*.brno-lisen.cz
- Statutární město Brno - Městská část Brno-Líšeň [IČ 44992785] -
Issued by PostSignum Public CA 2
About this certificate
This digital certificate with serial number 0a:bb:b8 was issued on by Česká pošta, s.p. [IČ 47114983].
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
- The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Statutární město Brno - Městská část Brno-Líšeň [IČ 44992785]
Company registration number:
D27016
Organization: Statutární město Brno - Městská část Brno-Líšeň [IČ 44992785]
Organization: Statutární město Brno - Městská část Brno-Líšeň [IČ 44992785]
Country:
CZ
Česká pošta, s.p. [IČ 47114983]
Organization:
Česká pošta, s.p. [IČ 47114983]
Country:
CZ
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:bb:b8Serial Number (int): 703416
Serial Number lenght: 20 bits, 3 octets
SubjectKeyId: cf:3a:f7:74:b3:e2:33:66:ad:e6:38:96:9e:f2:f8:4e:72:ea:04:26
AuthorityKeyId: 48:ef:3e:d4:ea:89:89:a3:e9:e2:3f:db:ef:8c:42:b1:0a:f8:c8:d1
Fingerprint (sha1): 14:e2:8d:33:87:bd:82:78:d7:08:60:2c:66:05:52:6c:90:c8:73:6c
Fingerprint (sha256): 33:5f:51:aa:c1:84:b3:7d:04:e4:0d:6b:28:b7:a1:d7:7e:d9:ed:11:ec:c7:39:06:e7:f0:00:2f:b9:3b:65:ad
Issuing Certificate URL: http://www.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://www2.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://postsignum.ttc.cz/crt/pspublicca2.crt
Revocation information
OCSP Server: http://ocsp.postsignum.cz/OCSP/VCA2/OCSP_public/CRL Distribution Point: http://www.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://www2.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://postsignum.ttc.cz/crl/pspublicca2.crl
Check the revocation status for certificate *.brno-lisen.cz
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.brno-lisen.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name brno-lisen.cz
(limited to 100 certificates)
Certificate
The complete raw certificate details for *.brno-lisen.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIDCru4MA0GCSqGSIb3DQEBCwUAMFwxCzAJBgNVBAYTAkNa MSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQ3MTE0OTgzXTEf MB0GA1UEAxMWUG9zdFNpZ251bSBQdWJsaWMgQ0EgMjAeFw0xNDA3MDkwODQyMTRa Fw0xNzA3MjgwODQyMTRaMIGLMQswCQYDVQQGEwJDWjFRME8GA1UECgxIU3RhdHV0 w6FybsOtIG3Em3N0byBCcm5vIC0gTcSbc3Rza8OhIMSNw6FzdCBCcm5vLUzDrcWh ZcWIIFtJxIwgNDQ5OTI3ODVdMRgwFgYDVQQDDA8qLmJybm8tbGlzZW4uY3oxDzAN BgNVBAUTBkQyNzAxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKcN 0Zk8iiJVQ3pRnNgxCjL97R4aq1dNSmxYdVkqjJbgpnzfdtevXCkcG/3J8NyssgHP 5FTRMTfU1MlfFvDxzT/uCNWE0uDBBas6WW/0pMkibjJ16V68ZniHfQxVFGjmXq75 rLUtj78ji5BsFNUjhDpEacX4Z3cn8UyrIDkKlvpt84/jmVEe633qBLP21rWuyZrc X+KHoaFsP4TCvSptlvsoaW0hYMfaJrsGG40DoxtwpIIczpoRmWfr5RpFDxQe6LX6 RsQt0C5CzG9dI9v+Kc37fWOX4zDE2fYHgxtf9OtCgWwmvDwk+ACetnA1rvCBtLKN WIUuq66Kbi7hAKY6KosCAwEAAaOCAnQwggJwMBQGA1UdEQQNMAugCQYDVQQNoAIT ADA+BgNVHSAENzA1MDMGCWeBBgECAQmBSDAmMCQGCCsGAQUFBwIBFhhodHRwOi8v d3d3LnBvc3RzaWdudW0uY3owgf0GCCsGAQUFBwEBBIHwMIHtMDgGCCsGAQUFBzAC hixodHRwOi8vd3d3LnBvc3RzaWdudW0uY3ovY3J0L3BzcHVibGljY2EyLmNydDA5 BggrBgEFBQcwAoYtaHR0cDovL3d3dzIucG9zdHNpZ251bS5jei9jcnQvcHNwdWJs aWNjYTIuY3J0MDgGCCsGAQUFBzAChixodHRwOi8vcG9zdHNpZ251bS50dGMuY3ov Y3J0L3BzcHVibGljY2EyLmNydDA8BggrBgEFBQcwAYYwaHR0cDovL29jc3AucG9z dHNpZ251bS5jei9PQ1NQL1ZDQTIvT0NTUF9wdWJsaWMvMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUSO8+ 