elder.org
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 5d:be:9e:3a:aa:3b:db:fd:0d:79:bd:97:64:05:99:25 was issued on by Google Trust Services LLC.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=elder.org
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 5d:be:9e:3a:aa:3b:db:fd:0d:79:bd:97:64:05:99:25Serial Number (int): 124607949279754413379976354557805828389
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 57:2b:b8:6c:fe:25:17:f7:7f:34:52:b1:32:66:62:43:d6:9c:b1:93
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): e7:72:9e:08:6b:ff:05:01:a1:c4:4b:f2:2c:6d:34:d6:3f:05:07:26
Fingerprint (sha256): 2a:da:42:b7:29:e6:1f:47:35:72:4b:99:d4:e8:25:0a:55:d8:5a:f0:54:8b:1a:74:0a:e7:26:cc:89:1f:da:6f
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/4GlGnHEmJcwCRL Distribution Point: http://crls.pki.goog/gts1p5/dfiVkccM-Qk.crl
Check the revocation status for certificate elder.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for elder.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
elder.org
Other certificates including the domain name elder.org
(limited to 100 certificates)
www.ndaok.com
www.alextomkins.ca
wecare.elder.org
carers.elder.org
literarymap.app
truvalyou.com
metabase.elder.org
talya-soft.com
api-beta.elder.org
www.d4-d5.net
et3.elder.org
www.standuppie.com
partners.azfalte.com
fighter-power.com
www.atlassianuseracademy.com
auth-dev.elder.org
www.alex-mendez.com
web-staging.elder.org
spilaktier.dk
www.thunderiot.io
petstar.link
aimbridge.jp
manufacturing-lean.net
auth-live.elder.org
activesf.com
wimball.com
metabase.elder.org
wewalk.app
www.ventful.co
baldyga-staging.inseat.menu
www.elder.org
thrivnerplanner.com
dashboard.earlybeep.com
dierenverzorgingmilan.nl
vidyutcloud.com
www.room22.studio
combined.ai
communitytest.elder.org
my.elder.org
et3-staging.elder.org
et3.elder.org
www.projex.cf
heathrobotics.com
www.takeup.dev
pairup.app
web-staging.elder.org
metabase.elder.org
www.himanshuraj.com
ksmutny.com
www.icatlas.app
web-dev.elder.org
auth-staging.elder.org
mobifrota.pt
admin.calchez.com
www.icatlas.app
elder.org
debug-link.nusic.fm
www.bepfelgor.com
www.attine.com
www.bajoneando.com
webreports.popupbusinessschool.co.uk
www.anvayapersonalisedgifts.in
metabase.elder.org
app.steara.com
randomgod.masteromok.com
carers-beta.elder.org
audiogalaxy.app
vervalcomunica.com
app.ubcbiztech.com
elder.org
my.elder.org
www.deckthecard.com
pairup.app
operations.amorevino.com
alertmanager.elder.org
elismith.dev
www.buildcareapp.com
heresy.in
www.alex-mendez.com
gamemind.tw
chef.behired.co.uk
carers.elder.org
outandback.uk
pros.elder.org
metabase.elder.org
www.a2ktechnologies.com
www.vanlifecroppickers.org.uk
www.gumuscay.bel.tr
dev-links.resident.love
bi.archermalmo.com
minha.plenisaude.com.br
fblog.ge
my-staging.elder.org
link.mapmarket.app
pros.elder.org
logistics.azfalte.com
www-firebase.float.com
web-staging.elder.org
elder.org
auth.elder.org
www.alextomkins.ca
wecare.elder.org
carers.elder.org
literarymap.app
truvalyou.com
metabase.elder.org
talya-soft.com
api-beta.elder.org
www.d4-d5.net
et3.elder.org
www.standuppie.com
