nyupress.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1f:09:95:ad:38:a9:8e:af:13:16:2b:b0:25:ff:05:c5:7a was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=nyupress.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1f:09:95:ad:38:a9:8e:af:13:16:2b:b0:25:ff:05:c5:7aSerial Number (int): 271898351387369932232839295691307073521018
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: cb:1d:12:70:1c:c5:dc:ca:50:de:2f:bf:17:dc:0e:02:28:40:7d:af
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 9a:7e:c6:f2:7e:13:f6:81:72:92:05:99:ed:59:05:8b:e5:86:a5:ad
Fingerprint (sha256): da:6a:9b:7d:a4:bb:d2:0d:6f:99:24:28:99:d1:12:3d:a9:eb:d8:76:44:15:da:e3:c8:82:b3:2c:04:57:42:09
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate nyupress.org
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nyupress.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
newvillagepress.nyupress.org
nyupress.org
witsuniversitypress.nyupress.org
www.nyupress.org
nyupress.org
witsuniversitypress.nyupress.org
www.nyupress.org
Other certificates including the domain name nyupress.org
(limited to 100 certificates)
keywords.nyupress.org
nyuresearchsites.org
keywords.keywords.hosting.nyu.edu
www.nyupress.org
dev.keywords.nyupress.org
witsuniversitypress.nyupress.org
sni.cloudflaressl.com
sni.cloudflaressl.com
nyupress.org
cart.nyupress.org
www.nyupress.org
www.nyupress.org
opensquare.nyupress.org
dev.keywords.nyupress.org
keywords.nyupress.org
cart.nyupress.org
nyupress.org
newvillagepress.nyupress.org
dev.keywords.nyupress.org
keywords.nyupress.org
www.nyupress.org
newvillagepress.nyupress.org
keywords.nyupress.org
keywords.nyupress.org
nyupress.org
nyupress.org
witsuniversitypress.nyupress.org
cart.nyupress.org
nyupress.org
keywords.nyupress.org
cart.nyupress.org
newvillagepress.nyupress.org
witsuniversitypress.nyupress.org
dev.keywords.nyupress.org
witsuniversitypress.nyupress.org
dev.keywords.nyupress.org
dev.keywords.nyupress.org
dev.keywords.nyupress.org
dev.keywords.nyupress.org
NYUPress.org
keywords.nyupress.org
newvillagepress.nyupress.org
keywords.keywords.hosting.nyu.edu
connectedyouth.nyupress.org
dev.keywords.nyupress.org
nyupress.org
dev.keywords.nyupress.org
nyupress.org
dev.keywords.nyupress.org
keywords.nyupress.org
newvillagepress.nyupress.org
nyupress.org
keywords.nyupress.org
witsuniversitypress.nyupress.org
connectedyouth.nyupress.org
nyupress.org
newvillagepress.nyupress.org
nyupress.org
witsuniversitypress.nyupress.org
nyupress.org
nyupress.org
keywords.nyupress.org
cart.nyupress.org
nyupress.org
newvillagepress.nyupress.org
nyuresearchsites.org
nyupress.org
nyuresearchsites.org
keywords.keywords.hosting.nyu.edu
www.nyupress.org
dev.keywords.nyupress.org
witsuniversitypress.nyupress.org
sni.cloudflaressl.com
sni.cloudflaressl.com
nyupress.org
cart.nyupress.org
www.nyupress.org
www.nyupress.org
opensquare.nyupress.org
dev.keywords.nyupress.org
keywords.nyupress.org
cart.nyupress.org
nyupress.org
newvillagepress.nyupress.org
dev.keywords.nyupress.org
keywords.nyupress.org
www.nyupress.org
newvillagepress.nyupress.org
keywords.nyupress.org
keywords.nyupress.org
nyupress.org
nyupress.org
witsuniversitypress.nyupress.org
cart.nyupress.org
nyupress.org
keywords.nyupress.org
cart.nyupress.org
newvillagepress.nyupress.org
witsuniversitypress.nyupress.org
dev.keywords.nyupress.org
witsuniversitypress.nyupress.org
dev.keywords.nyupress.org
dev.keywords.nyupress.org
dev.keywords.nyupress.org
dev.keywords.nyupress.org
NYUPress.org
keywords.nyupress.org
newvillagepress.nyupress.org
keywords.keywords.hosting.nyu.edu
connectedyouth.nyupress.org
dev.keywords.nyupress.org
nyupress.org
dev.keywords.nyupress.org
nyupress.org
dev.keywords.nyupress.org
keywords.nyupress.org
newvillagepress.nyupress.org
nyupress.org
keywords.nyupress.org
witsuniversitypress.nyupress.org
connectedyouth.nyupress.org
nyupress.org
newvillagepress.nyupress.org
nyupress.org
witsuniversitypress.nyupress.org
nyupress.org
nyupress.org
keywords.nyupress.org
cart.nyupress.org
nyupress.org
newvillagepress.nyupress.org
