facebook.247grad.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:04:54:0d:e4:ed:eb:8c:73:86:bf:ab:7e:92:3a:0e:f2:23 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=facebook.247grad.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:04:54:0d:e4:ed:eb:8c:73:86:bf:ab:7e:92:3a:0e:f2:23Serial Number (int): 262809714557708950600750374943453925536291
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 3c:e2:23:f1:83:0b:82:15:2e:a8:32:dd:23:3a:24:8e:1e:4d:4c:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5b:65:52:b1:b3:35:8a:b0:90:40:fe:e7:c5:7b:85:ca:be:bf:fb:5f
Fingerprint (sha256): 36:80:a4:b9:7e:2b:6b:85:82:d5:2f:a8:e2:ae:26:9b:67:a4:a0:8d:ed:a9:23:e4:6e:8d:a3:af:ae:c0:69:18
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate facebook.247grad.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for facebook.247grad.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
facebook.247grad.de
Other certificates including the domain name 247grad.de
(limited to 100 certificates)
facebook2.247grad.de
evm.247grad.de
247grad-website-stage.247grad.de
facebook.247grad.de
zurich.247grad.de
zurich.247grad.de
247grad01.247grad.de
projects.247grad.de
test.247grad.de
hosting.247grad.de
mindfulmetrics.org
zurich.247grad.de
editorial-kalender.247grad.de
app.clinicaneocor.com.br
acumulatorauto.stageme.live
clients.247grad.de
app.calm-investing.com
247grad01.247grad.de
evm.247grad.de
projects.247grad.de
clients.247grad.de
unlock.zonic.me
247grad.de
facebook.247grad.de
247grad.de
cm.247grad.de
firebase-jan.247grad.de
apra.247grad.de
facebook.247grad.de
test.247grad.de
www.serverside.247grad.de
pwt.247grad.de
*.247grad.de
247grad.de
preprod.meu.clozzy.com.br
barcampkoblenz-website-stage.247grad.de
247grad.de
facebook.247grad.de
cdn.247grad.de
chornous.net
*.247grad.de
247grad01.247grad.de
cdn.247grad.de
links.porsche-test.drivercopilot.com
content-marketing.247grad.de
zurich.247grad.de
*.247grad.de
247grad.de
test.247grad.de
cm.247grad.de
eylamandmarusa.info
test.247grad.de
247grad01.247grad.de
cm.247grad.de
saschaboehr.247grad.de
content-marketing.247grad.de
cdn.247grad.de
247grad.de
247grad01.247grad.de
247grad.de
test.247grad.de
*.247grad.de
zurich.247grad.de
publisher.247grad.de
247grad-me-stage.247grad.de
247grad01.247grad.de
247grad.de
247grad01.247grad.de
*.247grad.de
247grad01.247grad.de
rheinzeitung-ai-stage.247grad.de
projects.247grad.de
247grad.de
247grad01.247grad.de
*.247grad.de
247grad01.247grad.de
hosting.247grad.de
test.247grad.de
editorial-kalender.247grad.de
zurich.247grad.de
247grad.de
apra.247grad.de
test.247grad.de
hosting.247grad.de
test.247grad.de
test.247grad.de
247grad.de
test.247grad.de
apra.247grad.de
lotto-gluexblog-stage.247grad.de
pwt.247grad.de
247grad.de
projects.247grad.de
editorial-kalender.247grad.de
apra.247grad.de
staging-ecobat.247grad.de
content-marketing.247grad.de
barcampkoblenz-website-stage.247grad.de
hosting.247grad.de
bonnfinanz-fb.247grad.de
evm.247grad.de
247grad-website-stage.247grad.de
facebook.247grad.de
zurich.247grad.de
zurich.247grad.de
247grad01.247grad.de
projects.247grad.de
test.247grad.de
hosting.247grad.de
mindfulmetrics.org
zurich.247grad.de
editorial-kalender.247grad.de
app.clinicaneocor.com.br
acumulatorauto.stageme.live
clients.247grad.de
app.calm-investing.com
247grad01.247grad.de
evm.247grad.de
projects.247grad.de
clients.247grad.de
unlock.zonic.me
247grad.de
facebook.247grad.de
247grad.de
cm.247grad.de
firebase-jan.247grad.de
apra.247grad.de
facebook.247grad.de
test.247grad.de
www.serverside.247grad.de
pwt.247grad.de
*.247grad.de
247grad.de
preprod.meu.clozzy.com.br
barcampkoblenz-website-stage.247grad.de
247grad.de
facebook.247grad.de
cdn.247grad.de
chornous.net
*.247grad.de
247grad01.247grad.de
cdn.247grad.de
links.porsche-test.drivercopilot.com
content-marketing.247grad.de
zurich.247grad.de
*.247grad.de
247grad.de
test.247grad.de
cm.247grad.de
eylamandmarusa.info
test.247grad.de
247grad01.247grad.de
cm.247grad.de
saschaboehr.247grad.de
content-marketing.247grad.de
cdn.247grad.de
247grad.de
247grad01.247grad.de
247grad.de
test.247grad.de
*.247grad.de
zurich.247grad.de
publisher.247grad.de
247grad-me-stage.247grad.de
247grad01.247grad.de
247grad.de
247grad01.247grad.de
*.247grad.de
247grad01.247grad.de
rheinzeitung-ai-stage.247grad.de
