mindadmedia.datorama.com
Issued by R3
About this certificate
This digital certificate with serial number 04:68:12:a5:8b:a8:d1:8a:34:b2:bc:44:63:81:7e:f3:79:96 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mindadmedia.datorama.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:68:12:a5:8b:a8:d1:8a:34:b2:bc:44:63:81:7e:f3:79:96Serial Number (int): 383863295552354489176612042456314041039254
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 38:7f:c4:39:2c:4b:f7:3c:06:33:bf:58:f5:2b:c6:db:da:42:96:36
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 95:27:13:66:34:6a:e1:0c:70:7e:08:a9:8c:92:00:ed:a3:aa:ef:54
Fingerprint (sha256): 0c:20:06:4d:b0:a0:47:cd:c5:80:5d:77:49:bc:66:10:75:19:17:1a:5a:f3:ac:f7:a4:4e:9a:51:d2:16:84:d4
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate mindadmedia.datorama.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mindadmedia.datorama.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mindadmedia.datorama.com
Other certificates including the domain name datorama.com
(limited to 100 certificates)
mindadmedia.datorama.com
incapsula.com
ivgeny-test-eu2.azure.datorama.com
incapsula.com
white-label-eu.datorama.com
app.datorama.com
*.datorama.com
app-eu2.datorama.com
white-label.datorama.com
white-label-us2.datorama.com
incapsula.com
white-label.datorama.com
arkiv.status.geoikt.no
app.datorama.com
support.wunderbar.com
datorama.com
*.datorama.com
white-label.datorama.com
app-eu2.datorama.com
app-eu2.datorama.com
mindadmedia.datorama.com
white-label-us2.datorama.com
app.datorama.com
white-label-us2.datorama.com
app-eu2.datorama.com
app.datorama.com
datapitt.datorama.com
white-label-us-origin.datorama.com
*.datorama.com
app-eu.datorama.com
custom-app.datorama.com
api-eu2.datorama.com
arkiv.status.geoikt.no
app-eu2.datorama.com
*.databricks.datorama.com
incapsula.com
incapsula.com
white-label-us2.datorama.com
incapsula.com
*.datorama.com
incapsula.com
dev.datorama.com
incapsula.com
info.datorama.com
ps-jenkins.datorama.com
stg.datorama.com
white-label.datorama.com
white-label.datorama.com
idp.datorama.com
app-eu2.datorama.com
incapsula.com
alb-stg-sftp.datorama.com
dev.datorama.com
custom-app.datorama.com
mindadmedia.datorama.com
support.datorama.com
incapsula.com
incapsula.com
mindadmedia.datorama.com
app-eu.datorama.com
mindadmedia.datorama.com
white-label-eu.datorama.com
dev.datorama.com
blog-jp.datorama.com
app-us2.datorama.com
*.datorama.com
app-eu2.datorama.com
blog-jp.datorama.com
*.datorama.com
white-label-eu.datorama.com
white-label-eu.datorama.com
*.datorama.com
white-label.datorama.com
white-label-eu.datorama.com
white-label-eu.datorama.com
white-label-eu-origin.datorama.com
app-us2.datorama.com
incapsula.com
trust.datorama.com
pulse.datorama.com
arkiv.status.geoikt.no
fdus-3.freshdesk.com
stg.datorama.com
*.datorama.com
incapsula.com
app.datorama.com
white-label.datorama.com
stg.datorama.com
dev.datorama.com
imperva.com
azure-eu-ftp.datorama.com
white-label-us2.datorama.com
blog-jp.datorama.com
www.datorama.com
blog-jp.datorama.com
white-label-eu-origin.datorama.com
integration-service-prod-us2.datorama.com
pulse.datorama.com
stg.datorama.com
datapitt.datorama.com
incapsula.com
ivgeny-test-eu2.azure.datorama.com
incapsula.com
white-label-eu.datorama.com
app.datorama.com
*.datorama.com
app-eu2.datorama.com
white-label.datorama.com
white-label-us2.datorama.com
incapsula.com
white-label.datorama.com
arkiv.status.geoikt.no
app.datorama.com
support.wunderbar.com
datorama.com
*.datorama.com
white-label.datorama.com
app-eu2.datorama.com
app-eu2.datorama.com
mindadmedia.datorama.com
white-label-us2.datorama.com
app.datorama.com
white-label-us2.datorama.com
app-eu2.datorama.com
app.datorama.com
datapitt.datorama.com
white-label-us-origin.datorama.com
*.datorama.com
app-eu.datorama.com
custom-app.datorama.com
api-eu2.datorama.com
arkiv.status.geoikt.no
app-eu2.datorama.com
*.databricks.datorama.com
incapsula.com
incapsula.com
white-label-us2.datorama.com
incapsula.com
*.datorama.com
incapsula.com
dev.datorama.com
incapsula.com
info.datorama.com
ps-jenkins.datorama.com
stg.datorama.com
white-label.datorama.com
white-label.datorama.com
idp.datorama.com
app-eu2.datorama.com
incapsula.com
alb-stg-sftp.datorama.com
dev.datorama.com
custom-app.datorama.com
mindadmedia.datorama.com
support.datorama.com
incapsula.com
incapsula.com
mindadmedia.datorama.com
app-eu.datorama.com
mindadmedia.datorama.com
white-label-eu.datorama.com
dev.datorama.com
blog-jp.datorama.com
app-us2.datorama.com
*.datorama.com
