lightsonestonia.com
Issued by cPanel, Inc. Certification Authority
About this certificate
This digital certificate with serial number b0:b4:45:84:f6:8c:98:82:cb:c1:36:d7:c4:c2:4a:b6 was issued on by cPanel, Inc..
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lightsonestonia.com
cPanel, Inc.
Organization:
cPanel, Inc.
State / Province:
TX
Locality: Houston
Country: US
Locality: Houston
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): b0:b4:45:84:f6:8c:98:82:cb:c1:36:d7:c4:c2:4a:b6Serial Number (int): 234880150713364848695618483976361102006
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: a8:d8:bd:84:3d:7a:46:e3:d4:27:64:60:ca:ea:4f:53:41:10:e8:de
AuthorityKeyId: 7e:03:5a:65:41:6b:a7:7e:0a:e1:b8:9d:08:ea:1d:8e:1d:6a:c7:65
Fingerprint (sha1): 4c:6b:ea:57:0d:ed:f9:78:3e:2c:5d:8a:39:fa:4c:b7:85:6d:76:5f
Fingerprint (sha256): 01:ad:b8:bb:f7:e7:40:03:28:4f:e7:17:a8:0a:0d:b5:fb:79:21:3c:04:f9:7d:84:0f:ab:a0:c4:27:86:46:3d
Issuing Certificate URL: http://crt.comodoca.com/cPanelIncCertificationAuthority.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/cPanelIncCertificationAuthority.crl
Check the revocation status for certificate lightsonestonia.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lightsonestonia.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lightsonestonia.com
cpanel.lightsonestonia.com
lightsonestonia.mobiiliopas.focusflow.net
mail.lightsonestonia.com
webdisk.lightsonestonia.com
webmail.lightsonestonia.com
www.lightsonestonia.com
www.lightsonestonia.mobiiliopas.focusflow.net
cpanel.lightsonestonia.com
lightsonestonia.mobiiliopas.focusflow.net
mail.lightsonestonia.com
webdisk.lightsonestonia.com
webmail.lightsonestonia.com
www.lightsonestonia.com
www.lightsonestonia.mobiiliopas.focusflow.net
Other certificates including the domain name lightsonestonia.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for lightsonestonia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGzDCCBbSgAwIBAgIRALC0RYT2jJiCy8E218TCSrYwDQYJKoZIhvcNAQELBQAw cjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlRYMRAwDgYDVQQHEwdIb3VzdG9uMRUw EwYDVQQKEwxjUGFuZWwsIEluYy4xLTArBgNVBAMTJGNQYW5lbCwgSW5jLiBDZXJ0 aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xOTAyMTEwMDAwMDBaFw0xOTA1MTIyMzU5 NTlaMB4xHDAaBgNVBAMTE2xpZ2h0c29uZXN0b25pYS5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDWLG5YhWGZAFaGt7PVL6LPTOc+YuIi8iCP/Edn SJy2MzO/PdNBUwEeC3N3MW2ze9EVNKDy6baQ8i6LN3JiDeWyhA5wDSSZZ27AWJYu 56AY9HUoStDvMNjj88K55un26kzEIzUOYmxFO8qJB5mr8lo2CZlhnzdjFagYXeHK lZTSNILirvnFN5mz1cgv5VBLuUQ276LXuOuNPpIoMEr9cHddn2rIfBuntD0UyON7 QIMHLnfcVhCnX2X/V4CbnJ3jW/CdXU1iOcP06/LaSa17nh8WvEPy88tNYsWAjMk9 h7PV+RoC6xIKJDoQBCmCfo/BBGvjXQD0zlBty00om82inSP1AgMBAAGjggOvMIID qzAfBgNVHSMEGDAWgBR+A1plQWunfgrhuJ0I6h2OHWrHZTAdBgNVHQ4EFgQUqNi9 hD16RuPUJ2RgyupPU0EQ6N4wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCME8GA1UdIARIMEYwOgYLKwYB BAGyMQECAjQwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLmNv bS9DUFMwCAYGZ4EMAQIBMEwGA1UdHwRFMEMwQaA/oD2GO2h0dHA6Ly9jcmwuY29t b2RvY2EuY29tL2NQYW5lbEluY0NlcnRpZmljYXRpb25BdXRob3JpdHkuY3JsMH0G CCsGAQUFBwEBBHEwbzBHBggrBgEFBQcwAoY7aHR0cDovL2NydC5jb21vZG9jYS5j b20vY1BhbmVsSW5jQ2VydGlmaWNhdGlvbkF1dGhvcml0eS5jcnQwJAYIKwYBBQUH MAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTCCAQMGA1UdEQSB+zCB+IITbGln aHRzb25lc3RvbmlhLmNvbYIaY3BhbmVsLmxpZ2h0c29uZXN0b25pYS5jb22CKWxp Z2h0c29uZXN0b25pYS5tb2JpaWxpb3Bhcy5mb2N1c2Zsb3cubmV0ghhtYWlsLmxp Z2h0c29uZXN0b25pYS5jb22CG3dlYmRpc2subGlnaHRzb25lc3RvbmlhLmNvbYIb d2VibWFpbC5saWdodHNvbmVzdG9uaWEuY29tghd3d3cubGlnaHRzb25lc3Rvbmlh LmNvbYItd3d3LmxpZ2h0c29uZXN0b25pYS5tb2JpaWxpb3Bhcy5mb2N1c2Zsb3cu