gardencityharvest.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:bd:0b:8c:55:78:58:36:51:3f:f6:b2:7a:50:4c:06:13:31 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gardencityharvest.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:bd:0b:8c:55:78:58:36:51:3f:f6:b2:7a:50:4c:06:13:31Serial Number (int): 325665575306391434643573285956365641454385
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 86:5e:af:0c:27:08:b8:f6:15:c6:ab:bd:56:cc:5a:33:1d:ac:40:23
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 26:6d:71:ec:52:ea:30:1e:68:f4:e7:f4:9e:3a:af:98:8c:a6:a4:b7
Fingerprint (sha256): fd:64:2e:20:56:f4:be:98:11:fc:65:5c:a9:67:c2:bf:13:0e:a5:9b:72:6a:24:ec:61:a6:7b:02:a4:33:ec:35
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate gardencityharvest.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gardencityharvest.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gardencityharvest.org
Other certificates including the domain name gardencityharvest.org
(limited to 100 certificates)
gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
www.gardencityharvest.org
gardencityharvest.org
gardencityharvest.org
Certificate
The complete raw certificate details for gardencityharvest.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFzCCBP+gAwIBAgISA70LjFV4WDZRP/ayelBMBhMxMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMDIwNDExNDJaFw0x ODEyMzEwNDExNDJaMCAxHjAcBgNVBAMTFWdhcmRlbmNpdHloYXJ2ZXN0Lm9yZzCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALrjvXTkzUUc8zH4AgaI12mD eAzl8fUkKHks289rV8oiyCnz/fOh4gDN8A+RQLKDnjT5goJvz3OivMwTZS0xCEB4 /TF34r+9FmsDO3LTwU1FFQOlcwI7fTIK+9gHb1NwGSyMW+nPhs+FXUd58b1QNRx5 2O0V7ZgUZZuiegd+K+JGEI0cMfHqEtkllyJFzZbAugOLTTQN0k6dAafbbL2rgsYd OGh4THgFbaSRYbp0Z4e96OB99/6oTzfLL+nr3TmHX8rzHA6QqUiZNFfXNSwwU8c0 lJnDXfmYat48laP8l3fLz5rijiZwxgwfGix66HVPfs6gwNLsoKfd+vT2AQyo5FsC AwEAAaOCAx8wggMbMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUhl6vDCcIuPYVxqu9 VsxaMx2sQCMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzAgBgNVHREEGTAXghVnYXJkZW5jaXR5aGFydmVzdC5vcmcwgf4G A1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUF BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4M gZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJl bHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENl cnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9y Zy9yZXBvc2l0b3J5LzCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3ANt0r+7LKeyx /so+cW0s5bmquzb3hHGDx12dTze2H79kAAABZjMwZvAAAAQDAEgwRgIhAKcXeX3o dSj0XA8VR9dMW1r1ao9TBqsKHENWjas6bNRYAiEAqDHGKXZRirwBbXa0Iq6H5H4p REkEzLDG1QyxMyrusj0AdwCkUBJpBVoVVF5iEas3vBA/Yq5VdqReSxcURT4bIhBq JQAAAWYzMGbyAAAEAwBIMEYCIQDfheLWonY+uvWDcjuS0DryklQfPo28MWmXMM0G 5IRjTgIhAPHWQbfeIU/zTC3QtBgZ+hjWOGmr3PvKoU+P1AZML5r8MA0GCSqGSIb3 DQEBCwUAA4IBAQAytVxvNBgv2NfChlK0Ben/R2v2uYfvJWe2bvCLWJK4eiGyzhJL SdXM54/vsiamo51DaRXcqA9hh5jT/MewT//KzAtb0sBOkEPGmlHtrha8F0VkhP2v dCCAC0PH3QQfFSULBXKKbz022akk4+DIfH8Ddq074ymwWK1544g27iQf9b0bndF7 S3ichQH156B5nRQG06pS0qYlWd1yiBeSte9IWe50LQ6P3B6LXsFDTrv0eTWj1eC3 p0/XdQ18+bwyXtKHRTZTVAPgbqO3h8Qps1seQYEdTSuXvyVUK/0A3YheaCv0HsXJ w5s27sfX/fyAsSpn9+KGtll0t6fha58gdItY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuO9dOTNRRzzMfgCBojX aYN4DOXx9SQoeSzbz2tXyiLIKfP986HiAM3wD5FAsoOeNPmCgm/Pc6K8zBNlLTEI QHj9MXfiv70WawM7ctPBTUUVA6VzAjt9Mgr72AdvU3AZLIxb6c+Gz4VdR3nxvVA1 HHnY7RXtmBRlm6J6B34r4kYQjRwx8eoS2SWXIkXNlsC6A4tNNA3STp0Bp9tsvauC xh04aHhMeAVtpJFhunRnh73o4H33/qhPN8sv6evdOYdfyvMcDpCpSJk0V9c1LDBT xzSUmcNd+Zhq3jyVo/yXd8vPmuKOJnDGDB8aLHrodU9+zqDA0uygp9369PYBDKjk WwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 325665575306391434643573285956365641454385 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-02 04:11:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-31 04:11:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gardencityharvest.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23592627535275743597438804140890676873303941471357122622805619472723209510680865804704373556765103468220031607173658497809010503828332586661803417500511864705297192431478392919614131352569632092086062679245156648643607087994083160261866019096454733937023184245111877843244955651207786917170431747258651507064995469970314242206352273268975633873597893807905429230933785924255100383990860243073244986855980694412915344948211894871784081074316368227968538947941539890177674788938188250802697695725775381163417257385406998755872228877137670806787331209450971575634034935542606216719057433671943841424408874347027948430427 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 865eaf0c2708b8f615c6abbd56cc5a331dac4023 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardencityharvest.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000166333066f00000040300483046022100a717797de87528f45c0f1547d74c5b5af56a8f5306ab0a1c43568dab3a6cd458022100a831c62976518abc016d76b422ae87e47e29444904ccb0c6d50cb1332aeeb23d007700a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000166333066f20000040300483046022100df85e2d6a2763ebaf583723b92d03af292541f3e8dbc31699730cd06e484634e022100f1d641b7de214ff34c2dd0b41819fa18d63869abdcfbcaa14f8fd4064c2f9afc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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