band.pave.com
Issued by GTS CA 1D4
About this certificate
This digital certificate with serial number cb:d5:6a:99:88:59:1d:6d:12:0f:a6:e3:82:e0:2a:b8 was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=band.pave.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): cb:d5:6a:99:88:59:1d:6d:12:0f:a6:e3:82:e0:2a:b8Serial Number (int): 270941404474730386938131600086482823864
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 64:6e:1a:1f:e5:64:e0:c8:60:83:ee:78:de:18:9d:41:35:e8:3c:cc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92
Fingerprint (sha1): e8:50:62:f3:a5:0c:02:7b:9f:bb:41:e6:76:dc:dc:95:aa:4b:53:a9
Fingerprint (sha256): 10:4c:f0:2c:74:14:a9:b4:8e:55:d4:e4:bd:7a:74:22:c6:6e:3c:1c:0e:7b:71:15:e7:01:3c:c3:47:79:99:1a
Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1d4/LKtQO7gD6cMCRL Distribution Point: http://crls.pki.goog/gts1d4/86yeALfJiMg.crl
Check the revocation status for certificate band.pave.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for band.pave.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
band.pave.com
Other certificates including the domain name pave.com
(limited to 100 certificates)
partner.pave.com
m.pakujala.com
goalskeeper.app
www.gdlestore.com
www.exgcrew.com
zinglio.com
devuat.ga
www.sunphysiotherapyclinic.com
1password-scim.pave.com
kindstar.me
recipe-finder.app
pave.com
clear.io
success.api.pave.com
pave.com
pave.com
m1st1ck.com
st.gera.fan
pave.com
hover.pave.com
j.pave.com
player.djstormthegreat.com
pave.com
abnormalsecurity.pave.com
app.workalongo.com
static.pave.com
habouhou.com
visitorkland.hvaskjerkalender.no
duckdb.pave.com
email.support.pave.com
staging-pave-web.pave.com
gdgporto.xyz
www.mainga.me
www.lurange.com
auth.middletonfbla.com
www.dylangreen.ca
app.picturegrammar.co.uk
staging-pave-web.pave.com
www.meetwithpuffin.com
static.pave.com
hello.pave.com
jrb.criptan.es
1password-scim.pave.com
pave.com
www.jetlingo.com
sftpadmin.pave.com
primemx.lernit.app
api.staging.illust.space
www.tullamarineairporttransfers.com.au
stage.link.fmn.chat
band.pave.com
sftpadmin.staging.pave.com
quickrisk.module.demo.pentech.hu
www.ezcallin.dk
admin-staging.collla.com
www.pave.com
demo1.easycrypto.dev
s.tfugjalandhar.dev
band.pave.com
accounts.dabblewriter.com
scheduler.pave.com
pave-web.pave.com
pacificeng.ca
sms.synapcom.com
customer-uat.clearquote.io
support.pave.com
d2ctrust.shopeg.in
*.pave.com
staging-devops-worker.pave.com
scheduler.pave.com
scheduler.pave.com
sftpadmin.pave.com
programados.nirex.pe
staging-pave-web.pave.com
staging-member.youdowell.com
1password-scim.pave.com
jasdec.flow-insight.com
app.pave.com
cafedelites.host
novagrids.com
andrewburnett.info
sftpadmin.staging.pave.com
pave.com
jivegraphics.com
www.sic.k-9apps.com
wamarketing.ga
lemonade.pave.com
benchmarking.pave.com
herolawplc.com
app.standards.site
pave.com
app.picturegrammar.co.uk
j.pave.com
pave-web.pave.com
support.pave.com
trail.pave.com
api-web.pave.com
earkick.com
go.ident.app
pave.com
m.pakujala.com
goalskeeper.app
www.gdlestore.com
www.exgcrew.com
zinglio.com
devuat.ga
www.sunphysiotherapyclinic.com
1password-scim.pave.com
kindstar.me
