www.buskid.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a9:c0:08:85:5e:85:9f:4f:bc:c8:29:e3:56:a2:c0:3b:21 was issued on by Let's Encrypt.
With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.buskid.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a9:c0:08:85:5e:85:9f:4f:bc:c8:29:e3:56:a2:c0:3b:21Serial Number (int): 319099833823534191055474501443870236097313
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 71:bf:9c:31:18:c8:6d:91:53:af:0a:27:5f:9f:d1:bb:3c:e5:8d:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bd:5d:5b:96:da:ec:13:bf:a6:76:89:5e:f1:de:b6:87:f3:75:57:87
Fingerprint (sha256): 1a:1f:52:4d:1c:35:a9:2a:0c:02:de:a3:68:b7:94:cd:3d:43:53:3e:ab:5f:46:49:f3:30:ab:13:b5:4d:0c:df
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.buskid.com
15
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.buskid.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
jpy.money
nebraskastemcelltherapy.com
olgiatemolgora.net
owlblockchain.com
www.autodaaffitto.com
www.buskid.com
www.gainesvillesportsdoctors.com
www.gelcases.com
www.jpy.money
www.mergers.sydney
www.nebraskastemcelltherapy.com
www.olgiatemolgora.net
www.owlblockchain.com
www.pokerclubhouse.com
www.selfdefenceforwomen.net
nebraskastemcelltherapy.com
olgiatemolgora.net
owlblockchain.com
www.autodaaffitto.com
www.buskid.com
www.gainesvillesportsdoctors.com
www.gelcases.com
www.jpy.money
www.mergers.sydney
www.nebraskastemcelltherapy.com
www.olgiatemolgora.net
www.owlblockchain.com
www.pokerclubhouse.com
www.selfdefenceforwomen.net
Other certificates including the domain name buskid.com
(limited to 100 certificates)
www.smokingrelapse.com
www.buskid.com
www.xuncc.com
www.intellislide.com
alaskastemcellclinic.com
www.hoteldiplomatico.com
420nyclounge.com
mulletlake.com
tomballorthopedic.com
www.scarletclub.com
www.unclejoesgcc.com
trump.tube
www.jabsound.com
louisvillejointpain.com
loadmaster-rack.com
custom-acrylic.com
sportsdoctorsphiladelphia.com
www.xuncc.com
candlebaker.com
nycbudlounge.com
superbamba.com
health-challenge.com
www.drycleanup.com
www.wikiheaks.org
www.british-superstore.com
www.buskid.com
www.xuncc.com
www.intellislide.com
alaskastemcellclinic.com
www.hoteldiplomatico.com
420nyclounge.com
mulletlake.com
tomballorthopedic.com
www.scarletclub.com
www.unclejoesgcc.com
trump.tube
www.jabsound.com
louisvillejointpain.com
loadmaster-rack.com
custom-acrylic.com
sportsdoctorsphiladelphia.com
www.xuncc.com
candlebaker.com
nycbudlounge.com
superbamba.com
health-challenge.com
www.drycleanup.com
www.wikiheaks.org
www.british-superstore.com
Certificate
The complete raw certificate details for www.buskid.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGmzCCBYOgAwIBAgISA6nACIVehZ9PvMgp41aiwDshMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjQwMDQ0NTBaFw0x OTA2MjIwMDQ0NTBaMBkxFzAVBgNVBAMTDnd3dy5idXNraWQuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi9uE//TGMx0N0Ax//Ny1WjXSZBzBN7m aHwywA3xc64puSAmUSzZ69A/mcNLa6mzhjdabppBFh13Scfn8YyPvIzhboGXANc8 f1G0LdLsaruy7YzDXivH4CkiDKO9c6wOi1Xo5gEfym/m/wLTwQSry0d4+zNaHiIK 9xeZnCwWIEUG89Au6a+qVH8E39HAcJ6L6EykcxzU+fbhijHcHw6ZlTd3ffYNTXCY 4b1PeBlnBQUlHClOpLHBHF1npgpEmcoLGHd1MZiNmrHuMFVYYMqOn+osTgD28RzC xNEswkVwII/SB04si9DJqJrCGGZJgVAe9/A3ZyRboS+XV73a7S8imwIDAQABo4ID qjCCA6YwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRxv5wxGMhtkVOvCidfn9G7POWN uDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMIIBXwYDVR0RBIIBVjCCAVKCCWpweS5tb25leYIbbmVicmFza2FzdGVtY2Vs bHRoZXJhcHkuY29tghJvbGdpYXRlbW9sZ29yYS5uZXSCEW93bGJsb2NrY2hhaW4u Y29tghV3d3cuYXV0b2RhYWZmaXR0by5jb22CDnd3dy5idXNraWQuY29tgiB3d3cu Z2FpbmVzdmlsbGVzcG9ydHNkb2N0b3JzLmNvbYIQd3d3LmdlbGNhc2VzLmNvbYIN d3d3LmpweS5tb25leYISd3d3Lm1lcmdlcnMuc3lkbmV5gh93d3cubmVicmFza2Fz dGVtY2VsbHRoZXJhcHkuY29tghZ3d3cub2xnaWF0ZW1vbGdvcmEubmV0ghV3d3cu b3dsYmxvY2tjaGFpbi5jb22CFnd3dy5wb2tlcmNsdWJob3VzZS5jb22CG3d3dy5z