www.alfarisgrp.com
Issued by R3
About this certificate
This digital certificate with serial number 04:c1:26:6c:e7:8c:70:37:19:8a:a3:73:da:54:46:78:03:16 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.alfarisgrp.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c1:26:6c:e7:8c:70:37:19:8a:a3:73:da:54:46:78:03:16Serial Number (int): 414174716671045948727650658604988153463574
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 7a:0e:fe:dd:cd:4c:f3:c0:70:9f:b5:a7:da:43:69:13:55:87:30:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 64:f9:f1:93:97:60:fa:8d:a3:c0:55:1f:62:f4:e4:b4:bd:a6:79:07
Fingerprint (sha256): ed:e4:56:6e:27:b9:e6:d5:2b:31:0b:27:a9:51:a1:d5:f7:34:45:df:90:14:c1:00:55:44:ef:33:a3:b0:6d:2f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.alfarisgrp.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.alfarisgrp.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
alfarisgrp.com
cpanel.alfarisgrp.com
cpcalendars.alfarisgrp.com
cpcontacts.alfarisgrp.com
mail.alfarisgrp.com
webdisk.alfarisgrp.com
webmail.alfarisgrp.com
www.alfarisgrp.com
cpanel.alfarisgrp.com
cpcalendars.alfarisgrp.com
cpcontacts.alfarisgrp.com
mail.alfarisgrp.com
webdisk.alfarisgrp.com
webmail.alfarisgrp.com
www.alfarisgrp.com
Other certificates including the domain name alfarisgrp.com
(limited to 100 certificates)
alfarisgrp.com
helpdesk.renin.com
helpdesk.alfarisgrp.com
helpdesk.warren-wilson.edu
helpdesk.alfarisgrp.com
*.alfarisgrp.com
helpdesk.warren-wilson.edu
itservicedesk.intactpublicentities.ca
helpdesk.posnackschool.org
*.alfarisgrp.com
helpdesk.warren-wilson.edu
servicedesk.primehealthcare.com
alfarisgrp.com
*.alfarisgrp.com
alfarisgrp.com
helpdesk.warren-wilson.edu
alfarisgrp.com
alfarisgrp.com
helpdesk.warren-wilson.edu
*.alfarisgrp.com
servicedesk.hardwoodlumber.net
helpdesk.alfarisgrp.com
*.alfarisgrp.com
cpcontacts.alfarisgrp.com
alfarisgrp.com
helpdesk.posnackschool.org
itservicedesk.intactpublicentities.ca
itservicedesk.intactpublicentities.ca
it-helpdesk.dtgo.com
helpdesk.renin.com
www.alfarisgrp.com
helpdesk.renin.com
alfarisgrp.com
*.alfarisgrp.com
www.alfarisgrp.com
alfarisgrp.com
helpdesk.renin.com
alfarisgrp.com
alfarisgrp.com
alfarisgrp.com
it-helpdesk.dtgo.com
cpcalendars.alfarisgrp.com
*.alfarisgrp.com
cpcontacts.alfarisgrp.com
*.alfarisgrp.com
helpdesk.posnackschool.org
www.alfarisgrp.com
servicedesk.hardwoodlumber.net
alfarisgrp.com
helpdesk.renin.com
helpdesk.alfarisgrp.com
helpdesk.warren-wilson.edu
helpdesk.alfarisgrp.com
*.alfarisgrp.com
helpdesk.warren-wilson.edu
itservicedesk.intactpublicentities.ca
helpdesk.posnackschool.org
*.alfarisgrp.com
helpdesk.warren-wilson.edu
servicedesk.primehealthcare.com
alfarisgrp.com
*.alfarisgrp.com
alfarisgrp.com
helpdesk.warren-wilson.edu
alfarisgrp.com
alfarisgrp.com
helpdesk.warren-wilson.edu
*.alfarisgrp.com
servicedesk.hardwoodlumber.net
helpdesk.alfarisgrp.com
*.alfarisgrp.com
cpcontacts.alfarisgrp.com
alfarisgrp.com
helpdesk.posnackschool.org
itservicedesk.intactpublicentities.ca
itservicedesk.intactpublicentities.ca
it-helpdesk.dtgo.com
helpdesk.renin.com
www.alfarisgrp.com
helpdesk.renin.com
alfarisgrp.com
*.alfarisgrp.com
www.alfarisgrp.com
alfarisgrp.com
helpdesk.renin.com
alfarisgrp.com
alfarisgrp.com
alfarisgrp.com
it-helpdesk.dtgo.com
cpcalendars.alfarisgrp.com
*.alfarisgrp.com
cpcontacts.alfarisgrp.com
*.alfarisgrp.com
helpdesk.posnackschool.org
www.alfarisgrp.com
servicedesk.hardwoodlumber.net
alfarisgrp.com
Certificate
