blog.ggtk.app
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f8:c7:05:b2:95:15:5d:08:08:a1:7f:ff:1a:e6:0c:d4:79 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=blog.ggtk.app
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f8:c7:05:b2:95:15:5d:08:08:a1:7f:ff:1a:e6:0c:d4:79Serial Number (int): 345991430746399487129502938695159163704441
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c9:5f:f4:25:a8:8b:28:3f:de:7e:af:17:7b:a9:13:a1:17:3e:01:0a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0a:c2:ab:dd:c1:f9:5b:4b:58:f3:7b:80:35:54:c6:c4:45:10:e2:42
Fingerprint (sha256): 28:b5:8a:34:f3:d6:64:21:d0:b4:c3:0a:30:29:0e:df:7f:4c:e2:f1:fa:78:6e:55:0e:0e:b4:29:53:95:5a:e8
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate blog.ggtk.app
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blog.ggtk.app
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blog.ggtk.app
Other certificates including the domain name ggtk.app
(limited to 100 certificates)
blog.ggtk.app
webpago.com.br
vinnie.app
zimdfa.org
bowden.utmaker.space
rpgscript.ggtk.app
pitcraft.io
v9.allaccessadvance.com
samoocenka.club
vtitielt.v2.noteble.be
demo.textile.teamin.in
getsoaptotheborder.com
test.shopxpress.org
qld.hemisphere.digital
aimbridge.jp
soc-author.co.uk
rooms.oaks-lab.com
files.ggtk.app
www.yogisarbat.com
blog.ggtk.app
removalsbyalaski.com.au
ahmedkamhawy.com
www.animeboxclub.com
store.51meters.com
arstudios.org
www.victorbruce.tech
sites.ggtk.app
thiruvarur.droptaxitime2time.com
www.squeeeezed.com
www.ggtk.app
bettercallsol.dev
www.remindex.xyz
blog.ggtk.app
bringhome.me
bowden.utmaker.space
ecomm.fahmpartners.com
theitgrad.co.za
blog.ggtk.app
factionwars.io
cms-test-it.stokkur.is
chois.co
www.radicalxchange.org
merchantsbox.co
admin-dev.sterndeck.com
gallery.x10designstudio.com
ridesharenavigator.com
studio.kasoft.vn
gettheoutfit.honk.international
blog.ggtk.app
www.breakevencapital.us
www.coachescrew.com
sts.ggtk.app
blog.ggtk.app
kintos.mx
theuncolonized.com
tillhub.ch
app.nearby.mx
divide2d.99dojos.com
karamanli.zeplinx.com
blog.ggtk.app
www.muchon.co.kr
ludwi.ga
joinwobl.com
dev.lull.no
www.steps-edu.com
dev.console.journeymeditation.com
simplefractal.com
learn.ggtk.app
python2.jacobtaylor.id.au
blog.ggtk.app
eject.io
projectliferpg.com
www.bigmoviezoo.app
rpgscript.ggtk.app
link.pinart.io
kawabatalemon.app
make.firialabs.com
www.welsche.ch
haxor.com
agolighting.com
jstlu.co
sompo-de-noru.jp
staging.mboyz.de
campusgfa.lernit.app
learn.ggtk.app
sji.asteriainteractive.com
blog.ggtk.app
demo.textile.teamin.in
univ-toho.ggtk.app
www.waiandshan.com
ggtk.app
app.kit.fit
lax-cms-qa.itxi.aero
www.animeboxclub.com
bengoldberg.info
internalportal.tennislockerapp.com
www.gnaane.in
xn--pn8hveka.ml
nextmobile.app
dgmads.com
webpago.com.br
vinnie.app
zimdfa.org
bowden.utmaker.space
rpgscript.ggtk.app
pitcraft.io
v9.allaccessadvance.com
samoocenka.club
vtitielt.v2.noteble.be
demo.textile.teamin.in
getsoaptotheborder.com
test.shopxpress.org
qld.hemisphere.digital
aimbridge.jp
soc-author.co.uk
rooms.oaks-lab.com
files.ggtk.app
www.yogisarbat.com
blog.ggtk.app
removalsbyalaski.com.au
ahmedkamhawy.com
www.animeboxclub.com
store.51meters.com
arstudios.org
www.victorbruce.tech
sites.ggtk.app
thiruvarur.droptaxitime2time.com
www.squeeeezed.com
www.ggtk.app
bettercallsol.dev
www.remindex.xyz
blog.ggtk.app
bringhome.me
bowden.utmaker.space
ecomm.fahmpartners.com
theitgrad.co.za
blog.ggtk.app
factionwars.io
cms-test-it.stokkur.is
chois.co
www.radicalxchange.org
merchantsbox.co
admin-dev.sterndeck.com
gallery.x10designstudio.com
ridesharenavigator.com
studio.kasoft.vn
gettheoutfit.honk.international
blog.ggtk.app
www.breakevencapital.us
www.coachescrew.com
sts.ggtk.app
blog.ggtk.app
kintos.mx
theuncolonized.com
tillhub.ch
app.nearby.mx
divide2d.99dojos.com
karamanli.zeplinx.com
blog.ggtk.app
www.muchon.co.kr
ludwi.ga
joinwobl.com
dev.lull.no
www.steps-edu.com
dev.console.journeymeditation.com
simplefractal.com
learn.ggtk.app
python2.jacobtaylor.id.au
blog.ggtk.app
eject.io
projectliferpg.com
www.bigmoviezoo.app
rpgscript.ggtk.app
link.pinart.io
kawabatalemon.app
make.firialabs.com
www.welsche.ch
