plesk.vm01.srvhub.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:65:7b:74:e3:b7:e1:28:ed:3d:8a:af:ad:95:63:b9:11:ba was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=plesk.vm01.srvhub.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:65:7b:74:e3:b7:e1:28:ed:3d:8a:af:ad:95:63:b9:11:baSerial Number (int): 295869478822888076815662860131027388010938
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 88:58:15:8a:51:24:4f:86:76:92:e3:b0:8a:c7:de:c3:2a:26:3b:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1c:cc:36:91:bd:b1:c3:e6:02:cc:c6:59:d6:96:79:de:46:57:77:ae
Fingerprint (sha256): dc:53:1f:30:2a:9e:43:0f:c0:4b:9b:d8:c5:d8:1b:e4:42:a6:17:30:15:ce:f8:6f:e1:f3:64:00:94:a9:4d:14
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate plesk.vm01.srvhub.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for plesk.vm01.srvhub.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
plesk.vm01.srvhub.de
Other certificates including the domain name srvhub.de
(limited to 100 certificates)
plesk.vm01.srvhub.de
plesk.vm01.srvhub.de
plesk.vm01.srvhub.de
srvhub.de
shared05.srvhub.de
adv2018.vm03.srvhub.de
plesk.vm01.srvhub.de
shared01.srvhub.de
plesk.vm01.srvhub.de
plesk.vm01.srvhub.de
srvhub.de
srvhub.de
shared05.srvhub.de
plesk.vm01.srvhub.de
shared05.srvhub.de
srvhub.de
shared03.srvhub.de
adv2018.vm03.srvhub.de
shared05.srvhub.de
vm02.srvhub.de
srvhub.de
srvhub.de
plesk.vm01.srvhub.de
srvhub.de
shared05.srvhub.de
plesk.vm01.srvhub.de
srvhub.de
shared05.srvhub.de
*.vm03.srvhub.de
xmpp.vm02.srvhub.de
triflex01.srvhub.de
plesk.vm01.srvhub.de
shared05.srvhub.de
shared05.srvhub.de
shared05.srvhub.de
adv2017.vm03.srvhub.de
adv2018.vm03.srvhub.de
plesk.vm01.srvhub.de
shared03.srvhub.de
plesk.vm01.srvhub.de
shared05.srvhub.de
plesk.vm01.srvhub.de
buddycloud.vm02.srvhub.de
shared05.srvhub.de
srvhub.de
plesk.vm01.srvhub.de
plesk.vm01.srvhub.de
srvhub.de
shared05.srvhub.de
adv2018.vm03.srvhub.de
plesk.vm01.srvhub.de
shared01.srvhub.de
plesk.vm01.srvhub.de
plesk.vm01.srvhub.de
srvhub.de
srvhub.de
shared05.srvhub.de
plesk.vm01.srvhub.de
shared05.srvhub.de
srvhub.de
shared03.srvhub.de
adv2018.vm03.srvhub.de
shared05.srvhub.de
vm02.srvhub.de
srvhub.de
srvhub.de
plesk.vm01.srvhub.de
srvhub.de
shared05.srvhub.de
plesk.vm01.srvhub.de
srvhub.de
shared05.srvhub.de
*.vm03.srvhub.de
xmpp.vm02.srvhub.de
triflex01.srvhub.de
plesk.vm01.srvhub.de
shared05.srvhub.de
shared05.srvhub.de
shared05.srvhub.de
adv2017.vm03.srvhub.de
adv2018.vm03.srvhub.de
plesk.vm01.srvhub.de
shared03.srvhub.de
plesk.vm01.srvhub.de
shared05.srvhub.de
plesk.vm01.srvhub.de
buddycloud.vm02.srvhub.de
shared05.srvhub.de
srvhub.de
Certificate
The complete raw certificate details for plesk.vm01.srvhub.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgISA2V7dOO34SjtPYqvrZVjuRG6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MTUwNzU2NDFaFw0x ODA4MTMwNzU2NDFaMB8xHTAbBgNVBAMTFHBsZXNrLnZtMDEuc3J2aHViLmRlMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfsqoa3hXPci2mV4dOAQkqeY qnydp0vtBR6gwJMd4MhRVoZ7ug82474qTxO3d0jZ1qHZFOyq69xzJxKmlOPDKrKS UXROXKVAwlL2TgUp3sqw09N1KXWM4E4iRVZh8g3jj4o2OUhkzqxanvI1pgvoP7Pp ljXeFKEDIYjQf/iG61atxILTZQKSDcs1KGi7vgbmDkAJXoa1girVifIPV2Yb/ITP WJ77EEmSYCJ9Rru3zY6giDHivfBeZweoCsJIu+S1DNsmzq5M4k1fsYz3DQ9zBzU/ QRkB4FQhT7GiMlfugf9PhD971X1Mtx4dw4uMyhQdSRDuHcSM6gC7EPjWaPKULQID