ZWxmZGVmZW5jZWZvcndvbWVuLm5ldDBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0 Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ACk8UZZUyDlluqpQ/FgH1Ldv v1h6KXLcpMMM9OVFR/R4AAABaa1fL2IAAAQDAEcwRQIgdX/UyUhqz0yA/b/PjlW8 L6VqKEHRTeEcHNROmGlb8F8CIQCrCVKGeVkK39xQSJoHScrpVPCbjED7R/6EaHWN flGvTQB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABaa1fMUsA AAQDAEYwRAIgQyTuP9weNZiYRHhjy0wAUlNca+haT/XFGbsNpT7XENgCIBWu91S4 ASl5GZfBMjwhF02vQN2hBtfRWTd9+Q6tgo4wMA0GCSqGSIb3DQEBCwUAA4IBAQB4 GvgiUHpfHy6TvLP7Vp8TgapTlf7XVjXR+2qclwA0j0ronfCKZxqRz8XSDj4yDfZg 8UEWH/eFwyjNDOXnqxGyOz4VsXl+Wb19x/mWG4G3MxRLPBQ/NuFYNRwRh7tHSAUw hqkLV1/vgy+7ddc/a2/4VxnE9izM+Ha4Li2mxjjJn8EWxX1LsOM8hLy24L37eujz wDqeQ/efLrxDQ3zS6BaRYl3+96O1xjL6eDVMrNqeTQvf85HDTXYS20WnyrVJj/q5 Qcomo4BsezvXRedVQBH8Iwbqc+9ddYlMgABZCHwJGtUap5VbWZJXFR0vAfimOfM1 K6k80mX9ulQBDEmR2U04 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi9uE//TGMx0N0Ax//Ny 1WjXSZBzBN7maHwywA3xc64puSAmUSzZ69A/mcNLa6mzhjdabppBFh13Scfn8YyP vIzhboGXANc8f1G0LdLsaruy7YzDXivH4CkiDKO9c6wOi1Xo5gEfym/m/wLTwQSr y0d4+zNaHiIK9xeZnCwWIEUG89Au6a+qVH8E39HAcJ6L6EykcxzU+fbhijHcHw6Z lTd3ffYNTXCY4b1PeBlnBQUlHClOpLHBHF1npgpEmcoLGHd1MZiNmrHuMFVYYMqO n+osTgD28RzCxNEswkVwII/SB04si9DJqJrCGGZJgVAe9/A3ZyRboS+XV73a7S8i mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 319099833823534191055474501443870236097313 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-24 00:44:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-22 00:44:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.buskid.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24513619764503745379844646168007251896305385813747451718835290369583981409030894560052953433603363602950134372126366962652472473967103119861673498807082635173285373338338485233674966446790241914318862907315154150758492290116017285225305058049389231929316763624265982316453887958438803624579365278085092044678637744877824478461437219776822701003732677130560218146089556361475605903138568122541669404751842095284393464781655223806654053225893052316241642670660484474410623201543157025140515687449190303652763823471206982178282577930458208512118479777773391063389507213106484682656393705862914072118722103390175558050459 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 71bf9c3118c86d9153af0a275f9fd1bb3ce58db8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (342 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpy.money' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebraskastemcelltherapy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgiatemolgora.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owlblockchain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autodaaffitto.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buskid.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gainesvillesportsdoctors.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gelcases.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpy.money' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mergers.sydney' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebraskastemcelltherapy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgiatemolgora.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.owlblockchain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pokerclubhouse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selfdefenceforwomen.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169ad5f2f6200000403004730450220757fd4c9486acf4c80fdbfcf8e55bc2fa56a2841d14de11c1cd44e98695bf05f022100ab09528679590adfdc50489a0749cae954f09b8c40fb47fe8468758d7e51af4d007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169ad5f314b000004030046304402204324ee3fdc1e359898447863cb4c0052535c6be85a4ff5c519bb0da53ed710d8022015aef754b80129791997c1323c21174daf40dda106d7d159377df90ead828e30 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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