projects.247grad.de
247grad.de
247grad01.247grad.de
*.247grad.de
247grad01.247grad.de
hosting.247grad.de
test.247grad.de
editorial-kalender.247grad.de
zurich.247grad.de
247grad.de
apra.247grad.de
test.247grad.de
hosting.247grad.de
test.247grad.de
test.247grad.de
247grad.de
test.247grad.de
apra.247grad.de
lotto-gluexblog-stage.247grad.de
pwt.247grad.de
247grad.de
projects.247grad.de
editorial-kalender.247grad.de
apra.247grad.de
staging-ecobat.247grad.de
content-marketing.247grad.de
barcampkoblenz-website-stage.247grad.de
hosting.247grad.de
bonnfinanz-fb.247grad.de
Certificate
The complete raw certificate details for facebook.247grad.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISAwRUDeTt64xzhr+rfpI6DvIjMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTEwODEyMzFaFw0y MDAzMTAwODEyMzFaMB4xHDAaBgNVBAMTE2ZhY2Vib29rLjI0N2dyYWQuZGUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xZ5D0hV60BPSIk6ahw27kTJ+ MSifiZn5GWcksQ8akMfmbKXlsJ1acmuhIuGeacj316yOr0gq91x6NsKCYa9tZPxz klZNgu3YDK3FxplOYdVLvoPUeubt3asFQIs8Blm66YGu8ZNyKVAgOx8mtDWypQQu Z8Js01YlGYMxaKlktuwxcMomoBS9Zu/7j3T2iP9hiI2f1aRSoQowZmocudHouMPf 50M/EvIDNRIt/oicFVsGJ32by6QLxaYHD19WW4wYWJpng2NYMQlCoAcMH76uYnKD khIkqvD8+5vJNs26tFSilSmTcOoUcF15seksB2420RoLbIvIZ+bdhzCInNrBAgMB AAGjggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDziI/GDC4IVLqgy3SM6 JI4eTUxuMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wHgYDVR0RBBcwFYITZmFjZWJvb2suMjQ3Z3JhZC5kZTBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1 AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbvQ7N4UAAAQDAEYw RAIgMNl90N9W8AFpVccgALgWBm5VEnFEwVHm0O9BmkbnVegCICH6dy9p9/ebD7hv f46IYjrM+kfhotX8v1D1B4mHrRhcAHUAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ru vGE6GmnTohwAAAFu9Ds3swAABAMARjBEAiAdsmGaZycsY+kz7MW/tfIyfpHXgVBn uy+nmAJDPhpXCgIgeA+SXAA9WN03ywLyfDKGp7K2wpz7bVF4zr4hw8Vu2hkwDQYJ KoZIhvcNAQELBQADggEBAFcy5vLK+p6Bh6WYGXKzNIA2ch7J+xOT2GDB8S6Xc7Gs ZjeS7h/3HLdILVuYKJX0JP75zIFlGYDl9DSwL9Mvt2wy15m1Cz80HRir8lQvITSI 7VT2JPwGMy8RIdoXd5dGtz4J7w6UcEsKHRBcX5JUuKfAri1XKfd9S/kPK1KBm4Dt V5FYLE9x+XTb0QFZiTa08XRg9pcuOHF0cAzKgL2ocLz3dNQ56P0tVNzLz6xzw4wR 4T/8WF8hxg6altrOAMxAyWcLrVmKURGyNWpr+2Bpokt3zbQbFX0tvjhu/fsi6ugx q3r+0NVFWKmKACIN9hVLw9vFvEI0Uhmmdxt0GeOmWiw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucWeQ9IVetAT0iJOmocN u5EyfjEon4mZ+RlnJLEPGpDH5myl5bCdWnJroSLhnmnI99esjq9IKvdcejbCgmGv bWT8c5JWTYLt2AytxcaZTmHVS76D1Hrm7d2rBUCLPAZZuumBrvGTcilQIDsfJrQ1 sqUELmfCbNNWJRmDMWipZLbsMXDKJqAUvWbv+4909oj/YYiNn9WkUqEKMGZqHLnR 6LjD3+dDPxLyAzUSLf6InBVbBid9m8ukC8WmBw9fVluMGFiaZ4NjWDEJQqAHDB++ rmJyg5ISJKrw/PubyTbNurRUopUpk3DqFHBdebHpLAduNtEaC2yLyGfm3YcwiJza wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 262809714557708950600750374943453925536291 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 08:12:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 08:12:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'facebook.247grad.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23451535596147558308310776358601639113369850027871229579158241542873760222005127070218107961964898705180819418255727737504348827425702051795704131954662200627790580917651577954548727705862076391197983089277166768642069484954873031642753735631344819156829798083460403310911583996966789136128286922791762846807479942229122077300268813928296572961785130620253275394499858915333857663162407378808000241057268447647531976028977396991954317951668838788965257508780094116783389508079546386641185316533972966821929578551519209828511996300798000604311703011698858393686858656381811308255514775313674960040341641957779357620929 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3ce223f1830b82152ea832dd233a248e1e4d4c6e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebook.247grad.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ef43b37850000040300463044022030d97dd0df56f0016955c72000b816066e55127144c151e6d0ef419a46e755e8022021fa772f69f7f79b0fb86f7f8e88623accfa47e1a2d5fcbf50f5078987ad185c00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ef43b37b3000004030046304402201db2619a67272c63e933ecc5bfb5f2327e91d7815067bb2fa79802433e1a570a0220780f925c003d58dd37cb02f27c3286a7b2b6c29cfb6d5178cebe21c3c56eda19 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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