bmV0MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAu9nfvB+KcbWTlCOXqpJ7RzhX lQqrUugakJZkNo4e0YUAAAFo2uiNQAAABAMARzBFAiA/nFOCuYnSQvwS8Fc7DvOg czYtcNsDm3/gE4K2HZNiGwIhAP8DpCzA+CRtrxSNgfltNPz1OTFhK6fqJjrGbF8y GidOAHcAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFo2uiNegAA BAMASDBGAiEAhCwkySQNa1EFS8qRz4hsJ6f2Nxp4m8pmv8gCvWlr2pICIQDJPOV6 FQtFy8xS4CU+yh4OifxUXDcHSi8Zn0+bHMtNBDANBgkqhkiG9w0BAQsFAAOCAQEA ZXAOpEc4ffYQFvEf7+CFwPSRBOX/6m82AIWbxp5GBvR4ITrZZuJfUKYgF0MQaNzZ gCWLT379Sez8/4uYbWDV3NPlvjGpLT0ZBFjbUTP13Szhb9Y9On0R5R9rEU/tn7mH RVOjy67tXPMLPho1sy4sykvu2XGl4abbXt1AVuCQYBKgL25vKfXBoflSUipu8HD4 mu+tkSpGjvOqRQKSudiUx9bmWOrDK//0DuB5xaQuigIbrDZesx38V94sKjBcEANK 3bBS63f+cMvpDqfpHM9POQtOPsUcSBjJ0GeBU3oL0j34b6Bmn3nuKTIvo4Pg/adQ 9o2uGv6X8nOHGIIO93taPA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ixuWIVhmQBWhrez1S+i z0znPmLiIvIgj/xHZ0ictjMzvz3TQVMBHgtzdzFts3vRFTSg8um2kPIuizdyYg3l soQOcA0kmWduwFiWLuegGPR1KErQ7zDY4/PCuebp9upMxCM1DmJsRTvKiQeZq/Ja NgmZYZ83YxWoGF3hypWU0jSC4q75xTeZs9XIL+VQS7lENu+i17jrjT6SKDBK/XB3 XZ9qyHwbp7Q9FMjje0CDBy533FYQp19l/1eAm5yd41vwnV1NYjnD9Ovy2kmte54f FrxD8vPLTWLFgIzJPYez1fkaAusSCiQ6EAQpgn6PwQRr410A9M5QbctNKJvNop0j 9QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 234880150713364848695618483976361102006 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc. Certification Authority' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lightsonestonia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27036907024272587239662890260217115170193686391267962548922765206686086909636052783636359359594605588510439983000648610999362525294371394735586691710563551531073476931703743943131211934840273124642285529247354286492050852866714595776123506794962737676216028382041859749135777783727083737270717031107989242996979471303840665507514287357601074123438231298780133791170380522516529721577084243120595020719322924532399072203640312555500969146361262582037155328375392930365480125017717484009433970225878033257246177875499236588328840611564284814548230411868636438639267522841554644821777763226785757861996235807026002600949 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7e035a65416ba77e0ae1b89d08ea1d8e1d6ac765 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a8d8bd843d7a46e3d4276460caea4f534110e8de . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.52 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/cPanelIncCertificationAuthority.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/cPanelIncCertificationAuthority.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (251 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightsonestonia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.lightsonestonia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightsonestonia.mobiiliopas.focusflow.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lightsonestonia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.lightsonestonia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lightsonestonia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightsonestonia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightsonestonia.mobiiliopas.focusflow.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000168dae88d40000004030047304502203f9c5382b989d242fc12f0573b0ef3a073362d70db039b7fe01382b61d93621b022100ff03a42cc0f8246daf148d81f96d34fcf53931612ba7ea263ac66c5f321a274e007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168dae88d7a0000040300483046022100842c24c9240d6b51054bca91cf886c27a7f6371a789bca66bfc802bd696bda92022100c93ce57a150b45cbcc52e0253eca1e0e89fc545c37074a2f199f4f9b1ccb4d04 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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