lendme.co.ke
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:93:62:8f:e4:8c:a4:f4:eb:28:56:1e:5d:12:85:34:34:6d was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lendme.co.ke
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:93:62:8f:e4:8c:a4:f4:eb:28:56:1e:5d:12:85:34:34:6dSerial Number (int): 311489377210228770319471967973795100374125
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6f:00:60:c5:97:ff:ea:40:d5:e4:79:36:af:83:04:63:86:1d:4f:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 18:4e:af:1e:5b:f6:dd:02:6c:9c:83:e9:80:73:73:4a:a0:2a:73:0d
Fingerprint (sha256): ee:89:62:af:ae:ba:44:d4:0c:fd:7a:c7:6b:c7:c2:00:d7:66:03:94:eb:ce:97:4c:82:a3:6c:ca:c3:9b:95:e5
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate lendme.co.ke
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lendme.co.ke
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
forexaffair.com
lendme.co.ke
metacash.co.ke
metapro.co.ke
metaquant.co.ke
metaviz.co.ke
nairobischoolofforex.co.ke
sharpfx.co.ke
silvermedia.co.ke
www.forexaffair.com
www.lendme.co.ke
www.metacash.co.ke
www.metapro.co.ke
www.metaquant.co.ke
www.metaviz.co.ke
www.nairobischoolofforex.co.ke
www.sharpfx.co.ke
www.silvermedia.co.ke
lendme.co.ke
metacash.co.ke
metapro.co.ke
metaquant.co.ke
metaviz.co.ke
nairobischoolofforex.co.ke
sharpfx.co.ke
silvermedia.co.ke
www.forexaffair.com
www.lendme.co.ke
www.metacash.co.ke
www.metapro.co.ke
www.metaquant.co.ke
www.metaviz.co.ke
www.nairobischoolofforex.co.ke
www.sharpfx.co.ke
www.silvermedia.co.ke
Other certificates including the domain name lendme.co.ke
(limited to 100 certificates)
Certificate
The complete raw certificate details for lendme.co.ke in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgISA5Nij+SMpPTrKFYeXRKFNDRtMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDYxMDQ3MjNaFw0x OTExMDQxMDQ3MjNaMBcxFTATBgNVBAMTDGxlbmRtZS5jby5rZTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAPcSuGENCzzSXLxpBSgxZ7jcKVaakv14Vvm4 uSk9tR1rQaVMU8+zRCGPCtH+OH+/jS7ormqoyGeoGLYXCV7hbS+fIdxpsNVO/LDg IPfLQ2P3jLQdkrdJ1XszhhJiZIR27yXHRw1saIxVujILmBPRX+sOF0r3ljS2nU7L /U/1LAlR4Igchpu2hXJrb7Gt2+Vjma7sVtqSEPsbvlOkGpOIctUaA5rswomG6h3g piIiTK1OW9rwA28xp0xJhTSCIh0QFMegsg4ySNyaFNgrA1Gz6ZwgO0QvxXkiOcsz 7Ovpx7NC8y8CysG5X8JLOCzorpBQ96GqS4w6wbO4dEi5+oWxpsMCAwEAAaOCA7Uw ggOxMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUbwBgxZf/6kDV5Hk2r4MEY4YdT70w HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzCCAWkGA1UdEQSCAWAwggFcgg9mb3JleGFmZmFpci5jb22CDGxlbmRtZS5jby5r ZYIObWV0YWNhc2guY28ua2WCDW1ldGFwcm8uY28ua2WCD21ldGFxdWFudC5jby5r ZYINbWV0YXZpei5jby5rZYIabmFpcm9iaXNjaG9vbG9mZm9yZXguY28ua2WCDXNo YXJwZnguY28ua2WCEXNpbHZlcm1lZGlhLmNvLmtlghN3d3cuZm9yZXhhZmZhaXIu Y29tghB3d3cubGVuZG1lLmNvLmtlghJ3d3cubWV0YWNhc2guY28ua2WCEXd3dy5t ZXRhcHJvLmNvLmtlghN3d3cubWV0YXF1YW50LmNvLmtlghF3d3cubWV0YXZpei5j by5rZYIed3d3Lm5haXJvYmlzY2hvb2xvZmZvcmV4LmNvLmtlghF3d3cuc2hhcnBm eC5jby5rZYIVd3d3LnNpbHZlcm1lZGlhLmNvLmtlMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAdH7agzGtMxCR IZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFsZsFZ4gAABAMARzBFAiAvU0lO3oKA up642NBw1g9ksn1ZB+ggbf1XKmqErftWCAIhAOEkzdaSCb0Y7a4hGhYLInry4Gcr 6s8TWRme25sSH+BQAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgA AAFsZsFbxAAABAMARzBFAiEAoCm5SOufrsrkq/sHv76tr9A37lPJCDzNdDfmSMdp 1lECIBlT2ZuBt0+3NgtYr/ADC1i8qeKGFazu36QGmRE41PTuMA0GCSqGSIb3DQEB CwUAA4IBAQBJlCoJWq0PUUu0v56BgE/sPiddJTi8C+0sFyhtWg2jmSyt/eyhOCq8 