forkify.s3.co.ke
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:b4:d1:8c:5e:4f:7a:63:0b:b0:45:a5:c2:83:80:6c:0c:ed was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=forkify.s3.co.ke
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b4:d1:8c:5e:4f:7a:63:0b:b0:45:a5:c2:83:80:6c:0c:edSerial Number (int): 409978507258332556795143842660306725375213
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f6:e1:02:ea:31:a6:d8:bf:42:03:f3:cb:79:62:1c:41:58:55:d2:93
Fingerprint (sha256): 17:57:0f:46:ef:ce:88:1e:42:81:29:b3:62:2f:cd:27:19:60:05:e1:22:25:9a:bb:dd:f7:b5:76:38:54:de:8c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate forkify.s3.co.ke
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for forkify.s3.co.ke
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
forkify.s3.co.ke
Other certificates including the domain name s3.co.ke
(limited to 100 certificates)
sff.m2x.app
klinswap.com
www.doctor.apollofor.me
uwezoapps.com
landover.io
www.uorder.com.br
diceclash.com
web.lunyd.com
tharumafoundation.org
www.habous-rh.com
s3.co.ke
www.frcbrws.site
fitness-tracker.s3.co.ke
admin.inglesuniversal.net
frazam.com
www.heimat-gesucht.de
aerocruise.co.ke
app.copypro.ai
home.s3.co.ke
www.orton.io
forkify.s3.co.ke
app.halstedlawgroup.com
blur.app
web-shop.s3.co.ke
admin.lokoforlove.com
apm.s3.co.ke
www.circlebatch.com
www.transgearmotion.com
bdazzaled.co.ke
my-booklist.s3.co.ke
securifast.com
franklintarter.com
review-choice.com
portal.yamuntu.com
uwezoapps.com
beroepsethiek-bpsw.appdashboard.nl
s3.co.ke
www.coronacommunity.in
contact.s3.co.ke
uwezoapps.com
www.reiche.dev
s3.co.ke
www.vincentcombes.com
metroguardiansecurity.com
business.courtsite.my
home.s3.co.ke
app.byggkollen.se
www.thedietwhisperer.com
www.thecodercouple.in
alpha.f33dr.space
www.volantisdevelopment.com
droxindia.com
nom.venturebuilding.nl
www.frelypay.com
nexlithub.com
mario-club.s3.co.ke
moonbear.cn
game-guidez.s3.co.ke
rima.io
bdazzaled.co.ke
www.muskegon.energy
www.athletecrowd.net
app.badgeways.io
drone-sekoukanri.com
securifast.com
blur.app
blog.tunebrains.com
aerocruise.co.ke
uwezoapps.com
bajeti.s3.co.ke
maypodeluxe.com
smplabs.com
myappointments.gumb.app
gamebase.dev
web.lunyd.com
tharumafoundation.org
bridget.k-noe.fr
beroepsethiek-bpsw.appdashboard.nl
securifast.com
mpe.minhacentralonline.com.br
suigeneris.co.ke
alpha.synergydiving.com
acatacos.com
s3.co.ke
compta.wishtech.io
zakimoto.dev
www.ptitcoinsavonnerie.fr
spicemarket.clau.io
nomaslibro.cl
totoro.net.co
app.textusm.com
tharumafoundation.org
michaelowuor.s3.co.ke
s3.co.ke
hoobank.s3.co.ke
spicemarket.clau.io
recipe-book.s3.co.ke
metroguardiansecurity.com
harrytportfolio.com
securifast.com
klinswap.com
www.doctor.apollofor.me
uwezoapps.com
landover.io
www.uorder.com.br
diceclash.com
web.lunyd.com
tharumafoundation.org
www.habous-rh.com
s3.co.ke
www.frcbrws.site
fitness-tracker.s3.co.ke
admin.inglesuniversal.net
frazam.com
www.heimat-gesucht.de
aerocruise.co.ke
app.copypro.ai
home.s3.co.ke
www.orton.io
forkify.s3.co.ke
app.halstedlawgroup.com
blur.app
web-shop.s3.co.ke
admin.lokoforlove.com
apm.s3.co.ke
www.circlebatch.com
www.transgearmotion.com
bdazzaled.co.ke
my-booklist.s3.co.ke
securifast.com
franklintarter.com
review-choice.com
portal.yamuntu.com
uwezoapps.com
beroepsethiek-bpsw.appdashboard.nl
s3.co.ke
www.coronacommunity.in
contact.s3.co.ke
uwezoapps.com
www.reiche.dev
s3.co.ke
www.vincentcombes.com
metroguardiansecurity.com
business.courtsite.my
home.s3.co.ke
app.byggkollen.se
www.thedietwhisperer.com
www.thecodercouple.in
alpha.f33dr.space
www.volantisdevelopment.com
