can.charliebanana.com
Issued by R3
About this certificate
This digital certificate with serial number 04:d1:19:77:a0:9f:b8:70:de:61:74:8c:b5:2a:16:cb:25:c1 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=can.charliebanana.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:d1:19:77:a0:9f:b8:70:de:61:74:8c:b5:2a:16:cb:25:c1Serial Number (int): 419602010254577810107348594767795589948865
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6e:87:fb:7c:f7:62:e1:1f:25:05:08:4b:eb:49:3a:3f:36:ca:93:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 65:99:9a:7e:72:2b:4c:01:30:22:1d:fe:64:eb:56:61:f3:3a:ec:2d
Fingerprint (sha256): 22:cb:39:60:67:e9:0a:8a:85:93:ba:5d:3d:ed:b6:a1:0a:60:ef:a3:67:0e:13:46:86:bd:6b:96:60:a9:4e:e9
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate can.charliebanana.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for can.charliebanana.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
can.charliebanana.com
Other certificates including the domain name charliebanana.com
(limited to 100 certificates)
tracking.duckvideo.co
b2b.charliebanana.com
agency.ibex.co
hk.charliebanana.com
www.charliebanana.com
www.eu.charliebanana.com
cheetah.apstra.com
hk.charliebanana.com
eu.charliebanana.com
discover.newswire.com
www.charliebanana.com
www.charliebanana.com
eu.charliebanana.com
eu.charliebanana.com
hk.charliebanana.com
charliebanana.com
b2b.charliebanana.com
*.charliebanana.com
beta.charliebanana.com
hk.charliebanana.com
hk.charliebanana.com
b2b.charliebanana.com
agency.ibex.co
www.beta.charliebanana.com
eu.charliebanana.com
*.info.charliebanana.com
can.charliebanana.com
www.eu.charliebanana.com
sales.blueriveranalytics.com
eu.charliebanana.com
charliebanana.com
hk.charliebanana.com
hk.charliebanana.com
hk.charliebanana.com
www.charliebanana.com
www.charliebanana.com
b2b.charliebanana.com
sales.charliebanana.com
hk.charliebanana.com
b2b.charliebanana.com
sales.decent.com
charliebanana.com
hk.charliebanana.com
can.charliebanana.com
sales.xcelservicesgroup.net
fr-eu.charliebanana.com
eu.charliebanana.com
charliebanana.com
eu.charliebanana.com
fr-eu.charliebanana.com
fr-eu.charliebanana.com
hk.charliebanana.com
eu.charliebanana.com
hk.charliebanana.com
charliebanana.com
can.charliebanana.com
hk.charliebanana.com
sales.nuodb.com
can.charliebanana.com
tracking.duckvideo.co
can.charliebanana.com
charliebanana.com
fr-beta-eu.charliebanana.com
hk.charliebanana.com
sales.charliebanana.com
charliebanana.com
eu.charliebanana.com
hk.charliebanana.com
eu.charliebanana.com
eu.charliebanana.com
charliebanana.com
can.charliebanana.com
eu.charliebanana.com
es-beta.charliebanana.com
can.charliebanana.com
can.charliebanana.com
fr-eu.charliebanana.com
Charliebanana.com
www.charliebanana.com
hk.charliebanana.com
can.charliebanana.com
eu.charliebanana.com
www.charliebanana.com
hk.charliebanana.com
can.charliebanana.com
charliebanana.com
beta.charliebanana.com
es-beta.charliebanana.com
can.charliebanana.com
charliebanana.com
www.charliebanana.com
www.charliebanana.com
hk.charliebanana.com
charliebanana.com
www.charliebanana.com
fr-eu.charliebanana.com
www.beta.charliebanana.com
fr-eu.charliebanana.com
b2b.charliebanana.com
