nikastic.com
Issued by R3
About this certificate
This digital certificate with serial number 04:7f:9b:68:a8:7a:ac:95:f7:a4:3f:31:0b:2b:f2:a7:c6:0c was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=nikastic.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:7f:9b:68:a8:7a:ac:95:f7:a4:3f:31:0b:2b:f2:a7:c6:0cSerial Number (int): 391871578081384182990029245490917540349452
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: f0:03:2b:ff:1a:ef:34:4d:ac:41:9c:12:9a:22:b3:45:60:c1:f7:7f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 4e:93:80:aa:b4:fd:21:d3:7a:a4:0d:7a:25:0e:10:f0:72:85:60:59
Fingerprint (sha256): 2d:f6:a7:65:26:0b:61:51:29:ff:9f:6e:92:51:65:a5:8c:57:18:d0:f8:46:df:81:23:46:23:46:fe:74:9f:46
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate nikastic.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nikastic.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.nikastic.com
nikastic.com
nikastic.com
Other certificates including the domain name nikastic.com
(limited to 100 certificates)
nikastic.com
nikastic.com
games.nikastic.com
translation.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
btc.nikastic.com
games.nikastic.com
sni216894.cloudflaressl.com
movietv.nikastic.com
sni216894.cloudflaressl.com
btc.nikastic.com
sni216894.cloudflaressl.com
nikastic.com
sni216894.cloudflaressl.com
nikastic.com
games.nikastic.com
movietv.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
sni216894.cloudflaressl.com
organic.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
shop.nikastic.com
gigs.nikastic.com
sni216894.cloudflaressl.com
movietv.nikastic.com
travel.nikastic.com
music.nikastic.com
sni216894.cloudflaressl.com
music.nikastic.com
organic.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
translation.nikastic.com
www.nikastic.com
translation.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
travel.nikastic.com
movietv.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
shop.nikastic.com
sni216894.cloudflaressl.com
organic.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
translation.nikastic.com
host.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
host.nikastic.com
sni216894.cloudflaressl.com
travel.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
www.nikastic.com
nikastic.com
movietv.nikastic.com
sni216894.cloudflaressl.com
shop.nikastic.com
sni216894.cloudflaressl.com
btc.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
games.nikastic.com
translation.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
btc.nikastic.com
games.nikastic.com
sni216894.cloudflaressl.com
movietv.nikastic.com
sni216894.cloudflaressl.com
btc.nikastic.com
sni216894.cloudflaressl.com
nikastic.com
sni216894.cloudflaressl.com
nikastic.com
games.nikastic.com
movietv.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
sni216894.cloudflaressl.com
organic.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
shop.nikastic.com
gigs.nikastic.com
sni216894.cloudflaressl.com
movietv.nikastic.com
travel.nikastic.com
music.nikastic.com
sni216894.cloudflaressl.com
music.nikastic.com
organic.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
translation.nikastic.com
www.nikastic.com
translation.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
travel.nikastic.com
movietv.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
shop.nikastic.com
sni216894.cloudflaressl.com
organic.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
translation.nikastic.com
host.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
host.nikastic.com
sni216894.cloudflaressl.com
travel.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
www.nikastic.com
nikastic.com
movietv.nikastic.com
sni216894.cloudflaressl.com
shop.nikastic.com
sni216894.cloudflaressl.com
