maenjuel.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:d3:95:2b:8d:64:76:b6:63:97:80:96:74:2e:5d:39:f9:4d was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=maenjuel.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:d3:95:2b:8d:64:76:b6:63:97:80:96:74:2e:5d:39:f9:4dSerial Number (int): 420447004255275181932197392238344677226829
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 5f:13:72:2e:a9:bf:eb:44:3d:89:25:6d:da:de:ad:30:37:a4:9f:2e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f3:bf:cf:f7:6a:68:23:5f:bd:1e:19:b7:62:11:fb:59:ef:41:14:4d
Fingerprint (sha256): 18:4b:ba:22:8b:5c:de:8b:ee:ef:24:2a:ff:1a:8b:ac:e1:d4:b8:ae:36:67:73:af:7f:96:cd:9e:78:35:07:16
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate maenjuel.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for maenjuel.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
maenjuel.ch
maenjuel.co.za
maenjuel.co.za
Other certificates including the domain name maenjuel.ch
(limited to 100 certificates)
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
kimai.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
dl.maenjuel.ch
matomo.maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
matomo.maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
maenjuel.ch
wp.maenjuel.ch
matomo.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
maenjuel.ch
wp.maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
myt.maenjuel.ch
wp.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
kimai.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
dl.maenjuel.ch
matomo.maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
matomo.maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
maenjuel.ch
wp.maenjuel.ch
matomo.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
maenjuel.ch
wp.maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
myt.maenjuel.ch
wp.maenjuel.ch
matomo.maenjuel.ch
Certificate
The complete raw certificate details for maenjuel.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgISBNOVK41kdrZjl4CWdC5dOflNMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDcxMTQwMTRaFw0y MDA3MDYxMTQwMTRaMBYxFDASBgNVBAMTC21hZW5qdWVsLmNoMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEAoPo89NVn0CL9GcRgzm8UHEMXx8nLA9TgygcB MN/g8ESYI2/z1kZtGXd3SWR7SVRBYpExYly3knnTeY0yRv37EO0HxAKZWX+bikbi ON1vUnwTkFjomkAGB1bk9QjPPYhUvXXJU2lkHZFv+mOaPjg85KQwwlWDbLADEEEZ 7qgFO0f1Vcql1rB3T7B5OE6vNlqjcArVqcSwdm6HdTBMqmVuSnnyXFcxBN4Q6JY+ lzTYqn3UDwm2ePM87n2TJ+bru0i/NtPbU5AJ51S58+mUYI3cndERC5ZKNaL3qqaS Y4hG5yCh/ywgr2/rWAFS9/3Qqo06UQUtyPJKgI51RJfJ/dNzRw10AdpicWgWnO6g klS366UcY0h4Ab9BYBHilr32KEpmEDvZC57ANUNnYwPPcYFIOB/mWfzN2ubBJt4j NYtLoqXNpVITIMYcUx82sUycoO7tBAL8iRUlaUdCt4LhkKj0LS6Hhz+TrrtXTADb w4XdE6+cXNZcOWsmwWEy/f3hDIdPCgYVwRLfQKZCUIurLZUngmOydhpsdw1P/Bc1 YZK8AC+CAW73fYlkWAP6h08XahW0uDLjOCD+8eXHLFAv6NzZuD5hcj6Xwo363soi A9Nm3L/iT7T22GONHmd5hcT3vjevaSxMDopKv9G7aowCrBaWH6M2S61vyDfh1VQZ ahbAdOcCAwEAAaOCAm8wggJrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUXxNyLqm/ 60Q9iSVt2t6tMDekny4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzAmBgNVHREEHzAdggttYWVuanVlbC5jaIIObWFlbmp1 ZWwuY28uemEwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEE AdZ5AgQCBIH0BIHxAO8AdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6y cwAAAXFUp8k4AAAEAwBHMEUCIGBhVkUwB6JwAjJO9XfaoaNwEe1UsjSbK9ILQ6dc SQxMAiEAzV1+sI8UQfUWwlP6rBVIDNUizhBq0ijC6hEZ8rnAy2oAdQCyHgXMi6LN iiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXFUp8khAAAEAwBGMEQCICOEGKUO XPnqK3ktTSbcP6f3cVGTdR4Ja6M/IvmozKp/AiA3UbtpYJraYVkp/Xm8NwwiC3do