collection.training
Issued by R3
About this certificate
This digital certificate with serial number 03:2e:2a:8c:c2:a2:2c:56:48:4b:b4:bb:8b:70:ea:a8:82:d2 was issued on by Let's Encrypt.
With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=collection.training
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:2e:2a:8c:c2:a2:2c:56:48:4b:b4:bb:8b:70:ea:a8:82:d2Serial Number (int): 277046405118663217686911311320738207138514
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 19:b8:f8:bf:d6:24:28:da:01:23:8f:8c:3d:d7:b6:07:41:51:39:f9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 04:c8:f1:98:49:59:e5:44:ce:0d:84:50:69:8f:2b:77:3e:89:38:9e
Fingerprint (sha256): 2b:d6:57:d9:a1:2e:a0:e4:24:47:2d:ab:08:bc:4c:56:27:eb:ff:72:db:09:97:19:46:69:ed:97:b0:37:ee:fb
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate collection.training
19
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for collection.training
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
buff.pw
bugfreehouse.com
chinabynight.com
christmaslite.com
collection.training
copyrightkit.com
districtofcolumbialaw.com
flatsof.com
floppa.yugos.xyz.upaboveit.net
honestsolarfl.com
hornfamily.com
jagadambe.net.casinoshib.com
keywestcarrentals.com.norway.biz
motioncapturela.com
rfid-card.com
runstilsold.com
sandsoftime.net.badassautomotive.com
tornado.net
totalenergydrink.com
bugfreehouse.com
chinabynight.com
christmaslite.com
collection.training
copyrightkit.com
districtofcolumbialaw.com
flatsof.com
floppa.yugos.xyz.upaboveit.net
honestsolarfl.com
hornfamily.com
jagadambe.net.casinoshib.com
keywestcarrentals.com.norway.biz
motioncapturela.com
rfid-card.com
runstilsold.com
sandsoftime.net.badassautomotive.com
tornado.net
totalenergydrink.com
Other certificates including the domain name collection.training
(limited to 100 certificates)
sapiens.sapia.pe.sapia.pe
starband.ca
starband.ca
ssl-ya1lh.epik.to
starband.ca
arbitrage.sc
newinternationalversion.bible
fc.vc
collection.training
collection.training
musicoldies.ca
enerpactoolgroup.be
newinternationalversion.bible
backorder.world
starband.ca
collection.training
dn.gd
starband.ca
sapiens.sapia.pe.sapia.pe
newinternationalversion.bible
backorder.world
rplayer.co.za
backorder.world
starband.ca
backorder.world
starband.ca
starband.ca
starband.ca
collection.training
sapiens.sapia.pe.sapia.pe
starband.ca
starband.ca
starband.ca
collection.training
hoist.cc
starband.ca
backorder.world
starband.ca
sapiens.sapia.pe.sapia.pe
sapiens.sapia.pe.sapia.pe
starband.ca
starband.ca
ssl-ya1lh.epik.to
starband.ca
arbitrage.sc
newinternationalversion.bible
fc.vc
collection.training
collection.training
musicoldies.ca
enerpactoolgroup.be
newinternationalversion.bible
backorder.world
starband.ca
collection.training
dn.gd
starband.ca
sapiens.sapia.pe.sapia.pe
newinternationalversion.bible
backorder.world
rplayer.co.za
backorder.world
starband.ca
backorder.world
starband.ca
starband.ca
starband.ca
collection.training
sapiens.sapia.pe.sapia.pe
starband.ca
starband.ca
starband.ca
collection.training
hoist.cc
starband.ca
backorder.world
starband.ca
sapiens.sapia.pe.sapia.pe
sapiens.sapia.pe.sapia.pe
Certificate
The complete raw certificate details for collection.training in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgISAy4qjMKiLFZIS7S7i3DqqILSMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTAxNjIwMDJaFw0yNDAzMDkxNjIwMDFaMB4xHDAaBgNVBAMT E2NvbGxlY3Rpb24udHJhaW5pbmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDRuYGT8ESUjdmp8yNsJZNxCvG1A+VBvIPmGVTCR1qiF4GVyqsVIGEhGpP9 R0b3nEqwZFB58AQvm9+feCrZh7wolKXU1N9+mWBb1GRUXCUoVOhilBE7gQ0Cv9Qr EsFa4XkQth9PuCak3+elNnr40CZtrhw1/O7dazeqWo3OQZbzYFgysOEXpz6UGUJA hy4NGAzLDPjL8hXHq+lGi9o6Ri7SyiXcPYWjlZF92+7s6ELgb4umJbXYbJgyO8Ec C22voSJEvSfiCKbKyLMbzn+2K31OQGtEf36nThj4KJ8q0bD2duLWD4tKS3KOw31W 4rN/QwaEXnA/vzSH9AwNYykOrlv/AgMBAAGjggOXMIIDkzAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFBm4+L/WJCjaASOPjD3XtgdBUTn5MB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMIIBnQYDVR0RBIIBlDCCAZCCB2J1ZmYucHeCEGJ1Z2ZyZWVob3VzZS5j b22CEGNoaW5hYnluaWdodC5jb22CEWNocmlzdG1hc2xpdGUuY29tghNjb2xsZWN0 aW9uLnRyYWluaW5nghBjb3B5cmlnaHRraXQuY29tghlkaXN0cmljdG9mY29sdW1i aWFsYXcuY29tggtmbGF0c29mLmNvbYIeZmxvcHBhLnl1Z29zLnh5ei51cGFib3Zl aXQubmV0ghFob25lc3Rzb2xhcmZsLmNvbYIOaG9ybmZhbWlseS5jb22CHGphZ2Fk YW1iZS5uZXQuY2FzaW5vc2hpYi5jb22CIGtleXdlc3RjYXJyZW50YWxzLmNvbS5u