zalman-it.de
Issued by R3
About this certificate
This digital certificate with serial number 03:00:39:d7:06:f7:d5:a6:3a:53:20:b2:51:22:6d:e8:a9:7e was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=zalman-it.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:00:39:d7:06:f7:d5:a6:3a:53:20:b2:51:22:6d:e8:a9:7eSerial Number (int): 261413740276195000159709357823435689470334
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c0:58:9b:63:e6:56:b5:31:dd:de:1b:9f:c7:9f:33:a2:70:10:96:19
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 02:74:34:56:28:c7:bf:06:8b:7c:5f:58:09:82:cc:23:7c:61:e4:7b
Fingerprint (sha256): 0b:34:cc:1a:4b:a5:76:66:c5:a8:5a:52:80:41:57:cd:15:92:79:ca:a7:e7:65:94:fa:34:19:ba:45:5d:48:2b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate zalman-it.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zalman-it.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.zalman-it.de
zalman-it.de
zalman-it.de
Other certificates including the domain name zalman-it.de
(limited to 100 certificates)
support.zalman-it.de
web.zalman-it.de
service.acctopus.com
vr.zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
helpdesk.fsis.dk
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.kolekto.io
support.zalman-it.de
web.zalman-it.de
it.zalman-it.de
support.zalman-it.de
service.farmlyplace.com
service.acctopus.com
web.zalman-it.de
zalman-it.de
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.eurocommand.com
cmnsoon.zalman-it.de
help.paymentsolutionandservice.com
ticket.swiss-prime.ch
support.yasido.com
zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.itqmetis.com
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.medlive.pt
support.zalman-it.de
cmnsoon.zalman-it.de
service.acctopus.com
support.zalman-it.de
support.forexyestrading.com
vr.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
help.paymentsolutionandservice.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.vitisevents.com
help.paymentsolutionandservice.com
support.genialcompliance.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.yasido.com
support.zalman-it.de
zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
cmnsoon.zalman-it.de
support.zalman-it.de
service.acctopus.com
zalman-it.de
vr.zalman-it.de
web.zalman-it.de
service.acctopus.com
vr.zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
helpdesk.fsis.dk
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.kolekto.io
support.zalman-it.de
web.zalman-it.de
it.zalman-it.de
support.zalman-it.de
service.farmlyplace.com
service.acctopus.com
web.zalman-it.de
zalman-it.de
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.eurocommand.com
cmnsoon.zalman-it.de
help.paymentsolutionandservice.com
ticket.swiss-prime.ch
support.yasido.com
zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.itqmetis.com
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.medlive.pt
support.zalman-it.de
cmnsoon.zalman-it.de
service.acctopus.com
support.zalman-it.de
support.forexyestrading.com
vr.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
help.paymentsolutionandservice.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.vitisevents.com
help.paymentsolutionandservice.com
support.genialcompliance.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.yasido.com
support.zalman-it.de
zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
cmnsoon.zalman-it.de
support.zalman-it.de
service.acctopus.com
zalman-it.de
vr.zalman-it.de
Certificate
The complete raw certificate details for zalman-it.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgISAwA51wb31aY6UyCyUSJt6Kl+MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTIxNDQ5MDBaFw0yNDAzMTExNDQ4NTlaMBcxFTATBgNVBAMT DHphbG1hbi1pdC5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMPC kLlAkaNRA2aWXNG/BMa0d/+xwcemtOIxU8PNonNXo+4YfoqWmsTPB3hMhzlwe6xw WIdfAtMDrVe6+J717ERgZbmMSXLtGbKJdqs4akF9zFtEDebSVJftm+Cxej9ma1Pd GhtrOJYhroScnzrOYnpCp6v3+hQg8S5PpEhywkM3P623jsxWxueuxz4Um+ZImMox rZelWtapF+fBsGoaWd3wH5VfuSlqu6B1TaxeVG/J9BY+JT4VkLHblx/gagE2T5PX 9gjfL+Vy1KdIo1HergnWrojA1kb4rS9SKSzqxRFezU8RhYvsHQBfaqV2WV9h1tL+ AmqtWGjPXPjvCPVG9+sFwzTPvDU7fYDPvyorIFe3AJr/6hV02oEJ25pm+e2Dxlhu vJuQm5xnFlDFSn4u2OAJiaiSKISsAGH6gv6GxEksBvq7p0QEU3JbbkuB6FAk1Gr2 3BQZgwVJNrjgRugJo+m3iRDbiIGruMaLk9gtmRLlzIrJvDSP7jmxyv1ND18Xpr8N