renin.com
Issued by Starfield Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 11:dc:15:ed:13:dc:5c:1a was issued on by Starfield Technologies, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=renin.com
Starfield Technologies, Inc.
Organization:
Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
Organization unit: http://certs.starfieldtech.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 11:dc:15:ed:13:dc:5c:1aSerial Number (int): 1286927701505760282
Serial Number lenght: 61 bits, 8 octets
SubjectKeyId: 6b:d0:c8:2f:1a:80:b4:f9:7c:39:2c:19:8c:c9:f6:9b:d8:5b:3b:1d
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63
Fingerprint (sha1): 67:cd:c1:0e:83:5f:16:4e:ee:1b:0c:22:97:72:f9:8a:fc:c8:1e:45
Fingerprint (sha256): 37:20:f9:8d:ad:81:7c:0f:3b:01:58:c1:42:f3:27:0d:21:42:c4:5d:85:76:32:85:d5:d4:72:99:80:bf:cb:46
Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt
Revocation information
OCSP Server: http://ocsp.starfieldtech.com/CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-550.crl
Check the revocation status for certificate renin.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for renin.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.renin.com
renin.com
renin.com
Other certificates including the domain name renin.com
(limited to 100 certificates)
helpdesk.renin.com
helpdesk.warren-wilson.edu
itservicedesk.intactpublicentities.ca
helpdesk.posnackschool.org
shop.renin.com
helpdesk.warren-wilson.edu
renin.com
servicedesk.primehealthcare.com
renin.com
helpdesk.warren-wilson.edu
servicedesk.hardwoodlumber.net
*.renin.com
renin.com
helpdesk.posnackschool.org
shop.renin.com
itservicedesk.intactpublicentities.ca
itservicedesk.intactpublicentities.ca
*.renin.com
helpdesk.renin.com
renin.com
helpdesk.renin.com
shop.renin.com
renin.com
helpdesk.renin.com
renin.com
shop.renin.com
shop.renin.com
helpdesk.posnackschool.org
servicedesk.hardwoodlumber.net
renin.com
*.renin.com
helpdesk.warren-wilson.edu
itservicedesk.intactpublicentities.ca
helpdesk.posnackschool.org
shop.renin.com
helpdesk.warren-wilson.edu
renin.com
servicedesk.primehealthcare.com
renin.com
helpdesk.warren-wilson.edu
servicedesk.hardwoodlumber.net
*.renin.com
renin.com
helpdesk.posnackschool.org
shop.renin.com
itservicedesk.intactpublicentities.ca
itservicedesk.intactpublicentities.ca
*.renin.com
helpdesk.renin.com
renin.com
helpdesk.renin.com
shop.renin.com
renin.com
helpdesk.renin.com
renin.com
shop.renin.com
shop.renin.com
helpdesk.posnackschool.org
servicedesk.hardwoodlumber.net
renin.com
*.renin.com
Certificate
The complete raw certificate details for renin.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGrzCCBZegAwIBAgIIEdwV7RPcXBowDQYJKoZIhvcNAQELBQAwgcYxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUw IwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTMwMQYDVQQLEypo dHRwOi8vY2VydHMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8xNDAyBgNV BAMTK1N0YXJmaWVsZCBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIw HhcNMjMwMzE0MDgyMTI5WhcNMjQwMzE0MDgyMTI5WjAUMRIwEAYDVQQDEwlyZW5p bi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoGzke/62WaIhr Y/ZKJK7MRKbN0QTenT7+piTVtj8DPO8PKry80GjjrM/7uZQg1KsJzL2Rd7c5M9i9 kULM6Abns+DFzKuuR4Z/k0OuOWKVr+qFBgxhFx1+0zpoUEk91M4QOhR/DyY1eeNl +/Z9vjA3MhK9ku6GZww9lsKMktaUSlHPE4vKJ6uiKJ2cVdhZxahTlcVtrEtxWV7P /AIJ6R3tprZfLpanx77ZToRp9IgupmipZtaf1fUjSNo5lMZK8pz8g+AOwF+qiIAh iQJp2m1i4NReC7QX1wmkHfzHz5pcEMMz//Ht+Nur+IpWaZVWs8/2al114+Y/a5NG 1b/Pa1TDAgMBAAGjggNQMIIDTDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwPQYDVR0fBDYwNDAyoDCg LoYsaHR0cDovL2NybC5zdGFyZmllbGR0ZWNoLmNvbS9zZmlnMnMxLTU1MC5jcmww YwYDVR0gBFwwWjBOBgtghkgBhv1uAQcXATA/MD0GCCsGAQUFBwIBFjFodHRwOi8v