mobile-staging.epik.com
Issued by R3
About this certificate
This digital certificate with serial number 04:15:15:83:a1:47:46:c5:ac:11:31:a3:31:52:6f:85:00:5c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mobile-staging.epik.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:15:15:83:a1:47:46:c5:ac:11:31:a3:31:52:6f:85:00:5cSerial Number (int): 355623670682295694263046653130481254858844
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 52:3f:bb:03:f8:72:c7:ff:24:0c:d2:8e:27:9d:5d:38:3b:57:03:7d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 11:72:35:02:8e:cc:fd:2c:7f:d9:36:2b:59:53:34:97:30:42:84:95
Fingerprint (sha256): 1d:c3:ee:21:f1:61:b7:96:39:2c:ca:1c:9b:a5:d0:a6:c8:df:75:d3:ef:be:e9:34:2f:51:cb:4f:a9:71:d0:80
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate mobile-staging.epik.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mobile-staging.epik.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mobile-staging.epik.com
Other certificates including the domain name epik.com
(limited to 100 certificates)
id.epik.com
inbox-3.epik.com
tksimplex.org
id.epik.com
supportadflegal.org
tickets-staging.epik.com
registrar-staging-newidentity.epik.com
domainequity-staging.epik.com
kyc.epik.com
my.epik.com
monitoring.epik.com
domainequity-staging.epik.com
rdap-whois.epik.com
registrar-staging.epik.com
gamma.kc.epik.com
mobilev2.epik.com
2000.cool.brightideaspress.org
canadaslandtrust.ca
whmcs.epik.com
bfpjs.epik.com
epik.com
vwp-api.epik.com
dev.epik.com
registrar.epik.com
hosting.epik.com
fr.epik.com
os-1.epik.com
mobile-staging.epik.com
docs.userapi.epik.com
registrar.epik.com
solr.epik.com
pixel.epik.com
gamma1.kc.epik.com
thepowermachine.com
affiliate.epik.com
inbox-5.epik.com
whmcs.epik.com
marketplace-staging.epik.com
icann.usersapiv2-staging.epik.com
hostingtemp.epik.com
usersapiv2.epik.com
cmsdev.epik.com
btc.epik.com
admin-staging-newidentity.epik.com
masterbucks-api-staging.epik.com
metrics.delta.kc.epik.com
nameliquidate-staging-newidentity.epik.com
btc.epik.com
unstoppable.epik.com
datasovereignty.link
my.epik.com
registrar-staging-newidentity.epik.com
missiontraumahealing.bible
dev-www.epik.com
marketplace-staging-newidentity.epik.com
kylerittenhouseinnocent.com.138romacourt.com.collegealabama.com
federatedidentity-api-dev.epik.com
registrar-staging-newidentity.epik.com
userapi.epik.com
masterbucks-dev.epik.com
store.epik.com
nutripizza.com
whmcs.epik.com
btc.epik.com
whois-staging.epik.com
id.epik.com
whois-staging.epik.com
delta.kc.epik.com
monitoring.epik.com
thetruegospel.org
alpha.kc.epik.com
rdap-whois.epik.com
admin-staging.epik.com
secure.bitmigate-staging.epik.com
secure.bitmigate-staging.epik.com
admin-staging.epik.com
zabbix.epik.com
delta1.kc.epik.com
invincible.me
nameliquidate-staging-newidentity.epik.com
support.epik.com
dev.medabb.com
hta1.com
hosting11.epik.com
jng.epik.com
federatedidentity-dev.epik.com
whois-staging.epik.com
secure.bitmigate-staging.epik.com
mobile-staging.epik.com
registrar.epik.com
