kerstingernig.de
Issued by R3
About this certificate
This digital certificate with serial number 04:72:19:9f:36:89:d8:c2:d3:0a:ae:65:d6:52:64:32:fc:c2 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=kerstingernig.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:72:19:9f:36:89:d8:c2:d3:0a:ae:65:d6:52:64:32:fc:c2Serial Number (int): 387275390937294562507727029711363955162306
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: dd:9e:59:56:3f:45:2c:ab:e9:02:db:34:99:44:2c:be:9c:17:72:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 60:0d:71:7f:2b:31:2a:42:a4:98:30:15:ff:6a:49:fa:dc:5d:17:59
Fingerprint (sha256): 25:85:1e:eb:10:88:5a:da:bc:54:6c:51:60:ac:24:3b:04:27:27:71:7e:97:6d:82:5d:30:41:b2:75:8d:3c:e2
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate kerstingernig.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kerstingernig.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kerstingernig.de
www.kerstingernig.de
www.kerstingernig.de
Other certificates including the domain name kerstingernig.de
(limited to 100 certificates)
booking.wizer.dk
booknow.amplifysales.co.uk
meeting.spectral.se
booking.tanktestingservices.com
bookings.waps.solutions
callback.topinsure.ie
termin.s-s-b.de
online.perform.training
termin.eds-b2b.de
www.wefeelgood.training
training.lets-grow.co.uk
webinars.abraxio.com
apply.leadingedgeaviation.com
www.vle.myfuturecourses.com
learn.hypergrowth.buzz
www.wefeelgood.training
webinar.kerstingernig.de
booking.thehospicecharitypartnership.co.uk
go.leandirekt.de
bookings.charac.co.uk
booknow.michaelbanks.photo
bookings.waps.solutions
installations.woosage.com
campus.immovisory.de
booking.meditop.dk
online.perform.training
kerstingernig.de
bookings.charac.co.uk
campus.immovisory.de
apply.leadingedgeaviation.com
bookings.waps.solutions
bookings.neopartement.com
citas.yacrea.com
go.leandirekt.de
webinars.abraxio.com
kerstingernig.de
learn.hypergrowth.buzz
agenda.konomu.io
webinars.abraxio.com
bookings.waps.solutions
mein.kleeberg.me
academy.tooledupraccoons.com
academy.businesslabcy.com
bookings.utopiaparties.com
education.aluna.info
bookings.hakoh.com
imworkingonit.thirtynin.com
citas.yacrea.com
confirmation-rdv.degentravel.com
go.leandirekt.de
termine.haering-consulting.de
bookings.hakoh.com
www.vle.myfuturecourses.com
booknow.michaelbanks.photo
confirmation-rdv.degentravel.com
rdv.qbisme.com
training.lets-grow.co.uk
bookings.merits.ie
booking.upfront.ie
citas.yacrea.com
bookings.waps.solutions
cyou.digimlabs.net
booknow.adeptcloud.co.uk
cyou.digimlabs.net
bookings.routescoaching.com
booking.thehospicecharitypartnership.co.uk
installations.woosage.com
schulung.your-extensions.academy
calendar.halosync.io
online.perform.training
meet.kaizenbarcelona.com
schulung.your-extensions.academy
academy.tooledupraccoons.com
bookings.waps.solutions
campus.immovisory.de
schulung.your-extensions.academy
bookings.waps.solutions
academy.tooledupraccoons.com
apply.leadingedgeaviation.com
learn.hypergrowth.buzz
booking.upfront.ie
academy.tooledupraccoons.com
training.lets-grow.co.uk
callback.topinsure.ie
callback.topinsure.ie
webinar.kerstingernig.de
mein.kleeberg.me
schulung.vimopro.de
termin.eds-b2b.de