partners.azfalte.com
fighter-power.com
www.atlassianuseracademy.com
auth-dev.elder.org
www.alex-mendez.com
web-staging.elder.org
spilaktier.dk
www.thunderiot.io
petstar.link
aimbridge.jp
manufacturing-lean.net
auth-live.elder.org
activesf.com
wimball.com
metabase.elder.org
wewalk.app
www.ventful.co
baldyga-staging.inseat.menu
www.elder.org
thrivnerplanner.com
dashboard.earlybeep.com
dierenverzorgingmilan.nl
vidyutcloud.com
www.room22.studio
combined.ai
communitytest.elder.org
my.elder.org
et3-staging.elder.org
et3.elder.org
www.projex.cf
heathrobotics.com
www.takeup.dev
pairup.app
web-staging.elder.org
metabase.elder.org
www.himanshuraj.com
ksmutny.com
www.icatlas.app
web-dev.elder.org
auth-staging.elder.org
mobifrota.pt
admin.calchez.com
www.icatlas.app
elder.org
debug-link.nusic.fm
www.bepfelgor.com
www.attine.com
www.bajoneando.com
webreports.popupbusinessschool.co.uk
www.anvayapersonalisedgifts.in
metabase.elder.org
app.steara.com
randomgod.masteromok.com
carers-beta.elder.org
audiogalaxy.app
vervalcomunica.com
app.ubcbiztech.com
elder.org
my.elder.org
www.deckthecard.com
pairup.app
operations.amorevino.com
alertmanager.elder.org
elismith.dev
www.buildcareapp.com
heresy.in
www.alex-mendez.com
gamemind.tw
chef.behired.co.uk
carers.elder.org
outandback.uk
pros.elder.org
metabase.elder.org
www.a2ktechnologies.com
www.vanlifecroppickers.org.uk
www.gumuscay.bel.tr
dev-links.resident.love
bi.archermalmo.com
minha.plenisaude.com.br
fblog.ge
my-staging.elder.org
link.mapmarket.app
pros.elder.org
logistics.azfalte.com
www-firebase.float.com
web-staging.elder.org
elder.org
auth.elder.org
Certificate
The complete raw certificate details for elder.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIQXb6eOqo72/0Neb2XZAWZJTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yNDA0MjQxMzE5MDlaFw0yNDA3MjMx MzE5MDhaMBQxEjAQBgNVBAMTCWVsZGVyLm9yZzCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALU7xXQbPKI8UvymNBnXnvv46uy2ZMqxGWXhCTWubdnQbzBv v5ajKmnQw375dnyhkQ00sNzNQP3BeSEC+jhmm18TK6jcc4vWIQK4fg4k5JyWDCVI ry9EMm09+iLX1Pi0olfzc8lh/pFWv17u9sbW+WDcaKIjCZHg7jfdSYk/RcW/13LN 6MRkUupn8RmE/fSHz/evrCPyXcbwPeV1T2ReT0B68SWRI3YT4t0IxH+KG0lBp9SM vOi10z7oAYdbHvKosVBz/ny4P8w0PsBSvfTbRsWqk57pYgYOLQQ2yp8eRb45E16H UnNklSocMAl8iI8Eo3EOO1+TSN2EN8zAYfPHd98CAwEAAaOCAm8wggJrMA4GA1Ud DwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBRXK7hs/iUX9380UrEyZmJD1pyxkzAfBgNVHSMEGDAWgBTV/J4N3x7K 3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUHMAGGKWh0dHA6 Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1LzRHbEduSEVtSmN3MDEGCCsGAQUFBzAC hiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUuZGVyMBQGA1UdEQQN MAuCCWVsZGVyLm9yZzAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEEAdZ5AgUD MDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5nb29nL2d0czFwNS9k ZmlWa2NjTS1Ray5jcmwwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgDuzdBk1dsa zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY8QeYKSAAAEAwBHMEUCIDdWdft9 wYTF4Zz4WWr0/vEyAuRxebYfdLO2h8DSHCzAAiEA/t3vYMP02e4qqeuefCH/7rU3 XuXDXBLlMcjiQCxPENcAdQAZmBBxCfDWUi4wgNKeP2S7g24ozPkPUo7u385KPxa0 