freenome.com
Issued by GTS CA 1D4
About this certificate
This digital certificate with serial number 7e:e9:03:85:69:56:18:4a:10:3e:c6:43:75:5b:61:20 was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=freenome.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 7e:e9:03:85:69:56:18:4a:10:3e:c6:43:75:5b:61:20Serial Number (int): 168692604054112448530248798620446581024
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 96:8e:a1:92:45:dc:b5:e4:d3:ff:87:ee:25:35:1d:13:f5:cd:c8:a4
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92
Fingerprint (sha1): b7:19:30:3d:e7:f4:74:6e:04:b6:70:a2:fd:8c:61:e8:35:e8:07:4c
Fingerprint (sha256): de:15:f6:64:af:ea:c3:60:5c:18:7f:a0:90:44:45:03:6e:b9:7c:d8:4e:6d:cc:9e:d1:ad:0c:29:4e:a8:e5:ed
Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1d4/wAGrvTCokvUCRL Distribution Point: http://crls.pki.goog/gts1d4/24E1YFLVsFE.crl
Check the revocation status for certificate freenome.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for freenome.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
freenome.com
Other certificates including the domain name freenome.com
(limited to 100 certificates)
www.freenome.com
freenome.com
www.mayatechnology.co.uk
ahll.test.emr.studio
www.freenome.com
www.freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
risingstar.blackmint.io
www.freenome.com
freenome.com
freenome.com
freenome.com
www.freenome.com
www.freenome.com
www.freenome.com
krishgpssolutions.com
www.freenome.com
earthlingrescuealliance.com
freenome.com
www.freenome.com
www.freenome.com
lasergeek.ru
freenome.com
www.desystem.net
training.freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
incidentally-login.emerging-response.com
damishael.com
www.freenome.com
careers.freenome.com
www.freenome.com
www.freenome.com
chornous.net
freenome.com
freenome.com
share.impactwrap.dev
michelin.inreport.uz
freenome.com
www.freenome.com
freenome.com
freenome.com
vivaleisure.jlonetouch.com.au
solvarea.speakylink.com
www.freenome.com
freenome.com
www.freenome.com
freenome.com
freenome.com
freenome.com
tls.automattic.com
freenome.com
www.freenome.com
deep.reezytech.com
www.alexdupuis.com
freenome.com
www.ramazanbalak.com
www.freenome.com
momofactoryus.com
www.freenome.com
urabereiji.com
digitalexp.tech
www.freenome.com
freenome.com
www.freenome.com
freenome.com
cdn.taskgram.com
freenome.com
freenome.com
freenome.com
www.freenome.com
freenome.com
www.freenome.com
www.freenome.com
www.freenome.com
zaiseki.artpro.co.jp
www.freenome.com
freenome.com
swatantra.globalgarner.com
operations.cognite.com
srba.fyi
freenome.com
www.freenome.com
www.freenome.com
acutemalnutrition.org
freenome.com
freenome.com
www.freenome.com
freenome.com
freenome.com
www.freenome.com
porcaosteakhouse.com.br
freenome.com
freenome.com
www.mayatechnology.co.uk
ahll.test.emr.studio
www.freenome.com
www.freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
risingstar.blackmint.io
www.freenome.com
freenome.com
freenome.com
freenome.com
www.freenome.com
www.freenome.com
www.freenome.com
krishgpssolutions.com
www.freenome.com
earthlingrescuealliance.com
freenome.com
www.freenome.com
www.freenome.com
lasergeek.ru
freenome.com
www.desystem.net
training.freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
incidentally-login.emerging-response.com
damishael.com
www.freenome.com
careers.freenome.com
www.freenome.com
www.freenome.com
chornous.net
freenome.com
freenome.com
share.impactwrap.dev
michelin.inreport.uz
freenome.com
www.freenome.com
freenome.com
freenome.com
vivaleisure.jlonetouch.com.au
solvarea.speakylink.com
www.freenome.com
freenome.com
www.freenome.com
freenome.com
freenome.com
freenome.com
tls.automattic.com
freenome.com
www.freenome.com
deep.reezytech.com
www.alexdupuis.com
freenome.com
www.ramazanbalak.com
www.freenome.com
momofactoryus.com
www.freenome.com
urabereiji.com
digitalexp.tech
www.freenome.com
freenome.com
www.freenome.com
freenome.com
cdn.taskgram.com
freenome.com
freenome.com
freenome.com
www.freenome.com
freenome.com
www.freenome.com
www.freenome.com
www.freenome.com
zaiseki.artpro.co.jp
www.freenome.com
freenome.com
swatantra.globalgarner.com
operations.cognite.com
srba.fyi
freenome.com
www.freenome.com
www.freenome.com
acutemalnutrition.org
freenome.com
freenome.com