1OqJiaPp4j/b74xCsQr4yNEwgagGA1UdHwSBoDCBnTAyoDCgLoYsaHR0cDovL3d3 dy5wb3N0c2lnbnVtLmN6L2NybC9wc3B1YmxpY2NhMi5jcmwwM6AxoC+GLWh0dHA6 Ly93d3cyLnBvc3RzaWdudW0uY3ovY3JsL3BzcHVibGljY2EyLmNybDAyoDCgLoYs aHR0cDovL3Bvc3RzaWdudW0udHRjLmN6L2NybC9wc3B1YmxpY2NhMi5jcmwwHQYD VR0OBBYEFM8693Sz4jNmreY4lp7y+E5y6gQmMA0GCSqGSIb3DQEBCwUAA4IBAQBh OkBiVPc7nBMwBJAoAXgEkf8T2ytBQ9V17c4vG7YC517HGx0pe9orzzhfxHC5r/o9 dTB2hUvvwv++bOCioHUPPdYp81DYhoeCj7+H/o0LPPXieuDyMBv1c9eIhTbHGpJ0 kFpaB5peMsQK9fMGYNlhmLHNKwSIRI4TvnTKKSX6UY81DoE/Ylko3gCKNRGMBrN+ 2RoUzg4osS3pgNz8cVa93uxWICYu00ZtWATvnsKYQCayNV6QQS0y1ihduSFVOlHX VzwI2P84QoL6EkIy8ItRbeX7vFlkMreVf/Iz4a3mrBEahbMcDfjKa3rmB6n1G9iY O6o8F9PpnuTYajHLiKrp -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw3RmTyKIlVDelGc2DEK Mv3tHhqrV01KbFh1WSqMluCmfN92169cKRwb/cnw3KyyAc/kVNExN9TUyV8W8PHN P+4I1YTS4MEFqzpZb/SkySJuMnXpXrxmeId9DFUUaOZervmstS2PvyOLkGwU1SOE OkRpxfhndyfxTKsgOQqW+m3zj+OZUR7rfeoEs/bWta7Jmtxf4oehoWw/hMK9Km2W +yhpbSFgx9omuwYbjQOjG3CkghzOmhGZZ+vlGkUPFB7otfpGxC3QLkLMb10j2/4p zft9Y5fjMMTZ9geDG1/060KBbCa8PCT4AJ62cDWu8IG0so1YhS6rropuLuEApjoq iwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 703416 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká pošta, s.p. [IČ 47114983]' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostSignum Public CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-09 08:42:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-28 08:42:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Statutární město Brno - Městská část Brno-Líšeň [IČ 44992785]' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.brno-lisen.cz' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D27016' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21088611206193223277470340913957666725527496062973680935374618258001505201566286946378405951667593163641044093758575916000763069229127895538362508667862557763539771542871717855104357887558104550897398993391542255534991009446432717282952100938024375964353577802589758839030319352999364604546580185450144990618362139453734392897309560073039723785967601530575338906533615729987996900152036306364765075352523491061674671697267690068068205352716407164000029175731958415275106903677497953220938269816944789991781903196113990626155723621853409874631316172446886758257496043503804616542818287154570126837722791044256378792587 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.13 (description) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.134.1.2.1.9.200 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.postsignum.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crt/pspublicca2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crt/pspublicca2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crt/pspublicca2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.postsignum.cz/OCSP/VCA2/OCSP_public/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 48ef3ed4ea8989a3e9e23fdbef8c42b10af8c8d1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crl/pspublicca2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crl/pspublicca2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crl/pspublicca2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cf3af774b3e23366ade638969ef2f84e72ea0426 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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