istricaaantik.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:7f:f2:f4:18:2b:9c:2f:56:48:6e:71:b5:72:1c:4b:0b:d4 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=istricaaantik.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:7f:f2:f4:18:2b:9c:2f:56:48:6e:71:b5:72:1c:4b:0b:d4Serial Number (int): 391987944911646581949787005754820904291284
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: a2:5b:13:6e:1c:44:85:99:11:b2:70:d5:77:72:f9:26:09:2b:c4:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d6:9a:ea:7d:d6:ea:6c:78:52:53:34:fa:0e:55:b5:4d:e5:1a:d9:22
Fingerprint (sha256): 10:4e:e7:c3:6e:58:ee:73:73:25:c0:6b:9b:ed:b8:23:57:df:b0:f2:7d:07:fc:f2:c3:20:65:d7:db:ae:89:8f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate istricaaantik.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for istricaaantik.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cpanel.istricaaantik.com
istricaaantik.caaantik.com
istricaaantik.com
mail.istricaaantik.com
webdisk.istricaaantik.com
webmail.istricaaantik.com
www.istricaaantik.caaantik.com
www.istricaaantik.com
istricaaantik.caaantik.com
istricaaantik.com
mail.istricaaantik.com
webdisk.istricaaantik.com
webmail.istricaaantik.com
www.istricaaantik.caaantik.com
www.istricaaantik.com
Other certificates including the domain name istricaaantik.com
(limited to 100 certificates)
istricaaantik.com
istricaaantik.com
www.istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
mail.istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
softbank.id
istricaaantik.com
istricaaantik.com
istricaaantik.com
mail.istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
www.istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
mail.istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
istricaaantik.com
softbank.id
istricaaantik.com
istricaaantik.com
istricaaantik.com
mail.istricaaantik.com
istricaaantik.com
istricaaantik.com
Certificate
The complete raw certificate details for istricaaantik.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGzDCCBbSgAwIBAgISBH/y9BgrnC9WSG5xtXIcSwvUMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MTAxNjAxMzNaFw0x ODA4MDgxNjAxMzNaMBwxGjAYBgNVBAMTEWlzdHJpY2FhYW50aWsuY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8QsEMckNnX5tATt9Ybwa9aLleA3 kqX2M2d6caC882nZX9i037Vk5GmukT3Vqa4WA4fsJu0qk25U5BUG7hLAVSlpHP0b C4nddZEaAqbN4rZpIjNbZ+Y296IVadznwxo4DSXM8nlQnQ2aeNKEodeZ0iH9gRHt n0xFlagbH4unxdNyv43mwVg5nj4JzgQQihPy+od2yVBsUUGHXruiWq5Q+4/W+9OF diMKWEl5ErHjft6BDq8qWtFLPbWLG+45MsgZkvJCqPGJdu3DvyUOyOhGPnApNhl1 OXSqdxr2zJSqOJgqmPPyBaffp2Cft/qyNqet36Zd3XTcmyc/CRRlZl2UqwIDAQAB o4ID2DCCA9QwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSiWxNuHESFmRGycNV3cvkm CSvEtTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw dC5vcmcvMIHZBgNVHREEgdEwgc6CGGNwYW5lbC5pc3RyaWNhYWFudGlrLmNvbYIa aXN0cmljYWFhbnRpay5jYWFhbnRpay5jb22CEWlzdHJpY2FhYW50aWsuY29tghZt YWlsLmlzdHJpY2FhYW50aWsuY29tghl3ZWJkaXNrLmlzdHJpY2FhYW50aWsuY29t ghl3ZWJtYWlsLmlzdHJpY2FhYW50aWsuY29tgh53d3cuaXN0cmljYWFhbnRpay5j YWFhbnRpay5jb22CFXd3dy5pc3RyaWNhYWFudGlrLmNvbTCB/gYDVR0gBIH2MIHz MAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2Vy dGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0 aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUg UG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRv cnkvMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA23Sv7ssp7LH+yj5xbSzluaq7 NveEcYPHXZ1PN7Yfv2QAAAFjSwAxTQAABAMARzBFAiAxW2e8lDnAbHUKBOGoF+2F EPP6KQGn2w2qbjibAjnePwIhANpbmbVQlk2lZ7zmQMi+4zosc6VBfsbB8ZenXk+R 9pboAHcAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFjSwAxKgAA BAMASDBGAiEArzhKX+j4VVnndXd2qpyPZe/8CED0pDT9RmnkM30v+2ICIQCEe5GO wIq1G03sUQaXjk79Zk+LdfJe6aWBBrBryvvM6DANBgkqhkiG9w0BAQsFAAOCAQEA a0rFrZ+xIOd87UroTLVPwuoYanZ4kgmmHaDna6vIik6fNjSkzFD98Weqd1ZEJPhD bPF52U5VyhKj7XJl/jAGvEmTclHeEsN1n7qZoUxJJZ6LuEq4hQ8aKmu1bZAArMra xUu1Ov/KmHeC1lJZQB74R9/hD8Bf9ERt80/brEmSNgLPnfImwFEmbq6v+lou57lh ocNX9wkHqIch53+OMWn99R0nfiWPatwAj9rb6VID45lj0ciOOqpj1npzB/5gBlKH DR2IR+QpPeQsTUZTCi9XIAyPkO3XRTwt/BhllBTzeqVbOWTGcVD1GFgKwy5+ldd3 EKOACvhcV9jdzsqLH6bofQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8QsEMckNnX5tATt9Ybw a9aLleA3kqX2M2d6caC882nZX9i037Vk5GmukT3Vqa4WA4fsJu0qk25U5BUG7hLA VSlpHP0bC4nddZEaAqbN4rZpIjNbZ+Y296IVadznwxo4DSXM8nlQnQ2aeNKEodeZ 0iH9gRHtn0xFlagbH4unxdNyv43mwVg5nj4JzgQQihPy+od2yVBsUUGHXruiWq5Q +4/W+9OFdiMKWEl5ErHjft6BDq8qWtFLPbWLG+45MsgZkvJCqPGJdu3DvyUOyOhG PnApNhl1OXSqdxr2zJSqOJgqmPPyBaffp2Cft/qyNqet36Zd3XTcmyc/CRRlZl2U qwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 391987944911646581949787005754820904291284 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-10 16:01:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-08 16:01:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'istricaaantik.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25723111991314314579453307012010274535905550268783603594779448953837271954352454504162193839463041294275527777102572855396241408769618399191818082417719608064618629024011812870048414920214599670675237466484571668531399859501731359522316481503496823533622316280571814072950523699119142996924342476011888627585836753494817120272176250288365352467879760196948613739446573906651191150140947626616379150462646484356674312837538443426576404066301294029668285644389108371731555037341059197365987479963380270587481422908896701637411348983104624187106532204995671538256409038494893398043619101382412368358509078299736041952427 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a25b136e1c44859911b270d57772f926092bc4b5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (209 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.istricaaantik.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istricaaantik.caaantik.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istricaaantik.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.istricaaantik.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.istricaaantik.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.istricaaantik.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.istricaaantik.caaantik.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.istricaaantik.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001634b00314d00000403004730450220315b67bc9439c06c750a04e1a817ed8510f3fa2901a7db0daa6e389b0239de3f022100da5b99b550964da567bce640c8bee33a2c73a5417ec6c1f197a75e4f91f696e8007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001634b00312a0000040300483046022100af384a5fe8f85559e7757776aa9c8f65effc0840f4a434fd4669e4337d2ffb62022100847b918ec08ab51b4dec5106978e4efd664f8b75f25ee9a58106b06bcafbcce8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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