thingscon.nl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1e:4b:1f:67:67:b6:34:33:ca:e8:2d:5f:f9:8d:34:50:3d was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=thingscon.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1e:4b:1f:67:67:b6:34:33:ca:e8:2d:5f:f9:8d:34:50:3dSerial Number (int): 271645183961100456409502254970342575722557
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9a:51:d2:8e:09:2b:a5:67:94:ff:38:26:b7:63:ef:6e:41:5f:fc:d4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 34:d3:98:57:d1:68:67:28:3d:e9:f8:ae:22:44:9b:01:fc:48:26:41
Fingerprint (sha256): e9:09:78:e9:e8:b6:b1:e7:8b:67:3b:b9:73:75:6b:60:8a:2e:52:33:6a:f9:7e:85:49:c0:6b:38:6c:ba:9a:4d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate thingscon.nl
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for thingscon.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
2016.thingscon.nl
thingscon.nl
www.thingscon.nl
thingscon.nl
www.thingscon.nl
Other certificates including the domain name thingscon.nl
(limited to 100 certificates)
thingscon.nl
thingscon.nl
thingscon.nl
old.thingscon.nl
thingscon.nl
thingscon.nl
old.thingscon.nl
thingscon.nl
2015.thingscon.nl
thingscon.nl
old.thingscon.nl
thingscon.nl
thingscon.nl
2015.thingscon.nl
2015.thingscon.nl
thingscon.nl
2015.thingscon.nl
2015.thingscon.nl
old.thingscon.nl
thingscon.nl
2015.thingscon.nl
thingscon.nl
thingscon.nl
2015.thingscon.nl
thingscon.nl
2015.thingscon.nl
old.thingscon.nl
thingscon.nl
old.thingscon.nl
thingscon.nl
old.thingscon.nl
2015.thingscon.nl
2015.thingscon.nl
old.thingscon.nl
old.thingscon.nl
thingscon.nl
thingscon.nl
2015.thingscon.nl
2015.thingscon.nl
thingscon.nl
thingscon.nl
thingscon.nl
thingscon.nl
thingscon.nl
old.thingscon.nl
thingscon.nl
2015.thingscon.nl
thingscon.nl
thingscon.nl
old.thingscon.nl
thingscon.nl
thingscon.nl
old.thingscon.nl
thingscon.nl
2015.thingscon.nl
thingscon.nl
old.thingscon.nl
thingscon.nl
thingscon.nl
2015.thingscon.nl
2015.thingscon.nl
thingscon.nl
2015.thingscon.nl
2015.thingscon.nl
old.thingscon.nl
thingscon.nl
2015.thingscon.nl
thingscon.nl
thingscon.nl
2015.thingscon.nl
thingscon.nl
2015.thingscon.nl
old.thingscon.nl
thingscon.nl
old.thingscon.nl
thingscon.nl
old.thingscon.nl
2015.thingscon.nl
2015.thingscon.nl
old.thingscon.nl
old.thingscon.nl
thingscon.nl
thingscon.nl
2015.thingscon.nl
2015.thingscon.nl
thingscon.nl
thingscon.nl
thingscon.nl
thingscon.nl
thingscon.nl
old.thingscon.nl
thingscon.nl
2015.thingscon.nl
Certificate
The complete raw certificate details for thingscon.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGITCCBQmgAwIBAgISAx5LH2dntjQzyugtX/mNNFA9MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjExMjgyMjE3MDBaFw0x NzAyMjYyMjE3MDBaMBcxFTATBgNVBAMTDHRoaW5nc2Nvbi5ubDCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAMjNG+VS6ptqFjpWhkwkN7Y0FZ8+4DdVUGRt 0THNqy/Fw06hqFwyPHNBfn4Uqm7rwH3XW3IacTujcocNiyhkReDRO5gTcTW+lEfK K+igBq37XdbGzJ8aqWg0u7zILYjTD9jHmBMlE1hi06LjW4xRf9zeCCbb6X2ZAtAu xRfvs5jquWNn78sGYb+2DAV+oyahcrmaxZvuwomX8r4FWw55okF17KCIHSxpoacL BEwDp/rYUHd7X8KCwSoYe+bAG9wuiQ1adpFld0/yrd/LnxvIq4Wl5kRB2X9lyZEm w30zvuXqGiOniIlSQZEngl7n5xLfIieI6gh3ich/CCzDgemXR8UYN8iHF/bjfaL4 +P1VqtLgZb/7HWT6lQawPPVWQoDWK5po9RZGIa/dBxIlF3Fizi7WcS9yjVwzPVlg qw3SMiaFaSI4oHS5UtDHK0uIGkROHHXOyobzALKMfTuT5SVugOp0J+D9Uafn95+a 3SI5kH/qwFzF+XZtXv+MOplbJdQkIm0X3RLwCYIeCgwnmoabRgEaujGiWbM+dgGR k4KJKv3VbOaphV7MURYglQfLTLULAAZdeStiJfw/nxkOHx8LNf/fyBTMkK4ujwma k8IzNKNQKr6WWN66cNG7c9bXIJlgXKJG/FT1r8FD6SSmeN9oZvTvru0mzLxG1TIf hNXAw4CLAgMBAAGjggIyMIICLjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJpR0o4J