sbox.shop
Issued by R3
About this certificate
This digital certificate with serial number 04:ff:a0:c7:ab:33:c5:3c:ab:29:61:2a:c6:50:ff:10:df:1f was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=sbox.shop
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:ff:a0:c7:ab:33:c5:3c:ab:29:61:2a:c6:50:ff:10:df:1fSerial Number (int): 435434860510674450143453901876539190992671
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: d6:c7:44:b4:54:fa:ca:c5:2f:86:12:37:74:77:48:ee:25:ef:0b:22
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 34:44:f5:78:f6:f2:f4:3f:0b:bb:03:37:14:d6:13:09:42:3e:ae:08
Fingerprint (sha256): 15:79:ef:12:32:77:fe:0a:0b:60:bd:e1:91:be:4d:a4:a1:09:3c:ee:61:ae:30:42:96:49:49:20:9f:6f:bf:64
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sbox.shop
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sbox.shop
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sbox.shop
www.sbox.shop
www.sbox.shop
Other certificates including the domain name sbox.shop
(limited to 100 certificates)
admin.kards.fr
bo.mylemonade.fr
sbox.shop
clique.osasfood.com.br
app.ualasribeiro.com.br
www.carryme.biz
auth.allotta.io
mapa.taniafruchi.com.br
confero-staging.televic.com
examside.com
ericaberardi.com
www.lucidfrontier.com
clique.osasfood.com.br
hello-firebase.webapp-service.com
redige.lapieza.io
giveforteachers.org
seguros.trinitas.mx
www.viper.social
getsway.app
www.lucidex.io
giveforteachers.org
cloud.prima.golf
sbox.shop
seller.sbox.shop
app.mapaconsultora.com
hidayasolutions.com
www.siapnikah.in
www.bambinihomesus.com
investment-challenge-poc.equix.app
vertigo.link
mapa.taniafruchi.com.br
marthinusstrydom.com
www.tanemura.co
app.blueprint.beauty
www.workade.it
www.bxwebexperience.com
sharenting.sc.or.kr
welakapelafestival.co.za
dev-fieldforce.cloudparker.com
telemedicina.veevasaude.com.br
command.optimusride.com
dazed-lens.app
m.posify.in
eticketv2-dev.linktivity.io
go.caption.cloud
iolcus.invessed.app
www.dailybasketkolkata.com
www.nexologist.com
dreambox.turnosweb.app
ddbees.in
melodysorasi-wedding.com
www.smartiron.app
dev.vision.autobotz.app
cloud.prima.golf
www.simplyred.es
www.doeverythingascode.com
www.snapidentifier.famoconnect.com
link-test.mytoolr.com
confero-staging.televic.com
cdn.bibas.me
www.kitap.email
webarendus.ee
cdn.bibas.me
ri.talentnow.com
zellingen.trevvelroute.nl
www.creekfieldstudios.com
gentry-plainsboro.com
productosinformaticos.com.ar
sillydogs.net
auth.technicalheist.com
getsway.app
devis.bude-brus.be
www.philoquent.ai
www.testtolacsendig.hu
open.textwith.us
bo.mylemonade.fr
sbox.shop
clique.osasfood.com.br
app.ualasribeiro.com.br
www.carryme.biz
auth.allotta.io
mapa.taniafruchi.com.br
confero-staging.televic.com
examside.com
ericaberardi.com
www.lucidfrontier.com
clique.osasfood.com.br
hello-firebase.webapp-service.com
redige.lapieza.io
giveforteachers.org
seguros.trinitas.mx
www.viper.social
getsway.app
www.lucidex.io
giveforteachers.org
cloud.prima.golf
sbox.shop
seller.sbox.shop
app.mapaconsultora.com
hidayasolutions.com
www.siapnikah.in
