peterbruns.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:b4:dd:e3:61:84:5f:95:de:c8:53:7b:74:f2:00:fb:f0:a8 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=peterbruns.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b4:dd:e3:61:84:5f:95:de:c8:53:7b:74:f2:00:fb:f0:a8Serial Number (int): 409994909789146695087722242719457855926440
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 4a:5b:7d:52:79:09:a4:12:af:ac:a0:f3:bd:0c:d6:5c:2b:a2:fb:f0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 91:71:f9:8d:13:eb:b3:fc:a3:01:3f:e5:49:8c:b8:6c:60:aa:1f:1b
Fingerprint (sha256): 11:21:49:94:d7:8b:ec:53:62:da:4f:64:8e:15:57:f9:5b:da:5b:a1:ca:07:ac:be:6e:d2:5a:95:43:86:d8:df
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate peterbruns.de
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for peterbruns.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
peterbruns.com
peterbruns.de
peterbruns.isp-vhost04.domservice.de
www.peterbruns.com
www.peterbruns.de
peterbruns.de
peterbruns.isp-vhost04.domservice.de
www.peterbruns.com
www.peterbruns.de
Other certificates including the domain name peterbruns.de
(limited to 100 certificates)
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.isp-vhost04.domservice.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.isp-vhost04.domservice.de
Certificate
The complete raw certificate details for peterbruns.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgISBLTd42GEX5XeyFN7dPIA+/CoMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTYwMTE1MTFaFw0y MDA2MTQwMTE1MTFaMBgxFjAUBgNVBAMTDXBldGVyYnJ1bnMuZGUwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDK1DIYpi5nhtQCEGx2Oqqbt7Nm/hjy5uVT D6fkptvh2B1X2nDha6/HblVSnNE7rIl4FtmmVc9ao6xCDng7IIOjTjOXSotclsuH TscTr/FOfkm6MeCXtXKULr3sCLlKwXDs32Q6+NznM2f4EwNe7cad89k7E3e4ppFJ lD30xSitD2VAWPYabwgT5sFtoup7LW5aL/V4L67KzC9RDaH3wum5NPWMYZvR/Eoq pFsBxbMvrSb0uPFUJE46LXfmtBtkAmNB1ai4Tvw/BnDvq2awkrYY9qvreRwSwDvu q/Qv1cQlf7myykRP8CnztzW258rYZSJHSdXOOeWxC3HI4PDPJksOI/BPDw+z/hlX F6U55U7giXVC/su+s97QjZltAdeu25I+xH7Gf4poE881kkqSJEs+TaYa2l5KuyCU DayoLBmkfZxU+fqEVcRAsxn0ITDAZIuedzpMK6xDuh3QV28K4tqLm70pDp+pilaN Hp/c4tXBopb3SR7v3lje/5Mc+NGQ83V3+e+t5eMb0Zt8aRawlvuGRfPS+EmdzjAj 9lR10k02QYQKpR1QSLLZz71WGK9TgFV7Qy0Pi472ooq31bWpGCFJA8llpuo7bVuh 42ekbZLk4UBnZeIkYDy+YbM+e6wvEzKWRKp8Ttrl3kXufpIhH/nnnjie0rtU5fxO biH1SFMzvwIDAQABo4ICwDCCArwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRKW31S eQmkEq+soPO9DNZcK6L78DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMHUGA1UdEQRuMGyCDnBldGVyYnJ1bnMuY29tgg1w ZXRlcmJydW5zLmRlgiRwZXRlcmJydW5zLmlzcC12aG9zdDA0LmRvbXNlcnZpY2Uu ZGWCEnd3dy5wZXRlcmJydW5zLmNvbYIRd3d3LnBldGVyYnJ1bnMuZGUwTAYDVR0g BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0 cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEA dgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXDhH6K/AAAEAwBH MEUCIE7V8jpP9PdYQkZouBZqtrFUyRZ0PIfIjCJdsJguN32EAiEA5QKDBk3eYymi 8zMHu6SD8LnLA8DkBxWCSWcIVJg0NGIAdwCyHgXMi6LNiiBOh2b5K7mKJSBna9r6 cOeySVMt74uQXgAAAXDhH6KyAAAEAwBIMEYCIQDTOpo6dbFp2UKi0Gl+zhS+UJ5j jxF1Mvy2FlgL4Mg84gIhANNUc58Id8qou+XT21Qe1jkUo0JkcJExw28P5uNS2CBc MA0GCSqGSIb3DQEBCwUAA4IBAQBXXTUrqeASYyYmtocwXPtAatiIKHqU0xkf0dui Cn4aYuAIGpg+++AeQLh327ZvVTcjW2dlUh6KFisosMn+Vzxd9n0glJJi9+778e9Q JsaAV0wERmQITht0e+Vts3yBdoZMEVty/Cgps96cgw7cM4vpijau5HWNbMTTdWAU azoGv3cRmTQMj1djtEGZDLZZ0ck5NVXhpIkhLBVZkIcRRpKqV7O0comt7M0ylH7n