admin-staging-newidentity.epik.com
whmcs.epik.com
*.epik.com
my.epik.com
whmcs.epik.com
*.epik.com
affiliate.epik.com
delta.kc.epik.com
userapi.epik.com
cheaphdd.hosting.epik.com
inbox-3.epik.com
tksimplex.org
id.epik.com
supportadflegal.org
tickets-staging.epik.com
registrar-staging-newidentity.epik.com
domainequity-staging.epik.com
kyc.epik.com
my.epik.com
monitoring.epik.com
domainequity-staging.epik.com
rdap-whois.epik.com
registrar-staging.epik.com
gamma.kc.epik.com
mobilev2.epik.com
2000.cool.brightideaspress.org
canadaslandtrust.ca
whmcs.epik.com
bfpjs.epik.com
epik.com
vwp-api.epik.com
dev.epik.com
registrar.epik.com
hosting.epik.com
fr.epik.com
os-1.epik.com
mobile-staging.epik.com
docs.userapi.epik.com
registrar.epik.com
solr.epik.com
pixel.epik.com
gamma1.kc.epik.com
thepowermachine.com
affiliate.epik.com
inbox-5.epik.com
whmcs.epik.com
marketplace-staging.epik.com
icann.usersapiv2-staging.epik.com
hostingtemp.epik.com
usersapiv2.epik.com
cmsdev.epik.com
btc.epik.com
admin-staging-newidentity.epik.com
masterbucks-api-staging.epik.com
metrics.delta.kc.epik.com
nameliquidate-staging-newidentity.epik.com
btc.epik.com
unstoppable.epik.com
datasovereignty.link
my.epik.com
registrar-staging-newidentity.epik.com
missiontraumahealing.bible
dev-www.epik.com
marketplace-staging-newidentity.epik.com
kylerittenhouseinnocent.com.138romacourt.com.collegealabama.com
federatedidentity-api-dev.epik.com
registrar-staging-newidentity.epik.com
userapi.epik.com
masterbucks-dev.epik.com
store.epik.com
nutripizza.com
whmcs.epik.com
btc.epik.com
whois-staging.epik.com
id.epik.com
whois-staging.epik.com
delta.kc.epik.com
monitoring.epik.com
thetruegospel.org
alpha.kc.epik.com
rdap-whois.epik.com
admin-staging.epik.com
secure.bitmigate-staging.epik.com
secure.bitmigate-staging.epik.com
admin-staging.epik.com
zabbix.epik.com
delta1.kc.epik.com
invincible.me
nameliquidate-staging-newidentity.epik.com
support.epik.com
dev.medabb.com
hta1.com
hosting11.epik.com
jng.epik.com
federatedidentity-dev.epik.com
whois-staging.epik.com
secure.bitmigate-staging.epik.com
mobile-staging.epik.com
registrar.epik.com
admin-staging-newidentity.epik.com
whmcs.epik.com
*.epik.com
my.epik.com
whmcs.epik.com
*.epik.com
affiliate.epik.com
delta.kc.epik.com
userapi.epik.com
cheaphdd.hosting.epik.com
Certificate
The complete raw certificate details for mobile-staging.epik.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISBBUVg6FHRsWsETGjMVJvhQBcMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjAzMDMxOTQzMjFaFw0yMjA2MDExOTQzMjBaMCIxIDAeBgNVBAMT F21vYmlsZS1zdGFnaW5nLmVwaWsuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAzR1O1Adv6pg0wARjIiZf5lGLOB08emY2NnhY+OPtTEujhM674DDL GxhEZVKV90enFO26XHtJ9++/osBBCmTWXt4oMbqroK3mUqbAZqk6cke6KkbarDsD Ec0cDinHpaI8fPYNVi/j4nz8W8S8w4xVkbbqMizDI+XMtoAgYj3M6ACZw+Gx7Xm8 +XEGKJlHPRLmj6SeaJJQf4vRrUdQr+Q4821uiSqn+cGR0C86MVpqoBeHX6YGzIg7 sf6cq3x0ygwIwLZxbIcxWGifFtEtWE1Ct5N5/m2vM/Y1J/U9171AT9emYCKUkLRC 3Bvpx5c50S660XbvyMhpINq1+WLiGeiGzQIDAQABo4ICUjCCAk4wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBRSP7sD+HLH/yQM0o4nnV04O1cDfTAfBgNVHSMEGDAWgBQU LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku bGVuY3Iub3JnLzAiBgNVHREEGzAZghdtb2JpbGUtc3RhZ2luZy5lcGlrLmNvbTBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE gfIA8AB2AEalVet1+pEgMLWiiWn0830RLEF0vv1JuIWr8vxw/m1HAAABf1GF3QMA AAQDAEcwRQIhAP2frUjk6cz1rgwfN6fPYhrRx/sZEDJy0o9/kUwKC6sMAiBkK5MH 3l3bePefbCXf9LgMyn0mBa5BSfhDJCNhgTVhgwB2AEHIyrHfIkZKEMahOglCh15O MYsbA+vrS8do8JBilgb2AAABf1GF3OsAAAQDAEcwRQIgUA85Lx0tmVPZnEaOtMFr t5iCsX3KIwgVr6Myzl5vgk4CIQC1VmWVU07wyDa5503RvHhWO022mMl9SfJQkra6 cH7UfjANBgkqhkiG9w0BAQsFAAOCAQEAn+dXgLzd1XIP7COuQXq5vHvgPajFObd8 J+8AjVs881oMSLn7vQGB0slB91bXAr8B/j+OwxG8JEf4pwARC5ogVAtnghijsPx6 qqK7mNYSyJ/cHBjz1xfV0vEaPPE06S4VFlzKI7UIqabkCpxb4PTgiUJFM/bBvcWy Pgh2A9GXjv707+DRGQnEVhHfBpoBFn0P17kQPI0jwl9+48rbzIuwv8Bh2oonCxUQ NALE30sq51pl02HRw2dSYtD8qCeiN6S9U9HFzPAF11o+/XDNxZFfgVXpAAQmULVb t6UEVO/TlEt0TT/Rty2LRkZoZstF0EDvMWIzFqMcYkKCJVGDnj3iyA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR1O1Adv6pg0wARjIiZf 5lGLOB08emY2NnhY+OPtTEujhM674DDLGxhEZVKV90enFO26XHtJ9++/osBBCmTW Xt4oMbqroK3mUqbAZqk6cke6KkbarDsDEc0cDinHpaI8fPYNVi/j4nz8W8S8w4xV kbbqMizDI+XMtoAgYj3M6ACZw+Gx7Xm8+XEGKJlHPRLmj6SeaJJQf4vRrUdQr+Q4 821uiSqn+cGR0C86MVpqoBeHX6YGzIg7sf6cq3x0ygwIwLZxbIcxWGifFtEtWE1C t5N5/m2vM/Y1J/U9171AT9emYCKUkLRC3Bvpx5c50S660XbvyMhpINq1+WLiGeiG zQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 355623670682295694263046653130481254858844 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-03 19:43:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-01 19:43:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mobile-staging.epik.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25893304793421617783585353460844873058760372006080730951981035244643307747349563200066997144151291299054536290016967040654468475363226511823320216001346416681854083974488106238634920422743709918872872815098974675257806373032391132292744344690154824592167834490586907813299630247008951184574903604847615528854947336051328495735304830735891423143398846819080758767518309117311319696319774408898349412645727699729956722804769431876338266881567488078731882066546872676959798177690499817436450406889507317365258915653187544450793444037297956564829184771213964310386877376272428952088361659451897012823560168949015512647373 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 523fbb03f872c7ff240cd28e279d5d383b57037d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-staging.epik.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017f5185dd030000040300473045022100fd9fad48e4e9ccf5ae0c1f37a7cf621ad1c7fb19103272d28f7f914c0a0bab0c0220642b9307de5ddb78f79f6c25dff4b80cca7d2605ae4149f8432423618135618300760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017f5185dceb00000403004730450220500f392f1d2d9953d99c468eb4c16bb79882b17dca230815afa332ce5e6f824e022100b5566595534ef0c836b9e74dd1bc78563b4db698c97d49f25092b6ba707ed47e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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