1e:48:b8:6d:7d:6b:a8:bd:c6:3b:67:55:c6:08:34:93:1b:63:14:2a:87:b8:0d:e5:f1:7e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate danirod.es
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for danirod.es
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
danirod.es
git.danirod.es
start.danirod.es
static.danirod.es
www.danirod.es
git.danirod.es
start.danirod.es
static.danirod.es
www.danirod.es
Other certificates including the domain name danirod.es
(limited to 100 certificates)
chip8.danirod.es
danirod.es
www.danirod.es
www.danirod.es
danirod.es
git.danirod.es
danirod.es
www.danirod.es
danirod.es
danirod.es
sni232739.cloudflaressl.com
danirod.es
www.danirod.es
danirod.es
chip8.danirod.es
danirod.es
www.danirod.es
chip8.danirod.es
www.danirod.es
chip8.danirod.es
danirod.es
danirod.es
chip8.danirod.es
danirod.es
danirod.es
git.danirod.es
chip8.danirod.es
danirod.es
git.danirod.es
danirod.es
rectball.danirod.es
danirod.es
chip8.danirod.es
www.danirod.es
sni232739.cloudflaressl.com
www.danirod.es
git.danirod.es
chip8.danirod.es
chip8.danirod.es
chip8.danirod.es
chip8.danirod.es
chip8.danirod.es
chip8.danirod.es
danirod.es
chip8.danirod.es
*.danirod.es
danirod.es
danirod.es
www.danirod.es
danirod.es
danirod.es
danirod.es
danirod.es
danirod.es
chip8.danirod.es
*.danirod.es
danirod.es
www.danirod.es
www.danirod.es
danirod.es
git.danirod.es
danirod.es
www.danirod.es
danirod.es
danirod.es
sni232739.cloudflaressl.com
danirod.es
www.danirod.es
danirod.es
chip8.danirod.es
danirod.es
www.danirod.es
chip8.danirod.es
www.danirod.es
chip8.danirod.es
danirod.es
danirod.es
chip8.danirod.es
danirod.es
danirod.es
git.danirod.es
chip8.danirod.es
danirod.es
git.danirod.es
danirod.es
rectball.danirod.es
danirod.es
chip8.danirod.es
www.danirod.es
sni232739.cloudflaressl.com
www.danirod.es
git.danirod.es
chip8.danirod.es
chip8.danirod.es
chip8.danirod.es
chip8.danirod.es
chip8.danirod.es
chip8.danirod.es
danirod.es
chip8.danirod.es
*.danirod.es
danirod.es
danirod.es
www.danirod.es
danirod.es
danirod.es
danirod.es
danirod.es
danirod.es
chip8.danirod.es
*.danirod.es
Certificate
The complete raw certificate details for danirod.es in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgISA1GUUgF7gfCIJIAghuG1d6JBMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MTAyMDE1MDhaFw0x ODEwMDgyMDE1MDhaMBUxEzARBgNVBAMTCmRhbmlyb2QuZXMwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCr/xUFKUoSXDtdszxliuaXPUJUHMC1ITtkEgbj jlvxEgu08eumVvQE+kdKw4bXnmU4DfcviUKVmGLxFkU6eSznRTSPm1dYevKECRrO 9GP13Su4wns8isEWXKBdiCd2BYVAZZsN4lhfslvxFGW+PMOmNDhMmr5bDISXqP3w XL14zpjC4nGo9f+hD99DQo6wEX9FaqdF4/OwWgZOHwBIuBUmqsRIiTBToSQ/K9p8 IlFMSkhM1QunheGtUVRFyeA7VHtrtz4PCVzy9U/pJdL0bU6Wra7Bfs84UAomfXlg TSozfGfmaZKknW/Aao5XcfUR6wtlQU2c7TeRpzQoTFwRrVxfAgMBAAGjggNWMIID UjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMtXkRx/6zhKCyrOKokTBHazDNSfMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w WgYDVR0RBFMwUYIKZGFuaXJvZC5lc4IOZ2l0LmRhbmlyb2QuZXOCEHN0YXJ0LmRh bmlyb2QuZXOCEXN0YXRpYy5kYW5pcm9kLmVzgg53d3cuZGFuaXJvZC5lczCB/gYD VR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyB m1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVs eWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2Vy dGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3Jn L3JlcG9zaXRvcnkvMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHQAKTxRllTIOWW6 qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFkhgxF6wAABAMARTBDAiAbnswWLypC 2gA5M+iKpHddPt0irkCisw7cmoFX4ODHWgIfKt97zS+hoQhNvgo+9q4IMaotdSLA DRB/06ZWdgB5rAB3AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAAB ZIYMSTsAAAQDAEgwRgIhALKFJ3ELYzdQHuj3tWK/1bfmCPJRhbPgUGwAUAYgrE9l AiEArxDrEtH5CI4qY8CmXcQnIiITVZu0GmXfElAUwossD/AwDQYJKoZIhvcNAQEL BQADggEBABeTkCbmCESdPE24ftwxSCwcmg+s6tP37kf6ApdQPXlXlQ2hhiZmzqvy r7LYpdkYHPPv8r/lU6WiwU5wZ3CDMg0pK8kQEl/Nb/Wam71DmK/qVoziYXkVKaln KSZY9bcIWKFhZ07ZeV6j3uVgfQaw4l1q+zSsoc+3RVFAHKfBzeFUSwshxOFNMrgx MGf82g9VdwTu9i+sxHf3iiN93a0QPCpjFp2lk54ACwBP+9steqIaDFq2F3hBLtbA Xek228ukfdrecXrURJ9pNEH8GUp6J1cHagBFpgoN3jq2t0OSMVd4CyqfbVBDDTdU p9im1b9q1ec5dk6Mm6bM4VWYLv2gndI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/8VBSlKElw7XbM8ZYrm lz1CVBzAtSE7ZBIG445b8RILtPHrplb0BPpHSsOG155lOA33L4lClZhi8RZFOnks 50U0j5tXWHryhAkazvRj9d0ruMJ7PIrBFlygXYgndgWFQGWbDeJYX7Jb8RRlvjzD pjQ4TJq+WwyEl6j98Fy9eM6YwuJxqPX/oQ/fQ0KOsBF/RWqnRePzsFoGTh8ASLgV JqrESIkwU6EkPyvafCJRTEpITNULp4XhrVFURcngO1R7a7c+Dwlc8vVP6SXS9G1O lq2uwX7POFAKJn15YE0qM3xn5mmSpJ1vwGqOV3H1EesLZUFNnO03kac0KExcEa1c XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 289096881057663010829745346612477654704705 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-10 20:15:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-08 20:15:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'danirod.es' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21712535825735847143031544075680660398005668878222557966040507998714602660810282726616587656013392262577948001961001124817449396399689795871794274717474135265446526753178820320272441797414110994212963400652791357900285738238866923948429412904368034470854077894639040267433579364674774945336890041464754477953153157773992713135960498106504689227052819628869027054129298429720605770080046367661424365995507381337342347348057175977331793757676066663353486949170815480438757523755358753686224200503730934589298714810710313524801000049344073118167880953613383861739834900690886981869196666299508117512091076024557300964447 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cb57911c7feb384a0b2ace2a89130476b30cd49f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danirod.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.danirod.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.danirod.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.danirod.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danirod.es' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007400293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164860c45eb000004030045304302201b9ecc162f2a42da003933e88aa4775d3edd22ae40a2b30edc9a8157e0e0c75a021f2adf7bcd2fa1a1084dbe0a3ef6ae0831aa2d7522c00d107fd3a656760079ac0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000164860c493b0000040300483046022100b28527710b6337501ee8f7b562bfd5b7e608f25185b3e0506c00500620ac4f65022100af10eb12d1f9088e2a63c0a65dc427222213559bb41a65df125014c28b2c0ff0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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