www.bluefieldsmartaccess.nl
Issued by R3
About this certificate
This digital certificate with serial number 03:35:ff:ed:d5:e6:64:2f:f4:63:9b:db:24:42:4b:65:21:07 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.bluefieldsmartaccess.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:35:ff:ed:d5:e6:64:2f:f4:63:9b:db:24:42:4b:65:21:07Serial Number (int): 279712011293777834235846119664660144005383
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f9:33:e7:86:85:01:39:77:90:ee:f9:08:5d:4b:58:35:a2:2b:af:4a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 33:69:08:ef:f8:7f:24:5a:72:12:be:9f:d9:30:9a:b2:63:20:6b:b6
Fingerprint (sha256): 2b:56:32:6c:f5:67:31:f6:6d:a5:47:96:a9:a8:6a:4f:01:76:40:aa:09:72:d7:b5:8a:f2:59:dd:a6:74:2a:c0
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.bluefieldsmartaccess.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.bluefieldsmartaccess.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bluefieldsmartaccess.nl
www.bluefieldsmartaccess.nl
www.bluefieldsmartaccess.nl
Other certificates including the domain name bluefieldsmartaccess.nl
(limited to 100 certificates)
status.servada.com
status.servada.com
bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
bluefieldsmartaccess.nl
www.bluefieldsmartaccess.nl
bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
www.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
bluefieldsmartaccess.nl
status.servada.com
status.servada.com
*.bluefieldsmartaccess.nl
status.servada.com
hoogvliet.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
www.bluefieldsmartaccess.nl
status.servada.com
www.bluefieldsmartaccess.nl
hoogvliet.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
*.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
hoogvliet.bluefieldsmartaccess.nl
status.servada.com
bluefieldsmartaccess.nl
*.bluefieldsmartaccess.nl
hoogvliet.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
hoogvliet.bluefieldsmartaccess.nl
status.servada.com
bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
www.bluefieldsmartaccess.nl
*.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
bluefieldsmartaccess.nl
www.bluefieldsmartaccess.nl
bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
www.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
bluefieldsmartaccess.nl
status.servada.com
status.servada.com
*.bluefieldsmartaccess.nl
status.servada.com
hoogvliet.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
www.bluefieldsmartaccess.nl
status.servada.com
www.bluefieldsmartaccess.nl
hoogvliet.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
*.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
hoogvliet.bluefieldsmartaccess.nl
status.servada.com
bluefieldsmartaccess.nl
*.bluefieldsmartaccess.nl
hoogvliet.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
hoogvliet.bluefieldsmartaccess.nl
status.servada.com
bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
www.bluefieldsmartaccess.nl
*.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
Certificate
The complete raw certificate details for www.bluefieldsmartaccess.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgISAzX/7dXmZC/0Y5vbJEJLZSEHMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTUxNDIyMjdaFw0yNDA3MTQxNDIyMjZaMCYxJDAiBgNVBAMT G3d3dy5ibHVlZmllbGRzbWFydGFjY2Vzcy5ubDCCAiIwDQYJKoZIhvcNAQEBBQAD ggIPADCCAgoCggIBAMO0SMMYT1d/jL4iM9KPkBK+5iSQZRqVfYwCt/avUtmiac98 WfcVO0L/9ALMvyY846ydsQtpdPMI9CuxTH/lHQ/zrk8ZheI/79/v1MYdGtuuiJk4 2mwm6QH0aoABF3X/RRFBeKRm134qI+DelHTSQR8E2E5rsWqrUrcVdQKVQpgbls53 D9yaz/lXfZZS5WGrc2cXGo3u4RHDptSh3MoHhmfa8F3UubpCVEWYNU/8URuyjyDq oGU7xQOkntWCVzXJiPhRbNtzqEB3S+54fWz19TXSvS+bQZ58BEAz3SGLtMCMFrY8 Q5j4MwjVuGmSdJrW6HIt3zCyyjK9sa6CR3W/KEKoOBN0HU00BHIEgIyODf0Hfsiz C1Nl0ot2Fy1CDCdFOzzf+IqRB9DGhbXdgXGqR+ib9CYdjp37qQJS18XpNvOzB6Jj VdOp/3tzlDkRyKBvrzytrXCwjMQX9W98/S3LqqLDdBc7OA2nMudQwBOCEsOMzDym vPF6PfEjsOeL07oILazVXQnD7SD7+IUgR5XeefKLH/bVWTNz72odvbq0KCCXv6SK MWDkM/oiOSqQ9bUFNJGcKukBd8FNETL94OYI5qNV89FflIpWdsVNd3LIpmVrvzR5 IzOz+P8j0SMY2ay+hNqngtWPFqAUoFMz8oLLKogBIs5UkMTJ53hymM9o4Sb5AgMB