sU5fIf3dJPZBDoFAOEoGmGfGT2VIuzAniZixrfhLDfxAt626OD2JmNHRDp7kYIvb jUkTnHUobjqmWStdB6Yyov0a+33FfbMVFy/YkEX2m2ttz9Hs -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAytQyGKYuZ4bUAhBsdjqq m7ezZv4Y8ublUw+n5Kbb4dgdV9pw4Wuvx25VUpzRO6yJeBbZplXPWqOsQg54OyCD o04zl0qLXJbLh07HE6/xTn5JujHgl7VylC697Ai5SsFw7N9kOvjc5zNn+BMDXu3G nfPZOxN3uKaRSZQ99MUorQ9lQFj2Gm8IE+bBbaLqey1uWi/1eC+uyswvUQ2h98Lp uTT1jGGb0fxKKqRbAcWzL60m9LjxVCROOi135rQbZAJjQdWouE78PwZw76tmsJK2 GPar63kcEsA77qv0L9XEJX+5sspET/Ap87c1tufK2GUiR0nVzjnlsQtxyODwzyZL DiPwTw8Ps/4ZVxelOeVO4Il1Qv7LvrPe0I2ZbQHXrtuSPsR+xn+KaBPPNZJKkiRL Pk2mGtpeSrsglA2sqCwZpH2cVPn6hFXEQLMZ9CEwwGSLnnc6TCusQ7od0FdvCuLa i5u9KQ6fqYpWjR6f3OLVwaKW90ke795Y3v+THPjRkPN1d/nvreXjG9GbfGkWsJb7 hkXz0vhJnc4wI/ZUddJNNkGECqUdUEiy2c+9VhivU4BVe0MtD4uO9qKKt9W1qRgh SQPJZabqO21boeNnpG2S5OFAZ2XiJGA8vmGzPnusLxMylkSqfE7a5d5F7n6SIR/5 5544ntK7VOX8Tm4h9UhTM78CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 409994909789146695087722242719457855926440 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 01:15:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 01:15:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'peterbruns.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827469675499136630190379729175278110319133018725982369838873312005696304531688057188542881902711903189858445462619330322549494812944729333701953449728750874722221895754614119319366366089195313254264809546065560745328243453848975580965407409873839673619568857642735899875440696010155582436555668841175209978781646412372584042415848697908597276327671821099358263697979536804620716581273760598839074832952171043020895798905696674320043589374635643101120605768513617187050750430492732323237830366502234926898189186201757885108980452978068652290898251630497360437244634477329175430824045684990485192666437168773766614547408212585523146506486684600552323463162455709883178223580492384665875164527965625275875160567291235841464814349385399261591774074458840982393511968432640686261409253400529050403752441254343765113654037712048055915746164720549841969133299679598740743407162881199200360826805016500468138006194940813949482082943784386259568194957033207534886377801228236238419994874939185147310289908782853971170111776193481612456363211790480061463730469991748081700461635111123763535491436871508822899904282380773931224189649605848564179829438782124376149216561566335693073276770533249677701483511290312562706560887215975102595074307007 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4a5b7d527909a412afaca0f3bd0cd65c2ba2fbf0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterbruns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterbruns.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterbruns.isp-vhost04.domservice.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterbruns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterbruns.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170e11fa2bf000004030047304502204ed5f23a4ff4f758424668b8166ab6b154c916743c87c88c225db0982e377d84022100e50283064dde6329a2f33307bba483f0b9cb03c0e40715824967085498343462007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170e11fa2b20000040300483046022100d33a9a3a75b169d942a2d0697ece14be509e638f117532fcb616580be0c83ce2022100d354739f0877caa8bbe5d3db541ed63914a34264709131c36f0fe6e352d8205c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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