Qd5H8+K4mIFRk2PxeDANBgkqhkiG9w0BAQsFAAOCAQEAIN0pEAiJYOh14BBbSZo+ lU4XmSM5QKAVZEBZnvopdyIPVYCSuCzd7LkibFPDGmnFZPgO5LkReVHPTphVunPZ qcaHQkQuXun3svQk0rLjnoif7XNEQbb4NOv49XGGNRP/sAGDSnufjKnQe4+Ztq9n UnV0lf61imDnGdPVmhMbYAAKhqk5DpuDc7aVGIgIXvv7t0wzfQW/lLKdaJXoMNRF JP2hvjbdIAiYiACzUxaO7TudY7GEyK7mw59YlZphA+ulUYM8h2YiDvDYuUMy4ivR UNHynVYIwyeKIsn+RyTsbn62Z7hElqiHI5B/n5uW143wQWNGPD4/m1F7AUkLf+0w +w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoPo89NVn0CL9GcRgzm8U HEMXx8nLA9TgygcBMN/g8ESYI2/z1kZtGXd3SWR7SVRBYpExYly3knnTeY0yRv37 EO0HxAKZWX+bikbiON1vUnwTkFjomkAGB1bk9QjPPYhUvXXJU2lkHZFv+mOaPjg8 5KQwwlWDbLADEEEZ7qgFO0f1Vcql1rB3T7B5OE6vNlqjcArVqcSwdm6HdTBMqmVu SnnyXFcxBN4Q6JY+lzTYqn3UDwm2ePM87n2TJ+bru0i/NtPbU5AJ51S58+mUYI3c ndERC5ZKNaL3qqaSY4hG5yCh/ywgr2/rWAFS9/3Qqo06UQUtyPJKgI51RJfJ/dNz Rw10AdpicWgWnO6gklS366UcY0h4Ab9BYBHilr32KEpmEDvZC57ANUNnYwPPcYFI OB/mWfzN2ubBJt4jNYtLoqXNpVITIMYcUx82sUycoO7tBAL8iRUlaUdCt4LhkKj0 LS6Hhz+TrrtXTADbw4XdE6+cXNZcOWsmwWEy/f3hDIdPCgYVwRLfQKZCUIurLZUn gmOydhpsdw1P/Bc1YZK8AC+CAW73fYlkWAP6h08XahW0uDLjOCD+8eXHLFAv6NzZ uD5hcj6Xwo363soiA9Nm3L/iT7T22GONHmd5hcT3vjevaSxMDopKv9G7aowCrBaW H6M2S61vyDfh1VQZahbAdOcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 420447004255275181932197392238344677226829 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 11:40:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-06 11:40:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maenjuel.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 656730872854239400288369119933310272433749872591758737632949121746666669604586902441908266998553518358288118550958460029425421942617486241830693215921278052590498039154198900220564954334169929319411501531478630211532150510959219600730006422850444891463012076933683885207723077568004719651659178659203183465252092866772211979137265094932675979062260329768876436254013310992566793763339716988105813617802123417015055038565922125540275922346018698298677508216964268840274711296623927698143361569803009362874755771385249451141384032117515382940224605466144024937152249483255917647808729618500220197809753313068497137603896079431302256159220554837826348027668263479155785778460751478293484133613191704658573771304651774909134393062139990310691758370651832718726745175706730138455600459262536635532916066490646562294130322808091480697613485343021094671061482027221114192051208172973300607044613882935624448798355284685021178177034461323858247252125301941090220707381826334722933782368139929219386810210842069112803089433996045207291522922614701139654519660143016216029560600393637466481334312264507660827985036514363770184556008674050708422391070148614286261050495159650089490951707660474910943955914023897475199386836381888771649022489831 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5f13722ea9bfeb443d89256ddadead3037a49f2e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maenjuel.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maenjuel.co.za' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017154a7c93800000403004730450220606156453007a27002324ef577daa1a37011ed54b2349b2bd20b43a75c490c4c022100cd5d7eb08f1441f516c253faac15480cd522ce106ad228c2ea1119f2b9c0cb6a007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017154a7c92100000403004630440220238418a50e5cf9ea2b792d4d26dc3fa7f7715193751e096ba33f22f9a8ccaa7f02203751bb69609ada615929fd79bc370c220b776841de47f3e2b89881519363f178 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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