recipe-finder.app
pave.com
clear.io
success.api.pave.com
pave.com
pave.com
m1st1ck.com
st.gera.fan
pave.com
hover.pave.com
j.pave.com
player.djstormthegreat.com
pave.com
abnormalsecurity.pave.com
app.workalongo.com
static.pave.com
habouhou.com
visitorkland.hvaskjerkalender.no
duckdb.pave.com
email.support.pave.com
staging-pave-web.pave.com
gdgporto.xyz
www.mainga.me
www.lurange.com
auth.middletonfbla.com
www.dylangreen.ca
app.picturegrammar.co.uk
staging-pave-web.pave.com
www.meetwithpuffin.com
static.pave.com
hello.pave.com
jrb.criptan.es
1password-scim.pave.com
pave.com
www.jetlingo.com
sftpadmin.pave.com
primemx.lernit.app
api.staging.illust.space
www.tullamarineairporttransfers.com.au
stage.link.fmn.chat
band.pave.com
sftpadmin.staging.pave.com
quickrisk.module.demo.pentech.hu
www.ezcallin.dk
admin-staging.collla.com
www.pave.com
demo1.easycrypto.dev
s.tfugjalandhar.dev
band.pave.com
accounts.dabblewriter.com
scheduler.pave.com
pave-web.pave.com
pacificeng.ca
sms.synapcom.com
customer-uat.clearquote.io
support.pave.com
d2ctrust.shopeg.in
*.pave.com
staging-devops-worker.pave.com
scheduler.pave.com
scheduler.pave.com
sftpadmin.pave.com
programados.nirex.pe
staging-pave-web.pave.com
staging-member.youdowell.com
1password-scim.pave.com
jasdec.flow-insight.com
app.pave.com
cafedelites.host
novagrids.com
andrewburnett.info
sftpadmin.staging.pave.com
pave.com
jivegraphics.com
www.sic.k-9apps.com
wamarketing.ga
lemonade.pave.com
benchmarking.pave.com
herolawplc.com
app.standards.site
pave.com
app.picturegrammar.co.uk
j.pave.com
pave-web.pave.com
support.pave.com
trail.pave.com
api-web.pave.com
earkick.com
go.ident.app
pave.com
Certificate
The complete raw certificate details for band.pave.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIRAMvVapmIWR1tEg+m44LgKrgwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjMwNjI2MDMwNTEwWhcNMjMwOTI0 MDM1ODI0WjAYMRYwFAYDVQQDEw1iYW5kLnBhdmUuY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAvcPytVlrv00comn7cyhP9Yi5EZYCeMtoArQDHzsL Ig+jKHXu7oconPpt1fkwD3kzOebrur6ZeXgXIMEut85kWG6o6YtgE1tYHMdBqmlg hqcZ0BhhiQGofhcHi/MmXspm8OP8iD/ocuOcCq4LZzI9YcjqHR+DQZ7fzG+BdYWV EZC5BHulqwvBQEtV+HlIIp8U4YjIEIW+p0JFwhWunveqWkxZwmHjC3bOE+8Larvq UT/cleSFDI/Tz4spj2C0KMKaRra3ymVt51oUSTJ4soltP2Ur3vDYqaLvraz9F6YB CFdN2Y2JxojeMddTN2sPabLVAfmNsilMMs34e/vXy3rdqwIDAQABo4ICdTCCAnEw DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFGRuGh/lZODIYIPueN4YnUE16DzMMB8GA1UdIwQYMBaAFCXi GA6yV5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYp aHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQvTEt0UU83Z0Q2Y00wMQYIKwYB BQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFkNC5kZXIwGAYD VR0RBBEwD4INYmFuZC5wYXZlLmNvbTAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgor BgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5nb29n L2d0czFkNC84NnllQUxmSmlNZy5jcmwwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEA dwC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYj14IK/AAAEAwBI MEYCIQDUbKYq8xnXZvdATS+iB5rFPp98fMEq4m9JPO8DVpKaswIhAIgTAoVOHfEz G6Wby6OqINp0zNKzjcvPHql6COQbVom1AHYA6D7Q2j71BjUy51covIlryQPTy9ER