AQABo4IDHTCCAxkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSIWBWKUSRPhnaS47CK x97DKiY76TAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j cnlwdC5vcmcvMB8GA1UdEQQYMBaCFHBsZXNrLnZtMDEuc3J2aHViLmRlMIH+BgNV HSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcC ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGb VGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5 aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0 aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcv cmVwb3NpdG9yeS8wggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDbdK/uyynssf7K PnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWNjBBRHAAAEAwBIMEYCIQDJ/T1IxKB7 6Y1vOMzrR1YTUDLu/2OXA7aa0FELEg+wkgIhALH3ve9c8LwTVaaeXgCLLqpbIBnm +0FqytIfAhFu6t++AHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgA AAFjYwQUVQAABAMARzBFAiBOfpKELYbJ2/PCdtRM8GOO8TXPhpHrPFsw6jyF7NgP JgIhAMD1s+i+hDGRh25Kwc0QdCwDpZSmvy0JqfsxtDMLJTT6MA0GCSqGSIb3DQEB CwUAA4IBAQCasRNLU/9qi1iRmAmYoVbgJcrZ4fCE2TnvPCrDHnpiSTpbKnd2aE2s mwfuI/n13Uu3JIHXKwBwvDPPwrbA32AD+njQrY2CZ+VqYbyXSnUukskR9WMYwfB9 kRyJe75qgOOSZORRT/23emmppMafWkHzitJvj0EEWMPPYWyQAcQBh4nXa3k6kf8w qPiRPEI71TerFyQhPIiPyjxLy+4A7y0EEgHcjg++7jR7PPyfU4ezBfwkplCt1E2f AezsczL0S05LFZVr+zBXhUf9Lj8KlXa+dxNAGKbYz62esI3+1S4Koa8inxVCRGxl 0tGdyJc5TIcnQDuIKAIvOdif7WjdxSPG -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfsqoa3hXPci2mV4dOAQ kqeYqnydp0vtBR6gwJMd4MhRVoZ7ug82474qTxO3d0jZ1qHZFOyq69xzJxKmlOPD KrKSUXROXKVAwlL2TgUp3sqw09N1KXWM4E4iRVZh8g3jj4o2OUhkzqxanvI1pgvo P7PpljXeFKEDIYjQf/iG61atxILTZQKSDcs1KGi7vgbmDkAJXoa1girVifIPV2Yb /ITPWJ77EEmSYCJ9Rru3zY6giDHivfBeZweoCsJIu+S1DNsmzq5M4k1fsYz3DQ9z BzU/QRkB4FQhT7GiMlfugf9PhD971X1Mtx4dw4uMyhQdSRDuHcSM6gC7EPjWaPKU LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 295869478822888076815662860131027388010938 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-15 07:56:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-13 07:56:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'plesk.vm01.srvhub.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18933362271786339672682597260393733677825619650560967788566948326092376784456781466367869611576351626659593710363805370853948892053751669462418442164902903476678624701775864302675975695799381413074411025973502963163927277244970590403940840275943466290767110699331439535345487937026477033097507522070047375783062012714626283278781004354254735454141899340837077378378191666380693367431734568615645791911438063603308258810444155316856532758032725858558553407579177994533280610543014892329632544801617245712052791143817101424258724116672870351974212844347454845907364179788676312862242023720024060800205117448046142198829 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8858158a51244f867692e3b08ac7dec32a263be9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plesk.vm01.srvhub.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163630414470000040300483046022100c9fd3d48c4a07be98d6f38cceb4756135032eeff639703b69ad0510b120fb092022100b1f7bdef5cf0bc1355a69e5e008b2eaa5b2019e6fb416acad21f02116eeadfbe007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016363041455000004030047304502204e7e92842d86c9dbf3c276d44cf0638ef135cf8691eb3c5b30ea3c85ecd80f26022100c0f5b3e8be843191876e4ac1cd10742c03a594a6bf2d09a9fb31b4330b2534fa . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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