*.felixstowe-fairtrade.org.uk
Issued by R3
About this certificate
This digital certificate with serial number 04:b4:09:a4:f5:10:84:e5:9f:c2:08:6c:ad:39:78:c8:fc:e2 was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.felixstowe-fairtrade.org.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:b4:09:a4:f5:10:84:e5:9f:c2:08:6c:ad:39:78:c8:fc:e2Serial Number (int): 409712789331955907079122379357600770227426
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 1e:50:9c:47:34:92:c8:d7:9f:c4:8c:a4:f8:a6:36:37:5d:6e:e4:15
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ae:d0:b2:00:f9:80:cf:4c:62:da:66:50:9f:51:4e:7f:23:1c:f5:06
Fingerprint (sha256): dd:91:4b:0a:bb:59:a5:f8:34:cd:df:cb:b2:b0:3f:89:f3:61:76:7b:a6:57:76:ae:13:eb:db:75:e6:00:4b:e7
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.felixstowe-fairtrade.org.uk
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.felixstowe-fairtrade.org.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.felixstowe-fairtrade.org.uk
*.robinpattinson.co.uk
*.suffolkfairtrade.org.uk
*.waltonpn.org.uk
felixstowe-fairtrade.org.uk
suffolkfairtrade.org.uk
waltonpn.org.uk
waltonpn.org.uk.robinpattinson.co.uk
www.felixstowe-fairtrade.robinpattinson.co.uk
www.suffolkfairtrade.robinpattinson.co.uk
www.waltonpn.org.uk.robinpattinson.co.uk
*.robinpattinson.co.uk
*.suffolkfairtrade.org.uk
*.waltonpn.org.uk
felixstowe-fairtrade.org.uk
suffolkfairtrade.org.uk
waltonpn.org.uk
waltonpn.org.uk.robinpattinson.co.uk
www.felixstowe-fairtrade.robinpattinson.co.uk
www.suffolkfairtrade.robinpattinson.co.uk
www.waltonpn.org.uk.robinpattinson.co.uk
Other certificates including the domain name felixstowe-fairtrade.org.uk
(limited to 100 certificates)
oandrphotography.co.uk
footcareipswich.co.uk
oandrphotography.co.uk
felixstowe-fairtrade.org.uk
alphapics.co.uk
felixstowe-fairtrade.org.uk
oandr.photography
oandrphotography.co.uk
alphapics.co.uk
felixstowe-fairtrade.org.uk
robinpattinson.co.uk
felixstowe-fairtrade.org.uk
felixstowe-fairtrade.org.uk
alphapics.co.uk
oandrphotography.co.uk
felixstowe-fairtrade.robinpattinson.co.uk
felixstowe-fairtrade.org.uk
alphapics.co.uk
alphapics.co.uk
*.felixstowe-fairtrade.org.uk
footcareipswich.co.uk
oandrphotography.co.uk
footcareipswich.co.uk
oandrphotography.co.uk
felixstowe-fairtrade.org.uk
alphapics.co.uk
felixstowe-fairtrade.org.uk
oandr.photography
oandrphotography.co.uk
alphapics.co.uk
felixstowe-fairtrade.org.uk
robinpattinson.co.uk
felixstowe-fairtrade.org.uk
felixstowe-fairtrade.org.uk
alphapics.co.uk
oandrphotography.co.uk
felixstowe-fairtrade.robinpattinson.co.uk
felixstowe-fairtrade.org.uk
alphapics.co.uk
alphapics.co.uk
*.felixstowe-fairtrade.org.uk
footcareipswich.co.uk
oandrphotography.co.uk
Certificate
The complete raw certificate details for *.felixstowe-fairtrade.org.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgISBLQJpPUQhOWfwghsrTl4yPziMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDkyMDQxMThaFw0yNDA3MDgyMDQxMTdaMCgxJjAkBgNVBAMM HSouZmVsaXhzdG93ZS1mYWlydHJhZGUub3JnLnVrMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAsvY6u/EX6qIODQGIlN1xKQ9b2uAL3EB6Yx3NA1oTDGtt 6Njji3k9xElEFvFCIVUJNZUy1V5AmbZRVkivFYMJjU+VKUGR0Lz/iVpGOa/+VXdb DgX1ByyIXtvhvwG0qCkcl+aYEG2REpPpxgxmpSyGTEkd3Al94eyxZSA5D6OOgkRj N7IUDe/hOUSoSjmBHzFU1eVwaeKwe/+kbnShybvcbTmqbD6T4J5Cq8HGDErnx15O fW1pvF8w7wZahpPnr3UdUOE76zbxos4Sv6BWHzalBiBqbHzQVaUvvvIxppYKPIwO EeyPCLG4NLFQ5ZP1R8N3cTvFcxgWQWIEszlRiuXZkQIDAQABo4IDXDCCA1gwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBQeUJxHNJLI15/EjKT4pjY3XW7kFTAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzCCAWMGA1UdEQSCAVowggFWgh0qLmZlbGl4c3Rvd2Ut ZmFpcnRyYWRlLm9yZy51a4IWKi5yb2JpbnBhdHRpbnNvbi5jby51a4IZKi5zdWZm b2xrZmFpcnRyYWRlLm9yZy51a4IRKi53YWx0b25wbi5vcmcudWuCG2ZlbGl4c3Rv d2UtZmFpcnRyYWRlLm9yZy51a4IXc3VmZm9sa2ZhaXJ0cmFkZS5vcmcudWuCD3dh bHRvbnBuLm9yZy51a4Ikd2FsdG9ucG4ub3JnLnVrLnJvYmlucGF0dGluc29uLmNv