*.shineinterview.com
Issued by Sectigo RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number 7a:4a:7f:af:c4:88:70:84:93:d1:a3:5b:1c:d7:10:a6 was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.shineinterview.com
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate will expire on
Certificate Details
Serial Number (hex): 7a:4a:7f:af:c4:88:70:84:93:d1:a3:5b:1c:d7:10:a6Serial Number (int): 162552635245063424684297634626839974054
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 6f:6f:03:06:a7:c6:56:0b:3b:47:e4:7d:e8:6b:ff:d5:34:e9:18:3f
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1
Fingerprint (sha1): 71:22:67:3d:29:47:74:fc:ab:a5:dc:8a:55:5d:e8:10:02:2f:7a:b6
Fingerprint (sha256): fa:c6:de:e8:7a:55:32:67:ca:f8:b5:df:9a:4f:78:e9:26:46:57:c4:8d:99:28:18:87:7f:f7:d1:8d:9b:8e:60
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCheck the revocation status for certificate *.shineinterview.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.shineinterview.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.shineinterview.com
shineinterview.com
shineinterview.com
Other certificates including the domain name shineinterview.com
(limited to 100 certificates)
*.shineinterview.com
*.shineinterview.com
*.shineinterview.com
shineinterview.com
shineinterview.com
*.shineinterview.com
sni157470.cloudflaressl.com
*.shineinterview.com
shineinterview.com
shineinterview.com
shineinterview.com
sni157470.cloudflaressl.com
*.shineinterview.com
shineinterview.com
*.shineinterview.com
sni157470.cloudflaressl.com
sni157470.cloudflaressl.com
shineinterview.com
shineinterview.com
sni157470.cloudflaressl.com
shineinterview.com
*.shineinterview.com
shineinterview.com
sni157470.cloudflaressl.com
sni157470.cloudflaressl.com
shineinterview.com
shineinterview.com
shineinterview.com
*.shineinterview.com
shineinterview.com
*.shineinterview.com
*.shineinterview.com
shineinterview.com
shineinterview.com
*.shineinterview.com
sni157470.cloudflaressl.com
*.shineinterview.com
shineinterview.com
shineinterview.com
shineinterview.com
sni157470.cloudflaressl.com
*.shineinterview.com
shineinterview.com
*.shineinterview.com
sni157470.cloudflaressl.com
sni157470.cloudflaressl.com
shineinterview.com
shineinterview.com
sni157470.cloudflaressl.com
shineinterview.com
*.shineinterview.com
shineinterview.com
sni157470.cloudflaressl.com
sni157470.cloudflaressl.com
shineinterview.com
shineinterview.com
shineinterview.com
*.shineinterview.com
shineinterview.com
Certificate
The complete raw certificate details for *.shineinterview.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIQekp/r8SIcIST0aNbHNcQpjANBgkqhkiG9w0BAQsFADCB jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB MB4XDTIzMTAwMzAwMDAwMFoXDTI0MTAxNjIzNTk1OVowHzEdMBsGA1UEAwwUKi5z aGluZWludGVydmlldy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3BXWEEWMPXUnPDZ1b5l/n8dzMW1TBGRW5pA99/XmbmFE8v2JwWw0SyrJ3k3Fa E7AvJAS/qqdfM8v12R52KFXGbZz0jQNDeR1T/lDhkQPygTt3A2P+3I3hlZxbAK0w SGNqeqiIwp0/DmzqwZ0Du1wtyNXMsPVhMBZ9yrdEFbYMBm3b9Zp4Zypfi58Ynnt2 GU2BLtBJ+BxGZJdbh05ALooyQgbgQTs1KjgzBfAgq7Rx3V4iAcUBdSM0dePhBcz8 pkmWv4pr0Ge3VdbgHGdntOz11tW4bch+Xhd7c1nKDtIZd9sctu+mffBXE6Xk/0S6 VN1gYq8VLSOmG0QYSNnecV+RAgMBAAGjggMIMIIDBDAfBgNVHSMEGDAWgBSNjF7E VK2K4Xfpm/mbBeG4AY1h4TAdBgNVHQ4EFgQUb28DBqfGVgs7R+R96Gv/1TTpGD8w DgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAgcwJTAjBggrBgEF BQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQIBMIGEBggrBgEF