*.nsd.no
Issued by Buypass Class 2 CA 2
About this certificate
This digital certificate with serial number 32:d3:fe:bb:d8:96:74:45:f6:36 was issued on by Buypass AS-983163327.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.nsd.no
Buypass AS-983163327
Organization:
Buypass AS-983163327
Country:
NO
This certificate has expire since
Certificate Details
Serial Number (hex): 32:d3:fe:bb:d8:96:74:45:f6:36Serial Number (int): 240028942645881962100278
Serial Number lenght: 78 bits, 10 octets
SubjectKeyId: 2f:74:3d:e0:9a:db:5e:30:80:07:6e:7b:27:5a:e5:b1:af:7d:35:0f
AuthorityKeyId: 92:ad:65:89:b2:00:0f:cb:51:0d:c1:23:ec:94:4e:8f:c1:04:3f:77
Fingerprint (sha1): 7f:a4:fb:e2:6f:2f:d4:8c:56:07:86:e1:19:fb:24:c7:33:12:be:95
Fingerprint (sha256): 1d:bd:91:67:92:8c:51:a0:63:fa:55:2b:77:97:64:cc:12:00:84:91:c9:8d:a0:c1:b9:4f:4a:44:e1:06:42:1f
Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA2.cer
Revocation information
OCSP Server: http://ocsp.buypass.comCRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA2.crl
Check the revocation status for certificate *.nsd.no
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.nsd.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.nsd.no
nsd.no
nsd.no
Other certificates including the domain name nsd.no
(limited to 100 certificates)
uhskypepool02.uhad.no
fagskole.nsd.no
surveybanken.nsd.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
fagskole.nsd.no
www.nsd.no
fagskole.nsd.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
*.nsd.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
*.nsd.no
uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
ess.nsd.no
nsd.no
uhskypepool01.uhad.no
search.nsd.no
nsd.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
nsd.no
uhskypepool01.uhad.no
*.nsd.no
ess.nsd.no
fagskole.nsd.no
uhskypepool02.uhad.no
sip.s1.l.uhad.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
dlmessenger-eng.dealogic.com
www-stage.nsd.no
*.nsd.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
sip.s2.l.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
nsd.no
sip.s2.l.uhad.no
nsd.no
sip.s1.l.uhad.no
*.nsd.no
pvoportal.nsd.no
nsd.no
ess-usage.nsd.no
survey-sandbox-stage.nsd.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
sip.s1.l.uhad.no
uhskypepool01.uhad.no
skolevalg.nsd.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
fagskole.nsd.no
per.nsd.no
fagskole.nsd.no
ess-search.nsd.no
sip.s1.l.uhad.no
uhskypepool01.uhad.no
studio-stage.nsd.no
sip.s2.l.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
nsd.no
uhskypepool01.uhad.no
sip.s1.l.uhad.no
nsd.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
fagskole.nsd.no
surveybanken.nsd.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
fagskole.nsd.no
www.nsd.no
fagskole.nsd.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
*.nsd.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
*.nsd.no
uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
ess.nsd.no
nsd.no
uhskypepool01.uhad.no
search.nsd.no
nsd.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
nsd.no
uhskypepool01.uhad.no
*.nsd.no
ess.nsd.no
fagskole.nsd.no
uhskypepool02.uhad.no
sip.s1.l.uhad.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
dlmessenger-eng.dealogic.com
www-stage.nsd.no
*.nsd.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
sip.s2.l.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
nsd.no
sip.s2.l.uhad.no
nsd.no
sip.s1.l.uhad.no
*.nsd.no
pvoportal.nsd.no
nsd.no
ess-usage.nsd.no
survey-sandbox-stage.nsd.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
sip.s1.l.uhad.no
uhskypepool01.uhad.no
skolevalg.nsd.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
fagskole.nsd.no
per.nsd.no
fagskole.nsd.no
ess-search.nsd.no
sip.s1.l.uhad.no
uhskypepool01.uhad.no
studio-stage.nsd.no
sip.s2.l.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
nsd.no
uhskypepool01.uhad.no
sip.s1.l.uhad.no
nsd.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
Certificate