eQuwAUeMffnbDGO6r0Jj7KAKoiG7IwON5a0+J/HEgT4lO6IkGYO7EdlhBCZYs8TN wTvwPpn/ftyXYmcIDSZTdYJh4Kj5GdvuuwqBxaNgaCX159DcWurwmTTb1H0HxCHa RkokHAfw0YYX+MMr0//3ZK4cZgYHtgcnBCkiExt5flZSCFxmoX+80o/YjwxvoOGy 1KhWhlq9YsNgEvUzMCIM1ZFYjRi6DdbYKdyDsMW2AMPkAPlH8IVCCX6bX/05mZIs XPq4iuslaGEJEmhCDv/rRfLQ9va3Dxbd -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xK4YQ0LPNJcvGkFKDFn uNwpVpqS/XhW+bi5KT21HWtBpUxTz7NEIY8K0f44f7+NLuiuaqjIZ6gYthcJXuFt L58h3Gmw1U78sOAg98tDY/eMtB2St0nVezOGEmJkhHbvJcdHDWxojFW6MguYE9Ff 6w4XSveWNLadTsv9T/UsCVHgiByGm7aFcmtvsa3b5WOZruxW2pIQ+xu+U6Qak4hy 1RoDmuzCiYbqHeCmIiJMrU5b2vADbzGnTEmFNIIiHRAUx6CyDjJI3JoU2CsDUbPp nCA7RC/FeSI5yzPs6+nHs0LzLwLKwblfwks4LOiukFD3oapLjDrBs7h0SLn6hbGm wwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 311489377210228770319471967973795100374125 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-06 10:47:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 10:47:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lendme.co.ke' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31190092616518301868257401186033558971371847551484798565664773451780328485751648105546117556615019630918853225291514861362845460586548809395273641566902915127906138248712228494149535168436817875874509379930402005683281995289697294872444212162304158528695485007495594028514447901344037766611831095843762500148298731405700813696759023254138603898319878783240673190875387091689088360449990229305856782267593966052006315453089956075018662142508216625116210444956815435437096446024453326766371944752428754902814810118179302411308619553828860604257732595389728061885769038670554567192268399829173110192812503619830964922051 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6f0060c597ffea40d5e47936af830463861d4fbd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (352 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forexaffair.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lendme.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metacash.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapro.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaquant.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaviz.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nairobischoolofforex.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharpfx.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvermedia.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forexaffair.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lendme.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metacash.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metapro.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metaquant.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metaviz.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nairobischoolofforex.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharpfx.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silvermedia.co.ke' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c66c159e2000004030047304502202f53494ede8280ba9eb8d8d070d60f64b27d5907e8206dfd572a6a84adfb5608022100e124cdd69209bd18edae211a160b227af2e0672beacf1359199edb9b121fe050007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c66c15bc40000040300473045022100a029b948eb9faecae4abfb07bfbeadafd037ee53c9083ccd7437e648c769d65102201953d99b81b74fb7360b58aff0030b58bca9e28615aceedfa406991138d4f4ee . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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