S6+eCUMuHTh3CGik3uSd9k69xN7qKY53WFJX3sX8k0TrX5XfULF9vAjoVTYZ3JBK e+gA3M6+o2pl6HpCfW/JchM83YREpsdGWuw9vzgDQckmMX2a4JbrhzKIVDg+0Sbv riDjPf/2de2bR+yA2LF4EhsthDj2ZGseFNhzs4qFAgMBAAGjggIdMIICGTAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFMBYm2PmVrUx3d4bn8efM6JwEJYZMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMCcGA1UdEQQgMB6CDiouemFsbWFuLWl0LmRlggx6YWxt YW4taXQuZGUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0 BIHxAO8AdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYxet5xz AAAEAwBHMEUCIQD8nNsvjGJjpwzjsY+nPzdTQNB6+LA5evh/wFyk67Vg5wIgFDqU HqZYqJ09/hlTfx2tOpbEG46yNGGsXcFS39BSfMcAdQCi4r/WHt4vLweg1k5tN6fc ZUOwxrUuotq3iviabfUX2AAAAYxet5yCAAAEAwBGMEQCIH/ZptDzpMPB00v491uZ l+pQkUhCjObgXhxr7Pxl4KRQAiBzRIdaUFJhclL8lwJjFQe1rJSdTxUdqybW/eAk duiqwzANBgkqhkiG9w0BAQsFAAOCAQEAjGLmSitVYd/Z66o4DJa2m9zmy5NQQNQM 8e8u3f+DYtoumbER385CYzR1fQvwgScRoL+8ffWswxC4axcNRUt3vO+clH5zrKMe NfQ7HUAzsQ1fZHjq7R8tFHq+hkaP49r9kozs51lQ713fhduhou2TgYGIAPlWyRzT 8ddtbw+xsyajc2n1RVwg+GEGGsx+q3MEfvySVHncXVmKy0DC7v0cCVyfdFpMkdZR 6Az6qJtotd/BS121q5M/HYCtrxfvRIh9KDhK2IqTYP7p7Zb4tttgLsLv7KK7bDMv Mj2f00AObgnJQwISQ01h2wbHgh6S8qnNlbqZ5c9V3ig0VnsqjrhPBA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw8KQuUCRo1EDZpZc0b8E xrR3/7HBx6a04jFTw82ic1ej7hh+ipaaxM8HeEyHOXB7rHBYh18C0wOtV7r4nvXs RGBluYxJcu0Zsol2qzhqQX3MW0QN5tJUl+2b4LF6P2ZrU90aG2s4liGuhJyfOs5i ekKnq/f6FCDxLk+kSHLCQzc/rbeOzFbG567HPhSb5kiYyjGtl6Va1qkX58GwahpZ 3fAflV+5KWq7oHVNrF5Ub8n0Fj4lPhWQsduXH+BqATZPk9f2CN8v5XLUp0ijUd6u CdauiMDWRvitL1IpLOrFEV7NTxGFi+wdAF9qpXZZX2HW0v4Caq1YaM9c+O8I9Ub3 6wXDNM+8NTt9gM+/KisgV7cAmv/qFXTagQnbmmb57YPGWG68m5CbnGcWUMVKfi7Y 4AmJqJIohKwAYfqC/obESSwG+runRARTcltuS4HoUCTUavbcFBmDBUk2uOBG6Amj 6beJENuIgau4xouT2C2ZEuXMism8NI/uObHK/U0PXxemvw1Lr54JQy4dOHcIaKTe 5J32Tr3E3uopjndYUlfexfyTROtfld9QsX28COhVNhnckEp76ADczr6jamXoekJ9 b8lyEzzdhESmx0Za7D2/OANBySYxfZrgluuHMohUOD7RJu+uIOM9//Z17ZtH7IDY sXgSGy2EOPZkax4U2HOzioUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 261413740276195000159709357823435689470334 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 14:49:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 14:48:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zalman-it.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798631207642887034902993064248834994394315099843095199700178805745404440075623404377742987548275520763772834975901220518692163638321370124542516757952570626251947163667303869399534248177733793811412098530796902383751738683189888406653973547874559307437524421001105014443436837790681999007472748344306205096989139991088838717187469727409488285528908827984883672467205374096867151234728968075039798459046435674495977137308661751794166598881590771967926190945660373478128528818104565350700339828125546530411760390230028008747139467346330667171570272057718324700768481000618041267951546880158378199718507016263141083006328264049065133284419133481645688289645033818503505332918818933207612147171852841187310817985792853682328355601406503797769888328444985781851401777256794483562391784279402826632812143265575753062451816875795352578271814478595532523174174301894898602199470290165057348468415387821612431842652572760640704662968676758982149123727921362764043201470031455348861462010521913561273974282392688993753804657212797979590262163454605048169872108588234160301405129563913633068331532561077354249042729865184163185588353195870042731926339429293682559521498826138811248732968183308195491134377423349607412193209491513200969900067461 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c0589b63e656b531ddde1b9fc79f33a270109619 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalman-it.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalman-it.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5eb79c730000040300473045022100fc9cdb2f8c6263a70ce3b18fa73f375340d07af8b0397af87fc05ca4ebb560e70220143a941ea658a89d3dfe19537f1dad3a96c41b8eb23461ac5dc152dfd0527cc7007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c5eb79c82000004030046304402207fd9a6d0f3a4c3c1d34bf8f75b9997ea509148428ce6e05e1c6becfc65e0a45002207344875a5052617252fc9702631507b5ac949d4f151dab26d6fde02476e8aac3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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