krasotka.co
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:14:43:70:49:65:0c:71:b8:b9:17:f5:20:27:cb:d6:ff:f6 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=krasotka.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:14:43:70:49:65:0c:71:b8:b9:17:f5:20:27:cb:d6:ff:f6Serial Number (int): 355344432367047297901519959109450839031798
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 3d:41:e4:44:0c:21:6a:bd:ac:b2:33:81:0c:6e:a2:d3:7b:8e:b0:99
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 96:38:e5:36:bd:1c:f3:19:f2:df:40:10:7f:c1:d8:d6:2d:f6:53:2d
Fingerprint (sha256): d5:aa:be:bc:67:a3:3c:59:c5:dd:9b:b8:cc:b2:d2:8c:f7:0f:fc:c0:b9:d4:70:dd:e1:3d:51:85:58:5b:bc:8f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate krasotka.co
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for krasotka.co
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
krasotka.co
www.krasotka.co
www.krasotka.co
Other certificates including the domain name krasotka.co
(limited to 100 certificates)
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
krasotka.co
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
krasotka.co
krasotka.co
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
krasotka.co
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
krasotka.co
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
krasotka.co
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
krasotka.co
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
krasotka.co
krasotka.co
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
krasotka.co
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
krasotka.co
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
sni252711.cloudflaressl.com
krasotka.co
Certificate
The complete raw certificate details for krasotka.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgISBBRDcEllDHG4uRf1ICfL1v/2MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTAxNjUyMzNaFw0x OTEyMDkxNjUyMzNaMBYxFDASBgNVBAMTC2tyYXNvdGthLmNvMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEAxbdyl0bIGtRG4Alq8z8rRQSQ9hPgdGIRmahI yX370d13pJVQjKsIu6gAJorDm+4FPbFhSFb9oRDsklfszAo5XFDQBgYPr76vkQc0 KOzUfjhaGU9bBioMl+NL58OBohOylOKlNnmDbg6lopHFAUm1ixq5XF5eBsGrPVLU pYmKHmJjLRTBEgO4JXgTlwYOKn/jPvO6YUrtt1B8DpL0g+ANKdEnWe+9BezbVRjk g9Bfblz+PAIiZSLmig9P/S6F8JOnhBYCfD8hdYzOgwoxxnZ5n4URLY9oJJAeNlHN PF+KqYZ+7BGk9RnllU4ewyTSbXDunBmQm8bcStFywGMXRTRJGMD3ududUtBeBCk0 bbcsoXpbJ/AM0+6MAeRPJyyz5siB5Bfw298ZYoZ35a2gn3SCtGQ9WbdkNOL/e0Wg 2r6zs/iGPo8lHXepMGeX3hNIyaBXjcER2rYQizflXezloSh0HcTawC7vTna9XUyI e6jGAz/AgkU/iy6GOuTY7SmNgIoVfa3R1Pp0znlzxCtJcwbYu4J/pepHE5JdtcXv HGNjjYbgazG1W8Ie2BE1G1pzfjop3njuaodQMMJFtLPIXQsI4GKxEyRujbg9U5Uv 43gZsmOMeIL21LC1Vz/McpthFxyrk+6t5ErO5Z8YQnz0MJL4aWvyW6w3d+oi7+wF acz1xwcCAwEAAaOCAnIwggJuMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUPUHkRAwh ar2ssjOBDG6i03uOsJkwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzAnBgNVHREEIDAeggtrcmFzb3RrYS5jb4IPd3d3Lmty YXNvdGthLmNvMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYB BAHWeQIEAgSB9gSB8wDxAHcA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x 2/4AAAFtHE5BxAAABAMASDBGAiEA04gSwCAHMIkpz8DR9YyGMpTml/tFOHlvqEtD kAJmE5QCIQCmFLe8xVhb8w29A2lDp50Chrsj3gJngslhnYcTXJCliAB2AGPy283o O8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbRxOQcQAAAQDAEcwRQIhAKhT lXmUT1nsLvW+idYcbJOf6lYGPgdjcCsfD8IV9jNcAiA4FqxMxkLFS0TECKGhy1FY hEqTJEb6qrpm8ybTjaTtpTANBgkqhkiG9w0BAQsFAAOCAQEAJ1Pvj9KSXmDccUhR 