haxor.com
agolighting.com
jstlu.co
sompo-de-noru.jp
staging.mboyz.de
campusgfa.lernit.app
learn.ggtk.app
sji.asteriainteractive.com
blog.ggtk.app
demo.textile.teamin.in
univ-toho.ggtk.app
www.waiandshan.com
ggtk.app
app.kit.fit
lax-cms-qa.itxi.aero
www.animeboxclub.com
bengoldberg.info
internalportal.tennislockerapp.com
www.gnaane.in
xn--pn8hveka.ml
nextmobile.app
dgmads.com
Certificate
The complete raw certificate details for blog.ggtk.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgISA/jHBbKVFV0ICKF//xrmDNR5MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMDcwNzAwNTJaFw0x OTA0MDcwNzAwNTJaMBgxFjAUBgNVBAMTDWJsb2cuZ2d0ay5hcHAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsaAj9qZj8QVeasDurWcvtzr2Kgf2zTN1C oSBy7GSWfqWGmMuGDtVZ4xO5UzBHHzrwfTCm8SK1aETzcn0ViV7F2UYO4KjPPNoZ /iIQyTK87RbRVl5wMm5KACsmJVs6gVCE1C2H10MjdmhwrKKIT85cQp8qiRBlxo9A hOIZHoQDyKoKIktYZNaTNZ3KYIGafV+JB6D5GiIQJqXZujgt2MVu7IjYNAdFlf3j LkFL4wtjFPfZRojPH3Q6yKfH1VQd+zakb7k/yu+wuY8/zLS2t7WzqGXZrGQ4fJ4N nw0xIpdJi5MctDQfpITTVfJZvj9+uGdngy9+Zw/qumoJx6tGaQoZAgMBAAGjggJi MIICXjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMlf9CWoiyg/3n6vF3upE6EXPgEK MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wGAYDVR0RBBEwD4INYmxvZy5nZ3RrLmFwcDBMBgNVHSAERTBDMAgGBmeBDAEC ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl bmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AOJpS64m6OlACeiG G7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABaCdUKFIAAAQDAEcwRQIhANcqDZUhQ63A jBAoTkwO/PK++zLzBWsfzo/voPGnMkN1AiAYhLjVcegr+Gke1nlqMHDlwPMANhwn /pteIBxBY2FTywB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAAB aCdUKKcAAAQDAEcwRQIhAI6WBURrJ20wFfEJJRHTuXcwCMOmJb8VGPtAtVQJaqXq AiAc1yMaNNHooxNGNPqAIEBU9s/0UrWBKlglKHg/jFjaNzANBgkqhkiG9w0BAQsF AAOCAQEAgp8hIyp46IR1aPBmd/XXMMtC5UjPgD7f6a9zg42ZxnnqFUVeFEt3EBkr pNVZlHVl1nPTO4igzz6wJnPweSOisFB13W64AEb5YEn9oOFjlKYI/uk2UR83uluO mN7pdTiIEYiauA7jzTDJS0jrIHlaJSLW5o40VbTsMmnAc3W7gWqN05imo4+6ifI1 rzU6+OmWDc8oVOoXiVKItEx3RuTB44yHx6SvwY19UDWX5g/X0xD1Fa/c310oi7Tm wPRhyd+N94Mcu53MMydbkx8lvVMfwVJQAT78eIsB9qH6KLohyGqCyBVYOPDG/pTU f9lcZdtpxWM9pfjsc7F8L0Z1jto7fw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGgI/amY/EFXmrA7q1nL 7c69ioH9s0zdQqEgcuxkln6lhpjLhg7VWeMTuVMwRx868H0wpvEitWhE83J9FYle xdlGDuCozzzaGf4iEMkyvO0W0VZecDJuSgArJiVbOoFQhNQth9dDI3ZocKyiiE/O XEKfKokQZcaPQITiGR6EA8iqCiJLWGTWkzWdymCBmn1fiQeg+RoiECal2bo4LdjF buyI2DQHRZX94y5BS+MLYxT32UaIzx90Osinx9VUHfs2pG+5P8rvsLmPP8y0tre1 s6hl2axkOHyeDZ8NMSKXSYuTHLQ0H6SE01XyWb4/frhnZ4MvfmcP6rpqCcerRmkK GQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 345991430746399487129502938695159163704441 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 07:00:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-07 07:00:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.ggtk.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21764290084159217493720518233643649532801396477902055365796198261355602239295366278630863502141138417466113419321819236592697516739176378070153732698757256173752056443280131505934567352495112313803057490315664806576092479292680315599259171236736511249069443446447669453581429162796051825472318331679992037866983315583474138983384042797742460327151618509708180227772447797646778338499852646069996853023295164047034642102033271021654445860808340520688638077986738321796329473112792657649950719432624759018559648382003712477728236320403062838822480494422831538028782272160647212290868029311787586698685848630896538225177 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c95ff425a88b283fde7eaf177ba913a1173e010a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.ggtk.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168275428520000040300473045022100d72a0d952143adc08c10284e4c0efcf2befb32f3056b1fce8fefa0f1a732437502201884b8d571e82bf8691ed6796a3070e5c0f300361c27fe9b5e201c41636153cb00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168275428a700000403004730450221008e9605446b276d3015f1092511d3b9773008c3a625bf1518fb40b554096aa5ea02201cd7231a34d1e8a3134634fa80204054f6cff452b5812a582528783f8c58da37 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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