interamerican.gt
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b8:65:2d:bc:ce:a9:f2:21:4a:8e:5c:21:1d:78:68:59:3a was issued on by Let's Encrypt.
With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=interamerican.gt
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b8:65:2d:bc:ce:a9:f2:21:4a:8e:5c:21:1d:78:68:59:3aSerial Number (int): 324083302819132930435913253070309029337402
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d4:19:92:9a:61:94:26:01:7c:77:69:a3:2a:c5:93:9b:3f:91:f8:23
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 33:2f:3d:60:48:7a:e5:bf:af:c2:cf:aa:c3:ee:b2:e4:3d:38:a5:ce
Fingerprint (sha256): 09:26:a7:65:05:78:eb:3e:fc:cf:ee:c0:01:8c:52:6b:6a:9e:c9:f9:72:27:e0:11:5e:60:26:65:62:03:d7:90
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate interamerican.gt
15
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for interamerican.gt
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
conecta.hackmaskate.net
emasound.hackmaskate.net
guatnow.hackmaskate.net
interamerican.gt
interamerican.hackmaskate.net
mail.interamerican.gt
prueba.hackmaskate.net
segurosprivanza.hackmaskate.net
www.conecta.hackmaskate.net
www.emasound.hackmaskate.net
www.guatnow.hackmaskate.net
www.interamerican.gt
www.interamerican.hackmaskate.net
www.prueba.hackmaskate.net
www.segurosprivanza.hackmaskate.net
emasound.hackmaskate.net
guatnow.hackmaskate.net
interamerican.gt
interamerican.hackmaskate.net
mail.interamerican.gt
prueba.hackmaskate.net
segurosprivanza.hackmaskate.net
www.conecta.hackmaskate.net
www.emasound.hackmaskate.net
www.guatnow.hackmaskate.net
www.interamerican.gt
www.interamerican.hackmaskate.net
www.prueba.hackmaskate.net
www.segurosprivanza.hackmaskate.net
Other certificates including the domain name interamerican.gt
(limited to 100 certificates)
prueba.hackmaskate.net
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.hackmaskate.net
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.hackmaskate.net
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.hackmaskate.net
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.gt
interamerican.hackmaskate.net
Certificate
The complete raw certificate details for interamerican.gt in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG6TCCBdGgAwIBAgISA7hlLbzOqfIhSo5cIR14aFk6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMDgwMTA0MzZaFw0x OTA0MDgwMTA0MzZaMBsxGTAXBgNVBAMTEGludGVyYW1lcmljYW4uZ3QwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCsGuvd6eH8/tgZ0wUa6d5Hfy3WJdf jHi27HnyLHUM3M6nzfcPPX25OdxXiBVKE95hidaJkancRBPBEGADwZc92CWzQKPB G3s27XYh9PU5AwRUUtoK2O67ylfKo1REWnTJBeEdKg3ERVlUhSDLpQs9NEbZZSIT ZXtPVwfxCFLa3qCsy3vR5lCWsXLvmQcB9E5sKfv3rK8MURzCcVXONAJuHPRLSXnd 5ZqjeDw7zmToTd2Sh89AzzMVgrbXos9rSu8KVjy5HXk0yXhNB1XdaAABWkKtjHIK a+BqAmkfC/Ue9zOSnKvpngtOC2ZJygSwqW7b/fI/jZaRT0gGc2OFOkkHAgMBAAGj ggP2MIID8jAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNQZkpphlCYBfHdpoyrFk5s/ kfgjMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wggGsBgNVHREEggGjMIIBn4IXY29uZWN0YS5oYWNrbWFza2F0ZS5uZXSC GGVtYXNvdW5kLmhhY2ttYXNrYXRlLm5ldIIXZ3VhdG5vdy5oYWNrbWFza2F0ZS5u ZXSCEGludGVyYW1lcmljYW4uZ3SCHWludGVyYW1lcmljYW4uaGFja21hc2thdGUu bmV0ghVtYWlsLmludGVyYW1lcmljYW4uZ3SCFnBydWViYS5oYWNrbWFza2F0ZS5u ZXSCH3NlZ3Vyb3Nwcml2YW56YS5oYWNrbWFza2F0ZS5uZXSCG3d3dy5jb25lY3Rh LmhhY2ttYXNrYXRlLm5ldIIcd3d3LmVtYXNvdW5kLmhhY2ttYXNrYXRlLm5ldIIb d3d3Lmd1YXRub3cuaGFja21hc2thdGUubmV0ghR3d3cuaW50ZXJhbWVyaWNhbi5n dIIhd3d3LmludGVyYW1lcmljYW4uaGFja21hc2thdGUubmV0ghp3d3cucHJ1ZWJh LmhhY2ttYXNrYXRlLm5ldIIjd3d3LnNlZ3Vyb3Nwcml2YW56YS5oYWNrbWFza2F0 ZS5uZXQwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEEAdZ5 AgQCBIHzBIHwAO4AdQB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAA AWgrNFOZAAAEAwBGMEQCIA6woYFAT/wWChYy5RAU2ujNXciZGbFo+pkr1+bk6Kha AiBEDeQKcjSvGZt2VVvS6nu8ltzxbwK4oypb1kuSkId6xAB1ACk8UZZUyDlluqpQ /FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaCs0U50AAAQDAEYwRAIgWjq4XNyxexOA 8Hv4rZNrvEvkzXEf5ty3MXlMMmcBSoMCIHyvVjqhhAOeApVLMnEVv8cBYgi8VbLu