kickback.no
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b3:cb:5b:97:46:f7:96:1f:aa:b2:33:da:5b:ee:af:72:03 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kickback.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b3:cb:5b:97:46:f7:96:1f:aa:b2:33:da:5b:ee:af:72:03Serial Number (int): 322517710324553635304571122728762182955523
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 95:6c:7d:25:25:d8:cd:7e:4f:41:9c:d3:44:3f:45:7d:fd:88:92:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ba:fe:21:32:3f:ee:a0:a8:98:2d:ac:69:43:bd:12:cf:da:0b:6e:66
Fingerprint (sha256): 2d:be:68:f8:91:6c:eb:55:3c:e4:d1:d6:54:b8:05:81:58:29:a2:e2:97:dd:2b:75:a9:85:f3:a2:9e:05:23:26
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate kickback.no
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kickback.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
e8.no
kickback.no
santander.kickback.no
tize.no
www.kickback.no
kickback.no
santander.kickback.no
tize.no
www.kickback.no
Other certificates including the domain name kickback.no
(limited to 100 certificates)
*.kickback.no
aftonbladet.kickback.no
wh3.kickback.no
a.kickback.no
rover.k8s.e8.no
sagabar.kickback.no
wh3.kickback.no
sagabar.kickback.no
gohm.kickback.no
*.kickback.no
rover.k8s.e8.no
kickback.no
rabastats.kickback.no
gohm.kickback.no
drip4.kickback.no
wh3.kickback.no
ajax.kickback.no
kickback.no
kickback.no
wh3.kickback.no
gohm.kickback.no
gohm.kickback.no
gohm.kickback.no
sagabar.kickback.no
clickmonster.kickback.no
rabastats.kickback.no
drip4.kickback.no
gohm.kickback.no
gohm.kickback.no
drip4.kickback.no
aftonbladet.kickback.no
gohm.kickback.no
kickback.no
gohm.kickback.no
wh3.kickback.no
tize1.kickback.no
drip4.kickback.no
sagabar.kickback.no
aftonbladet.kickback.no
gohm.kickback.no
www.kickback.no
wh3.kickback.no
sagabar.kickback.no
sagabar.kickback.no
sagabar.kickback.no
santander.kickback.no
sgf.kickback.no
www.santander.kickback.no
kickback.no
santander.kickback.no
*.kickback.no
*.kickback.no
kickback.no
gohm.kickback.no
sagabar.kickback.no
ajax.kickback.no
kickback.no
sagabar.kickback.no
kickback.no
drip4.kickback.no
gohm.kickback.no
aftonbladet.kickback.no
gohm.kickback.no
*.kickback.no
rover.k8s.e8.no
gohm.kickback.no
kickback.no
kickback.no
aftenposten.kickback.no
ajax.kickback.no
santander.kickback.no
rabastats.kickback.no
wh3.kickback.no
aftenposten.kickback.no
sagabar.kickback.no
sagabar.kickback.no
npm.kickback.no
kickback.no
santander.kickback.no
ajax.kickback.no
kickback.no
drop7.kickback.no
aftenposten.kickback.no
kickback.no
kickback.no
gohm.kickback.no
kickback.no
www.santander.kickback.no
sagabar.kickback.no
wh3.kickback.no
aftonbladet.kickback.no
wh3.kickback.no
a.kickback.no
rover.k8s.e8.no
sagabar.kickback.no
wh3.kickback.no
sagabar.kickback.no
gohm.kickback.no
*.kickback.no
rover.k8s.e8.no
kickback.no
rabastats.kickback.no
gohm.kickback.no
drip4.kickback.no
wh3.kickback.no
ajax.kickback.no
kickback.no
kickback.no
wh3.kickback.no
gohm.kickback.no
gohm.kickback.no
gohm.kickback.no
sagabar.kickback.no
clickmonster.kickback.no
rabastats.kickback.no
drip4.kickback.no
gohm.kickback.no
gohm.kickback.no
drip4.kickback.no
aftonbladet.kickback.no
gohm.kickback.no
kickback.no
gohm.kickback.no
wh3.kickback.no
tize1.kickback.no
drip4.kickback.no
sagabar.kickback.no
aftonbladet.kickback.no
gohm.kickback.no
www.kickback.no
wh3.kickback.no
sagabar.kickback.no
sagabar.kickback.no
sagabar.kickback.no
santander.kickback.no
sgf.kickback.no
www.santander.kickback.no
kickback.no
santander.kickback.no
*.kickback.no
*.kickback.no
kickback.no
gohm.kickback.no
sagabar.kickback.no
ajax.kickback.no
kickback.no
sagabar.kickback.no
kickback.no
drip4.kickback.no
gohm.kickback.no
aftonbladet.kickback.no
gohm.kickback.no
*.kickback.no
rover.k8s.e8.no
gohm.kickback.no
kickback.no
kickback.no
aftenposten.kickback.no
ajax.kickback.no
santander.kickback.no
rabastats.kickback.no
wh3.kickback.no
aftenposten.kickback.no
sagabar.kickback.no
sagabar.kickback.no
npm.kickback.no
kickback.no
santander.kickback.no
ajax.kickback.no
kickback.no
drop7.kickback.no
aftenposten.kickback.no
kickback.no
kickback.no
