freshtours.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:b5:c5:e0:38:9e:d9:ce:a8:d3:27:4e:1d:31:2a:f0:63:9e was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=freshtours.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b5:c5:e0:38:9e:d9:ce:a8:d3:27:4e:1d:31:2a:f0:63:9eSerial Number (int): 410303274277797184266567288706648736031646
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 36:b0:a7:88:b4:43:8b:7a:1a:dc:96:95:34:7b:ec:b2:03:8b:fa:f5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): db:f0:cb:11:57:6f:86:b5:df:aa:cf:17:36:f4:22:6f:c8:98:ca:05
Fingerprint (sha256): cd:6f:43:ac:6c:38:4c:c3:c7:ab:42:1a:01:dd:65:48:3f:e0:0e:3c:7c:9b:59:e1:89:20:61:ec:b5:b3:d2:68
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate freshtours.de
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for freshtours.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
freshtours.de
schranke.skfashion.de
www.freshtours.de
schranke.skfashion.de
www.freshtours.de
Other certificates including the domain name freshtours.de
(limited to 100 certificates)
freshtours.de
freshtours.de
ler.lima-city.de
freshtours.de
freshtours.de
freshtours.de
freshtours.de
*.zoofamily.de
freshtours.de
www.freshtours.de
freshtours.de
www.freshtours.de
freshtours.de
freshtours.de
*.a-good-reason.eu
freshtours.de
freshtours.de
backend.notar-liessem.de
freshtours.de
freshtours.de
www.cloud.sailio.de
www.babsytapsy.lima-city.de
freshtours.de
www.freshtours.de
*.asvrehau.de
c-hosberg.12hp.de
freshtours.de
core.hampoelz.net
game.notar-liessem.de
freshtours.de
freshtours.de
*.freshtours.de
freshtours.de
www.freshtours.de
freshtours.de
freshtours.de
aws.dlrg-jugend-rn.de
freshtours.de
freshtours.de
freshtours.de
www.freshtours.de
freshtours.de
ler.lima-city.de
freshtours.de
freshtours.de
freshtours.de
freshtours.de
*.zoofamily.de
freshtours.de
www.freshtours.de
freshtours.de
www.freshtours.de
freshtours.de
freshtours.de
*.a-good-reason.eu
freshtours.de
freshtours.de
backend.notar-liessem.de
freshtours.de
freshtours.de
www.cloud.sailio.de
www.babsytapsy.lima-city.de
freshtours.de
www.freshtours.de
*.asvrehau.de
c-hosberg.12hp.de
freshtours.de
core.hampoelz.net
game.notar-liessem.de
freshtours.de
freshtours.de
*.freshtours.de
freshtours.de
www.freshtours.de
freshtours.de
freshtours.de
aws.dlrg-jugend-rn.de
freshtours.de
freshtours.de
freshtours.de
www.freshtours.de
Certificate
The complete raw certificate details for freshtours.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGejCCBWKgAwIBAgISBLXF4Die2c6o0ydOHTEq8GOeMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MDkwNTA5MTRaFw0x OTEyMDgwNTA5MTRaMBgxFjAUBgNVBAMTDWZyZXNodG91cnMuZGUwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCcjz3oidKVcsXtJdWqqcK7h+Z+ofZoTLai I+pKveGHcejXyISmrxZuXvo9MCDNUZmAJJ0eCZZjs7KPpdqjh3zTYWGOM/3xUX5J Z5fKEnfy8cZGUMhAv21pDpmzZKEC7DmsnExxmetAym9ANg9J49dlocU8XrzZ/3SM aSr1Sf5RAogb/3hkQ8+LCqaBnIVKZ85xup6ruXg8aJ//+uILSKWY/KeF/HSRpdpa OyPA8IM+jYnD318SNvMh0Ijq+gOYCIaLaaysr9mSlI3uWV+oNP455CKgUnpBdsB7 o23yA47LOXyDP3uV+LgGbG9gJsMaksW70Oyz6+dj5XII/0MGDBxzNSdJVDLehsFw uqHEZnkLhKjoSdJv8B9kILd5cP4rZnykz639fnlJctJdoN0GRDT5NspR8wJ0PPor tc6OqRpk7e1h3XNbRbpy4aHU1+EMO+oXaFYyl6Qj/fCetMcgESRlCsOIpDusD0+f cFihZC9RJnoSGm4ZGplwGXxEt5jDkoRuFwI0jObzeIDDOUpcCaADXaFw9ShNoWLA 8u7kUzJ4xZDt+rIqXk6QnYqQLUfowRSTDwQDyb0r1tgVSuADg0uIFM2zxfpwA7KO k/m5+AOR4lpfUJhHz1uGJQ/nHHXOTqRH7ukgTJXTBAKSozmwGpIH08qv/PY1pzeS eLiL6Fk0GQIDAQABo4ICijCCAoYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ2sKeI tEOLehrclpU0e+yyA4v69TAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMEIGA1UdEQQ7MDmCDWZyZXNodG91cnMuZGWCFXNj aHJhbmtlLnNrZmFzaGlvbi5kZYIRd3d3LmZyZXNodG91cnMuZGUwTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQBj 8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAW0Uo/yyAAAEAwBGMEQC