app-eu2.datorama.com
blog-jp.datorama.com
*.datorama.com
white-label-eu.datorama.com
white-label-eu.datorama.com
*.datorama.com
white-label.datorama.com
white-label-eu.datorama.com
white-label-eu.datorama.com
white-label-eu-origin.datorama.com
app-us2.datorama.com
incapsula.com
trust.datorama.com
pulse.datorama.com
arkiv.status.geoikt.no
fdus-3.freshdesk.com
stg.datorama.com
*.datorama.com
incapsula.com
app.datorama.com
white-label.datorama.com
stg.datorama.com
dev.datorama.com
imperva.com
azure-eu-ftp.datorama.com
white-label-us2.datorama.com
blog-jp.datorama.com
www.datorama.com
blog-jp.datorama.com
white-label-eu-origin.datorama.com
integration-service-prod-us2.datorama.com
pulse.datorama.com
stg.datorama.com
datapitt.datorama.com
Certificate
The complete raw certificate details for mindadmedia.datorama.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISBGgSpYuo0Yo0srxEY4F+83mWMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA4MDEwNTU3MTdaFw0yMjEwMzAwNTU3MTZaMCMxITAfBgNVBAMT GG1pbmRhZG1lZGlhLmRhdG9yYW1hLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALxl3bSOBOOpI05IiQrXkdUfhBanFyjgG8BiwJ+viC5+57Ozm92I 4VLjkJilXlZ7qQg8yqKXXTsdpxV8JfESrglR8bFWIFzzdP2sLPYpcygEP6Eh/P0T 7cdzfrH9o2/vCZFNXrvn9XPQaTCUFtm7Qsmtk0lifUxthAZsulXdubbtWS69IZ05 0TJrNLyKYfJayb5cuaefC1WGj9nBu/058H97G9CXu4REDeOyhBc4ifx/ACiIHgFX 4L57CBqYnNcP8IAKLSxN+7ZPspO0HSrFcNn3I1xScg6E5TxZHoQ62x3RJJTonx/Y MENlB5njhtv8UUYI7Ngud2yHLRkSGxnPxH8CAwEAAaOCAlIwggJOMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQUOH/EOSxL9zwGM79Y9SvG29pCljYwHwYDVR0jBBgwFoAU FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p LmxlbmNyLm9yZy8wIwYDVR0RBBwwGoIYbWluZGFkbWVkaWEuZGF0b3JhbWEuY29t MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB 9ASB8QDvAHYAQcjKsd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAGCWDHY PAAABAMARzBFAiEAgC0QzC+fWLp+4+W/PYXnV95V2Wt9VGJsKuUzicJH958CIBzl /6bInuyesmc7uHK/YGGxz1c26tYqhBJsZRlnJluSAHUARqVV63X6kSAwtaKJafTz fREsQXS+/Um4havy/HD+bUcAAAGCWDHYSQAABAMARjBEAiAiFaxk4BeGAMz5ROLE OxQh++G0U73YnX44ZFguujc1FAIgD+csuUktf4/9mWEkjvgX5AbNrm9bfgTXd0lS G7o7CeswDQYJKoZIhvcNAQELBQADggEBADPOsfqpWSw1qMDOE4AL4MwnJwrPoNjt dw5RQJRepCs0Igcb6UjKDRuvYG5ULktO8vaat5mz/eT4g5tiOK91g3vMjmnlMlZY 5zilFCJL/wumnSdoqGQ4kSROP09sZ2yxkYuyVtdk1Zg6aKUwAY8msxba1GgATNOX ubGpmuui/dhzDv6SoSOstfQHgWfb5jBIP3BlO54FVG1rLUgFQ0aT7tiJeB/svWYV SzJ7iiOt8u/4hD4iuTeo9ZETTsPt9wO+LqiDBkaE7Y3SDLX9SY9/nLNzdrQyevS4 BrBYnHkNOXe4oD7I3j8dWe2/HAQ9AKbK3uzcKYs5AXUqU0IohmmAtHA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGXdtI4E46kjTkiJCteR 1R+EFqcXKOAbwGLAn6+ILn7ns7Ob3YjhUuOQmKVeVnupCDzKopddOx2nFXwl8RKu CVHxsVYgXPN0/aws9ilzKAQ/oSH8/RPtx3N+sf2jb+8JkU1eu+f1c9BpMJQW2btC ya2TSWJ9TG2EBmy6Vd25tu1ZLr0hnTnRMms0vIph8lrJvly5p58LVYaP2cG7/Tnw f3sb0Je7hEQN47KEFziJ/H8AKIgeAVfgvnsIGpic1w/wgAotLE37tk+yk7QdKsVw 2fcjXFJyDoTlPFkehDrbHdEklOifH9gwQ2UHmeOG2/xRRgjs2C53bIctGRIbGc/E fwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 383863295552354489176612042456314041039254 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-01 05:57:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-30 05:57:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mindadmedia.datorama.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23783033348289911484395196432861981901702497047068943042022150334704753905206865006540028999695132378742445684089801209736398437168440167649813582172926081953691275886106237274423317711624629807969578180790306852250295320424893781085014409693426275673352824520782231667930389179875372653058027583570472442597906306374240748004481585890301059308744536726756925724915138418440325359360810616104135904268901704427802417483783418616279759818543129288403503965815555244400190075313352935122848100826200903692641102412529176961195204600781076405241274768813158547050060970820857202539123562600188456447452603287997091136639 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 387fc4392c4bf73c0633bf58f52bc6dbda429636 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindadmedia.datorama.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001825831d83c0000040300473045022100802d10cc2f9f58ba7ee3e5bf3d85e757de55d96b7d54626c2ae53389c247f79f02201ce5ffa6c89eec9eb2673bb872bf6061b1cf5736ead62a84126c651967265b9200750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001825831d849000004030046304402202215ac64e0178600ccf944e2c43b1421fbe1b453bdd89d7e3864582eba37351402200fe72cb9492d7f8ffd9961248ef817e406cdae6f5b7e04d77749521bba3b09eb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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