meisterprep.de
Issued by R3
About this certificate
This digital certificate with serial number 04:69:7c:28:03:40:e1:ae:d4:93:19:61:f2:f8:b7:de:41:03 was issued on by Let's Encrypt.
With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=meisterprep.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:69:7c:28:03:40:e1:ae:d4:93:19:61:f2:f8:b7:de:41:03Serial Number (int): 384343824283078872907520684306836112687363
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 9e:ec:f8:f4:af:70:6a:87:12:b0:4c:e1:a0:05:be:f8:e2:43:ad:a0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): cc:77:0c:13:47:03:4f:0d:a7:60:a1:60:32:17:4c:cb:ee:ea:45:41
Fingerprint (sha256): cd:b7:b2:c5:f8:fd:0c:1b:8d:d2:63:dd:03:1c:08:27:34:ed:88:0b:f0:5f:a3:3a:1d:2f:ca:a2:fa:4c:c1:a5
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate meisterprep.de
15
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for meisterprep.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
atlantaranchcondos.com
casinobangladesh.com
drinksthatshrinkyourbelly.com
dyverg.net
extravagant.com
fflsd.org
instant-hack.net
meisterprep.de
personalshopphair.com
preciousartgallery.com
redrivercounty.com
rxsugarissweetsreimagined.com
showdigest.com
verticalblog.com
www.certifiednaturalgas.com
casinobangladesh.com
drinksthatshrinkyourbelly.com
dyverg.net
extravagant.com
fflsd.org
instant-hack.net
meisterprep.de
personalshopphair.com
preciousartgallery.com
redrivercounty.com
rxsugarissweetsreimagined.com
showdigest.com
verticalblog.com
www.certifiednaturalgas.com
Other certificates including the domain name meisterprep.de
(limited to 100 certificates)
5272653.ca
goldenoldies.ca
goldenoldies.ca
sculpit.gold
meisterprep.de
meisterprep.de
goldenoldies.ca
meisterprep.de
meisterprep.de
5272653.ca
5272653.ca
shadi.world
meisterprep.de
mycrusher.ca
shadi.world
zinnia.ltd
5272653.ca
allanblock.asia
grocer.cc
femdom.org.meisterprep.de
meisterprep.de
goldenoldies.ca
5272653.ca
goldenoldies.ca
leaselock.ca
5272653.ca
goldenoldies.ca
mygrinder.ca
goldenoldies.ca
leaselock.ca
goldenoldies.ca
goldenoldies.ca
shadi.world
meisterprep.de
goldenoldies.ca
34755625397.ca
meisterprep.de
meisterprep.de
allanblock.on.ca
goldenoldies.ca
goldenoldies.ca
sculpit.gold
meisterprep.de
meisterprep.de
goldenoldies.ca
meisterprep.de
meisterprep.de
5272653.ca
5272653.ca
shadi.world
meisterprep.de
mycrusher.ca
shadi.world
zinnia.ltd
5272653.ca
allanblock.asia
grocer.cc
femdom.org.meisterprep.de
meisterprep.de
goldenoldies.ca
5272653.ca
goldenoldies.ca
leaselock.ca
5272653.ca
goldenoldies.ca
mygrinder.ca
goldenoldies.ca
leaselock.ca
goldenoldies.ca
goldenoldies.ca
shadi.world
meisterprep.de
goldenoldies.ca
34755625397.ca
meisterprep.de
meisterprep.de
allanblock.on.ca
Certificate
The complete raw certificate details for meisterprep.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgISBGl8KANA4a7Ukxlh8vi33kEDMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjcwNjUzMjlaFw0yNDA3MjYwNjUzMjhaMBkxFzAVBgNVBAMT Dm1laXN0ZXJwcmVwLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA ygfHMvC2uyA2yrR6N9ryHGM/CI4FJFohhUWuk/xKaYjn1JwAvh7u7ivWOiaEXJyv dPh7n5cqni91Xvl8g8vrJmvbw2CB8nMMu/uaznxtoX/vOMHtja3y4FZgauRHLkhZ LciY4yuGOvwMqzNuctQm3WjXpPzoMFMOuUpU/TzWUrvOGlfpH7o08+vy/UMi7W9d d6wp4fS4+hce8WyDFf4TQpEZ372yOH6Gldn0VY+qrrHwtjnHENn6kWP8UV055FWl vLXv3ugFkgAr+qMbRrqP6QZgxpTCqc/7t3JHABFErAQnIPCPm0zp2r0UwX0SMLUx 8b3syuMB/qqjeBS5uYZlrwIDAQABo4IDPzCCAzswDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBSe7Pj0r3BqhxKwTOGgBb744kOtoDAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzCCAUUGA1UdEQSCATwwggE4ghZhdGxhbnRhcmFuY2hjb25kb3MuY29tghRjYXNp bm9iYW5nbGFkZXNoLmNvbYIdZHJpbmtzdGhhdHNocmlua3lvdXJiZWxseS5jb22C CmR5dmVyZy5uZXSCD2V4dHJhdmFnYW50LmNvbYIJZmZsc2Qub3JnghBpbnN0YW50 LWhhY2submV0gg5tZWlzdGVycHJlcC5kZYIVcGVyc29uYWxzaG9wcGhhaXIuY29t ghZwcmVjaW91c2FydGdhbGxlcnkuY29tghJyZWRyaXZlcmNvdW50eS5jb22CHXJ4 c3VnYXJpc3N3ZWV0c3JlaW1hZ2luZWQuY29tgg5zaG93ZGlnZXN0LmNvbYIQdmVy