IBt4MIP7V+D51xRyNXX/29sFm6w7mlCR3I6YbTlciPekAiA/gumQCqv/Ubcwxzuy wvwb6KN2+xYCa3LlJOZ5EjtdmgB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaN sgiaN9kTAAABbRSj/kUAAAQDAEYwRAIgeM4gGIIKWbjc6XerkO+T7+lsU70ivQyR 9rO2pBYH+R0CIFJLi8LQv7ZLIsz1AfZEbh0e5RLYGOw/NFLrvyLLP53hMA0GCSqG SIb3DQEBCwUAA4IBAQBzTirAn5arrbReGLnwSIZH5ItuOgqJv9LfwruC16Q1ToQF C0dQXdOqCqjmyrnfrvYyqqd+CuuWg4OFzZ/KbTpqCvv/UnLqy/5eI1OsIXWHCi1f Q7+hDiytvm3tBQkO4QnR5QXjFGXueQqhnfGCEAdHaBpwPy6YPE4JkTwJL+1zdV2k wl/PV+BqpC4GpNwKRSXq9OYBDYLJY8F1nwnwX+KndUpVcwF3bj+c8a7egiHTrYQv ojLaV+JA0IcJKxORhacRfyATk+Jry9rBuI4Mtj8/60HUQqDZL/Xi/YYeg8D/9KXH cFTr4RyEEH1IhXTQM8XGpbBqByEqHm7cURj4OntJ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnI896InSlXLF7SXVqqnC u4fmfqH2aEy2oiPqSr3hh3Ho18iEpq8Wbl76PTAgzVGZgCSdHgmWY7Oyj6Xao4d8 02FhjjP98VF+SWeXyhJ38vHGRlDIQL9taQ6Zs2ShAuw5rJxMcZnrQMpvQDYPSePX ZaHFPF682f90jGkq9Un+UQKIG/94ZEPPiwqmgZyFSmfOcbqeq7l4PGif//riC0il mPynhfx0kaXaWjsjwPCDPo2Jw99fEjbzIdCI6voDmAiGi2msrK/ZkpSN7llfqDT+ OeQioFJ6QXbAe6Nt8gOOyzl8gz97lfi4BmxvYCbDGpLFu9Dss+vnY+VyCP9DBgwc czUnSVQy3obBcLqhxGZ5C4So6EnSb/AfZCC3eXD+K2Z8pM+t/X55SXLSXaDdBkQ0 +TbKUfMCdDz6K7XOjqkaZO3tYd1zW0W6cuGh1NfhDDvqF2hWMpekI/3wnrTHIBEk ZQrDiKQ7rA9Pn3BYoWQvUSZ6EhpuGRqZcBl8RLeYw5KEbhcCNIzm83iAwzlKXAmg A12hcPUoTaFiwPLu5FMyeMWQ7fqyKl5OkJ2KkC1H6MEUkw8EA8m9K9bYFUrgA4NL iBTNs8X6cAOyjpP5ufgDkeJaX1CYR89bhiUP5xx1zk6kR+7pIEyV0wQCkqM5sBqS B9PKr/z2Nac3kni4i+hZNBkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 410303274277797184266567288706648736031646 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 05:09:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 05:09:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freshtours.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 638707192111249399138748796941171200314025469652756129592007291797158216152762780437122942968985718384239974713565547828577372096690413471776851316063151622298646913607281255502730292577258843966692406711771465425087946541342746603664010518091819072994490361938323108453803660620050245319220883857883719284666884944852563577384550214986637632927805378743224374846510927316365022881034339436421788523450714760445422218472743051570644268769083616765147074087563350262092678336221649536855079351903134058178341767672282391584979018403563562042180167268800176230730353193334086563098646850217313338955357004466285435381349646872603075084590417184027027831869758558691783712381892453872140735734665793227909389183400982874013368907342829089054266394688368373598432643042618080168291186393312856612680023581127524848293338940247905485672358576191901811743247478220855568723077221430827442841942747326002913557519184275326324977563015636836118233092073705539855972158285766834425752657703860386375835309591810186447547037161311210235267978543461096208903729153795266401420196156988936063093447139514027925260435435563981430264053966307867057668230926792797438346058770207860639211556518130594529321786713812187717173987403221468346834301977 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 36b0a788b4438b7a1adc9695347becb2038bfaf5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshtours.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schranke.skfashion.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freshtours.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d14a3fcb2000004030046304402201b783083fb57e0f9d714723575ffdbdb059bac3b9a5091dc8e986d395c88f7a402203f82e9900aabff51b730c73bb2c2fc1be8a376fb16026b72e524e679123b5d9a0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d14a3fe450000040300463044022078ce2018820a59b8dce977ab90ef93efe96c53bd22bd0c91f6b3b6a41607f91d0220524b8bc2d0bfb64b22ccf501f6446e1d1ee512d818ec3f3452ebbf22cb3f9de1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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