K6VnlP84Jrdj725BX/zUMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMDwGA1UdEQQ1MDOCETIwMTYudGhpbmdzY29uLm5s ggx0aGluZ3Njb24ubmyCEHd3dy50aGluZ3Njb24ubmwwgf4GA1UdIASB9jCB8zAI BgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8v Y3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRp ZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGll cyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBv bGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5 LzANBgkqhkiG9w0BAQsFAAOCAQEAKwISbHB6jd2QFRpxOH0M8KOVV9BuIqCzNUC5 z+3OM9k+7lNTVfbHjT39M5BPF+RQZ/lAmqDYIEncsnbI8G4bSNMQvO84FCHRHeYM WDkQNr15IbwbqD9rTU16jnsfZZxeebnuiR5bLXi0E48206X2Pzc3Jp6grjRh9m8d u1THiuDS5v5FlseRXnCebHEL3sWfZbfYjQXCkInQh+ycOsRplJVVQhJBEo9A1BBN BZjFS5l7FHlBESh0H294GaXBbL/aci+X2aJLlUykOnO5PuVECw06AiOfAXM9iu12 2P3PLYQnB/KyFWKlNwsaLr7eKG9U+XZuVjar4UhQSe3bgoQP/A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyM0b5VLqm2oWOlaGTCQ3 tjQVnz7gN1VQZG3RMc2rL8XDTqGoXDI8c0F+fhSqbuvAfddbchpxO6Nyhw2LKGRF 4NE7mBNxNb6UR8or6KAGrftd1sbMnxqpaDS7vMgtiNMP2MeYEyUTWGLTouNbjFF/ 3N4IJtvpfZkC0C7FF++zmOq5Y2fvywZhv7YMBX6jJqFyuZrFm+7CiZfyvgVbDnmi QXXsoIgdLGmhpwsETAOn+thQd3tfwoLBKhh75sAb3C6JDVp2kWV3T/Kt38ufG8ir haXmREHZf2XJkSbDfTO+5eoaI6eIiVJBkSeCXufnEt8iJ4jqCHeJyH8ILMOB6ZdH xRg3yIcX9uN9ovj4/VWq0uBlv/sdZPqVBrA89VZCgNYrmmj1FkYhr90HEiUXcWLO LtZxL3KNXDM9WWCrDdIyJoVpIjigdLlS0McrS4gaRE4cdc7KhvMAsox9O5PlJW6A 6nQn4P1Rp+f3n5rdIjmQf+rAXMX5dm1e/4w6mVsl1CQibRfdEvAJgh4KDCeahptG ARq6MaJZsz52AZGTgokq/dVs5qmFXsxRFiCVB8tMtQsABl15K2Il/D+fGQ4fHws1 /9/IFMyQri6PCZqTwjM0o1AqvpZY3rpw0btz1tcgmWBcokb8VPWvwUPpJKZ432hm 9O+u7SbMvEbVMh+E1cDDgIsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 271645183961100456409502254970342575722557 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-28 22:17:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-26 22:17:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thingscon.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 819197452605646246266455823547418116631709511019205765204285448428627051312071535492854260628572073662455293093941829918447211641709546040384329119164463850788809834412059009723750228150905392150340217859890357023411468595994753156813405571986523006860941324178126113632997852123867491456312275027156904029158231196130048518865809090593447647074977513387792473716695846407588431579746952984933846366830141831050137056004774271238234367400989882228210537934729368998449574501542164372986275949199974232691764044168631956133792944666501913707303815970038893023154251031285949591465644713811586086815864785075277259817671581847962237889921103696510650689214318919666536225046513399825829703629153751472257232048819210547148382923268559841283301864135172509387278803996439297022844139742869826298569475475078877296476970503556374324023495002896207623349681573317688472610576924490380650581701693271579294456073402917920356253075151893740408167523109035530356781111970639250304958664568441995743267303727959122508382441137931885097386606089339243789544221376278037156897283646870196779396500236622429140008217019288286131031952379013607562338358535742289190934229820596628131690674844808989506438790592190783651350524079697439705648038027 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9a51d28e092ba56794ff3826b763ef6e415ffcd4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2016.thingscon.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thingscon.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thingscon.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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