BQcBAQR4MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2Vj dGlnb1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwIwYIKwYB BQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMDMGA1UdEQQsMCqCFCouc2hp bmVpbnRlcnZpZXcuY29tghJzaGluZWludGVydmlldy5jb20wggF8BgorBgEEAdZ5 AgQCBIIBbASCAWgBZgB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0 AAABivTvrfMAAAQDAEYwRAIgPH1PF+hY6Fmh7e2Ncsm7zr+MH17FRWXnQQADSHvt ulYCIG+6tTk8CVA69/fwQgZTYDHYE2VuEEde409cC5xxPOV0AHYA2ra/az+1tiKf m8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGK9O+uRwAABAMARzBFAiEAzZ0YKC8d Jk9ZCIyc2YTjIB52YYPYqUYPF3eP//ul61YCIBUkt/0yDQ258QADyZaik5F+ogyG ni720V1lrXwC61YQAHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsA AAGK9O+uGgAABAMARjBEAiBNYoiAoob1oCsZhASGo6BhUO1XM1QFUufbNmGsK5JF tAIgIuTB0KP2w0z4qLLQ8OZlAe1YIpBSJPm/jlhR6UgDX3owDQYJKoZIhvcNAQEL BQADggEBANGKeqyl6CeqPFP3eT3BpmFTHMEkyB1alDjq/s3sqO4YKxLGYVNrK6MD RRdFh0gQd7jaDuCgSPlxwM/3Ro8DLc2zz/XoSrNrk67e79XB6aLuM+ONESDe4Mfj C7v+L7eaRpqp3XmSbRt3aP6NmZO8RbB0T1fo5AuSfXm6NNgaemedXajVwrkJmRLt gFf3hI/adnFboVadAgJbMTPiQ9ppCAvczfZVEKyofbs2vCubs2yCxF/PgkMDaEP7 ZiZzhqm0C8+Tx18xN8kpzsT6xTnvZGTG2K1iBGukjvNsqFQ7kFzHT40YTiKs6DiT +k8SXbP3bjr6r+FF8iV2YiiulUXc690= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwV1hBFjD11Jzw2dW+Zf 5/HczFtUwRkVuaQPff15m5hRPL9icFsNEsqyd5NxWhOwLyQEv6qnXzPL9dkedihV xm2c9I0DQ3kdU/5Q4ZED8oE7dwNj/tyN4ZWcWwCtMEhjanqoiMKdPw5s6sGdA7tc LcjVzLD1YTAWfcq3RBW2DAZt2/WaeGcqX4ufGJ57dhlNgS7QSfgcRmSXW4dOQC6K MkIG4EE7NSo4MwXwIKu0cd1eIgHFAXUjNHXj4QXM/KZJlr+Ka9Bnt1XW4BxnZ7Ts 9dbVuG3Ifl4Xe3NZyg7SGXfbHLbvpn3wVxOl5P9EulTdYGKvFS0jphtEGEjZ3nFf kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 162552635245063424684297634626839974054 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.shineinterview.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23104301764922075813593302308397510909304976910568639600192852706485847382216337721998799967493643672661488912043787162881342757147553111728615033583665695997371054009487241404355894569545278988982091185848776627063931895984122305156766015499291739674643538643369929868158413445079504306014565326512870323102925993887172536937101390425154628378223559446468041712341034972879719121818424645757742904346921449607271219099061463487144742223005269189253711904249142769633212928109244226555342157534998273733360055000443432794374064093342888495097568622881320464937033961843797237650806929599136594341171963337967131516817 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6f6f0306a7c6560b3b47e47de86bffd534e9183f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shineinterview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shineinterview.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 016600750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018af4efadf3000004030046304402203c7d4f17e858e859a1eded8d72c9bbcebf8c1f5ec54565e7410003487bedba5602206fbab5393c09503af7f7f04206536031d813656e10475ee34f5c0b9c713ce574007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018af4efae470000040300473045022100cd9d18282f1d264f59088c9cd984e3201e766183d8a9460f17778ffffba5eb5602201524b7fd320d0db9f10003c996a293917ea20c869e2ef6d15d65ad7c02eb5610007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018af4efae1a000004030046304402204d628880a286f5a02b19840486a3a06150ed5733540552e7db3661ac2b9245b4022022e4c1d0a3f6c34cf8a8b2d0f0e66501ed5822905224f9bf8e5851e948035f7a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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