gohm.kickback.no
kickback.no
www.santander.kickback.no
sagabar.kickback.no
wh3.kickback.no
Certificate
The complete raw certificate details for kickback.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISA7PLW5dG95YfqrIz2lvur3IDMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjIwNTI5MjhaFw0y MDAzMjEwNTI5MjhaMBYxFDASBgNVBAMTC2tpY2tiYWNrLm5vMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA155zMPQPw5hpO7Bqo0OF5txTwZqckemzMwGG NgI9wuRC3rhhyD+vt8hAJ1fuUvBk1h/sEmsCiFDM9Py9mU59dBmTJYG5j8gRHcKh aJGzEoYBDVjMaPaqi2j2AWRB9UD1ynx+3LLP4odLwMdVl0Ehr36Dxh9Q2nbFGk51 QWdmCEUu3dPJAm5GXxgOrC/2xWQu12NMz16L+eNQ9V8/LdcZ9ZQ9nbsKuVepxFUW u/MjU52wgmDCPofBrWrYMaY8tGNTKoZ/cUayktrN3r09lAGbQD0vGHrVz3Z1mSld zrUinxO9lyw5EtTVIDJ1pJNUx6CLm0+ppCMDahAfHS4yOX68cQIDAQABo4ICmTCC ApUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSVbH0lJdjNfk9BnNNEP0V9/YiS5zAf BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv ME4GA1UdEQRHMEWCBWU4Lm5vggtraWNrYmFjay5ub4IVc2FudGFuZGVyLmtpY2ti YWNrLm5vggd0aXplLm5vgg93d3cua2lja2JhY2subm8wTAYDVR0gBEUwQzAIBgZn gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDwlaRZ8gDR gkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW8sS+P1AAAEAwBIMEYCIQC75Y1k fFlIU9EHG1aOTHmfKfSvGxeze+s/1PCqKep6iQIhAKHlCgDTkJaTUeMTVYefJWEs moEegqKCyUDt8AOqL9A8AHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+L kF4AAAFvLEvj5gAABAMARzBFAiEAu2zLXSnb/UFowOkTqbjpT68Dsq+H/7FFwlqY YxTreTQCIFZ8kl0QXL4jE/ZJfOXwvUEplmfkxXmjAxWfhvd5fqPiMA0GCSqGSIb3 DQEBCwUAA4IBAQBpWZyIvCwjb0xJglbGAsZsiEzW+PD+ISB2/eTQe1DBdUGG0HHt tGvGx3ITtYN/C/c6UdI8m5sT5Jm06YVt695cYKc90D62VCLlcuN2GEzdfvKv3ymh jUwmTIQy4e41f/xOGWv04LzA0Bidjd5Dtjy9EpBMfhXJIzUCAYm+3rN6t6ZGbVqU lVbmm4zAoCB5Ztiko7BlMLXXvo4WeQ/IK9agt0Ux7bsZ1W6d8t2SeSlRXcL7CUwl q1ulqW/hoHYL+vOOR7eDdjLtLfLQ/ur6Wym2tX8ftwYZpL2ibXNRB7yYlIkl00MV QC01nMzxBBYM3B+Son+xKSW133qJBk4Nn9qP -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA155zMPQPw5hpO7Bqo0OF 5txTwZqckemzMwGGNgI9wuRC3rhhyD+vt8hAJ1fuUvBk1h/sEmsCiFDM9Py9mU59 dBmTJYG5j8gRHcKhaJGzEoYBDVjMaPaqi2j2AWRB9UD1ynx+3LLP4odLwMdVl0Eh r36Dxh9Q2nbFGk51QWdmCEUu3dPJAm5GXxgOrC/2xWQu12NMz16L+eNQ9V8/LdcZ 9ZQ9nbsKuVepxFUWu/MjU52wgmDCPofBrWrYMaY8tGNTKoZ/cUayktrN3r09lAGb QD0vGHrVz3Z1mSldzrUinxO9lyw5EtTVIDJ1pJNUx6CLm0+ppCMDahAfHS4yOX68 cQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 322517710324553635304571122728762182955523 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-22 05:29:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-21 05:29:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kickback.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27219370157914738898287119577976379793310535454834711737450593884614052731312466749340690364285708536595030317567952351942912664049364691161902713444978920456565351723505310344919329100060578807431872916646378398037794657034998974014300297932043001861038167222225119385712804241387010895803689057724049411919134051309504548640981273984767575180632218634760204135403537695872832646670175141937045424610365726964528412310136669016177604369799819088494698766008488244208860883831095760560860511206682671438625585938196369088948189316863124334704550966947043797359184771751465913513114113022237506919791827396275222789233 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 956c7d2525d8cd7e4f419cd3443f457dfd8892e7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e8.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kickback.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santander.kickback.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tize.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kickback.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f2c4be3f50000040300483046022100bbe58d647c594853d1071b568e4c799f29f4af1b17b37beb3fd4f0aa29ea7a89022100a1e50a00d390969351e31355879f25612c9a811e82a282c940edf003aa2fd03c007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f2c4be3e60000040300473045022100bb6ccb5d29dbfd4168c0e913a9b8e94faf03b2af87ffb145c25a986314eb79340220567c925d105cbe2313f6497ce5f0bd41299667e4c579a303159f86f7797ea3e2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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