4TBtW9GoHPvS9li1T91CAqlB5zWTwKZdluBGrIgpN1i2ZsRM2RzF4sN+yXBfO+47 prXB02uk0PKgT/tmaija4qirSAHqCbvGLSngZSn7IZKgnnnHWZDfsrm2KXrbOTjl ZWN1SbbtXVub94kEI8iByk9ncfQkSYMu6QCp4orT8GfeQIrKDrC0UGieZd6ZXJYE YltjU7eF2GPnC5Z6reGydggrYYAGHbaArYg18i6TtrNEoVy68y1M0vtfQ3J0V/CH nrlsnceYInhSjsv7RYlWGuugZjJ+oVOqUN9sbpCYvvDVVglrt+xJtJ3oHzX38kSV OzzSRg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxbdyl0bIGtRG4Alq8z8r RQSQ9hPgdGIRmahIyX370d13pJVQjKsIu6gAJorDm+4FPbFhSFb9oRDsklfszAo5 XFDQBgYPr76vkQc0KOzUfjhaGU9bBioMl+NL58OBohOylOKlNnmDbg6lopHFAUm1 ixq5XF5eBsGrPVLUpYmKHmJjLRTBEgO4JXgTlwYOKn/jPvO6YUrtt1B8DpL0g+AN KdEnWe+9BezbVRjkg9Bfblz+PAIiZSLmig9P/S6F8JOnhBYCfD8hdYzOgwoxxnZ5 n4URLY9oJJAeNlHNPF+KqYZ+7BGk9RnllU4ewyTSbXDunBmQm8bcStFywGMXRTRJ GMD3ududUtBeBCk0bbcsoXpbJ/AM0+6MAeRPJyyz5siB5Bfw298ZYoZ35a2gn3SC tGQ9WbdkNOL/e0Wg2r6zs/iGPo8lHXepMGeX3hNIyaBXjcER2rYQizflXezloSh0 HcTawC7vTna9XUyIe6jGAz/AgkU/iy6GOuTY7SmNgIoVfa3R1Pp0znlzxCtJcwbY u4J/pepHE5JdtcXvHGNjjYbgazG1W8Ie2BE1G1pzfjop3njuaodQMMJFtLPIXQsI 4GKxEyRujbg9U5Uv43gZsmOMeIL21LC1Vz/McpthFxyrk+6t5ErO5Z8YQnz0MJL4 aWvyW6w3d+oi7+wFacz1xwcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 355344432367047297901519959109450839031798 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-10 16:52:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 16:52:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'krasotka.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806613322798297314118307686549655223481623613902677155307682681124998343779887637733638575966993469037435312017279887556935831855394646869393360039382973566690576339739741323097217190180551582241264096383229476635127886384297720574986389935650627287138020520163254417164153276793329267238152790814589670326410811735936922108478229901579344073620536569314895840988946585699605265438858460175116969280423837637802760596419180059893625796024744841032295539649042735032982131621051006389147962235753048612410128692463345044096311185465303772295120705128111680109146890043926217873952635228100422826911346825754555557369036867288363882358736553953074886807196675793518499681050969473501123820513582901539125367341502400523202970582112137135903099292102516469746651028626908336105090909023016457517748503626238125766011990169357364454041252048296423939113809898690384007566493686593564674882225862062495735058031133912493422498334486692207599156968431086377674973514315800689766629702780592207760746084443869062897433672206908283369888219611626193011969264462858735328713404624029094451999003576263092288859567196220970284996797708817445131951051450715571246530825801437285369920602909289884107539588670847602288212993692587874945519175431 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3d41e4440c216abdacb233810c6ea2d37b8eb099 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krasotka.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krasotka.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d1c4e41c40000040300483046022100d38812c02007308929cfc0d1f58c863294e697fb4538796fa84b439002661394022100a614b7bcc5585bf30dbd036943a79d0286bb23de026782c9619d87135c90a58800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d1c4e41c40000040300473045022100a8539579944f59ec2ef5be89d61c6c939fea56063e0763702b1f0fc215f6335c02203816ac4cc642c54b44c408a1a1cb5158844a932446faaaba66f326d38da4eda5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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