The complete raw certificate details for *.nsd.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIKMtP+u9iWdEX2NjANBgkqhkiG9w0BAQsFADBLMQswCQYD VQQGEwJOTzEdMBsGA1UECgwUQnV5cGFzcyBBUy05ODMxNjMzMjcxHTAbBgNVBAMM FEJ1eXBhc3MgQ2xhc3MgMiBDQSAyMB4XDTE5MDcxODExMjMyOVoXDTIwMDcxNzIx NTkwMFowEzERMA8GA1UEAwwIKi5uc2Qubm8wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWoy+q2nYBfakXr9sP5G9ATRkQCD1XytWSGMnV8cakFtBDdTgw k4XZvUkV7Bvvs5sSUnCCUbL1KPi/dR04Jt9wPLvUQPwxLrYo52CZiD1eH7Gv3e6k umyJGX0jBPsZt5ArWiXtXvAvOn2KoOFfWCga5vJy4wBdek3rsJltxiOVuj1chmTR 3KHwVBaXKTFnE/Dx9dVk1rqHZRQWj9E2nKGQA2x3Bzu/OUL32ZDnwY3W0vPbdNH7 rlQeVeRVR07gHTq+mY8+6WThEBPqC0fvwk9I6yiu822w71uqNk52qSYof/Lm7qVo RH6N0g/m9YrHCYSfWjeaBCdhIfVTciMmiUgRAgMBAAGjggJsMIICaDAJBgNVHRME AjAAMB8GA1UdIwQYMBaAFJKtZYmyAA/LUQ3BI+yUTo/BBD93MB0GA1UdDgQWBBQv dD3gmtteMIAHbnsnWuWxr301DzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIAQYMBYwCgYIYIRCARoBAgQwCAYGZ4EM AQIBMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwuYnV5cGFzcy5uby9jcmwv QlBDbGFzczJDQTIuY3JsMBsGA1UdEQQUMBKCCCoubnNkLm5vggZuc2Qubm8wagYI KwYBBQUHAQEEXjBcMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5idXlwYXNzLmNv bTA1BggrBgEFBQcwAoYpaHR0cDovL2NydC5idXlwYXNzLm5vL2NydC9CUENsYXNz MkNBMi5jZXIwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgC72d+8H4pxtZOUI5eq kntHOFeVCqtS6BqQlmQ2jh7RhQAAAWwE0q/BAAAEAwBHMEUCIQD2qOX6sM+VinBi Jrkq4Y0Yw8u6LkBI0QfnBarJZVYsmgIgGRgbLo+RkgBB/u3DqZ5nB5oS4jqmhsuH tBeL7zrj3BYAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWwE 0rCNAAAEAwBHMEUCICHQjaZvhXvHtSIqlmlBm96sNU4HRzP5HESVUQSBbR5RAiEA iGUT0436WZNUivaDIrdhTUW7goDO5KRN3y0m7i9fLKwwDQYJKoZIhvcNAQELBQAD ggEBADSo0WikGZF3JHL3IcrXYrkAfdppjlr/rJZstJMfhPNXNoyDnbUS1JPO2SGS xE0VWy7KMjFtEjzzegt567FptYU66tiLdFmVyaymFy8PT8Gku43vtlxt+ovitVLX xTzqE9M+ye4vm+DJI277a+5LThxoGn98aB8E5zgE66EnBF5HzTd9dCupgjn8yOea U/C3L69DVD5OTvR62fPPPwvKiRlCWRCu5jaP/PdBSWz4EUP2JKj/gPy5upLeV6b7 wi0V6bvPoPf3JWAkKLc/ChcqEEqYjWv/JSEvX408JvGIEEy9q5iO8I/+NyhvU++B dtw1p8xzkehnWVGIGWRUNug9XNo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qMvqtp2AX2pF6/bD+Rv QE0ZEAg9V8rVkhjJ1fHGpBbQQ3U4MJOF2b1JFewb77ObElJwglGy9Sj4v3UdOCbf cDy71ED8MS62KOdgmYg9Xh+xr93upLpsiRl9IwT7GbeQK1ol7V7wLzp9iqDhX1go GubycuMAXXpN67CZbcYjlbo9XIZk0dyh8FQWlykxZxPw8fXVZNa6h2UUFo/RNpyh kANsdwc7vzlC99mQ58GN1tLz23TR+65UHlXkVUdO4B06vpmPPulk4RAT6gtH78JP SOsorvNtsO9bqjZOdqkmKH/y5u6laER+jdIP5vWKxwmEn1o3mgQnYSH1U3IjJolI EQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 240028942645881962100278 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 11:23:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-17 21:59:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nsd.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27095467377496227350086876599868061510091702825143907656107212703891088012180522743290356955455197829218537056552858828838361443651939685048662462473617568768889501790252104098744418523125402682062135078230542459648055371239185371499160883945553465653070566669100658219019223689838151883806602406989046030806971820612667761025407155841515041214011306333332521170637338218364653192844673843146954337787353491452067145503822722287652527750034358897157889075380154468788879086657032939392784511195399255500955759189207545357859962430744125927214550229514125243962517277183578827801218501941872402054038863697578065217553 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92ad6589b2000fcb510dc123ec944e8fc1043f77 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2f743de09adb5e3080076e7b275ae5b1af7d350f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nsd.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsd.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA2.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016c04d2afc10000040300473045022100f6a8e5fab0cf958a706226b92ae18d18c3cbba2e4048d107e705aac965562c9a022019181b2e8f91920041feedc3a99e67079a12e23aa686cb87b4178bef3ae3dc160076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c04d2b08d0000040300473045022021d08da66f857bc7b5222a9669419bdeac354e074733f91c44955104816d1e51022100886513d38dfa5993548af68322b7614d45bb8280cee4a44ddf2d26ee2f5f2cac . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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