yacco.ee
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:43:54:65:8b:dd:26:16:cc:08:ef:f1:b8:da:c1:66:b7:db was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=yacco.ee
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:43:54:65:8b:dd:26:16:cc:08:ef:f1:b8:da:c1:66:b7:dbSerial Number (int): 284247958789388408756335675011705222903771
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 77:76:d2:0a:77:75:d9:d1:2f:86:24:22:f6:29:3c:0f:87:b6:03:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 27:45:e2:44:32:97:c1:0e:57:4e:ff:33:ea:ee:95:60:06:84:1d:42
Fingerprint (sha256): f2:20:e5:17:9c:9c:2e:ba:1c:0b:de:d2:40:78:48:13:65:2c:d3:cf:c3:00:53:27:6d:7e:81:83:ac:3a:68:b2
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate yacco.ee
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for yacco.ee
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.yacco.ee
cpanel.yacco.ee
mail.yacco.ee
webdisk.yacco.ee
webmail.yacco.ee
www.mail.yacco.ee
www.yacco.ee
yacco.ee
cpanel.yacco.ee
mail.yacco.ee
webdisk.yacco.ee
webmail.yacco.ee
www.mail.yacco.ee
www.yacco.ee
yacco.ee
Other certificates including the domain name yacco.ee
(limited to 100 certificates)
yacco.ee
mail.yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
mail.mtracing.ee
yacco.ee
yacco.ee
yacco.ee
www.mtracing.randesko.ee
yacco.ee
yacco-lub.ee
yacco.ee
yacco.ee
www.mtracing.ee
mtracing.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
mail.yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
mail.mtracing.ee
yacco.ee
yacco.ee
yacco.ee
www.mtracing.randesko.ee
yacco.ee
yacco-lub.ee
yacco.ee
yacco.ee
www.mtracing.ee
mtracing.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
yacco.ee
Certificate
The complete raw certificate details for yacco.ee in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGeTCCBWGgAwIBAgISA0NUZYvdJhbMCO/xuNrBZrfbMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMDgyMzEzMDFaFw0x OTAxMDYyMzEzMDFaMBMxETAPBgNVBAMTCHlhY2NvLmVlMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEArRv8Ypd1EysRmB55bWGTmzj21NLZfKsJ6f2Ef5Dj UDaZZL+92EGfok/rNpb2a1o4XGIRK8FqEqWx1jTvR+eVujRnXSHwm0gxzRI8+qpb D7VIveID4kT1zBV65yHeItJWNKt52CT8J6F0gxaY/JwVN8yRR4HCug+xXsGCDI7O N6P8/YvOfS16aGKjiZ/b8scHk0iI5IHRgEw1fwcwql2SDP92siPly9ZiUedl4XpN QdwEvYeqt0ztXq2VdDwichn6+j7lu5da42r2xSzembZbn+jEqcy1AdNjikGpNi2V r4RQhH8HsyP6PqztaS9rgGv1QZD6Br6gDXpL9aRR3YL30wIDAQABo4IDjjCCA4ow DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR3dtIKd3XZ0S+GJCL2KTwPh7YDxDAfBgNV HSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYI KwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYI KwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIGR BgNVHREEgYkwgYaCFWF1dG9kaXNjb3Zlci55YWNjby5lZYIPY3BhbmVsLnlhY2Nv LmVlgg1tYWlsLnlhY2NvLmVlghB3ZWJkaXNrLnlhY2NvLmVlghB3ZWJtYWlsLnlh Y2NvLmVlghF3d3cubWFpbC55YWNjby5lZYIMd3d3LnlhY2NvLmVlggh5YWNjby5l ZTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcC AjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24g YnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0 aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5 cHQub3JnL3JlcG9zaXRvcnkvMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAVYHU whaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFmVit6/wAABAMARjBEAiAo USC4c30Y3apREXBxlXI0JOcRX/fYmXKNU+10gXVkFQIgJL6wOL//buY20/mPVP7W 7/u+OOYBlwb7fGKesN5Nev8AdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTl RUf0eAAAAWZWK3wPAAAEAwBHMEUCIEmZN/PgxcyFyt0iMds0bXxEPhN8+VRSO+6Z GnsLYMllAiEAnspXzpo3tVFMy8Px4ou5ln6zetfqbN7bOv6qxb9tsx8wDQYJKoZI hvcNAQELBQADggEBACautoze+5ncSq+zwbMEQcQcwfY59YQbCgJSqnXpPjedZ4Wv Ho6rIyzPy8sIA6YjcftTtZAhMUVsMjd+wi6mc4QOlzhU/KLQYCvEpe46CT78TAkn 4u11yUH3DQ5UbyRXkbmJVjKC00u1JZqUtuPnzZScMjPLPXKq70Uzyh3C4IK6+Ifr oztMz9dnAvp/NUna2n/gOOYYuYZi1CY+eT3tFIdV8lraurpPT0tVYxZqYkIxkDzA at3EoUXDAWWbO2gFKznGCA8r8gT40tiUfgBKa0CIN85V3IaN/d8KujFHKcqlUyA0 pkzO3yN+WsmA8JcK/gf0MS4QLc5X+atq/yZwUYQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRv8Ypd1EysRmB55bWGT mzj21NLZfKsJ6f2Ef5DjUDaZZL+92EGfok/rNpb2a1o4XGIRK8FqEqWx1jTvR+eV ujRnXSHwm0gxzRI8+qpbD7VIveID4kT1zBV65yHeItJWNKt52CT8J6F0gxaY/JwV N8yRR4HCug+xXsGCDI7ON6P8/YvOfS16aGKjiZ/b8scHk0iI5IHRgEw1fwcwql2S DP92siPly9ZiUedl4XpNQdwEvYeqt0ztXq2VdDwichn6+j7lu5da42r2xSzembZb n+jEqcy1AdNjikGpNi2Vr4RQhH8HsyP6PqztaS9rgGv1QZD6Br6gDXpL9aRR3YL3 0wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 284247958789388408756335675011705222903771 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-08 23:13:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-06 23:13:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yacco.ee' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21853027110600945523066449493180179657455371058276684268734945654075063891786572653738682820817854260979488650446240122821502901523582015457507922574489488403489778444841161812838618772914803434517445186527861982916810604900437713599374176965461982880360391361709753462606618752678994351605115965368623901757454519936710801611667432708586108825137709405386553495039689371732531536178573550041784111284908657570619104214584204572280982062005651974048800403144139231890531594723411858976338871258350603811892555749755913801260672564761143565661578258991230650637932094466002623884221014229448271222138267735307139086291 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7776d20a7775d9d12f862422f6293c0f87b603c4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.yacco.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.yacco.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.yacco.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.yacco.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.yacco.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mail.yacco.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yacco.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yacco.ee' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166562b7aff00000403004630440220285120b8737d18ddaa5111707195723424e7115ff7d899728d53ed7481756415022024beb038bfff6ee636d3f98f54fed6effbbe38e6019706fb7c629eb0de4d7aff007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166562b7c0f00000403004730450220499937f3e0c5cc85cadd2231db346d7c443e137cf954523bee991a7b0b60c9650221009eca57ce9a37b5514ccbc3f1e28bb9967eb37ad7ea6cdedb3afeaac5bf6db31f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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