markusko.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:dd:b4:1f:1a:8f:d4:28:b5:45:64:6d:78:b0:4a:ce:e3:43 was issued on by Let's Encrypt.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=markusko.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:dd:b4:1f:1a:8f:d4:28:b5:45:64:6d:78:b0:4a:ce:e3:43Serial Number (int): 336778683423989976771683192817863950787395
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: cc:d5:e7:1d:17:68:df:c5:b5:30:0d:a7:7f:90:25:4d:47:88:3e:d5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 50:37:23:a7:ff:82:18:d9:1a:09:24:cb:32:69:34:e6:93:82:ef:c0
Fingerprint (sha256): 35:bd:1d:82:70:22:33:4a:7d:96:bc:40:bf:44:bb:5f:99:0f:f6:19:31:21:2c:83:a8:6b:8c:7f:67:61:13:df
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate markusko.ch
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for markusko.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gallry.markusko.ch
koch.has.enough.coffee
markusko.ch
pastr.markusko.ch
pi.markusko.ch
q.markusko.ch
sesame.markusko.ch
stalkme.markusko.ch
www.markusko.ch
koch.has.enough.coffee
markusko.ch
pastr.markusko.ch
pi.markusko.ch
q.markusko.ch
sesame.markusko.ch
stalkme.markusko.ch
www.markusko.ch
Other certificates including the domain name markusko.ch
(limited to 100 certificates)
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
stats.moin-alex.de
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
docker.markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
docker.markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
stats.moin-alex.de
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
docker.markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
docker.markusko.ch
Certificate
The complete raw certificate details for markusko.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG6jCCBdKgAwIBAgISA920HxqP1Ci1RWRteLBKzuNDMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjUxNTMzMDZaFw0x OTA5MjMxNTMzMDZaMBYxFDASBgNVBAMTC21hcmt1c2tvLmNoMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEA3zy9E/K4ZF+LKXGQm2fgt8QrPPIxmE/ZnyCj mUG55nka8B7ORIk2rL6D16zr1Di7f4e81hfY7BGFXCPeh5wcSEpjxZksjdDt58Zx 2O/352j0SI+rTET63PUEhnWp5e4IPR/0+TgGer0r40JVGMSbDBXDCEYFPlYEzb3S Ilgr1Un+9yvdNi8o3Br2RWlIFjGvoESWl1hVevYQ8bnOwHm6d+ee/lCp252MjRPT Eb8Ohq5z3r/02x+i8iRXvCNjpXd4hQP67N10ptOuGlrut3lU3vxhEhtltc3lHw5x KN024RU3gTpZARf8GCQ4NlJx5SvdUzcCVgYYBe+UnyG/nvCjPOFuv1/VLLEHJbj9 BRjQRF5/8jpp4kD372SLbnj7EnJ0V7aBj9l2eS4bURr+6C2jKpXEgOpItAw4BAlb ETOTOOORDxOuYYeIHB855AVpnkRcWL9DCN8IKakLS4yISpBj5jocpBa0w7fgGsLW 5MAwYpvtsJMVOmCj9Cw88I82H6WZ4QR50kzqAtgJsVQPmvy6uTbndiSxR2p06hjz UWuOLOKnMbQRvf6zb/Ba1mLEpWV0bP7iYGk3Hr/UOWgSTEp4i6P2RlHtq90sh9GS H8CwQaIcHVO8Wsq3LwRbbt19u6c9j2Ije1JwFJv/susssXCYJk+xbeoYbIF9Tj2Y r9iQfV0CAwEAAaOCAvwwggL4MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUzNXnHRdo 38W1MA2nf5AlTUeIPtUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzCBsAYDVR0RBIGoMIGlghJnYWxscnkubWFya3Vza28u Y2iCFmtvY2guaGFzLmVub3VnaC5jb2ZmZWWCC21hcmt1c2tvLmNoghFwYXN0ci5t YXJrdXNrby5jaIIOcGkubWFya3Vza28uY2iCDXEubWFya3Vza28uY2iCEnNlc2Ft ZS5tYXJrdXNrby5jaIITc3RhbGttZS5tYXJrdXNrby5jaIIPd3d3Lm1hcmt1c2tv LmNoMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIE AgSB9gSB8wDxAHcA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFr j3vWyQAABAMASDBGAiEAx8swLt289fSSsK1ITuknRpel0hSb6057QIxCOdcd1gwC IQDAySWtOC2RIqqLng/Sy1Qvtje+yCsydAgHWx6OcGt94gB2AGPy283oO8wszwty hCdXazOkjWF3j711pjixx2hUS9iNAAABa4971r8AAAQDAEcwRQIhALReGj2TYQCq L23w/mhRQajRqC+S0vDHQqp0OIyEMQuPAiBPi7ywcK4YwlItZILQOKjgIJ2b2CI4 hNgfaInPPmOqzTANBgkqhkiG9w0BAQsFAAOCAQEAllro/uLN4GB/dE5sEqnH5DV7 pdB2ZpNG7eKryhuuWEN27V6E3GoBxGzGnPWvkhZzH6Cx3ASMEPWim4wN65EOJBY3 UmUqWgf0M4l6Nu3Jk0aK++EPM35jmJUssxIiUzN98QPpwj+CDryFvHb9X/Q3U3d9 d6ogulPBzKRj8XmYrEKw5vyzwhUMBb05YhLPDSYRUNTBEyJp5OEbgeqn4HrjAfdj JcUexVdv+L2IUxvfOiIFSN+N6RxGwMXuoGZkZN33AP6ArFM+VCNmlC5LmoLktN+9 xFO59WljQl6vP2aay7hq1giNEpqxWfFPFVKblwbQxX5ahqVbSB/wk5uu33OCcA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3zy9E/K4ZF+LKXGQm2fg