indutyagi.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e4:d2:40:15:bf:11:30:98:73:de:17:e3:80:04:08:a9:f5 was issued on by Let's Encrypt.
With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=indutyagi.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e4:d2:40:15:bf:11:30:98:73:de:17:e3:80:04:08:a9:f5Serial Number (int): 339200708080436988882252090662695478012405
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9a:c5:31:51:b2:db:ae:d7:a0:82:69:09:1d:b4:35:26:c7:6e:b9:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 35:be:8a:f4:30:86:99:b8:95:4b:79:7f:5c:a3:65:c9:68:c0:0e:8e
Fingerprint (sha256): ed:d1:85:4e:66:e9:57:6e:62:e2:0c:bf:2e:5c:b0:9a:f7:40:28:fe:7d:8b:55:a8:a3:5c:0b:49:b8:67:df:79
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate indutyagi.com
16
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for indutyagi.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cpanel.healthytoast.com
cpanel.indutyagi.com
healthytoast.com
healthytoast.rigoutfit.com
indutyagi.com
indutyagi.rigoutfit.com
mail.healthytoast.com
mail.indutyagi.com
webdisk.healthytoast.com
webdisk.indutyagi.com
webmail.healthytoast.com
webmail.indutyagi.com
www.healthytoast.com
www.healthytoast.rigoutfit.com
www.indutyagi.com
www.indutyagi.rigoutfit.com
cpanel.indutyagi.com
healthytoast.com
healthytoast.rigoutfit.com
indutyagi.com
indutyagi.rigoutfit.com
mail.healthytoast.com
mail.indutyagi.com
webdisk.healthytoast.com
webdisk.indutyagi.com
webmail.healthytoast.com
webmail.indutyagi.com
www.healthytoast.com
www.healthytoast.rigoutfit.com
www.indutyagi.com
www.indutyagi.rigoutfit.com
Other certificates including the domain name indutyagi.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for indutyagi.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGwTCCBamgAwIBAgISA+TSQBW/ETCYc94X44AECKn1MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTcwODA5MjhaFw0y MDA1MTcwODA5MjhaMBgxFjAUBgNVBAMTDWluZHV0eWFnaS5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpFLCgc+l6QdVcsodIuw4WJIBL+VF7WwMR vDJIJntIWvWvw2L2CBWSKKHCl48Brk7zIS8XXBtJxgjFCTsxH/ODDyGTKHIZcRR8 urfKRkuRc1KPDhN5abHFXE7oyenIeVmNCGmdjdb8RPVawFBXjNJKQFlHla2qHkTh D7gPDOjhYDPwr3fd0SFmZ/5B6d+9cqP0x4kM42aj2jox7B7m02yMGTyGsrLygzuX rYWecLPsaXweNAFw1s2qE6HC2K/UE3rrdA2tA+m73vH1u7mZczH9NqvExMh8BBUg AadS5e5GmRAfjtMk2JI4+TVLdYZjZD3gah4kgV7oHYPziUYAc169AgMBAAGjggPR MIIDzTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJrFMVGy267XoIJpCR20NSbHbrmA MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wggGFBgNVHREEggF8MIIBeIIXY3BhbmVsLmhlYWx0aHl0b2FzdC5jb22CFGNw YW5lbC5pbmR1dHlhZ2kuY29tghBoZWFsdGh5dG9hc3QuY29tghpoZWFsdGh5dG9h c3Qucmlnb3V0Zml0LmNvbYINaW5kdXR5YWdpLmNvbYIXaW5kdXR5YWdpLnJpZ291 dGZpdC5jb22CFW1haWwuaGVhbHRoeXRvYXN0LmNvbYISbWFpbC5pbmR1dHlhZ2ku Y29tghh3ZWJkaXNrLmhlYWx0aHl0b2FzdC5jb22CFXdlYmRpc2suaW5kdXR5YWdp LmNvbYIYd2VibWFpbC5oZWFsdGh5dG9hc3QuY29tghV3ZWJtYWlsLmluZHV0eWFn aS5jb22CFHd3dy5oZWFsdGh5dG9hc3QuY29tgh53d3cuaGVhbHRoeXRvYXN0LnJp Z291dGZpdC5jb22CEXd3dy5pbmR1dHlhZ2kuY29tght3d3cuaW5kdXR5YWdpLnJp Z291dGZpdC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEw KDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgor BgEEAdZ5AgQCBIH1BIHyAPAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt 74uQXgAAAXBSaNvkAAAEAwBHMEUCIQCErqfTiWkPfyWkfO7SRcjVNyt6efGsDN8s gv4PIFDRnAIgcZMqmi2lxsZFJm4fIBe/vCqch81/9KOjYZYpoGe4EuUAdgBvU3as MfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAXBSaN0UAAAEAwBHMEUCIH2+ CtTki1bQeygQ5jwVpqljahH2UjBF53GC0lwODwWuAiEA/KU3sb3XDFlwwgBopkNG +Sb7n7sJRAwIhj/QXXyCIP4wDQYJKoZIhvcNAQELBQADggEBAGYtyknxiCr51Vw9 wauFW9jVj/MNAjb8CiM7xi6W8sGdcH+bT4mKHy6AO7ZXmguAtwwi5zQeLZLCPvKK Br3J4cRqkAc0auWDw+fGTuSMJHfgxCrIuHYx21ZMGf9b6SXpoeRLF9abGVANQYam wv9KX/T+4CQRtPHafcPQsFz4VnQJR7zC5T7/vQLe9Fh/gW107OV09orafp+hvFhC C0UGUjgpB60LNV107eyGnNES2G3Hov5D5E/BuQdfp/0OLzTS4ZQSVWseTTyO4rUA mi3thJuqWavwi8u9H3z6ZV6IiHHeeQNCLRnWfDetuXRZ2fyXe61lhMBF3M7lWRqB a7L+88Q= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RSwoHPpekHVXLKHSLsO FiSAS/lRe1sDEbwySCZ7SFr1r8Ni9ggVkiihwpePAa5O8yEvF1wbScYIxQk7MR/z gw8hkyhyGXEUfLq3ykZLkXNSjw4TeWmxxVxO6MnpyHlZjQhpnY3W/ET1WsBQV4zS SkBZR5Wtqh5E4Q+4Dwzo4WAz8K933dEhZmf+QenfvXKj9MeJDONmo9o6Mewe5tNs jBk8hrKy8oM7l62FnnCz7Gl8HjQBcNbNqhOhwtiv1BN663QNrQPpu97x9bu5mXMx /TarxMTIfAQVIAGnUuXuRpkQH47TJNiSOPk1S3WGY2Q94GoeJIFe6B2D84lGAHNe vQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 339200708080436988882252090662695478012405 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 08:09:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 08:09:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'indutyagi.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29423727650861734185041715621901852946184744978975146805712986498972874485876160305583242327948623621692942002632169879268225565851281337916791687305706325371548759005830284418268487824249893427648351546186036179759805955042155151591315254555920501661615054546880198058982755592475491769432506142336132779271639002026168900041378452930703522714739217046660441980379582159165573260781626500719750088458849438715917568326484420526939799536192651153538094107567689316016417119448662057837014613366597999413232436700998845472606270583383614906459282564995839010284139657502589533973790308759775379073922287103605233376957 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9ac53151b2dbaed7a08269091db43526c76eb980 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (380 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.healthytoast.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.indutyagi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthytoast.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthytoast.rigoutfit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indutyagi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indutyagi.rigoutfit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.healthytoast.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.indutyagi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.healthytoast.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.indutyagi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.healthytoast.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.indutyagi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthytoast.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthytoast.rigoutfit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indutyagi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indutyagi.rigoutfit.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001705268dbe4000004030047304502210084aea7d389690f7f25a47ceed245c8d5372b7a79f1ac0cdf2c82fe0f2050d19c022071932a9a2da5c6c645266e1f2017bfbc2a9c87cd7ff4a3a3619629a067b812e50076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001705268dd14000004030047304502207dbe0ad4e48b56d07b2810e63c15a6a9636a11f6523045e77182d25c0e0f05ae022100fca537b1bdd70c5970c20068a64346f926fb9fbb09440c08863fd05d7c8220fe . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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