hommage-leipzig.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:68:82:b7:bd:eb:8f:dc:04:dc:a9:6b:41:8e:3f:5d:1f:25 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=hommage-leipzig.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:68:82:b7:bd:eb:8f:dc:04:dc:a9:6b:41:8e:3f:5d:1f:25Serial Number (int): 384012263568634293347682627756447439331109
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 36:c3:1d:2c:30:23:e2:b8:f3:fd:8e:1f:3c:a6:85:a6:96:86:9b:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ab:00:36:e9:94:46:4d:24:18:ca:0d:c4:15:9a:eb:9f:c8:48:c4:8d
Fingerprint (sha256): 26:97:ac:57:3b:b6:93:a1:b9:b3:01:62:f8:2d:a7:9a:55:25:f4:e7:e3:c4:21:10:fe:c8:c8:64:9d:31:dd:23
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate hommage-leipzig.de
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hommage-leipzig.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hommage-leipzig.de
hommage.isp-vhost04.domservice.de
www.hommage-leipzig.de
hommage.isp-vhost04.domservice.de
www.hommage-leipzig.de
Other certificates including the domain name hommage-leipzig.de
(limited to 100 certificates)
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
Certificate
The complete raw certificate details for hommage-leipzig.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGljCCBX6gAwIBAgISBGiCt73rj9wE3KlrQY4/XR8lMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDcwMTEyMTNaFw0y MDA2MDUwMTEyMTNaMB0xGzAZBgNVBAMTEmhvbW1hZ2UtbGVpcHppZy5kZTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALGs+XCO/fOLgolNJ1cm3XEJw45h mt5wG/Sd0P7O2bXDsl0zmMhyvYsMFYcqX2fmebrpXfwLFKzycToYblZig5fy2g9m SKnHewElV/pBlC8quXXEnRw4zGbVaBwjTUbfjtNJxpUk/gzmkpOvFAMBn/Mtv1Jz h6pBNWQHCCsh6Y9U6HwW+8V++18njNm6HYQ0etRGyO1N8QgcnWtGqrgPBVoYPDz+ 349NBh6Wk/DgsbiWlhb1coc+B7Wvvu7Ppfuxq29BpGdutN9vL8pFchX+zE83IekH mDF/5TdGzHr0kLyEZbByedAQK7LjPRpw6E42aMZ232zXUey7Z0cyIHW0FH2KCTx/ 11A6jxJU+n7/e3Nio5ifdROt92DYyxfiFAIfuqzd4ItQUBHHL8XqVlJ1JFzk7HhU QnE5CBIJLR8yBl/vVsrbaX/1SCWwx1Sc2SI3KoUa9L1l0/IoEUkENZUAmz+dWjD5 1MKmZC+/adj5IXS5NxAsielt8Lm+VFAAJNhjomG/4vsG7mHvVlnANM1ZGXcja4dA rW2NzrjWGlRJF3yXnUEW7qNU8dMj2GzEJJfYLa6htK8t5nCQwCtR9hUFpKxtHm/c d1csYRz0VZcTvaw+IQoZdhcw4q4ULz4ITZG9joT5fjDTC+shC94UEkcXS28WW0Ss xKKf0GFgsofW5RZ9AgMBAAGjggKhMIICnTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FDbDHSwwI+K48/2OHzymhaaWhpuTMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wWAYDVR0RBFEwT4ISaG9tbWFnZS1sZWlw emlnLmRlgiFob21tYWdlLmlzcC12aG9zdDA0LmRvbXNlcnZpY2UuZGWCFnd3dy5o b21tYWdlLWxlaXB6aWcuZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBvU3asMfAxGdiZAKRRFf93FRwR2QLB ACkGjbIImjfZEwAAAXCyw7AxAAAEAwBHMEUCIQCDRnk7KiXGDOwDqhfDlsDRsizg 81yL0LxEineMhTHkhQIgLCuAvI9DjzW6o0YGnGEXDb7/sW8Tcd4aAbt/H6/GfNIA dQAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAXCyw7AvAAAEAwBG MEQCIFTMgmyFnAZSuEK2mFXoRBcDVVm+dw5uBtUAgHsCEViCAiBM4yXWqvSgauH8 5Q4jwTrUtInACxN/Igq+SSwPcT8gITANBgkqhkiG9w0BAQsFAAOCAQEAIedy27GW jqKebyHn/qqEOJ3GyUXKelgxvB/QFiL1KKnwV+yb3WqlPyc5qahOMM9JMShDEbvf N5QRFYNBmODuvKeK7xt2BwS4LLKMI8/pw8JlK7SSqfYQE0Pl49h1EKSW51qG4xOM TPNbFCz/B9FAlCxCFSVacAy/wXNJnJeR6kUkNl0a0InZsDt1YhYgDxtizEW3bLzY BeTVNzbIfqJUIo4QMBk7Z4A1MtAjA0iHeFnV+ziJuz81SHGUpxwOqcS7O2vjkl/D 5nldVJps1rgQKlzproAoawQn5jwt1npSLw5b8mkmxr0AbJdryRPsMKpL959AhqGF L97obP9QKiworw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsaz5cI7984uCiU0nVybd cQnDjmGa3nAb9J3Q/s7ZtcOyXTOYyHK9iwwVhypfZ+Z5uuld/AsUrPJxOhhuVmKD l/LaD2ZIqcd7ASVX+kGULyq5dcSdHDjMZtVoHCNNRt+O00nGlST+DOaSk68UAwGf 