beta.charliebanana.com
b2b.charliebanana.com
agency.ibex.co
hk.charliebanana.com
www.charliebanana.com
www.eu.charliebanana.com
cheetah.apstra.com
hk.charliebanana.com
eu.charliebanana.com
discover.newswire.com
www.charliebanana.com
www.charliebanana.com
eu.charliebanana.com
eu.charliebanana.com
hk.charliebanana.com
charliebanana.com
b2b.charliebanana.com
*.charliebanana.com
beta.charliebanana.com
hk.charliebanana.com
hk.charliebanana.com
b2b.charliebanana.com
agency.ibex.co
www.beta.charliebanana.com
eu.charliebanana.com
*.info.charliebanana.com
can.charliebanana.com
www.eu.charliebanana.com
sales.blueriveranalytics.com
eu.charliebanana.com
charliebanana.com
hk.charliebanana.com
hk.charliebanana.com
hk.charliebanana.com
www.charliebanana.com
www.charliebanana.com
b2b.charliebanana.com
sales.charliebanana.com
hk.charliebanana.com
b2b.charliebanana.com
sales.decent.com
charliebanana.com
hk.charliebanana.com
can.charliebanana.com
sales.xcelservicesgroup.net
fr-eu.charliebanana.com
eu.charliebanana.com
charliebanana.com
eu.charliebanana.com
fr-eu.charliebanana.com
fr-eu.charliebanana.com
hk.charliebanana.com
eu.charliebanana.com
hk.charliebanana.com
charliebanana.com
can.charliebanana.com
hk.charliebanana.com
sales.nuodb.com
can.charliebanana.com
tracking.duckvideo.co
can.charliebanana.com
charliebanana.com
fr-beta-eu.charliebanana.com
hk.charliebanana.com
sales.charliebanana.com
charliebanana.com
eu.charliebanana.com
hk.charliebanana.com
eu.charliebanana.com
eu.charliebanana.com
charliebanana.com
can.charliebanana.com
eu.charliebanana.com
es-beta.charliebanana.com
can.charliebanana.com
can.charliebanana.com
fr-eu.charliebanana.com
Charliebanana.com
www.charliebanana.com
hk.charliebanana.com
can.charliebanana.com
eu.charliebanana.com
www.charliebanana.com
hk.charliebanana.com
can.charliebanana.com
charliebanana.com
beta.charliebanana.com
es-beta.charliebanana.com
can.charliebanana.com
charliebanana.com
www.charliebanana.com
www.charliebanana.com
hk.charliebanana.com
charliebanana.com
www.charliebanana.com
fr-eu.charliebanana.com
www.beta.charliebanana.com
fr-eu.charliebanana.com
b2b.charliebanana.com
beta.charliebanana.com
Certificate
The complete raw certificate details for can.charliebanana.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISBNEZd6CfuHDeYXSMtSoWyyXBMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA2MDIyMTI1MzhaFw0yMTA4MzEyMTI1MzhaMCAxHjAcBgNVBAMT FWNhbi5jaGFybGllYmFuYW5hLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBALL1vDXUkLOiGgaT9XxZXpjhMhbdRYCgiEUSLJKnrEj/gWJlj13jVlMq xap30R4iT06M4jfS7Vzt/svqnR6TpHDTuGvfDoS4brLACpPDpFpC4JK9ni6jB2b1 aXt2kNKgirGNQycokJmJQk/Vx2ex16J059WrWkLNiwGpDwnK3i41sVgK7bz233pX YR/CjTgaPxogaH2F+J4+9bt9ZrPEOllw9KXLUv3SqF20S5sgqjxZLIMNZNlQFNds KgEfvVXKS+c68KwQ+l7BzufXJGTl1Z5sI1ZG9Tkrfe4hnSj10Ff8jpSLqLuKF1Jm 5kHm9rQp/q9Qku4wz8SM3h4WQgkDYsMCAwEAAaOCAk8wggJLMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQUbof7fPdi4R8lBQhL60k6PzbKk9UwHwYDVR0jBBgwFoAUFC6z F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl bmNyLm9yZy8wIAYDVR0RBBkwF4IVY2FuLmNoYXJsaWViYW5hbmEuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHUAfT7y+I//iFVoJMLAyp5SiXkrxQ54CX8uapdomX4i8NcAAAF5ztUIPwAABAMA