herefordsandblasting.co.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:6a:56:b2:bf:52:87:b6:98:ac:6d:59:1c:25:c3:fc:c5:a5 was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=herefordsandblasting.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6a:56:b2:bf:52:87:b6:98:ac:6d:59:1c:25:c3:fc:c5:a5Serial Number (int): 297522030405857483876821215571115073389989
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 16:31:f0:41:48:1d:b7:2c:a5:4e:01:c6:3e:2f:61:ea:06:c5:cb:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 05:ce:0a:7e:3f:30:39:39:22:f2:95:61:73:85:e2:7b:b6:9d:95:44
Fingerprint (sha256): ef:82:c6:67:5a:ff:10:39:3f:de:77:52:52:cc:e0:68:f7:f5:ed:b1:ef:f9:b5:74:f5:d0:52:13:3a:27:a7:69
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate herefordsandblasting.co.uk
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for herefordsandblasting.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.herefordsandblasting.co.uk
cpanel.herefordsandblasting.co.uk
herefordsandblasting.co.uk
mail.herefordsandblasting.co.uk
webdisk.herefordsandblasting.co.uk
webmail.herefordsandblasting.co.uk
www.herefordsandblasting.co.uk
cpanel.herefordsandblasting.co.uk
herefordsandblasting.co.uk
mail.herefordsandblasting.co.uk
webdisk.herefordsandblasting.co.uk
webmail.herefordsandblasting.co.uk
www.herefordsandblasting.co.uk
Other certificates including the domain name herefordsandblasting.co.uk
(limited to 100 certificates)
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
*.contrastblastcleaning.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
*.contrastblastcleaning.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk.r88site.com
herefordsandblasting.co.uk
www.herefordsandblasting.co.uk
*.herefordsandblasting.co.uk
herefordsandblasting.co.uk
contrastblastcleaning.co.uk
*.herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
*.contrastblastcleaning.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
*.contrastblastcleaning.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk.r88site.com
herefordsandblasting.co.uk
www.herefordsandblasting.co.uk
*.herefordsandblasting.co.uk
herefordsandblasting.co.uk
contrastblastcleaning.co.uk
*.herefordsandblasting.co.uk
herefordsandblasting.co.uk
herefordsandblasting.co.uk
Certificate
The complete raw certificate details for herefordsandblasting.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgISA2pWsr9Sh7aYrG1ZHCXD/MWlMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTExOTE1MzlaFw0y MDAxMDkxOTE1MzlaMCUxIzAhBgNVBAMTGmhlcmVmb3Jkc2FuZGJsYXN0aW5nLmNv LnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53EVKLD/2JyoSv6e rGgRCwvd/zsgj0p7pagUpZkTW6NOIioQfun5OmgdN9LoKWy3aa9p4mH72tWOzOKs zYkK66o2SscIBM8a5NPsuqwZoUKUvcPd4Pl1fPvTbrim9MBeQEZ9TSNOH2MtRv+x s5Wqzi0golT1ZseWZVCyLb3QKHevwBuXcC9Q0m5IvYjzUWEbqPgBI6SaeFsGliNc 9kg7W1AVCECpgmtaGeJARF2D1YCGW6/1F4Wr2lQ+2GTDvsNNrdBR+xQo1FvIbqx1 e3BNNCuaSOBNXljrtWNP+KoK9NWLNBionulUwWFy4iSlc+Cuj8+4lqiDiaeqlCs9 yNX9JQIDAQABo4IDSTCCA0UwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQWMfBBSB23 LKVOAcY+L2HqBsXLvzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMIH8BgNVHREEgfQwgfGCJ2F1dG9kaXNjb3Zlci5oZXJl Zm9yZHNhbmRibGFzdGluZy5jby51a4IhY3BhbmVsLmhlcmVmb3Jkc2FuZGJsYXN0 aW5nLmNvLnVrghpoZXJlZm9yZHNhbmRibGFzdGluZy5jby51a4IfbWFpbC5oZXJl Zm9yZHNhbmRibGFzdGluZy5jby51a4Iid2ViZGlzay5oZXJlZm9yZHNhbmRibGFz