asJjzcomIuuJMA0GCSqGSIb3DQEBCwUAA4IBAQB8xuzbO++LS/jXImoVxB6Sr41s X8AZdIcKByNwgeIotsvfs3xKw6fD3hnwkOLuoHD/AsSzHvF3hGXDdAM842E0GKnv ma7PxNX7ME32QAMTyniG8+AUuIqL4wLdwdQK07yNYn/72LRgSsLPHB/93Hi0gFgf w6Ew1VNK4nyQZuGF5HmdlnEq3yJ3apMIOyoVyhIJClMG7HHGgwjZsHo6qqW77YzO /85nyThAtGs0PEOGmKPu+AOQLn/6GFUfn5U4xMDd9CH0zUZqBeKfgHGlLY3jAdKW Em+L//5O1Oq4edAOHOGnk90CHh+/PSSkc5+AonAZOZ8rmMh+VmLNwU/dLdde -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrBrr3enh/P7YGdMFGun eR38t1iXX4x4tux58ix1DNzOp833Dz19uTncV4gVShPeYYnWiZGp3EQTwRBgA8GX Pdgls0CjwRt7Nu12IfT1OQMEVFLaCtjuu8pXyqNURFp0yQXhHSoNxEVZVIUgy6UL PTRG2WUiE2V7T1cH8QhS2t6grMt70eZQlrFy75kHAfRObCn796yvDFEcwnFVzjQC bhz0S0l53eWao3g8O85k6E3dkofPQM8zFYK216LPa0rvClY8uR15NMl4TQdV3WgA AVpCrYxyCmvgagJpHwv1Hvczkpyr6Z4LTgtmScoEsKlu2/3yP42WkU9IBnNjhTpJ BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 324083302819132930435913253070309029337402 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-08 01:04:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-08 01:04:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'interamerican.gt' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24577227426436947981019867662895008733619122329781203181568796197573297977173933530226501045578589075770264624653986396391974264487067962911144793999328572643138217497716110022276768157799768774992349982386943309682938521207594676986202041009681981858496328536569129708554943577780634153749209853031868019943573964952141316346219425911543394858937799782177363079651694922061474178584692349990027253286723895151017820639447958327006592895259236444646625767891720134334450155736762538190567683581917470735917916112918594070963126003210176917767317420623601065344401504983612728623956338253599770694390808362128298887431 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d419929a619426017c7769a32ac5939b3f91f823 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (419 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conecta.hackmaskate.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emasound.hackmaskate.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guatnow.hackmaskate.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interamerican.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interamerican.hackmaskate.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.interamerican.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prueba.hackmaskate.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosprivanza.hackmaskate.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conecta.hackmaskate.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emasound.hackmaskate.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guatnow.hackmaskate.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interamerican.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interamerican.hackmaskate.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prueba.hackmaskate.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.segurosprivanza.hackmaskate.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001682b345399000004030046304402200eb0a181404ffc160a1632e51014dae8cd5dc89919b168fa992bd7e6e4e8a85a0220440de40a7234af199b76555bd2ea7bbc96dcf16f02b8a32a5bd64b9290877ac4007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001682b34539d000004030046304402205a3ab85cdcb17b1380f07bf8ad936bbc4be4cd711fe6dcb731794c3267014a8302207caf563aa184039e02954b327115bfc7016208bc55b2ee6ac263cdca2622eb89 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007cc6ecdb3bef8b4bf8d7226a15c41e92af8d6c5fc01974870a07237081e228b6cbdfb37c4ac3a7c3de19f090e2eea070ff02c4b31ef1778465c374033ce3613418a9ef99aecfc4d5fb304df6400313ca7886f3e014b88a8be302ddc1d40ad3bc8d627ffbd8b4604ac2cf1c1ffddc78b480581fc3a130d5534ae27c9066e185e4799d96712adf22776a93083b2a15ca12090a5306ec71c68308d9b07a3aaaa5bbed8cceffce67c93840b46b343c438698a3eef803902e7ffa18551f9f9538c4c0ddf421f4cd466a05e29f8071a52d8de301d296126f8bfffe4ed4eab879d00e1ce1a793dd021e1fbf3d24a4739f80a27019399f2b98c87e5662cdc14fdd2dd75e