rocket2.stemk12.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:00:98:86:9e:a5:ab:a5:8b:47:04:e0:75:3a:a3:eb:7b:fe was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=rocket2.stemk12.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:00:98:86:9e:a5:ab:a5:8b:47:04:e0:75:3a:a3:eb:7b:feSerial Number (int): 261539599436165577078431540732214649781246
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 71:df:dc:1b:2e:f8:44:b2:2d:bd:f9:3b:f8:c5:e9:02:78:2b:cd:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 36:6c:26:12:9d:f6:a6:d3:12:6a:2f:a6:c7:04:5d:42:4e:ef:8f:c5
Fingerprint (sha256): 00:39:92:6b:62:8e:88:0d:36:20:e6:64:39:01:4f:55:2b:3d:0b:03:7a:6d:bc:b1:d6:a3:99:b1:5d:41:5e:8a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate rocket2.stemk12.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rocket2.stemk12.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rocket2.stemk12.org
Other certificates including the domain name stemk12.org
(limited to 100 certificates)
rocket2.stemk12.org
admin.ninth.frenship.net
*.schoology.com
*.schoology.com
*.schoology.com
admin.aeropuerto.ipefh.edu.mx
*.schoology.com
stemk12.org
68thstreetes.com
schoolforthedeaf.wvsdb2.state.k12.wv.us
*.schoology.com
admin.aeropuerto.ipefh.edu.mx
*.schoology.com
*.schoology.com
www.bpbraves.net
*.schoology.com
*.stemk12.org
admin.newtownhighschool.org
*.schoology.com
*.schoology.com
*.schoology.com
hs.humphreyscountysd.org
*.schoology.com
*.schoology.com
admin.bfes.wilkescountyschools.org
68thstreetes.com
*.schoology.com
*.schoology.com
rocket2.stemk12.org
phs.pusdatsa.org
*.schoology.com
*.schoology.com
*.schoology.com
admin.aeropuerto.ipefh.edu.mx
*.schoology.com
rocket.stemk12.org
*.schoology.com
preschool.castaicusd.com
admin.frenship.net
www.regentsas.org
wright-es.weatherfordisd.com
*.schoology.com
hyer.hpisd.org
68thstreetes.com
burkett.montourschools.com
*.stemk12.org
*.schoology.com
collegeachieveasbury.org
admin.bennett.frenship.net
admin.stemk12.org
68thstreetes.com
admin.aeropuerto.ipefh.edu.mx
*.schoology.com
rocket2.stemk12.org
admin.aeropuerto.ipefh.edu.mx
admin.multisensoryschool.wvsdb2.state.k12.wv.us
*.schoology.com
*.schoology.com
*.schoology.com
admin.aeropuerto.ipefh.edu.mx
*.schoology.com
www.montourschools.com
*.schoology.com
*.schoology.com
*.schoology.com
mac.gcsd.ms
admin.bfes.wilkescountyschools.org
www.186streetschool.com
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
admin.bennett.frenship.net
admin.bennett.frenship.net
*.schoology.com
admin.cfn.edu.mx
admin.bennett.frenship.net
*.schoology.com
admin.pleasanthillschools.com
*.schoology.com
*.schoology.com
*.schoology.com
68thstreetes.com
*.schoology.com
admin.bennett.frenship.net
admin.bennett.frenship.net
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
stemk12.org
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
admin.ninth.frenship.net
*.schoology.com
*.schoology.com
*.schoology.com
admin.aeropuerto.ipefh.edu.mx
*.schoology.com
stemk12.org
68thstreetes.com
schoolforthedeaf.wvsdb2.state.k12.wv.us
*.schoology.com
admin.aeropuerto.ipefh.edu.mx
*.schoology.com
*.schoology.com
www.bpbraves.net
*.schoology.com
*.stemk12.org
admin.newtownhighschool.org
*.schoology.com
*.schoology.com
*.schoology.com
hs.humphreyscountysd.org
*.schoology.com
*.schoology.com
admin.bfes.wilkescountyschools.org
68thstreetes.com
*.schoology.com
*.schoology.com
rocket2.stemk12.org
phs.pusdatsa.org
*.schoology.com
*.schoology.com
*.schoology.com
admin.aeropuerto.ipefh.edu.mx
*.schoology.com
rocket.stemk12.org
*.schoology.com
preschool.castaicusd.com
admin.frenship.net
www.regentsas.org
wright-es.weatherfordisd.com
*.schoology.com
hyer.hpisd.org
68thstreetes.com
burkett.montourschools.com
*.stemk12.org
*.schoology.com
collegeachieveasbury.org
admin.bennett.frenship.net
admin.stemk12.org
68thstreetes.com
admin.aeropuerto.ipefh.edu.mx
*.schoology.com
rocket2.stemk12.org
admin.aeropuerto.ipefh.edu.mx
admin.multisensoryschool.wvsdb2.state.k12.wv.us
*.schoology.com
*.schoology.com
*.schoology.com
admin.aeropuerto.ipefh.edu.mx
*.schoology.com
www.montourschools.com
*.schoology.com
*.schoology.com
*.schoology.com
mac.gcsd.ms
admin.bfes.wilkescountyschools.org
