www.cura-domicil.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f5:1e:fa:62:b6:8e:82:fd:5c:57:11:aa:5d:08:bd:3f:eb was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.cura-domicil.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f5:1e:fa:62:b6:8e:82:fd:5c:57:11:aa:5d:08:bd:3f:ebSerial Number (int): 344747214607138616635165810658553146195947
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ea:7b:3c:5e:3b:df:28:53:e7:ba:6e:2e:20:e8:21:d3:3d:94:03:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a0:51:37:0d:96:d6:12:07:24:d5:4d:2d:5b:b5:cc:80:f8:f2:13:c4
Fingerprint (sha256): 1a:a3:88:67:b1:6c:a5:e3:fb:0c:dd:40:81:fd:ad:52:24:6f:9d:04:cb:87:d1:b5:b3:8e:c3:d9:b9:bf:b6:c6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.cura-domicil.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.cura-domicil.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.cura-domicil.ch
Other certificates including the domain name cura-domicil.ch
(limited to 100 certificates)
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
Certificate
The complete raw certificate details for www.cura-domicil.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgISA/Ue+mK2joL9XFcRql0IvT/rMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTgwMTM1NThaFw0x OTA5MTYwMTM1NThaMB4xHDAaBgNVBAMTE3d3dy5jdXJhLWRvbWljaWwuY2gwggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDJfaATEiwSlDDhpH44pLjYeMc2 i8fzEX6xDD8FcJ7XIF73uwSAzqsltwVh7hw2VmDGl+KK2booVN2Jn00jvjTqw0/3 7HFu7V1QumeTTVYyAOy7mdT1vXf+wdoB0ojbaZYedSuEErzn+DRz0XvzsR9cxld/ vQY6O9BP/SDgjlk3gO7xwuTJ2ljruXgcvzhE5w2nHThLL10Om9Qu6J4Y/RmEpn2Z RE3/YcOckEr9kXujXpdt3aSfUPzgDNtIzpEfxZVMJYXfRaRRnO2GFFkoHrefsWNt sRV6zLZKNXRZy8KcMAHm6PsBbG4u8GNQYIKCJ3/u8hcOFDDwuy6xEuVyWPdT9PJ1 0s1zUY9Rup9f+x9p1uLcbRewVueizb1PvuyR8T90i2yofN4nsC1VBv/Az9QqlAs1 PXSkB3yWeLerBnIyiqqh6VfSOzT/yEJRH5OkkgkQwfXabtKF1k/gFOsKsHe2Evi7 XOXTCPf98VbS4PzDqPo2vnWK4pkeioRm7bQH5v+7AKo+IW6MGQnMy2a894TZ9ytw GOPwTAGpVrD/jeoRXtoIsznfXotRSX2wPX7GANL5nhstpMHgzjZIWwySk9Ha40dR Zt+yxVwNW9kAAnV0Vh4P4itFvS/NiZDCnFt2hKhy1smixR16MEoqa4BKadaoamsi S57KPeIvWBGx3s+BTwIDAQABo4ICaDCCAmQwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBTqezxeO98oU+e6bi4g6CHTPZQDATAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE3d3dy5jdXJhLWRv bWljaWwuY2gwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE AdZ5AgQCBIH1BIHyAPAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb /gAAAWtocOeiAAAEAwBHMEUCIGhFcds4W93fjTMI02G0LEWvSJEFNf+IG50V5bz7 NmSuAiEAoKkBF+L46ymoMPlSXfD9Qs4UCHF7iHZbw+SKE1ClRysAdgApPFGWVMg5 ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWtocOm8AAAEAwBHMEUCIDQYYpJ6 +Ft7Dynv7QkMny8pMjrOssvFLbvTeU6D49KUAiEA1bWHczXNsRAxo6j6c3cYvYtY cCX2qQCFY3gg1n8cmtMwDQYJKoZIhvcNAQELBQADggEBADJbE1tE2f8U3+d+EbRa LL8X8+QsZbIgRVFAjfOZYZWEtOi4RcXHVHnmyxNyGrWXiHG/i4UmTaPAVTkfxtbm ReW071YIJK3CelNwdx1o0xXZQdHegMVkg6gL315eCiiqx6DmE3xhoJ7FT9aos1Ft RWm1egG+l2voCC57d1043OZZhWA9/c5krqmvth/aGHGOsPmvmV6dmpXr8n47EkbX 9pb3O55FtIajL4EwyPZC9ofRutaN9l5jZMKpn/NFKTf8+wcQSQzt69xq9uDrg4tz Ux0EM/DLTNua0OexbKtsMchdE4p/DPe405IJ5mbG1n1ma0aByOzbrR55jE3RtAH9 4QU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyX2gExIsEpQw4aR+OKS4 2HjHNovH8xF+sQw/BXCe1yBe97sEgM6rJbcFYe4cNlZgxpfiitm6KFTdiZ9NI740 6sNP9+xxbu1dULpnk01WMgDsu5nU9b13/sHaAdKI22mWHnUrhBK85/g0c9F787Ef