RjBEAiAnN9UQHVsmXcn3ZIXhtthrfBkGhcvDy9qXHsrYxatbpQIgBd6EIHI7nF4d /6MZwqhThAuqPti7k38HZuDMY+GRWsMAdgBElGUusO7Or8RAB9io/ijA2uaCvtjL MbU/0zOWtbaBqAAAAXnO1QlLAAAEAwBHMEUCIQCXvHFzerBH3V6NEsQU8iRz+LCr dvS+nwk8HU3NS875UwIgEgoHMygRaERIYOPaPD2mpmCXzgM6DaEFerp76djZYjIw DQYJKoZIhvcNAQELBQADggEBAG1kglbbdyF7SbqkWAvOrbzGk038vS2ra/7VWwF0 fSkPnbQ+LlwiCnsuYwxZPKLislxJidRbHedSTQwzKG+8b5Hg95CgJGcfgM7Dvp8V oajvaxKUVLvb47A/5cSLzYPYO6kHQ5OO7/DlI1TLzI5nXZ2ETOrnvsOa2ec+TziF MPlCp3WrkbZvLN790hMeTzBY5yreoi4/cGvADTRHs5/1BkOL0HHj47wIz8X967TE 79dUSsLBCpNbWJxKto0fqbPEBskVYvjs2QO3QDEFisic/O+p7BzjRYj3bOv/dywC RNzpAIidAMxbaMJOaQ/dl2McrYgO5JJNWylsXDBt8C0nOOI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvW8NdSQs6IaBpP1fFle mOEyFt1FgKCIRRIskqesSP+BYmWPXeNWUyrFqnfRHiJPToziN9LtXO3+y+qdHpOk cNO4a98OhLhussAKk8OkWkLgkr2eLqMHZvVpe3aQ0qCKsY1DJyiQmYlCT9XHZ7HX onTn1ataQs2LAakPCcreLjWxWArtvPbfeldhH8KNOBo/GiBofYX4nj71u31ms8Q6 WXD0pctS/dKoXbRLmyCqPFksgw1k2VAU12wqAR+9VcpL5zrwrBD6XsHO59ckZOXV nmwjVkb1OSt97iGdKPXQV/yOlIuou4oXUmbmQeb2tCn+r1CS7jDPxIzeHhZCCQNi wwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 419602010254577810107348594767795589948865 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-02 21:25:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-31 21:25:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'can.charliebanana.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22591594825607777721910498596770557084857040127884005432535773689581868194689200654058818269963944636852819937106036525206832453767161544293350021637522578269406795275971446730641021797420088645597169193996495508279237926378273525010732013211473082283236554574972461084170055397091061955793046228607998936994606299796503385860030751030952779268971461869008602933513226570573265439114430144713897123763562428677850242862289035694836215306217169663961069100343672533238241850902737832870342418984391301909789694105638081942571818443433180317911494566519177646461559171114678103664611869729673854572404516708450889327299 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6e87fb7cf762e11f2505084beb493a3f36ca93d5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'can.charliebanana.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000179ced5083f000004030046304402202737d5101d5b265dc9f76485e1b6d86b7c190685cbc3cbda971ecad8c5ab5ba5022005de8420723b9c5e1dffa319c2a853840baa3ed8bb937f0766e0cc63e1915ac30076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000179ced5094b000004030047304502210097bc71737ab047dd5e8d12c414f22473f8b0ab76f4be9f093c1d4dcd4bcef9530220120a0733281168444860e3da3c3da6a66097ce033a0da1057aba7be9d8d96232 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 006d648256db77217b49baa4580bceadbcc6934dfcbd2dab6bfed55b01747d290f9db43e2e5c220a7b2e630c593ca2e2b25c4989d45b1de7524d0c33286fbc6f91e0f790a024671f80cec3be9f15a1a8ef6b129454bbdbe3b03fe5c48bcd83d83ba90743938eeff0e52354cbcc8e675d9d844ceae7bec39ad9e73e4f388530f942a775ab91b66f2cdefdd2131e4f3058e72adea22e3f706bc00d3447b39ff506438bd071e3e3bc08cfc5fdebb4c4efd7544ac2c10a935b589c4ab68d1fa9b3c406c91562f8ecd903b74031058ac89cfcefa9ec1ce34588f76cebff772c0244dce900889d00cc5b68c24e690fdd97631cad880ee4924d5b296c5c306df02d2738e2