www.186streetschool.com
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
admin.bennett.frenship.net
admin.bennett.frenship.net
*.schoology.com
admin.cfn.edu.mx
admin.bennett.frenship.net
*.schoology.com
admin.pleasanthillschools.com
*.schoology.com
*.schoology.com
*.schoology.com
68thstreetes.com
*.schoology.com
admin.bennett.frenship.net
admin.bennett.frenship.net
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
stemk12.org
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
Certificate
The complete raw certificate details for rocket2.stemk12.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgISAwCYhp6lq6WLRwTgdTqj63v+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjIwOTA0MDVaFw0x OTEyMjEwOTA0MDVaMB4xHDAaBgNVBAMTE3JvY2tldDIuc3RlbWsxMi5vcmcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11h+xZ4djZFIqqLsyf3jkGHMt g6coT/9UAVPznk2jtBOStbTed75orauSWAuNin/k7TSGkRUwAZIGgxNRlqZ9clg7 R7THTfNhtMFjJwJ+HZJcAAmlHfHHcxsrkoZHEVx1EWqievxnZMooJ/sksK9d3eXC 27Lvsp6yx1/MwGR+X+aQUtr3ZFQRxpt1eA6ReY/1YO82MHWC00qVtk9vg5nXW47V xaZTSvys3G1otxv5LiZ6pjXFNrDmjrM7d2ERMV9SnF24iHXWzEhW898xwAaW9njM Cmc3FsDV1XOH8PdlmbR7swvSsXIRzRCwfzsjCr6oRrNzpereptR1E9o/UfqRAgMB AAGjggJoMIICZDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHHf3Bsu+ESyLb35O/jF 6QJ4K82FMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wHgYDVR0RBBcwFYITcm9ja2V0Mi5zdGVtazEyLm9yZzBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2 AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABbVhtrXAAAAQDAEcw RQIgBm63eQPYSY15jCkMKMmBVvstQHOqYSGhqBn6VHcltXMCIQD3RtP1eRxKCyBQ v8nc84XQ7UwuCALgqSnimsCBIT3rLwB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLc pMMM9OVFR/R4AAABbVhtq3cAAAQDAEcwRQIgcY9I59IK4hYEguwtveUiyTfqSIvr q1CcprDekW0j7MECIQC1qtsupyv0dA+D9CWpEkKy06IS+qk9q4F7P/M8O46iUTAN BgkqhkiG9w0BAQsFAAOCAQEAF7v+vVWaf3nyXGn1pK8ZzZoVE0KZE5PvPNTopj3n NXz94lPUkksTMlYaf0nyWzUHUK1p7RcXgaEgtr00pmuMEaEmJzs9oqo/bEIdIRbo 6taFeDKRAJay3yEwWGyACGYtrMdi6emMD9iRaHRUYYmf1d9nwGmTqiN6Irg8TK1c d84+Kv5YBUcschaIBM7lD82tXgpBSxhqS/gwQ3/pGcS7CrN8cDCMgjpV0lHllvit C6dQOS9QgDle4MB16E2qn0jxI6y0hDqysrqJXALpd1aO2k0AQq6Ao385C/hP3ibJ PELHgp7k+zfgsUFtjrnpdZJ75ciBoIWr9gPZkKqrtP4jYg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdYfsWeHY2RSKqi7Mn94 5BhzLYOnKE//VAFT855No7QTkrW03ne+aK2rklgLjYp/5O00hpEVMAGSBoMTUZam fXJYO0e0x03zYbTBYycCfh2SXAAJpR3xx3MbK5KGRxFcdRFqonr8Z2TKKCf7JLCv Xd3lwtuy77KessdfzMBkfl/mkFLa92RUEcabdXgOkXmP9WDvNjB1gtNKlbZPb4OZ 11uO1cWmU0r8rNxtaLcb+S4meqY1xTaw5o6zO3dhETFfUpxduIh11sxIVvPfMcAG lvZ4zApnNxbA1dVzh/D3ZZm0e7ML0rFyEc0QsH87Iwq+qEazc6Xq3qbUdRPaP1H6 kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 261539599436165577078431540732214649781246 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-22 09:04:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-21 09:04:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rocket2.stemk12.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22954721580327700686853950905683224729132737758191424108897091846630161764501628134774774603466390531497927665280092018718713885399283767459342933002958051047674379422634640844715554987127114176998077625792019812262351513619437498529636873597571673916393866889755250842737130285595147648016860987850881170948503305114945598427620187350559958586293785660965625147517271966873487215823366044973709754661806533831548803429539034536491253228842291538523215920500385054663086872117344652330656951969408141127884864160089895745369050737755949877385708866173716098266518106589590142693061556990425004127670552124993181973137 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 71dfdc1b2ef844b22dbdf93bf8c5e902782bcd85 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocket2.stemk12.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d586dad7000000403004730450220066eb77903d8498d798c290c28c98156fb2d4073aa6121a1a819fa547725b573022100f746d3f5791c4a0b2050bfc9dcf385d0ed4c2e0802e0a929e29ac081213deb2f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d586dab7700000403004730450220718f48e7d20ae2160482ec2dbde522c937ea488bebab509ca6b0de916d23ecc1022100b5aadb2ea72bf4740f83f425a91242b2d3a212faa93dab817b3ff33c3b8ea251 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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