ygAAAY8QeYK4AAAEAwBGMEQCIFAElflgBA1iBk/oWoJSfceXS5ng7oyYoJVSaiTC ZiQXAiApYSau27o6xkLR54PrG33VBvtMlz0kbA/qUMFjdF/REDANBgkqhkiG9w0B AQsFAAOCAQEAcLyA6mL5svwxrzOXHbxSUsXxlNoAnnyxsnh63HRWCFjchRZqi5DA 3sinXjV9r+Lyu5rHnCnPTSuN4dovQH0ohKYZU6bNrWiXVRXe8T5sP9Mz81ZT9C8M 3SBNE1NKOSIn5alwL7fyz2EXThgERZxBgbqDGrjkK3v4IXZJLGoVuYwkfM/LPNGo A6klIvsA+6IG2lnDAJ3STYlr701fShqNoHJlh8o254oHsvvVswdZicOTTUKpxlrB P9fh2N6Tz0mXz3sTiQnOe6V/fn7/alQR+A2RkDDwmH2OaN5abCrd1H3z0CYc7nOP gTU/iZBfRkYpoIQVQ8idPAbNffU72gnF4w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTvFdBs8ojxS/KY0Gdee +/jq7LZkyrEZZeEJNa5t2dBvMG+/lqMqadDDfvl2fKGRDTSw3M1A/cF5IQL6OGab XxMrqNxzi9YhArh+DiTknJYMJUivL0QybT36ItfU+LSiV/NzyWH+kVa/Xu72xtb5 YNxooiMJkeDuN91JiT9Fxb/Xcs3oxGRS6mfxGYT99IfP96+sI/JdxvA95XVPZF5P QHrxJZEjdhPi3QjEf4obSUGn1Iy86LXTPugBh1se8qixUHP+fLg/zDQ+wFK99NtG xaqTnuliBg4tBDbKnx5FvjkTXodSc2SVKhwwCXyIjwSjcQ47X5NI3YQ3zMBh88d3 3wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 124607949279754413379976354557805828389 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 13:19:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 13:19:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elder.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22878607526836383756026415855406532599394844798932531026680259800538354243807704605142012096998352271062737287043130462290616797921215898312381901007279665736698309652205363133814544137436895594625633119700636868476732687503996131527538467076249914305638857483644789642363562323580123927248284941344867709610671139989793164715885818357804363824702654912552428335956767214869111130453936938612482349962605605946878828724631456502195289652165909352568380009245007130261940240126714884497964129799344625349112856707573066733163976560058492315182883900317392588913929022776728187440026362076954071968956494251486966413279 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 572bb86cfe2517f77f3452b132666243d69cb193 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/4GlGnHEmJcw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elder.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/dfiVkccM-Qk.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f1079829200000403004730450220375675fb7dc184c5e19cf8596af4fef13202e47179b61f74b3b687c0d21c2cc0022100feddef60c3f4d9ee2aa9eb9e7c21ffeeb5375ee5c35c12e531c8e2402c4f10d70075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f107982b800000403004630440220500495f960040d62064fe85a82527dc7974b99e0ee8c98a095526a24c26624170220296126aedbba3ac642d1e783eb1b7dd506fb4c973d246c0fea50c163745fd110 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0070bc80ea62f9b2fc31af33971dbc5252c5f194da009e7cb1b2787adc74560858dc85166a8b90c0dec8a75e357dafe2f2bb9ac79c29cf4d2b8de1da2f407d2884a61953a6cdad68975515def13e6c3fd333f35653f42f0cdd204d13534a392227e5a9702fb7f2cf61174e1804459c4181ba831ab8e42b7bf82176492c6a15b98c247ccfcb3cd1a803a92522fb00fba206da59c3009dd24d896bef4d5f4a1a8da0726587ca36e78a07b2fbd5b3075989c3934d42a9c65ac13fd7e1d8de93cf4997cf7b138909ce7ba57f7e7eff6a5411f80d919030f0987d8e68de5a6c2addd47df3d0261cee738f81353f89905f464629a0841543c89d3c06cd7df53bda09c5e3