Y2VydGlmaWNhdGVzLnN0YXJmaWVsZHRlY2guY29tL3JlcG9zaXRvcnkvMAgGBmeB DAECATCBggYIKwYBBQUHAQEEdjB0MCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5z dGFyZmllbGR0ZWNoLmNvbS8wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jZXJ0aWZpY2F0 ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS9zZmlnMi5jcnQwHwYDVR0j BBgwFoAUJUWBaFAmOD07LSy+zWrZtj2zZmMwIwYDVR0RBBwwGoINd3d3LnJlbmlu LmNvbYIJcmVuaW4uY29tMB0GA1UdDgQWBBRr0MgvGoC0+Xw5LBmMyfab2Fs7HTCC AX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHcA7s3QZNXbGs7FXLedtM0TojKHRny8 7N7DUUhZRnEftZsAAAGG3zXJ9AAABAMASDBGAiEAza0rSbhYtJKbwAnIyHkWKQ+R K5OVYlXn4yKBOqJPgkoCIQDu97tSUoFmHf5CvcCJHeWB0NkgiABSl00AOJOUztlC 1gB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABht81yvMAAAQD AEYwRAIgdpyX3wPcaPtfD2moXYmoRDtvQQ66kp0yZodKgmnkWw8CIBkhoIhFbhzc 0SxXqPwf69EHYGqvjfF31QzTxFbOa7I0AHUA2ra/az+1tiKfm8K7XGvocJFxbLtR hIU0vaQ9MEjX+6sAAAGG3zXLeAAABAMARjBEAiBghBqVzuO4DBTXFqaSgslqV0b0 Bb4qQG1dphCn1woi0AIgOhOL+PRnHCTho4Vp07M9Go+MJYYFkzlLenH2O8NUiJow DQYJKoZIhvcNAQELBQADggEBAGZ23yBbogcBaGyseNyoNrU54bE09gweOMlbpnG+ iBgvYXg7MZgF98widUm++TJfZJ9iZjcfoUehH+zElvbINdBjSx7pRaTEbr0b12rg 7V22VHN1Fvq1MYEov5HTw68Td7aZTtr+Sb7e0r6eHNsn0QgNcrBIcWJgHd3+hJ5m 5BO76eOcfK05GNHB+FH972mdczrIKUfqEzBEiQjvlS3Nur52DKeGQT8wlOh4nIM9 9KTngbauNQiT09oLZNzqdRVZTUtUXl6Tj2mvV580Rxat6nU8sokz22gJZqTVTBp6 8VnpvHBzcaPR3rL3/WloKonNQ6GxqmvImUrpyT1x53uENY4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBs5Hv+tlmiIa2P2SiSu zESmzdEE3p0+/qYk1bY/AzzvDyq8vNBo46zP+7mUINSrCcy9kXe3OTPYvZFCzOgG 57PgxcyrrkeGf5NDrjlila/qhQYMYRcdftM6aFBJPdTOEDoUfw8mNXnjZfv2fb4w NzISvZLuhmcMPZbCjJLWlEpRzxOLyieroiidnFXYWcWoU5XFbaxLcVlez/wCCekd 7aa2Xy6Wp8e+2U6EafSILqZoqWbWn9X1I0jaOZTGSvKc/IPgDsBfqoiAIYkCadpt YuDUXgu0F9cJpB38x8+aXBDDM//x7fjbq/iKVmmVVrPP9mpddePmP2uTRtW/z2tU wwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1286927701505760282 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 08:21:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 08:21:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'renin.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21221459459660368393265829123627214772348543079528178645150264248421898261630455152329863356831251777897823496252028020958490623806072281012795113423145063730834910720836802366099559002601926691357381147155019859855910678984584004624157416083149242124246582636199695191353405832823418324713723414087410555881858748065827988224626345501737585379450571918478908475669702434197774547211587816037453901192629064188186130871479067142339455103539403971686116927527592663766349421053220942690727006017612860953674099822667417201399054007193835383972450599306687454408373704491857968559858522429657889038549685787968156685507 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-550.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renin.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6bd0c82f1a80b4f97c392c198cc9f69bd85b3b1d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000186df35c9f40000040300483046022100cdad2b49b858b4929bc009c8c87916290f912b93956255e7e322813aa24f824a022100eef7bb525281661dfe42bdc0891de581d0d920880052974d00389394ced942d600750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000186df35caf300000403004630440220769c97df03dc68fb5f0f69a85d89a8443b6f410eba929d3266874a8269e45b0f02201921a088456e1cdcd12c57a8fc1febd107606aaf8df177d50cd3c456ce6bb234007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000186df35cb780000040300463044022060841a95cee3b80c14d716a69282c96a5746f405be2a406d5da610a7d70a22d002203a138bf8f4671c24e1a38569d3b33d1a8f8c25860593394b7a71f63bc354889a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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