caaantik.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:85:f5:66:53:7d:36:75:62:08:e5:3e:13:4f:ae:49:39:32 was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=caaantik.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:85:f5:66:53:7d:36:75:62:08:e5:3e:13:4f:ae:49:39:32Serial Number (int): 306920604762372802036959007004087949015346
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 65:69:e2:12:1d:b0:3a:85:ac:24:3b:10:fd:33:b4:bc:d7:3e:84:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f3:a6:04:b3:aa:9b:a5:e7:92:3e:56:dc:8b:fc:e5:0a:75:b8:2a:6d
Fingerprint (sha256): ec:de:35:b0:5f:db:47:ba:a4:ae:12:69:9f:85:84:31:ee:e6:2a:29:4f:50:f3:6b:43:0c:c4:40:e1:99:83:cf
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate caaantik.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for caaantik.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
caaantik.com
cpanel.caaantik.com
mail.caaantik.com
webdisk.caaantik.com
webmail.caaantik.com
www.caaantik.com
cpanel.caaantik.com
mail.caaantik.com
webdisk.caaantik.com
webmail.caaantik.com
www.caaantik.com
Other certificates including the domain name caaantik.com
(limited to 100 certificates)
istricaaantik.com
caaantik.com
mail.softbank.id
istricaaantik.com
www.istricaaantik.com
istricaaantik.com
istricaaantik.com
weblogmix.com
weblogmix.com
caaantik.com
edpay.co.id
www.caaantik.com
caaantik.com
www.weblogmix.com
istricaaantik.com
softbank.id
caaantik.com
weblogmix.com
istricaaantik.com
istricaaantik.com
caaantik.com
www.caaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
weblogmix.com
istricaaantik.com
weblogmix.com
istricaaantik.com
caaantik.com
caaantik.com
istricaaantik.com
weblogmix.com
caaantik.com
softbank.id
caaantik.com
lucas-papaw.com
thetravellernews.caaantik.com
thetravellernews.com
istricaaantik.com
paper.co.id
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
weblogmix.com
www.caaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
caaantik.com
istricaaantik.com
weblogmix.com
shopymatic.com
mail.istricaaantik.com
istricaaantik.com
weblogmix.com
weblogmix.com
edpay.co.id
istricaaantik.com
caaantik.com
istricaaantik.com
istricaaantik.com
softbank.id
caaantik.com
softbank.id
caaantik.com
istricaaantik.com
istricaaantik.com
weblogmix.com
startup-speakup.com
eyro.co.id
caaantik.com
weblogmix.com
eyro.caaantik.com
caaantik.com
istricaaantik.com
mail.istricaaantik.com
caaantik.com
istricaaantik.com
istricaaantik.com
caaantik.com
mail.softbank.id
istricaaantik.com
www.istricaaantik.com
istricaaantik.com
istricaaantik.com
weblogmix.com
weblogmix.com
caaantik.com
edpay.co.id
www.caaantik.com
caaantik.com
www.weblogmix.com
istricaaantik.com
softbank.id
caaantik.com
weblogmix.com
istricaaantik.com
istricaaantik.com
caaantik.com
www.caaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
weblogmix.com
istricaaantik.com
weblogmix.com
istricaaantik.com
caaantik.com
caaantik.com
istricaaantik.com
weblogmix.com
caaantik.com
softbank.id
caaantik.com
lucas-papaw.com
thetravellernews.caaantik.com
thetravellernews.com
istricaaantik.com
paper.co.id
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
weblogmix.com
www.caaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
caaantik.com
istricaaantik.com
weblogmix.com
shopymatic.com
mail.istricaaantik.com
istricaaantik.com
weblogmix.com
weblogmix.com
edpay.co.id
istricaaantik.com
caaantik.com
istricaaantik.com
istricaaantik.com
softbank.id
caaantik.com
softbank.id
caaantik.com
istricaaantik.com
istricaaantik.com
weblogmix.com
startup-speakup.com
eyro.co.id
caaantik.com
weblogmix.com
eyro.caaantik.com
caaantik.com
istricaaantik.com
mail.istricaaantik.com
caaantik.com
istricaaantik.com
istricaaantik.com
Certificate