droxindia.com
nom.venturebuilding.nl
www.frelypay.com
nexlithub.com
mario-club.s3.co.ke
moonbear.cn
game-guidez.s3.co.ke
rima.io
bdazzaled.co.ke
www.muskegon.energy
www.athletecrowd.net
app.badgeways.io
drone-sekoukanri.com
securifast.com
blur.app
blog.tunebrains.com
aerocruise.co.ke
uwezoapps.com
bajeti.s3.co.ke
maypodeluxe.com
smplabs.com
myappointments.gumb.app
gamebase.dev
web.lunyd.com
tharumafoundation.org
bridget.k-noe.fr
beroepsethiek-bpsw.appdashboard.nl
securifast.com
mpe.minhacentralonline.com.br
suigeneris.co.ke
alpha.synergydiving.com
acatacos.com
s3.co.ke
compta.wishtech.io
zakimoto.dev
www.ptitcoinsavonnerie.fr
spicemarket.clau.io
nomaslibro.cl
totoro.net.co
app.textusm.com
tharumafoundation.org
michaelowuor.s3.co.ke
s3.co.ke
hoobank.s3.co.ke
spicemarket.clau.io
recipe-book.s3.co.ke
metroguardiansecurity.com
harrytportfolio.com
securifast.com
Certificate
The complete raw certificate details for forkify.s3.co.ke in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISBLTRjF5PemMLsEWlwoOAbAztMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMjEyMDM1MTJaFw0x OTA1MjIyMDM1MTJaMBsxGTAXBgNVBAMTEGZvcmtpZnkuczMuY28ua2UwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIDj51QpaAyxyMLB6KzB6Dj8DTy7G t8co3AacDr/P443tnK1ZoCC/H6r4RKqCB9U5jrxiCwSJOcegOGmCCtatvrYJ/8cF 6LrMPjC4kAIVEzgq1IpYcgWyP2MthqppaIib8LPih+znXBICLEjz2WWEwD2n79SJ q3tfdjediGt/F8FDglFPqOfk73xzyq/YywJbdk1OhvlZHpYnEFLZBaT/+1UwyM5O GLr3BqHXdsgVyCXekGUP/K5ELQn33VOpZX0JiBXXJTW2yHj0IRdkPzaNeq0ThQJQ nZVHgbCtGFymhrHNw6uFPIQ+diUcvYucRtDYkkpF0Yw56A6xV2Vzd76BAgMBAAGj ggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAap3NkUPVD1G5jttt0R570W twz8MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wGwYDVR0RBBQwEoIQZm9ya2lmeS5zMy5jby5rZTBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AHR+2oMx rTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABaRH73AkAAAQDAEcwRQIhAMFZ WrKpxyOw+/UiHwZA+aY2Jcsv0gYLaSHR0myE9TgdAiAmfDZ2fImmOKLkTQevvoz5 1+0XmaSp23xTFy9QnNYC+gB1AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hU S9iNAAABaRH73ikAAAQDAEYwRAIgTNn5lXlFl3AD0bZ3YUmfRS9ADzHcWdxUPY9B qtDFCU0CICgqGknzxRZZeEp1Q2EU8ep02dVShZ6fBckfdu2I4nQXMA0GCSqGSIb3 DQEBCwUAA4IBAQAxUAlT04U4Uma16yEM8Wi7JOXxaWDjQgmq7Vma7k6tqaB4ce5C M1xcC+ihwymMnFVcvM+gM4SHU1XEKuHbQfER37qt/UfzECROv8jERyVcUgBzEKOX CWOt+ez2NUCdxoCg53O0y6eZEnJPrEAGPactycuaZPMZDymduJjRkMi7B7Vnc60c 0NUwP3kdS9sVsJUgMQE09NRdmy+12ctU8hFaZX3Gjnppa9/6FrEXPFdJK08UXuFI AeBRDvdoBf+tFRxMlKPEA7jQzFE/hVtndtWSlvFKRxRMheGUQ/kE6hiWcEVzGA0+ oypzGhqRe+0+m+p0FmXgtAa6WA53PiwCWcdS -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk //tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82 jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+ gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 409978507258332556795143842660306725375213 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-21 20:35:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-22 20:35:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forkify.s3.co.ke' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forkify.s3.co.ke' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016911fbdc090000040300473045022100c1595ab2a9c723b0fbf5221f0640f9a63625cb2fd2060b6921d1d26c84f5381d0220267c36767c89a638a2e44d07afbe8cf9d7ed1799a4a9db7c53172f509cd602fa00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016911fbde29000004030046304402204cd9f9957945977003d1b67761499f452f400f31dc59dc543d8f41aad0c5094d0220282a1a49f3c51659784a75436114f1ea74d9d552859e9f05c91f76ed88e27417 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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