nyuresearchsites.org
nyupress.org
Certificate
The complete raw certificate details for nyupress.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAx8Jla04qY6vExYrsCX/BcV6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjQwMTM3MzNaFw0y MDAxMjIwMTM3MzNaMBcxFTATBgNVBAMTDG55dXByZXNzLm9yZzCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAMRPfCFUIqtNVIljQVXf/qRHdqc3fUg5DgB8 EdiIs3y4M4Zr65DWZR8QlAHywuNQ81nvbf4oSBWmkwW3FbkDsvN0HRWGf88olPEe BdNpPJWdfTLaBiUl5uKrw7uyqEHh+L+iDt63IX4nVZzjEvFBRJtMKanQ5aZakeJg U7aITQ5KrnJIpkBA/oYsSsgQilblUF0LIfuJYJ2uPcPkYWx7IyrsHqDzRMcJOdIU 9WH120In5K3WCu0qSjgyimDj4MJKL3d01zMsA1iHyypVNZhtWiwX07zTjxu4XfrK VCYILjh9EXU39Ul8n/CCKS3sc50ZkHYZYouYahDwQvrIi4HfBuMCAwEAAaOCArEw ggKtMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUyx0ScBzF3MpQ3i+/F9wOAihAfa8w HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzBpBgNVHREEYjBgghxuZXd2aWxsYWdlcHJlc3Mubnl1cHJlc3Mub3JnggxueXVw cmVzcy5vcmeCIHdpdHN1bml2ZXJzaXR5cHJlc3Mubnl1cHJlc3Mub3JnghB3d3cu bnl1cHJlc3Mub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYK KwYBBAHWeQIEAgSB8wSB8ADuAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2y CJo32RMAAAFt+6BchgAABAMARjBEAiAGoQBQypfyXGb2urUfpUlSeKpTPmWB3mym m9iemOTNpQIgHpj6eFjD6LVdqo8Th66SXAYjJrMV7+u3KwWkYVWC8qcAdQCyHgXM i6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW37oFyZAAAEAwBGMEQCIHqw pDqW6X7pBpml35RgDmqA+wVKzemDyUj7XtFKvFalAiAkC6PpuK/s/g+4Exbby2CL atuj9BaK6NCxZ4Wv4ZvzVzANBgkqhkiG9w0BAQsFAAOCAQEALtUj14G8ij967Rsj dKuDOd1ZEVdAIpMQpBPG9jkUo8I2Bfd8wTnjf4rmzgJAKB5YLcqyiMh0qdAKQvow 3EaKfhpOdqXve0elr2ommOGAudSbhNlFy3cRNNM5hM8r8u9Zc1Veh9vx/5g6cQoz MLQE81aZs6bb8+a/a8JiL8CdK6JCjUx3ajgIABl50pYRznDI2jOKMV4fN0527pbX PTc3CKzDBGvymIcMbZuDVuvXmviHhUtURs8q/5STzj8jKYWpSS6NY/OV9hnXr2pA cPrDoL/b43dxPMFl3d75zjmH40g+xqkg2638WdYwixcpCqLvgKKLoyt0rhNDmpbm qsZbQg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE98IVQiq01UiWNBVd/+ pEd2pzd9SDkOAHwR2IizfLgzhmvrkNZlHxCUAfLC41DzWe9t/ihIFaaTBbcVuQOy 83QdFYZ/zyiU8R4F02k8lZ19MtoGJSXm4qvDu7KoQeH4v6IO3rchfidVnOMS8UFE m0wpqdDlplqR4mBTtohNDkquckimQED+hixKyBCKVuVQXQsh+4lgna49w+RhbHsj KuweoPNExwk50hT1YfXbQifkrdYK7SpKODKKYOPgwkovd3TXMywDWIfLKlU1mG1a LBfTvNOPG7hd+spUJgguOH0RdTf1SXyf8IIpLexznRmQdhlii5hqEPBC+siLgd8G 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 271898351387369932232839295691307073521018 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 01:37:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 01:37:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nyupress.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24781903230263096540911520385919139748981972514279783652278025709782633241746127243399827571648791989703745712428005881702169668963721722107270836046759401094183738109856665544545432112477972791962628216145697105350819556800358175488493823802842803588600441670073978955554373388971791018389707978372977303569334358297330620744183387374597502094841042784476173966730286263477748116495789131220339048937643849397693439303381411774864876343279690054318000222062191527870004769213362154848081822825270718094508410242763552193677579352846332601736009776214278203677712706596629990024866081239817252061147894394390843426531 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cb1d12701cc5dcca50de2fbf17dc0e0228407daf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newvillagepress.nyupress.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyupress.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'witsuniversitypress.nyupress.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyupress.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dfba05c860000040300463044022006a10050ca97f25c66f6bab51fa5495278aa533e6581de6ca69bd89e98e4cda502201e98fa7858c3e8b55daa8f1387ae925c062326b315efebb72b05a4615582f2a7007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dfba05c99000004030046304402207ab0a43a96e97ee90699a5df94600e6a80fb054acde983c948fb5ed14abc56a50220240ba3e9b8afecfe0fb81316dbcb608b6adba3f4168ae8d0b16785afe19bf357 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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