The complete raw certificate details for caaantik.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISA4X1ZlN9NnViCOU+E0+uSTkyMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMTgxNjM2NTRaFw0x OTA2MTYxNjM2NTRaMBcxFTATBgNVBAMTDGNhYWFudGlrLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBANfem/3+c3K351J8F9QT8HwBHsS/hD/xkR2Y g12l6tuLQ3LAGFezq+0SacKxdwnSI+ogFL56/3+99ZohsVGd2rrNZ9+8fSiDwdhY JWQOzzSR4ZVF1cWtFMzeZ3Y8xQoDATdNrNRcUh6WcbMB+xlEm8dLtWfQ0iBuUvjE Qq4HXLqXkz3g5QUwpv7aLRM6kdOXXnTU4snKQgBKbsupsZ7FKDMpPwkaOs6P5NBp IEKaxMRACGMTvtD3AKL674iSy2+IeWPDOK0mPbQs5fxE2NB8+piZeuxHK71CChy4 1PcuOIMxJlTyKXjUPUdFllHuF2nfoPzqiQBpak8JMZ1gCS9IHRUCAwEAAaOCAsgw ggLEMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUZWniEh2wOoWsJDsQ/TO0vNc+hJMw HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzB9BgNVHREEdjB0ggxjYWFhbnRpay5jb22CE2NwYW5lbC5jYWFhbnRpay5jb22C EW1haWwuY2FhYW50aWsuY29tghR3ZWJkaXNrLmNhYWFudGlrLmNvbYIUd2VibWFp bC5jYWFhbnRpay5jb22CEHd3dy5jYWFhbnRpay5jb20wTAYDVR0gBEUwQzAIBgZn gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgApPFGWVMg5 ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWmR4KuxAAAEAwBHMEUCIF/82mts n87iN/Xng6EgTr/Rjii2mQi9vQjIkE7v4Xm7AiEAiagiCHRqEKiVtNLZVXGooJpb jVUgOIMwVMpXpNypcq0AdwDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb /gAAAWmR4K2lAAAEAwBIMEYCIQDGrJKGkvNX28NV8ZpEfOx5dJogg0ViK7DAFX6V AeLtIwIhAPx8Ue2PRSoeZDqzVjcOjT24SA56xBOr/cHiMl2p+XPYMA0GCSqGSIb3 DQEBCwUAA4IBAQA6Pdn0HFbuaNjcCuI0toD4n3vNj16aCSouET3Wx8cZDKDRbV8Q xNO4TMC1Z30OWhC6LcOBACp8dhkPcLScVUct5jecZ5+KGrAaIX7MELGWdsPI6Ds9 9YU1KcOyGAok4EpYu7A6kGCJdpUuYvcPQuWIsXAJYl76pO3e0sBei144uFybVQ8K gUyWvjD782UkjCvTd37cZvFJb8cFDOPO2NlN1ydb6Tmhp13qAmckaL8oWbXRWDrd iVwHmG607THAm/3t050mTQvXktvOh63pA16wORKOWZQ1BO0ruZ8cdgisCKt6GLVQ hzAMLvg/MP+OjdOWx9IvWOB5oB3+LvdtvqUP -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA196b/f5zcrfnUnwX1BPw fAEexL+EP/GRHZiDXaXq24tDcsAYV7Or7RJpwrF3CdIj6iAUvnr/f731miGxUZ3a us1n37x9KIPB2FglZA7PNJHhlUXVxa0UzN5ndjzFCgMBN02s1FxSHpZxswH7GUSb x0u1Z9DSIG5S+MRCrgdcupeTPeDlBTCm/totEzqR05dedNTiycpCAEpuy6mxnsUo Myk/CRo6zo/k0GkgQprExEAIYxO+0PcAovrviJLLb4h5Y8M4rSY9tCzl/ETY0Hz6 mJl67EcrvUIKHLjU9y44gzEmVPIpeNQ9R0WWUe4Xad+g/OqJAGlqTwkxnWAJL0gd FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 306920604762372802036959007004087949015346 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-18 16:36:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-16 16:36:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'caaantik.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27251008326708114964403663357932177361322912947356259611412806097373617406566446176714944503650370100112314337134949949346699294458193555264541250987994953086461025645594447024019428270337122615816579905866335343843490014097883202555495417230712165478139139114999961727575982459856735341376469151269135607839391634860589870171847416502823077490663830407558795357873990186769896099742019825022505880047461120126424315109528684284879372979475516867335702310721034632014234606309932750058061137120210706488051808220060268124921986448228922911365535303231894359032409369797401399133144309308283926425683189401817868410133 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6569e2121db03a85ac243b10fd33b4bcd73e8493 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caaantik.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.caaantik.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.caaantik.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.caaantik.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.caaantik.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caaantik.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016991e0abb1000004030047304502205ffcda6b6c9fcee237f5e783a1204ebfd18e28b69908bdbd08c8904eefe179bb02210089a82208746a10a895b4d2d95571a8a09a5b8d552038833054ca57a4dca972ad007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016991e0ada50000040300483046022100c6ac928692f357dbc355f19a447cec79749a208345622bb0c0157e9501e2ed23022100fc7c51ed8f452a1e643ab356370e8d3db8480e7ac413abfdc1e2325da9f973d8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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