b3J3YXkuYml6ghNtb3Rpb25jYXB0dXJlbGEuY29tgg1yZmlkLWNhcmQuY29tgg9y dW5zdGlsc29sZC5jb22CJHNhbmRzb2Z0aW1lLm5ldC5iYWRhc3NhdXRvbW90aXZl LmNvbYILdG9ybmFkby5uZXSCFHRvdGFsZW5lcmd5ZHJpbmsuY29tMBMGA1UdIAQM MAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcASLDja9qmRzQP 5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGMVL46cwAABAMASDBGAiEAlmvIyQJP 7UQj53ylQnwQD/cjUDAu0aADb/bkl1HWdMUCIQD8ttYWCf91sxlHbQNUZqNjBQsY L4hMZA8IOs0lt9ZElQB2AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfY AAABjFS+On4AAAQDAEcwRQIhAPVdCC4wTVPNo+ryABBqCNK0NXzE7K0nAKSU1R0/ h/HVAiAoEs4mjXo+6gf6LtZERqxq01yJwxS588C1VohXypx45jANBgkqhkiG9w0B AQsFAAOCAQEAOkJsEWP2mG8YXgd41/WLBZh2NWb0vp1hZx4RsWjeFVhES8GBL5Ne 6SNeHG/+WV7q5mE9gaq7BtQbcAeDMlrhCjJ+9jWol45faWmwqtS/BIQdQkXGU45m Aq9R2H+DIzEd08ITwZScE2RYNtVXIzZlLHz8ZvRxkCqFfoGyvX/01wPoxW7kg5zb aCHnofuDK1cBaX5hBxWhx7ZyQlfzncFAU21GBEV7x9MqL3SIr2imQS+0K9gAu+XY ilcdT2+V3mqGGzPY0B8jQU/A9NbkvrWsMwShA3I3x8D82oEKxUV51NIhk5qcTCdm umXWnabaP6IBA3Op5jv+W/6w/p1furFFyA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bmBk/BElI3ZqfMjbCWT cQrxtQPlQbyD5hlUwkdaoheBlcqrFSBhIRqT/UdG95xKsGRQefAEL5vfn3gq2Ye8 KJSl1NTffplgW9RkVFwlKFToYpQRO4ENAr/UKxLBWuF5ELYfT7gmpN/npTZ6+NAm ba4cNfzu3Ws3qlqNzkGW82BYMrDhF6c+lBlCQIcuDRgMywz4y/IVx6vpRovaOkYu 0sol3D2Fo5WRfdvu7OhC4G+LpiW12GyYMjvBHAttr6EiRL0n4gimysizG85/tit9 TkBrRH9+p04Y+CifKtGw9nbi1g+LSktyjsN9VuKzf0MGhF5wP780h/QMDWMpDq5b /wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 277046405118663217686911311320738207138514 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 16:20:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 16:20:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'collection.training' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26475282236559653887291727454217756362467938806482517349142928040816066648716594592428672202204185520819868935219279820962122553583257545414999708510554756098197088772654733113898705832601726474163181037077760263077143374267923709918982159762335208893339589802683381838193478086069696258971449040401694163050970086471523913040218276781191219414641625591434278160211817711302333799791413076852210481211056039319134764308905694196127139596904471093459072571832304786854420345421658184411059038956468225511401063506491319130903336670662924357534232985894516835491407235839952503385395031791794696490608431874528099851263 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 19b8f8bfd62428da01238f8c3dd7b607415139f9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (404 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buff.pw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugfreehouse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinabynight.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmaslite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collection.training' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copyrightkit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'districtofcolumbialaw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatsof.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floppa.yugos.xyz.upaboveit.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honestsolarfl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hornfamily.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jagadambe.net.casinoshib.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keywestcarrentals.com.norway.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motioncapturela.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfid-card.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runstilsold.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandsoftime.net.badassautomotive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tornado.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalenergydrink.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c54be3a730000040300483046022100966bc8c9024fed4423e77ca5427c100ff72350302ed1a0036ff6e49751d674c5022100fcb6d61609ff75b319476d035466a363050b182f884c640f083acd25b7d64495007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c54be3a7e0000040300473045022100f55d082e304d53cda3eaf200106a08d2b4357cc4ecad2700a494d51d3f87f1d502202812ce268d7a3eea07fa2ed64446ac6ad35c89c314b9f3c0b5568857ca9c78e6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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