bookings.waps.solutions
education.aluna.info
booking.ilogixx.de
bookings.amazix.com
www.vle.myfuturecourses.com
calendar.halosync.io
training.lets-grow.co.uk
imworkingonit.thirtynin.com
termin.eds-b2b.de
www.wefeelgood.training
cyou.digimlabs.net
booknow.amplifysales.co.uk
meeting.spectral.se
booking.tanktestingservices.com
bookings.waps.solutions
callback.topinsure.ie
termin.s-s-b.de
online.perform.training
termin.eds-b2b.de
www.wefeelgood.training
training.lets-grow.co.uk
webinars.abraxio.com
apply.leadingedgeaviation.com
www.vle.myfuturecourses.com
learn.hypergrowth.buzz
www.wefeelgood.training
webinar.kerstingernig.de
booking.thehospicecharitypartnership.co.uk
go.leandirekt.de
bookings.charac.co.uk
booknow.michaelbanks.photo
bookings.waps.solutions
installations.woosage.com
campus.immovisory.de
booking.meditop.dk
online.perform.training
kerstingernig.de
bookings.charac.co.uk
campus.immovisory.de
apply.leadingedgeaviation.com
bookings.waps.solutions
bookings.neopartement.com
citas.yacrea.com
go.leandirekt.de
webinars.abraxio.com
kerstingernig.de
learn.hypergrowth.buzz
agenda.konomu.io
webinars.abraxio.com
bookings.waps.solutions
mein.kleeberg.me
academy.tooledupraccoons.com
academy.businesslabcy.com
bookings.utopiaparties.com
education.aluna.info
bookings.hakoh.com
imworkingonit.thirtynin.com
citas.yacrea.com
confirmation-rdv.degentravel.com
go.leandirekt.de
termine.haering-consulting.de
bookings.hakoh.com
www.vle.myfuturecourses.com
booknow.michaelbanks.photo
confirmation-rdv.degentravel.com
rdv.qbisme.com
training.lets-grow.co.uk
bookings.merits.ie
booking.upfront.ie
citas.yacrea.com
bookings.waps.solutions
cyou.digimlabs.net
booknow.adeptcloud.co.uk
cyou.digimlabs.net
bookings.routescoaching.com
booking.thehospicecharitypartnership.co.uk
installations.woosage.com
schulung.your-extensions.academy
calendar.halosync.io
online.perform.training
meet.kaizenbarcelona.com
schulung.your-extensions.academy
academy.tooledupraccoons.com
bookings.waps.solutions
campus.immovisory.de
schulung.your-extensions.academy
bookings.waps.solutions
academy.tooledupraccoons.com
apply.leadingedgeaviation.com
learn.hypergrowth.buzz
booking.upfront.ie
academy.tooledupraccoons.com
training.lets-grow.co.uk
callback.topinsure.ie
callback.topinsure.ie
webinar.kerstingernig.de
mein.kleeberg.me
schulung.vimopro.de
termin.eds-b2b.de
bookings.waps.solutions
education.aluna.info
booking.ilogixx.de
bookings.amazix.com
www.vle.myfuturecourses.com
calendar.halosync.io
training.lets-grow.co.uk
imworkingonit.thirtynin.com
termin.eds-b2b.de
www.wefeelgood.training
cyou.digimlabs.net
Certificate
The complete raw certificate details for kerstingernig.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISBHIZnzaJ2MLTCq5l1lJkMvzCMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MTYwMzIzMjdaFw0yNDA4MTQwMzIzMjZaMBsxGTAXBgNVBAMT EGtlcnN0aW5nZXJuaWcuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKFvE1vn1SYT0O/mfzOieavWToWpt1Sfftb9iSCXWW/oQZriq2qZW0fK4Rx/qX heW1NuWKLvQYtygllOuC46+ZpyI9quG5o9qnnostH/PBIeB+3AfKmFvx11xvcJ0M X1ysWJYrMpcy+Jwo+jAXcIcGi6RtO8IfHOQ8S5oxN+3yTwgxeAknstYmA/sBM4aV zqw5VdHns++SOHSMWmF0uqQY1etPFEwdLoDKu67WLI5aaBYI2zo5hh4Y56c1s5n/ i8P8XaVPZh5rfI0FbQjpnuEVyPR2T1eXFj8Qz04VzGPeTw9dPasHlvrOytt9JV6W q/PQpEDMcSEhh1sYvSwSP3PzAgMBAAGjggIoMIICJDAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFN2eWVY/RSyr6QLbNJlELL6cF3LxMB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMDEGA1UdEQQqMCiCEGtlcnN0aW5nZXJuaWcuZGWCFHd3dy5rZXJzdGluZ2Vy bmlnLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHcAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGPf6QLDwAA BAMASDBGAiEA4CV6AMThKp84P0d1OjFuwdCYU5ySnIC2VgE1fK6RwM8CIQCij2UV RxKh8Etbpy1310ICOD6twIa7GltLicmP3zhAdAB1AHb/iD8KtvuVUcJhzPWHujS0 pM27KdxoQgqf5mdMWjp0AAABj3+kCxsAAAQDAEYwRAIgYbaP81D+EZqp/BjDAV5v Lp96qfTsmTVoNwNDT0QBlbcCIGYM+LZ78PnGRsvR+ncN4iMHD9xZ7Wq3fz0vOSJ9 dESTMA0GCSqGSIb3DQEBCwUAA4IBAQBGRO24klyp4+/a9poBOYthrZMATswet/8h QneSBv2LIY0dToNDVY2dcswvi3mGXLxhZAwGOqA3mJIim6mJ44G/R4UZZeW3C2WM Lan0TDPzUeH1Je6uDib2+DDe05N9ycalbVvji3x2tm/GZ/TnHaKSuh3uwgfBA9QF kkP3AGBgAj6exc+pcA6kXNzjQ+yBCq1AxENFBV/W3ZN3GuXFJNH87xqU3xt34RVp sQLtnN4ecnYhkC7OzYza6IOReyATCcf+KGJCiZhghYlnLzBo2yEDz0t0yvInLivP J6TfNrLSQTB6e0qDOfouXzOJWqVuPEkI3xwh/7hgS3gI8j/CjZ5x -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhbxNb59UmE9Dv5n8zon mr1k6FqbdUn37W/Ykgl1lv6EGa4qtqmVtHyuEcf6l4XltTblii70GLcoJZTrguOv maciParhuaPap56LLR/zwSHgftwHyphb8ddcb3CdDF9crFiWKzKXMvicKPowF3CH BoukbTvCHxzkPEuaMTft8k8IMXgJJ7LWJgP7ATOGlc6sOVXR57Pvkjh0jFphdLqk GNXrTxRMHS6Ayruu1iyOWmgWCNs6OYYeGOenNbOZ/4vD/F2lT2Yea3yNBW0I6Z7h Fcj0dk9XlxY/EM9OFcxj3k8PXT2rB5b6zsrbfSVelqvz0KRAzHEhIYdbGL0sEj9z 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 387275390937294562507727029711363955162306 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 03:23:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 03:23:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kerstingernig.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25511450836592160241078656979462316762167041779524431770623570373474112104625676853411251569605697508856022721381456418569790218096314559342412173057776946876340047697020567766997641500108659327430932031858733933100004066442806571018309613370558907396029188854028452268414788851054120495235026592001316699897507559859442140686854222988586044051805184648525813878039860503181382748434149209330715736064003264061126242579001721519566643807138429656986014902477008221548245618888714474217569012950361661656102097727498831782921183693115520674735073477630005497703581488971229802835357610244541566412675170911412499215347 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dd9e59563f452cabe902db3499442cbe9c1772f1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerstingernig.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerstingernig.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f7fa40b0f0000040300483046022100e0257a00c4e12a9f383f47753a316ec1d098539c929c80b65601357cae91c0cf022100a28f65154712a1f04b5ba72d77d74202383eadc086bb1a5b4b89c98fdf38407400750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f7fa40b1b0000040300463044022061b68ff350fe119aa9fc18c3015e6f2e9f7aa9f4ec9935683703434f440195b70220660cf8b67bf0f9c646cbd1fa770de223070fdc59ed6ab77f3d2f39227d744493 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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