dGluZy5jby51a4Iid2VibWFpbC5oZXJlZm9yZHNhbmRibGFzdGluZy5jby51a4Ie d3d3LmhlcmVmb3Jkc2FuZGJsYXN0aW5nLmNvLnVrMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAKTxRllTIOWW6 qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFtvHZoiwAABAMASDBGAiEA4U48Iu4O td2TCxfdzJXRpVv0g8XQ2U6BdL+Ca5EjthECIQDxQVM9g9eqIiZf9SYD5r2tZWHw 4QAvjr8v+FFsapbkpwB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kT AAABbbx2aPgAAAQDAEgwRgIhAKyISHAfNMOSOfGVgy56X72k83PydHCOztqpISS0 UNFAAiEAocmDXlmLJcTNotYhgMRD8riZY12Wf887ona19qvIETcwDQYJKoZIhvcN AQELBQADggEBACXdXhE1BMznhzWQLu4OFfRaLRZpYNRLZakz2xJElnWCAUeIHgzP BlXlX1N464ljvsGpGsOqr4Ah5TqB55aXZz/dcEum9dv4DRPn/uVCeG59jESQT5Yn ym4lAeUoN3Z0V+Ri1QjJqdhZnRYji5wxvEkYohQlGPkfSCjygdX/3/51x1/TWxCV Fj18mSNd8aztQHhMzb9gXR6G+HTj0ijqueXTTFS76m9xqTPC5HXLr3hPRADS03NW 0bPPzx2Xl3vf4VzWv+gXw0Adf6Lvn3EcWwnSMUj7UyD1sUhmHF8xQypYUlwWq/3M ryG40VEVMoBacMCc+HCtbnLKW5wMCb412s4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53EVKLD/2JyoSv6erGgR Cwvd/zsgj0p7pagUpZkTW6NOIioQfun5OmgdN9LoKWy3aa9p4mH72tWOzOKszYkK 66o2SscIBM8a5NPsuqwZoUKUvcPd4Pl1fPvTbrim9MBeQEZ9TSNOH2MtRv+xs5Wq zi0golT1ZseWZVCyLb3QKHevwBuXcC9Q0m5IvYjzUWEbqPgBI6SaeFsGliNc9kg7 W1AVCECpgmtaGeJARF2D1YCGW6/1F4Wr2lQ+2GTDvsNNrdBR+xQo1FvIbqx1e3BN NCuaSOBNXljrtWNP+KoK9NWLNBionulUwWFy4iSlc+Cuj8+4lqiDiaeqlCs9yNX9 JQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 297522030405857483876821215571115073389989 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 19:15:39 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 19:15:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'herefordsandblasting.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29216811581255939958377804412508003979939736932167859068762184936571769127098753650949922159804745516973455908164045287002027759835051617946329986479423130142393465321113715823072548036548614400115635979386464629418778078858168982296400694350100435924414721405915017773078895761007829254073107452176736843506601209631369420676143858217374896345780081989493271821907817211499093777025406800681775809243995943129682957879407746298540198804433871659289553410806576070965477898588078454722709194683473465383396837307775129672366053685891811017321477942701040478641867389981982827270288045664872400726697949794272797916453 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1631f041481db72ca54e01c63e2f61ea06c5cbbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.herefordsandblasting.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.herefordsandblasting.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herefordsandblasting.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.herefordsandblasting.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.herefordsandblasting.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.herefordsandblasting.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herefordsandblasting.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbc76688b0000040300483046022100e14e3c22ee0eb5dd930b17ddcc95d1a55bf483c5d0d94e8174bf826b9123b611022100f141533d83d7aa22265ff52603e6bdad6561f0e1002f8ebf2ff8516c6a96e4a70077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dbc7668f80000040300483046022100ac8848701f34c39239f195832e7a5fbda4f373f274708ecedaa92124b450d140022100a1c9835e598b25c4cda2d62180c443f2b899635d967fcf3ba276b5f6abc81137 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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