t8QrPPIxmE/ZnyCjmUG55nka8B7ORIk2rL6D16zr1Di7f4e81hfY7BGFXCPeh5wc SEpjxZksjdDt58Zx2O/352j0SI+rTET63PUEhnWp5e4IPR/0+TgGer0r40JVGMSb DBXDCEYFPlYEzb3SIlgr1Un+9yvdNi8o3Br2RWlIFjGvoESWl1hVevYQ8bnOwHm6 d+ee/lCp252MjRPTEb8Ohq5z3r/02x+i8iRXvCNjpXd4hQP67N10ptOuGlrut3lU 3vxhEhtltc3lHw5xKN024RU3gTpZARf8GCQ4NlJx5SvdUzcCVgYYBe+UnyG/nvCj POFuv1/VLLEHJbj9BRjQRF5/8jpp4kD372SLbnj7EnJ0V7aBj9l2eS4bURr+6C2j KpXEgOpItAw4BAlbETOTOOORDxOuYYeIHB855AVpnkRcWL9DCN8IKakLS4yISpBj 5jocpBa0w7fgGsLW5MAwYpvtsJMVOmCj9Cw88I82H6WZ4QR50kzqAtgJsVQPmvy6 uTbndiSxR2p06hjzUWuOLOKnMbQRvf6zb/Ba1mLEpWV0bP7iYGk3Hr/UOWgSTEp4 i6P2RlHtq90sh9GSH8CwQaIcHVO8Wsq3LwRbbt19u6c9j2Ije1JwFJv/susssXCY Jk+xbeoYbIF9Tj2Yr9iQfV0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 336778683423989976771683192817863950787395 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-25 15:33:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 15:33:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'markusko.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 910728563928576963973491397199296339220133317686335880184038050123683733038429038158918715533465730199368763869229597920525954537694716180964380976749402730709021960468637543475511447102748602735033638163549925159613377842400913017691429273654518620336161764514997956002421183102989598184532914813851775527289227971644708930471373655754541064574197955266822769934416731576866984089119392795300535764791202637552262426829446187320364578142093546540443120662411720982535257652432447691212409880868965943363824638095093640598933226901372975960898837270218419821528438799543286043585096203176880457428001355184465890249762617955442809657990560838970903224544070705743990898820757834608090426498869774047842780520340533137886162001346680817232398580907701084873632388745339096704745078677412547564059925354082864033619376606907417435882447261094742804352862580737347322290769892833625297367201784336849291057864352519068285970728237008908649784404524621771736283256443411367537095797286732308660108438066795927343260159669720405797474050894022814545913097992465678940635167155523249653220662971895432132907041219515712928813092774475329072393377726686997396045231094507992865408766721478847733555237404183374050804994918210791603541409117 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ccd5e71d1768dfc5b5300da77f90254d47883ed5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallry.markusko.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koch.has.enough.coffee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markusko.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastr.markusko.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pi.markusko.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q.markusko.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesame.markusko.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stalkme.markusko.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markusko.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b8f7bd6c90000040300483046022100c7cb302eddbcf5f492b0ad484ee9274697a5d2149beb4e7b408c4239d71dd60c022100c0c925ad382d9122aa8b9e0fd2cb542fb637bec82b327408075b1e8e706b7de200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b8f7bd6bf0000040300473045022100b45e1a3d936100aa2f6df0fe685141a8d1a82f92d2f0c742aa74388c84310b8f02204f8bbcb070ae18c2522d6482d038a8e0209d9bd8223884d81f6889cf3e63aacd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00965ae8fee2cde0607f744e6c12a9c7e4357ba5d076669346ede2abca1bae584376ed5e84dc6a01c46cc69cf5af9216731fa0b1dc048c10f5a29b8c0deb910e24163752652a5a07f433897a36edc993468afbe10f337e6398952cb3122253337df103e9c23f820ebc85bc76fd5ff43753777d77aa20ba53c1cca463f17998ac42b0e6fcb3c2150c05bd396212cf0d261150d4c1132269e4e11b81eaa7e07ae301f76325c51ec5576ff8bd88531bdf3a220548df8de91c46c0c5eea0666464ddf700fe80ac533e542366942e4b9a82e4b4dfbdc453b9f56963425eaf3f669acbb86ad6088d129ab159f14f15529b9706d0c57e5a86a55b481ff0939baedf738270