8y2/UnOHqkE1ZAcIKyHpj1TofBb7xX77XyeM2bodhDR61EbI7U3xCByda0aquA8F Whg8PP7fj00GHpaT8OCxuJaWFvVyhz4Hta++7s+l+7Grb0GkZ260328vykVyFf7M Tzch6QeYMX/lN0bMevSQvIRlsHJ50BArsuM9GnDoTjZoxnbfbNdR7LtnRzIgdbQU fYoJPH/XUDqPElT6fv97c2KjmJ91E633YNjLF+IUAh+6rN3gi1BQEccvxepWUnUk XOTseFRCcTkIEgktHzIGX+9Wyttpf/VIJbDHVJzZIjcqhRr0vWXT8igRSQQ1lQCb P51aMPnUwqZkL79p2PkhdLk3ECyJ6W3wub5UUAAk2GOiYb/i+wbuYe9WWcA0zVkZ dyNrh0CtbY3OuNYaVEkXfJedQRbuo1Tx0yPYbMQkl9gtrqG0ry3mcJDAK1H2FQWk rG0eb9x3VyxhHPRVlxO9rD4hChl2FzDirhQvPghNkb2OhPl+MNML6yEL3hQSRxdL bxZbRKzEop/QYWCyh9blFn0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 384012263568634293347682627756447439331109 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 01:12:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-05 01:12:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hommage-leipzig.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724853538624791846730216858110786266705077893231254982704268426646855411590682197168281092462793422723111410554459010449954461928832063659382480870394618183396265195043300636545836813066969492444221442550208739795341880996578988761888917611464094235358297404371121623502904354210055586468364639425849669908434082270168216648017382799476789236236729527338106549939349813376333315386738119897867861828817868529879583101915036906547671423860793972241105825390122402219362078464541933987085950450869388454041937231853356043988764416576522094844986990104786542597852475791946649996278292031063094831506144546047337771494175675650604211662878199632160773962499940997897056473983652536208615871167643072889754364028487561257205311003852035391694868667878348021362429347554712107797644440854111644105338849622999071843171925116863589525416233988951236008452301801279389723771077084725681198331634759953820703975190037790864077753343861902264879637396733445343507591566228682834467901648928056440314667818986133085273805138427679349762899335280957384688259313321023430689534623520984960292418792408445720716993802929059967379352065517381433465502348530054211081396542166584158723348448073259643320357455381772949694074900785987339847331026557 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 36c31d2c3023e2b8f3fd8e1f3ca685a696869b93 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hommage-leipzig.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hommage.isp-vhost04.domservice.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hommage-leipzig.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170b2c3b03100000403004730450221008346793b2a25c60cec03aa17c396c0d1b22ce0f35c8bd0bc448a778c8531e48502202c2b80bc8f438f35baa346069c61170dbeffb16f1371de1a01bb7f1fafc67cd200750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170b2c3b02f0000040300463044022054cc826c859c0652b842b69855e84417035559be770e6e06d500807b0211588202204ce325d6aaf4a06ae1fce50e23c13ad4b489c00b137f220abe492c0f713f2021 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0021e772dbb1968ea29e6f21e7feaa84389dc6c945ca7a5831bc1fd01622f528a9f057ec9bdd6aa53f2739a9a84e30cf4931284311bbdf37941115834198e0eebca78aef1b760704b82cb28c23cfe9c3c2652bb492a9f6101343e5e3d87510a496e75a86e3138c4cf35b142cff07d140942c4215255a700cbfc173499c9791ea4524365d1ad089d9b03b756216200f1b62cc45b76cbcd805e4d53736c87ea254228e1030193b67803532d0230348877859d5fb3889bb3f35487194a71c0ea9c4bb3b6be3925fc3e6795d549a6cd6b8102a5ce9ae80286b0427e63c2dd67a522f0e5bf26926c6bd006c976bc913ec30aa4bf79f4086a1852fdee86cff502a2c28af