The complete raw certificate details for www.alfarisgrp.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISBMEmbOeMcDcZiqNz2lRGeAMWMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMTMyMTU2NDFaFw0yNDA0MTIyMTU2NDBaMB0xGzAZBgNVBAMT End3dy5hbGZhcmlzZ3JwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN7DIVgfSvwJMvL/ZU/3/m+PPf6oKt6pEb9r906MTyDvEuDzo2doPEHKGMcE DTsiRWSjwBt6efq4GGnWNEL3RQi0LicEgcuwJYEOIirh0YzGG/N6R0gGYnRoVQNg WUpVuA0t3JequPnJQivSbOkFSUsAtCnhKXe/1ZFaxRonBp27/RTVCmBcBD2epa1Q amCv7J80s4x/OxCWR1w3Fl8oe59TgZoCydV5AW3aVMsf+GRvLMzC32h9mZSRyX7Y YOH+2r3ofZiMW7lk/ZhN6uZ7TTKGQpAbD0+f6i9hycNc+AXnMCRltsPCanF3USGS 9MOB+p5wFvDJKshIiinJfk+hyaMCAwEAAaOCArowggK2MA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUeg7+3c1M88Bwn7Wn2kNpE1WHMFcwHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wgcIGA1UdEQSBujCBt4IOYWxmYXJpc2dycC5jb22CFWNwYW5lbC5hbGZh cmlzZ3JwLmNvbYIaY3BjYWxlbmRhcnMuYWxmYXJpc2dycC5jb22CGWNwY29udGFj dHMuYWxmYXJpc2dycC5jb22CE21haWwuYWxmYXJpc2dycC5jb22CFndlYmRpc2su YWxmYXJpc2dycC5jb22CFndlYm1haWwuYWxmYXJpc2dycC5jb22CEnd3dy5hbGZh cmlzZ3JwLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIE gfUEgfIA8AB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjQUK qoUAAAQDAEYwRAIgBxR6lH+szdR9E0bOfjYBCB86PzjKAQdlicggVstzKU4CIFOT MsK9MFK1Jcaq+KXIfPu2Qjp3NW53GWk5tYlFkXbCAHcAdv+IPwq2+5VRwmHM9Ye6 NLSkzbsp3GhCCp/mZ0xaOnQAAAGNBQqqjgAABAMASDBGAiEAlR4NlGwdaGWmrvv5 tBDAJ5oa+PkH7TcQrf+al8gLgXsCIQDVLT09YKY5UPdGkfwqhJpm+9Ndf8cxe7Yf Mvx665Uv2zANBgkqhkiG9w0BAQsFAAOCAQEAOXQQDYIXpE20XQbEphJE333n4yFG Hk5e0k2PFpKCqllmSlfUlt9g39BcLLZ+IjcOB1p97pYn3iC4LAJzLJYxv0P8mxKx zb8JZ/6OpkBeEgUeCewkigATEwTgx8zSp8NpcEEsQ2fFX4g/zTNbKkuPRS0o7VGY FE6rMVJLrtrUJjCMp1JIlHff+a4N5hRpT+xFikxQXExseumKZiVjRlEXAQda/wx2 ZIdt6I6tKNzujF/YM8SrQqdGJU4qXexJR50NlefinTt6xE3MQWR7vCnnYXlv2oRP 4x22ZTEVmzGQa6Jt1BcBk6eoZDBzoLFSHRilry2WtX6yzipctnmBlx14Ew== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sMhWB9K/Aky8v9lT/f+ b489/qgq3qkRv2v3ToxPIO8S4POjZ2g8QcoYxwQNOyJFZKPAG3p5+rgYadY0QvdF CLQuJwSBy7AlgQ4iKuHRjMYb83pHSAZidGhVA2BZSlW4DS3cl6q4+clCK9Js6QVJ SwC0KeEpd7/VkVrFGicGnbv9FNUKYFwEPZ6lrVBqYK/snzSzjH87EJZHXDcWXyh7 n1OBmgLJ1XkBbdpUyx/4ZG8szMLfaH2ZlJHJfthg4f7aveh9mIxbuWT9mE3q5ntN MoZCkBsPT5/qL2HJw1z4BecwJGW2w8JqcXdRIZL0w4H6nnAW8MkqyEiKKcl+T6HJ owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 414174716671045948727650658604988153463574 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 21:56:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 21:56:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.alfarisgrp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28121126015432919185205123609665880188863790911781001867304028893558270326941478999246090695729072084808134583777379142371047877095150442859110187693469989333352147082875722000637366090280632369058645045833393072724448761210783656775319490804306949471393050739457118264780119634047793435404945577593080907885195600818189048270732188368900118344025584169498648495087980565174343713190402461014230013356022934961976591853344395816375749758864411611342577174813822818570772937763128197185978094781178453222896648758965114345759907456542923125631705625553018676830645914927172859491232361551460145942878505582840640555427 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7a0efeddcd4cf3c0709fb5a7da43691355873057 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfarisgrp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.alfarisgrp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.alfarisgrp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.alfarisgrp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.alfarisgrp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.alfarisgrp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.alfarisgrp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfarisgrp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d050aaa850000040300463044022007147a947faccdd47d1346ce7e3601081f3a3f38ca01076589c82056cb73294e0220539332c2bd3052b525c6aaf8a5c87cfbb6423a77356e77196939b589459176c200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d050aaa8e0000040300483046022100951e0d946c1d6865a6aefbf9b410c0279a1af8f907ed3710adff9a97c80b817b022100d52d3d3d60a63950f74691fc2a849a66fbd35d7fc7317bb61f32fc7aeb952fdb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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