www.freenome.com
freenome.com
freenome.com
www.freenome.com
porcaosteakhouse.com.br
freenome.com
Certificate
The complete raw certificate details for freenome.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIQfukDhWlWGEoQPsZDdVthIDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yMzAzMDExOTA0NDFaFw0yMzA1MzAx OTQzNDZaMBcxFTATBgNVBAMTDGZyZWVub21lLmNvbTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAIjg4hNP9k1iODQCpsVyaaEFXmqlAepgUF+1oSz9v3qj ft5E1STNbr2R2++C75xJZcYaA/lbSzU7dSOnTNXWh5yxsC5lFOZ4/1pnqJBqXMSl 4z+AYCVd6SfK3mCBcTc58rNKlTA4x7kzKsp2oNi39/Lf4gN2lbp/77w2kPhzBdzS /FjIyed3CgPnTs5sRJ3ykrcYHrbCT6H78BnrMGlsU2wLZMeP033fGQG6AI9/SsJD wvNGMeY1GF0c5v71WYTyOjfv5iGWlEs2Y9CZ+0INqTiPyKUsWo0duRVf5E37AujA WaASqWR1pGCebW+49azsnH+t+aruYFXODBOldR37gA0CAwEAAaOCAnQwggJwMA4G A1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBSWjqGSRdy15NP/h+4lNR0T9c3IpDAfBgNVHSMEGDAWgBQl4hgO sleRlCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUHMAGGKWh0 dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0L3dBR3J2VENva3ZVMDEGCCsGAQUF BzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQuZGVyMBcGA1Ud EQQQMA6CDGZyZWVub21lLmNvbTAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEE AdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5nb29nL2d0 czFkNC8yNEUxWUZMVnNGRS5jcmwwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgCz c3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAAAYaexuyqAAAEAwBHMEUC IQC9kKGH6CHF9vVbL2Dqq/Bk0Gyl1AaOqOsE0hX4/klNkgIgEvQp1vUMT3d2WpHf GJjeq5YduRDGSECM5+J5Xp8AZtIAdwDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp 4Xd9bQa9bgAAAYaexuyaAAAEAwBIMEYCIQD8m/s19/KAkLBj+SExvDLQSNxub/8O f68uoe1kiIxQ5wIhAN0pWGkmBG+7uzrvZqERj3Sxl4bQ8EWCZbZH5cmP5l4/MA0G CSqGSIb3DQEBCwUAA4IBAQBm81WJYS99Rub0Wz06VBESUILImXa/4GkhUALO50cx hX5u07YFJye0RE7/wOM+scsnAGvoaBzbcoXR22JsO0dR2S1/AsztzKrcfTJlFuRv EGydLMJCHGWDzUk9OG7eF4bMKVghP8T30RDhypR4cjnc/YZCOl+7uyUpLNZ3gBpC /QvZORK4usQFyG+hU58oj4iQ8jWV+M8I/cDc/Wzq9yxudVIfVTR+DiYWk1J4T7n7 oN2bnNCu8l+mMwPFj1oSuV+lZM0ls23PHd0AwW79jbRTg+c3/QZuCZgVerJ7I2A+ W5FXWCj6Kk2UGrXaeJDqFA+AS+jYXHXQR3qJJsAXEnPY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiODiE0/2TWI4NAKmxXJp oQVeaqUB6mBQX7WhLP2/eqN+3kTVJM1uvZHb74LvnEllxhoD+VtLNTt1I6dM1daH nLGwLmUU5nj/WmeokGpcxKXjP4BgJV3pJ8reYIFxNznys0qVMDjHuTMqynag2Lf3 8t/iA3aVun/vvDaQ+HMF3NL8WMjJ53cKA+dOzmxEnfKStxgetsJPofvwGeswaWxT bAtkx4/Tfd8ZAboAj39KwkPC80Yx5jUYXRzm/vVZhPI6N+/mIZaUSzZj0Jn7Qg2p OI/IpSxajR25FV/kTfsC6MBZoBKpZHWkYJ5tb7j1rOycf635qu5gVc4ME6V1HfuA DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 168692604054112448530248798620446581024 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-01 19:04:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 19:43:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freenome.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17279303468611690455795050250831314412369080797710343757760464484410326357493489020179438055585229606222391607595019117388729085116760092521803411313133847882983563571977923015250824066637535886385626966539189345143068035065283071377895389878180238837889599834965014375109486636928156632951092587552922542074715570051460822689744314927269476665736364277725186493523471453714393098800734014821000271912772890740088608983410202961568839463008175713882290362133295002360728102535970002422985469355129464865078464687791801219801101632000608809207317719774124039875637433268426128752589822078174835757778730103869085024269 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 968ea19245dcb5e4d3ff87ee25351d13f5cdc8a4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/wAGrvTCokvU' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freenome.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/24E1YFLVsFE.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001869ec6ecaa0000040300473045022100bd90a187e821c5f6f55b2f60eaabf064d06ca5d4068ea8eb04d215f8fe494d92022012f429d6f50c4f77765a91df1898deab961db910c648408ce7e2795e9f0066d2007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001869ec6ec9a0000040300483046022100fc9bfb35f7f28090b063f92131bc32d048dc6e6fff0e7faf2ea1ed64888c50e7022100dd29586926046fbbbb3aef66a1118f74b19786d0f0458265b647e5c98fe65e3f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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