a+zraeF3fW0GvW4AAAGI9eCCrwAABAMARzBFAiEAnm3SH+9dNerwibMai3XCud3v twNScuC0oYhx+ZFVxaECIB2mb/YqNhjJ/n4aPiqCNWOWmmJWaGoJca2aWnLCdSbt MA0GCSqGSIb3DQEBCwUAA4IBAQBKgKuwgpV8lz54Nz3ctqrXawU/kUUuC16/D7+T gVPVxaspslk7ZEPn4d0O99sxuvJ+vI/r/CzDJnD1jjtGhsPRNdC6vTG4YsY//8Pk RGRM9WgmXSv7WnBMZoOqtxuFHxb/0gB7S1alGX65w1OWzBaT/+/VJqRD5Rmq4rv4 y7Kt1+6141cq224EwsfBj1JNhBqIeHxo9dmm4YApQN++UbjCtnOZWFGzaIT06/OA lU00DIVJ95z84DfnVtxb+w+9bNyKWwZW1zBN9bFYbhZTH1Mm5Zde0mpMcjcHQxKH 7K/Biy1pAcscma7wqFQUZhU0DDcV1XD4iLQMFWMDI1OCkwVd -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcPytVlrv00comn7cyhP 9Yi5EZYCeMtoArQDHzsLIg+jKHXu7oconPpt1fkwD3kzOebrur6ZeXgXIMEut85k WG6o6YtgE1tYHMdBqmlghqcZ0BhhiQGofhcHi/MmXspm8OP8iD/ocuOcCq4LZzI9 YcjqHR+DQZ7fzG+BdYWVEZC5BHulqwvBQEtV+HlIIp8U4YjIEIW+p0JFwhWunveq WkxZwmHjC3bOE+8LarvqUT/cleSFDI/Tz4spj2C0KMKaRra3ymVt51oUSTJ4solt P2Ur3vDYqaLvraz9F6YBCFdN2Y2JxojeMddTN2sPabLVAfmNsilMMs34e/vXy3rd qwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 270941404474730386938131600086482823864 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-26 03:05:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 03:58:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'band.pave.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23955665237956118570910761728661799541765588053694703832684497005955819773056138176931891157909627532024198429208705051757339191816800747304301304688882704271281921134891083837181138850039442765290576576859434251813520533644815843390862456492864634828685356082053537751851847988350962193454461491155473458804658993555850924473508335790273592707328793008011648149248334979637299736944792671826621524966910637494341263666851191714451210979354121745170899035750504973194626508217101287634175915776481689297109749540477712587116917464809486829641090196625819382085862022736668263528897829299759591550678811295239894654379 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 646e1a1fe564e0c86083ee78de189d4135e83ccc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/LKtQO7gD6cM' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'band.pave.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/86yeALfJiMg.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188f5e082bf0000040300483046022100d46ca62af319d766f7404d2fa2079ac53e9f7c7cc12ae26f493cef0356929ab3022100881302854e1df1331ba59bcba3aa20da74ccd2b38dcbcf1ea97a08e41b5689b5007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000188f5e082af00000403004730450221009e6dd21fef5d35eaf089b31a8b75c2b9ddefb7035272e0b4a18871f99155c5a102201da66ff62a3618c9fe7e1a3e2a823563969a6256686a0971ad9a5a72c27526ed . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004a80abb082957c973e78373ddcb6aad76b053f91452e0b5ebf0fbf938153d5c5ab29b2593b6443e7e1dd0ef7db31baf27ebc8febfc2cc32670f58e3b4686c3d135d0babd31b862c63fffc3e444644cf568265d2bfb5a704c6683aab71b851f16ffd2007b4b56a5197eb9c35396cc1693ffefd526a443e519aae2bbf8cbb2add7eeb5e3572adb6e04c2c7c18f524d841a88787c68f5d9a6e1802940dfbe51b8c2b673995851b36884f4ebf380954d340c8549f79cfce037e756dc5bfb0fbd6cdc8a5b0656d7304df5b1586e16531f5326e5975ed26a4c723707431287ecafc18b2d6901cb1c99aef0a854146615340c3715d570f888b40c15630323538293055d