XMZXf70GOjvQT/0g4I5ZN4Du8cLkydpY67l4HL84ROcNpx04Sy9dDpvULuieGP0Z hKZ9mURN/2HDnJBK/ZF7o16Xbd2kn1D84AzbSM6RH8WVTCWF30WkUZzthhRZKB63 n7FjbbEVesy2SjV0WcvCnDAB5uj7AWxuLvBjUGCCgid/7vIXDhQw8LsusRLlclj3 U/TyddLNc1GPUbqfX/sfadbi3G0XsFbnos29T77skfE/dItsqHzeJ7AtVQb/wM/U KpQLNT10pAd8lni3qwZyMoqqoelX0js0/8hCUR+TpJIJEMH12m7ShdZP4BTrCrB3 thL4u1zl0wj3/fFW0uD8w6j6Nr51iuKZHoqEZu20B+b/uwCqPiFujBkJzMtmvPeE 2fcrcBjj8EwBqVaw/43qEV7aCLM5316LUUl9sD1+xgDS+Z4bLaTB4M42SFsMkpPR 2uNHUWbfssVcDVvZAAJ1dFYeD+IrRb0vzYmQwpxbdoSoctbJosUdejBKKmuASmnW qGprIkueyj3iL1gRsd7PgU8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 344747214607138616635165810658553146195947 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 01:35:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 01:35:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cura-domicil.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822010436083069007725016605315571784317266034485866928573653258196489133524235359267408476068391715307907967684280005181889662013859805336223103584368781640686418759363182577394210782976427861403402121312712196177790458134897332588442295044683518631045426267306947815854358816444563626207165290919171342990828344679816309332574230053125545315536873881425287329569286421699626705069326653038212763591425636557706734943590657930507638866103819641429211942528447247688865813133572363435758409239550255412826794899579961303335349304398478947100161537372817368283855862974351879703001915460004424079414553032697416234151967142142392111209423743585661231231640764413662428113648533337998682466136756769046464371858644630750546502741867181377255203690911065942695328115111987604953733026119253886114280847845524048699887942005926695138243576873201389390475773757099088433324829260076399029766257186608764373915540689928427244396594519887224569651583056617802576213536197190069436552242988853241761082788035351748661745979610682364887563048358928237522212051874795471081476396684856893942640723468799698863884151230943047262093523158559200994812137798734887045906369767592717774128157723157123371683697187666677381234450542401308526138851663 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ea7b3c5e3bdf2853e7ba6e2e20e821d33d940301 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cura-domicil.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b6870e7a200000403004730450220684571db385bdddf8d3308d361b42c45af48910535ff881b9d15e5bcfb3664ae022100a0a90117e2f8eb29a830f9525df0fd42ce1408717b88765bc3e48a1350a5472b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b6870e9bc00000403004730450220341862927af85b7b0f29efed090c9f2f29323aceb2cbc52dbbd3794e83e3d294022100d5b5877335cdb11031a3a8fa737718bd8b587025f6a90085637820d67f1c9ad3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00325b135b44d9ff14dfe77e11b45a2cbf17f3e42c65b2204551408df399619584b4e8b845c5c75479e6cb13721ab5978871bf8b85264da3c055391fc6d6e645e5b4ef560824adc27a5370771d68d315d941d1de80c56483a80bdf5e5e0a28aac7a0e6137c61a09ec54fd6a8b3516d4569b57a01be976be8082e7b775d38dce65985603dfdce64aea9afb61fda18718eb0f9af995e9d9a95ebf27e3b1246d7f696f73b9e45b486a32f8130c8f642f687d1bad68df65e6364c2a99ff3452937fcfb0710490cedebdc6af6e0eb838b73531d0433f0cb4cdb9ad0e7b16cab6c31c85d138a7f0cf7b8d39209e666c6d67d666b4681c8ecdbad1e798c4dd1b401fde105