AAGjggI1MIICMTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPkz54aFATl3kO75CF1L WDWiK69KMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMD8GA1UdEQQ4MDaCF2JsdWVm aWVsZHNtYXJ0YWNjZXNzLm5sght3d3cuYmx1ZWZpZWxkc21hcnRhY2Nlc3Mubmww EwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBI sONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY7iWjnCAAAEAwBHMEUC IQCKbh0Jwb85Pyu2gb1FVAXoBAvTkuGNy1BUQ2QAjPcqfAIgZL5QXz87Q+LHI/6E Q/y3TOQyos4navZ0jZrWRmvwBgAAdQDuzdBk1dsazsVct520zROiModGfLzs3sNR SFlGcR+1mwAAAY7iWjnGAAAEAwBGMEQCIA3FpHXwXX0B1O6RkJ8v1p6Q+Alvayz6 dByebcENhOsyAiAqAEYU0ouVPLbc5FnJaYoG0tZzGmLi9Um68ZrW0WkKKTANBgkq hkiG9w0BAQsFAAOCAQEAiI/j1GxcjqciKNtBVOd9SoIxsMFHykgx3p+DZ1TPsSBl gfSxni9lFZ7mIwlofA678RmW0WZrX6+rlhjxRiorBr1/2I2ebM/8SfhSsL1RjHMc KHMNAJ+KqJYvNILb3Ubj9qX2FPLLd82iInMm9rED4lcE8BEj8k2Ir45J8v9Iw7ab ylo0URTyY/nHmByDUI/wslksrEIuZs0bxHycCTn3CYTeIgyfCxLcQzq/lJfgznxw FIciubh/1yvFIMAoKs4P2yJPkTeAinHMXaD8fCakwL8qgjn1UwA54519wf17pcYt G0FJF4sMfraETFLq/InLs6nkebkut7+anGN7uvHIfg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw7RIwxhPV3+MviIz0o+Q Er7mJJBlGpV9jAK39q9S2aJpz3xZ9xU7Qv/0Asy/JjzjrJ2xC2l08wj0K7FMf+Ud D/OuTxmF4j/v3+/Uxh0a266ImTjabCbpAfRqgAEXdf9FEUF4pGbXfioj4N6UdNJB HwTYTmuxaqtStxV1ApVCmBuWzncP3JrP+Vd9llLlYatzZxcaje7hEcOm1KHcygeG Z9rwXdS5ukJURZg1T/xRG7KPIOqgZTvFA6Se1YJXNcmI+FFs23OoQHdL7nh9bPX1 NdK9L5tBnnwEQDPdIYu0wIwWtjxDmPgzCNW4aZJ0mtboci3fMLLKMr2xroJHdb8o Qqg4E3QdTTQEcgSAjI4N/Qd+yLMLU2XSi3YXLUIMJ0U7PN/4ipEH0MaFtd2BcapH 6Jv0Jh2OnfupAlLXxek287MHomNV06n/e3OUORHIoG+vPK2tcLCMxBf1b3z9Lcuq osN0Fzs4Dacy51DAE4ISw4zMPKa88Xo98SOw54vTuggtrNVdCcPtIPv4hSBHld55 8osf9tVZM3Pvah29urQoIJe/pIoxYOQz+iI5KpD1tQU0kZwq6QF3wU0RMv3g5gjm o1Xz0V+UilZ2xU13csimZWu/NHkjM7P4/yPRIxjZrL6E2qeC1Y8WoBSgUzPygssq iAEizlSQxMnneHKYz2jhJvkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279712011293777834235846119664660144005383 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 14:22:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 14:22:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bluefieldsmartaccess.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798403622470497458727151850324635749726303571963162399324071712039577862998094561719776014731435016123841731990319491519571228081185735525208890871462304014569435328939941552518167227012532290019945875029891466815952339975680389875286810130290307111895295894157635725049655277345079032102510468150300540542581104801243515543034012398613169489627007814715831032206997133398843209982141743979993438762898856131143449911696435943155366427431263191935813695080220935465666639566196399630898823786690568952974953433773072156522356488059675971659927471573755098991562240670008208155902811910798087273017241490063770079347822338432642442739919981037130151218294666673462899951784981561748025230124138873261064964262977801991955615069044318429490626612550918142810546780799930582703758497216112323138586985895487640356919926498493001462007063978335692639175487408245409061140458135863758731712150033432226902670159061624464626073855552982998777031435819080897889173739249320505581401824716977086387480378695246535622154889366406997755363391199937996087888222865534874261988906888067346697319499650752028049635250849409129999382684815699841137005148245690199926879938311421881097961474002841264734884930813617605300438416411487759177810519801 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f933e7868501397790eef9085d4b5835a22baf4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluefieldsmartaccess.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluefieldsmartaccess.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ee25a39c200000403004730450221008a6e1d09c1bf393f2bb681bd455405e8040bd392e18dcb50544364008cf72a7c022064be505f3f3b43e2c723fe8443fcb74ce432a2ce276af6748d9ad6466bf00600007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ee25a39c6000004030046304402200dc5a475f05d7d01d4ee91909f2fd69e90f8096f6b2cfa741c9e6dc10d84eb3202202a004614d28b953cb6dce459c9698a06d2d6731a62e2f549baf19ad6d1690a29 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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