btc.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
Certificate
The complete raw certificate details for nikastic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgISBH+baKh6rJX3pD8xCyvyp8YMMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDIwMTAzMDVaFw0yNDA3MDEwMTAzMDRaMBcxFTATBgNVBAMT DG5pa2FzdGljLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZJ CAf0L7/2ouSDe4G5XDHhu3obwtZxgI1QMQuIH65vboBSRyD6+7P9ai9dlRiePdyd PFMPGlExxAnoYpp2VxpwnbHhCRdEQW15uGc4zRme/fISmxjY19JdEXKH0DDPrlg5 ZZ7fweExYNTn8QvpkipQSRywK+D3pkd64KLAQJFAv1sM2rR9i1jiYyqVLyTee6yT HPV9WGc9yq63XcabizlfKOGOaYT4CoytXgRumn0XDCZLUc0EcK5w0gYTdlMFfVc5 ZemA7FbV7OOTHYj8YW5+x8A5XBn1roTdSue8Y2BKDEIrJV9ZZ6MnIyM63/pkmNDT plGCn4VTRODNNK/tr5sCAwEAAaOCAh0wggIZMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQU8AMr/xrvNE2sQZwSmiKzRWDB938wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w JwYDVR0RBCAwHoIOKi5uaWthc3RpYy5jb22CDG5pa2FzdGljLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ABmYEHEJ8NZS LjCA0p4/ZLuDbijM+Q9Sju7fzko/FrTKAAABjpyLuEUAAAQDAEcwRQIgJShXT/kR KKGlcD11caahWQpRS71VIrDT3zcnHkXzzbwCIQCZSX971PKuQoKQpgdsjrMh0BwY VsT/qbKB5dZiSIPBYwB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0 AAABjpyLuEQAAAQDAEYwRAIgZ3MTzjkTIzGp9JuObvIpIYf4ppkCUkj0lJ5BZYcK seECIBtYcgY3agFffYHWJ+gqGN3n/w8oh5OGg1x3p7V4tqp2MA0GCSqGSIb3DQEB CwUAA4IBAQCJ94pRbHbqD+iwsm3deMu9KzMmpNxwhxuYiqZqerNWVRZ89wUtsBVm RMw4zVhp3nCEeqAcofHZA2ZZg6WEXfkL1wjxzBSU9zJmjPreGQfogg/9odYBpPaG dWkoSic9lz3dmsHpsPjm12xziZdPFquIqmmthVQmpZozTLeil4ovakzkwWyWyN5c ay2WmwOGETUIFcglMSV6uyeReZSLEh5eDT9CmKQQqvZhJrs/kMFBOXC40ZI6EUiH kMuGjL5wxnw3GrqRKwVbyX3E2MuCxVewaNLXoOJKrPB2rK8fYtVl7T1H29uIXvyB 61/hVBrpuo6kl2dHaCNq4ewvw7IvKGG3 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkkIB/Qvv/ai5IN7gblc MeG7ehvC1nGAjVAxC4gfrm9ugFJHIPr7s/1qL12VGJ493J08Uw8aUTHECehimnZX GnCdseEJF0RBbXm4ZzjNGZ798hKbGNjX0l0RcofQMM+uWDllnt/B4TFg1OfxC+mS KlBJHLAr4PemR3rgosBAkUC/WwzatH2LWOJjKpUvJN57rJMc9X1YZz3KrrddxpuL OV8o4Y5phPgKjK1eBG6afRcMJktRzQRwrnDSBhN2UwV9Vzll6YDsVtXs45MdiPxh bn7HwDlcGfWuhN1K57xjYEoMQislX1lnoycjIzrf+mSY0NOmUYKfhVNE4M00r+2v mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 391871578081384182990029245490917540349452 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 01:03:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 01:03:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nikastic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23011384615270374738408297941569275769171648184711435445081576434818764256905688097145731444540805374264070622720428679004464369327951501170181565210313522997800530897029743363653966876199729428657943033622136097623535819849189834581203083495370006026719690293997476379397471600587571444746184880141288903473583659364550990761388206448551898068930952108612636857790908911507331408733366319712651440900253296426960534451433699645135220116978097365788020538205024003342638224069686959594196872213284129701487391886627219678023689287464170868745137174468303087863197567190289067279165840763381950755433193385959824928667 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f0032bff1aef344dac419c129a22b34560c1f77f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nikastic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikastic.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018e9c8bb845000004030047304502202528574ff91128a1a5703d7571a6a1590a514bbd5522b0d3df37271e45f3cdbc02210099497f7bd4f2ae428290a6076c8eb321d01c1856c4ffa9b281e5d6624883c16300750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e9c8bb84400000403004630440220677313ce39132331a9f49b8e6ef2292187f8a699025248f4949e4165870ab1e102201b587206376a015f7d81d627e82a18dde7ff0f28879386835c77a7b578b6aa76 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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