www.bambinihomesus.com
investment-challenge-poc.equix.app
vertigo.link
mapa.taniafruchi.com.br
marthinusstrydom.com
www.tanemura.co
app.blueprint.beauty
www.workade.it
www.bxwebexperience.com
sharenting.sc.or.kr
welakapelafestival.co.za
dev-fieldforce.cloudparker.com
telemedicina.veevasaude.com.br
command.optimusride.com
dazed-lens.app
m.posify.in
eticketv2-dev.linktivity.io
go.caption.cloud
iolcus.invessed.app
www.dailybasketkolkata.com
www.nexologist.com
dreambox.turnosweb.app
ddbees.in
melodysorasi-wedding.com
www.smartiron.app
dev.vision.autobotz.app
cloud.prima.golf
www.simplyred.es
www.doeverythingascode.com
www.snapidentifier.famoconnect.com
link-test.mytoolr.com
confero-staging.televic.com
cdn.bibas.me
www.kitap.email
webarendus.ee
cdn.bibas.me
ri.talentnow.com
zellingen.trevvelroute.nl
www.creekfieldstudios.com
gentry-plainsboro.com
productosinformaticos.com.ar
sillydogs.net
auth.technicalheist.com
getsway.app
devis.bude-brus.be
www.philoquent.ai
www.testtolacsendig.hu
open.textwith.us
Certificate
The complete raw certificate details for sbox.shop in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISBP+gx6szxTyrKWEqxlD/EN8fMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MDIxOTExMDBaFw0yNDA3MzExOTEwNTlaMBQxEjAQBgNVBAMT CXNib3guc2hvcDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANdVzRRq JdXtSyphLRGQe5r9QyW4tUq6/01EoRkrLMPt/ZMYRFmCFR8hIijsD6cwHZxJL+N4 TVRYqPxkPYeviPllUoNwDZW5s+Op2qG4j2WsLhHkObvDpFyQQJwPdZapHN4xf4qA tFkuEvxVGOk/VJzLsvz5pvrGe8ABUcqkBY+jMkoZGk+cC0d8WGVgg73PwjmtI05N QKe2l+uwBgh/IeEPyt15EL0paAJhH9ZVnhtN6+lATL16vFV/Sjs/IHatJxaeZaBk 2Z6MnBMIVsNnvQxvfdMxJjsrAGWD+N9zG2Dh6y0JIgON3Ff6zgq6i6eQfB+7uui+ c4cTTa+OeyP4xxzq3wopzSilQMs8Pw6qjrACTQZzg574PSP+w9LTt9dnjX9pEqD9 5/YYZY1DzGLIpSgIFR3h4/95Lm23D8QgGiVJEgQ7KA2NscHWQL90YkNp8zpsR6DS GUCGPY2yXyC1SSLGNr/7ioQ0/SYryTkSZO9mkebmiR+/QrKWK3rrtGeakuOZXYYp eVhzBQhWoUT/aPqLY2E4VUGptNROFZolyP/6ldhXpHzcM4psfNPjkUs31TagWa2q 1NC3orGyeUdVbhf0tKU59laYmiotK0thJxjEQj7JlagbOdzUrwWpTDju3QpiH6Q1 cvAJnxc632AcHu05bpHdkuxOn8fRY9p9AgcJAgMBAAGjggIZMIICFTAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFNbHRLRU+srFL4YSN3R3SO4l7wsiMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMCMGA1UdEQQcMBqCCXNib3guc2hvcIINd3d3LnNib3guc2hv cDATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1 AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjzrugScAAAQDAEYw RAIgIQX0+9RrnLdDcWqUIzRw5Eq9J1WrMwtjv4BpXLhfjKkCICv46NSBlCzP7Dhw ez5A9AGWv1oZqPWhhY5OsADgHcYBAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB 2bu/qznYhHMAAAGPOu6BYwAABAMARzBFAiEA71AiM5uMkFrP9G5lXLMIwkhQ3RCA 63qiuZc7dx0TyWwCIFxpRTK24SVY5lCHtMVkxf4lSFsuIj8voj4GGCREbUiTMA0G CSqGSIb3DQEBCwUAA4IBAQBTllbxUazAo0RnXOcv2p22R82dzk7/tZydK1QCBvqA 6rltyzh20vjY6qhpieKkXY+RY75YNDrbfa6EMTBC2HyMlcUGOGi47v6C+bEmiWKk bDNz04Sxh0jaxITSOStp616i042do9AVvS/0uYoYls/0uzGqSApcYiG8xBqKU/zb MhMUcDO+Jsvk1L2rQVFzjZtouFhNsb0wvNcaE4l5JWVt+QErkA7uDmlOyRdz9qZB fIDQAOQV8m8Xx9dLsI/49xNgEMMvZXYaK4DnwcGAAzavBCAInIztH8e55JcmH/7G TaUkUhvE5D5pR2wHfT2BLwIWsBRlx/Kplh8IkeI9mEdd -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA11XNFGol1e1LKmEtEZB7 mv1DJbi1Srr/TUShGSssw+39kxhEWYIVHyEiKOwPpzAdnEkv43hNVFio/GQ9h6+I +WVSg3ANlbmz46naobiPZawuEeQ5u8OkXJBAnA91lqkc3jF/ioC0WS4S/FUY6T9U nMuy/Pmm+sZ7wAFRyqQFj6MyShkaT5wLR3xYZWCDvc/COa0jTk1Ap7aX67AGCH8h 4Q/K3XkQvSloAmEf1lWeG03r6UBMvXq8VX9KOz8gdq0nFp5loGTZnoycEwhWw2e9 DG990zEmOysAZYP433MbYOHrLQkiA43cV/rOCrqLp5B8H7u66L5zhxNNr457I/jH HOrfCinNKKVAyzw/DqqOsAJNBnODnvg9I/7D0tO312eNf2kSoP3n9hhljUPMYsil KAgVHeHj/3kubbcPxCAaJUkSBDsoDY2xwdZAv3RiQ2nzOmxHoNIZQIY9jbJfILVJ IsY2v/uKhDT9JivJORJk72aR5uaJH79CspYreuu0Z5qS45ldhil5WHMFCFahRP9o +otjYThVQam01E4VmiXI//qV2FekfNwzimx80+ORSzfVNqBZrarU0LeisbJ5R1Vu F/S0pTn2VpiaKi0rS2EnGMRCPsmVqBs53NSvBalMOO7dCmIfpDVy8AmfFzrfYBwe 7Tlukd2S7E6fx9Fj2n0CBwkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 435434860510674450143453901876539190992671 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 19:11:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-31 19:10:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sbox.shop' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 878490810245726236019155352525787594774211670369136410348575137656987453080924110073105442522810662561319769170229656322303236409286958349277342099425217649680552227642455434194605216982123490613113283950631475140284098447605533856181336357623795770507299270892310591460972520182447859999410771158058136211697227865730263142287964619098272646181787606333049136483442741493633979209809978758201335449758886133424614538469703914238725150941309605251980100733282047046929670794357561290969570315881819066057923220391134224859055911401422631537121331020163042385953037018789288108376767058020262060308099183570064833998031633058909016105424167330784665173279090465158417679808882005809969804059660460513143048229173131759056095040305448906899732208090959841782780895198330805505027661558170991583359150298027285878852231623721679212941541842463166884898304934188706503244933811980855904627350351636774829584687721601721308497105033891350848623277034643510915249073164737603547238663317501117249189112439744108688744958886604093032485960664966693406549171220294078109307958317720196461356421628660329338343618526654086695772860804475007069942440568523854461046029302775344218643939983335534244340310378296018725791343734602478776280549129 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d6c744b454facac52f861237747748ee25ef0b22 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbox.shop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbox.shop' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f3aee8127000004030046304402202105f4fbd46b9cb743716a94233470e44abd2755ab330b63bf80695cb85f8ca902202bf8e8d481942ccfec38707b3e40f40196bf5a19a8f5a1858e4eb000e01dc60100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f3aee81630000040300473045022100ef5022339b8c905acff46e655cb308c24850dd1080eb7aa2b9973b771d13c96c02205c694532b6e12558e65087b4c564c5fe25485b2e223f2fa23e061824446d4893 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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