LnVrgi13d3cuZmVsaXhzdG93ZS1mYWlydHJhZGUucm9iaW5wYXR0aW5zb24uY28u dWuCKXd3dy5zdWZmb2xrZmFpcnRyYWRlLnJvYmlucGF0dGluc29uLmNvLnVrgih3 d3cud2FsdG9ucG4ub3JnLnVrLnJvYmlucGF0dGluc29uLmNvLnVrMBMGA1UdIAQM MAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYASLDja9qmRzQP 5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGOxM7sKwAABAMARzBFAiAv1ut8r36L Kt4aauQ8BEBSHORonByrS1PUji1IqWvvFAIhAJl6tO4BPfLC8Ni875nQAKfHR4T0 wkVMIPGhlBhCCDyjAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcA AAGOxM7sKQAABAMARzBFAiBrx3POcveO8y2X7WIbrSi11PtyuErLyjlnJb33d77N 0gIhAOor3bXKFWvQdBqFEYNYMT/LqRILP0ZQmkzDkigwsjRqMA0GCSqGSIb3DQEB CwUAA4IBAQCNNAdbkfkGQlygI9dY6kQDT/yeRO87IjDSbdMEOgdrzeyuqmW6tmcl LzLdIDQPn66BIvBzUoO4QUkXGkjlCzrs0/hX1gK1goNrE53qd5KRP+Aer2b+ZvWI fFQrjmM7NCCvA6hlP/JSsjbehq1otSdZO0REfeKZlXAT127l6q3XDiSnPRttzeRT YcSlKNMAjPrzi1ofX9056yAnEFFvRXaLf9WqD89Hkd3JZkhxwkwyu5uvde0pkRW4 BzuN+b5G0dFY08FGt0Gn4KKN21riA9+zik/Pvwq8ePjaQ0A2KxKVa6A6dHx8ckL8 03B26MtOO6mjmaYlkyM8GpdlilAymHMy -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvY6u/EX6qIODQGIlN1x KQ9b2uAL3EB6Yx3NA1oTDGtt6Njji3k9xElEFvFCIVUJNZUy1V5AmbZRVkivFYMJ jU+VKUGR0Lz/iVpGOa/+VXdbDgX1ByyIXtvhvwG0qCkcl+aYEG2REpPpxgxmpSyG TEkd3Al94eyxZSA5D6OOgkRjN7IUDe/hOUSoSjmBHzFU1eVwaeKwe/+kbnShybvc bTmqbD6T4J5Cq8HGDErnx15OfW1pvF8w7wZahpPnr3UdUOE76zbxos4Sv6BWHzal BiBqbHzQVaUvvvIxppYKPIwOEeyPCLG4NLFQ5ZP1R8N3cTvFcxgWQWIEszlRiuXZ kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 409712789331955907079122379357600770227426 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 20:41:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-08 20:41:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.felixstowe-fairtrade.org.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22591838541416504389048379984179527492939606407915880158165324931590154943589232637472776874201197665365050256294165077938703639647123827763617407359182524239323527627106251578458643298171498837838171818134891527218116151009024340427318327168127992631297606901063396102217463549020801664336009567709719766376627856288493374134400680953778211719599265143016655946103970204640130747153533723583271602695147454280395901142470899788825349555990649912352780262124112107594937705926403083135260264242590035402734360668840053730482006785611937699534888808554349587278073672212518878334294647565298420478092082244450087459217 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1e509c473492c8d79fc48ca4f8a636375d6ee415 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (346 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.felixstowe-fairtrade.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robinpattinson.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suffolkfairtrade.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waltonpn.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felixstowe-fairtrade.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suffolkfairtrade.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waltonpn.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waltonpn.org.uk.robinpattinson.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.felixstowe-fairtrade.robinpattinson.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suffolkfairtrade.robinpattinson.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waltonpn.org.uk.robinpattinson.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ec4ceec2b000004030047304502202fd6eb7caf7e8b2ade1a6ae43c0440521ce4689c1cab4b53d48e2d48a96bef14022100997ab4ee013df2c2f0d8bcef99d000a7c74784f4c2454c20f1a1941842083ca30076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ec4ceec29000004030047304502206bc773ce72f78ef32d97ed621bad28b5d4fb72b84acbca396725bdf777becdd2022100ea2bddb5ca156bd0741a85118358313fcba9120b3f46509a4cc3922830b2346a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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