dGljYWxibG9nLmNvbYIbd3d3LmNlcnRpZmllZG5hdHVyYWxnYXMuY29tMBMGA1Ud IAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAPxdLT9ci R1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGPHot+fgAABAMARzBFAiA1GbmB U6LlWGv3XZvK2tudiHPt10PHTZryrN618dZxrgIhAIW2w5EPHA33eKRxRhTvu1F9 fXW4OkqNYdUWEN9pJmI8AHcA3+FW66oFr7WcD4ZxjajAMk6uVtlup/WlagHRwTu+ UlwAAAGPHot/PAAABAMASDBGAiEAjLtz7r/esU20YZ0aPj4FZ72TQfyvuCr/HzuG rNXr0+QCIQCyEsMJDK3/wBGoDowmzdR16z+9HlHpwmGURAFbJ5vwBTANBgkqhkiG 9w0BAQsFAAOCAQEAL7dbZYKrg3MzF9SmFW5M8khmuCNcdmX1LpvBL3NgfQpisloN 6IPEBs9ei7O4iI3ydGZ6eFtTb7CupgldD82pj0imHd68NlSPvNBvoEa+fh8++ZNx 8sDaYYQHhhgSzdccek3mQqiBBI1M0U1V7WUmLzR1Z17IZA/uoYGodA9NjMBpYPUo jPmKC0zO8W7smfaerHwHiSIBN9bhnEykUM3vO19Z9dQP6t91I90k57wC1ExgH5G9 4LNf7ELW0VXgrBnhjJfXl5FmniTAGLidHFfVcHR7ilhK/3zaN4zOvRKDxV8nHiqa Ap7DnuqDB4rJkGwwGxaeo/03L4BiZMSgnQrlCw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygfHMvC2uyA2yrR6N9ry HGM/CI4FJFohhUWuk/xKaYjn1JwAvh7u7ivWOiaEXJyvdPh7n5cqni91Xvl8g8vr Jmvbw2CB8nMMu/uaznxtoX/vOMHtja3y4FZgauRHLkhZLciY4yuGOvwMqzNuctQm 3WjXpPzoMFMOuUpU/TzWUrvOGlfpH7o08+vy/UMi7W9dd6wp4fS4+hce8WyDFf4T QpEZ372yOH6Gldn0VY+qrrHwtjnHENn6kWP8UV055FWlvLXv3ugFkgAr+qMbRrqP 6QZgxpTCqc/7t3JHABFErAQnIPCPm0zp2r0UwX0SMLUx8b3syuMB/qqjeBS5uYZl rwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 384343824283078872907520684306836112687363 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 06:53:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 06:53:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'meisterprep.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25503973137579568327668231940902299429091607955387871726772280889909635124735084732896140940769083136584858794000288423595325280250750758629100464142013380388612859815120666031420169616984342496872425042096916247812865943473733768840957009467417755203970159851509859543899963132717918865332734808670363045689323701509896878357443990858477214334935342764936630142294479346332574506857670175273970635379033780233983416772299865104959642312676432057841333759049003160441190982896940793445141272464835529983415665436256946063241744949344236362944220069874569663485126560045497758483767869343043204805592016330206828979631 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9eecf8f4af706a8712b04ce1a005bef8e243ada0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (316 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantaranchcondos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinobangladesh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drinksthatshrinkyourbelly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyverg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extravagant.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fflsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instant-hack.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meisterprep.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalshopphair.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preciousartgallery.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redrivercounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarissweetsreimagined.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showdigest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verticalblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.certifiednaturalgas.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1e8b7e7e000004030047304502203519b98153a2e5586bf75d9bcadadb9d8873edd743c74d9af2acdeb5f1d671ae02210085b6c3910f1c0df778a4714614efbb517d7d75b83a4a8d61d51610df6926623c007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f1e8b7f3c00000403004830460221008cbb73eebfdeb14db4619d1a3e3e0567bd9341fcafb82aff1f3b86acd5ebd3e4022100b212c3090cadffc011a80e8c26cdd475eb3fbd1e51e9c2619444015b279bf005 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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