odt.co.nz
Issued by R3
About this certificate
This digital certificate with serial number 04:20:bb:67:8a:a5:29:c1:55:48:56:65:c2:15:eb:e3:78:f9 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=odt.co.nz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:20:bb:67:8a:a5:29:c1:55:48:56:65:c2:15:eb:e3:78:f9Serial Number (int): 359587282722357320502407873200931677108473
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: df:c6:1d:2b:6c:42:de:cf:70:e7:4b:f9:c0:a0:2f:8e:21:a4:38:bd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 62:d2:c5:88:d5:eb:e8:38:c4:b8:49:ae:a2:00:9f:08:5c:f1:68:18
Fingerprint (sha256): 37:2c:99:56:d2:9b:b3:8e:d6:8a:e6:58:76:27:78:e5:77:5b:f0:f4:1e:e2:05:fb:b5:18:f4:b1:07:9a:9e:2b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate odt.co.nz
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for odt.co.nz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
odt-prod.catalystdemo.net.nz
odt.co.nz
www.odt.co.nz
odt.co.nz
www.odt.co.nz
Other certificates including the domain name odt.co.nz
(limited to 100 certificates)
content.aimatch.com
subs1.odt.co.nz
subs.odt.co.nz
content.aimatch.com
odt.co.nz
digital.odt.co.nz
content.aimatch.com
digital.odt.co.nz
jobs.odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
archive.odt.co.nz
content.aimatch.com
subs.odt.co.nz
jobs.odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
jobs.odt.co.nz
jobs.odt.co.nz
odt.co.nz
content.aimatch.com
jobs.odt.co.nz
subs.odt.co.nz
content.aimatch.com
jobs.odt.co.nz
jobs.odt.co.nz
archive.odt.co.nz
jobs.odt.co.nz
digital1.odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
odt.co.nz
jobs.odt.co.nz
jobs.odt.co.nz
digital.odt.co.nz
jbadams.nz
archive.odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
digital.odt.co.nz
subs.odt.co.nz
jbadams.nz
jbadams.nz
jobs.odt.co.nz
digital.odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
subs1.odt.co.nz
jobs.odt.co.nz
jobs.odt.co.nz
jbadams.nz
content.odt.co.nz
jobs.odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
jbadams.nz
jobs.odt.co.nz
www.dunedintv.co.nz
odt.co.nz
subs1.odt.co.nz
digital1.odt.co.nz
jobs.odt.co.nz
jobs.odt.co.nz
jobs.odt.co.nz
jobs.odt.co.nz
odt.co.nz
jbadams.nz
odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
digital.odt.co.nz
jobs.odt.co.nz
subs1.odt.co.nz
subs.odt.co.nz
subs1.odt.co.nz
jbadams.nz
jbadams.nz
content.aimatch.com
jobs.odt.co.nz
jobs.odt.co.nz
odt.co.nz
content.aimatch.com
tier1-apse2.sydney.delivery.aimatch.net
content.aimatch.com
odt.co.nz
subs.odt.co.nz
jobs.odt.co.nz
subs.odt.co.nz
digital.odt.co.nz
digital.odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
www.dunedintv.co.nz
odt.co.nz
jobs.odt.co.nz
jobs.odt.co.nz
jobs.odt.co.nz
jbadams.nz
digital1.odt.co.nz
subs.odt.co.nz
subs.odt.co.nz
content.aimatch.com
employment.odt.co.nz
subs.odt.co.nz
odt.co.nz
subs1.odt.co.nz
subs.odt.co.nz
content.aimatch.com
odt.co.nz
digital.odt.co.nz
content.aimatch.com
digital.odt.co.nz
jobs.odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
archive.odt.co.nz
content.aimatch.com
subs.odt.co.nz
jobs.odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
jobs.odt.co.nz
jobs.odt.co.nz
odt.co.nz
content.aimatch.com
jobs.odt.co.nz
subs.odt.co.nz
content.aimatch.com
jobs.odt.co.nz
jobs.odt.co.nz
archive.odt.co.nz
jobs.odt.co.nz
digital1.odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
odt.co.nz
jobs.odt.co.nz
jobs.odt.co.nz
digital.odt.co.nz
jbadams.nz
archive.odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
digital.odt.co.nz
subs.odt.co.nz
jbadams.nz
jbadams.nz
jobs.odt.co.nz
digital.odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
subs1.odt.co.nz
jobs.odt.co.nz
jobs.odt.co.nz
jbadams.nz
content.odt.co.nz
jobs.odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
jbadams.nz
jobs.odt.co.nz
www.dunedintv.co.nz
odt.co.nz
subs1.odt.co.nz
digital1.odt.co.nz
jobs.odt.co.nz
jobs.odt.co.nz
jobs.odt.co.nz
jobs.odt.co.nz
odt.co.nz
jbadams.nz
odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
digital.odt.co.nz
jobs.odt.co.nz
subs1.odt.co.nz
subs.odt.co.nz
subs1.odt.co.nz
jbadams.nz
jbadams.nz
content.aimatch.com
jobs.odt.co.nz
jobs.odt.co.nz
odt.co.nz
content.aimatch.com
tier1-apse2.sydney.delivery.aimatch.net
content.aimatch.com
odt.co.nz
subs.odt.co.nz
jobs.odt.co.nz
subs.odt.co.nz
digital.odt.co.nz
digital.odt.co.nz
tier1-apse2.sydney.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
www.dunedintv.co.nz
odt.co.nz
jobs.odt.co.nz
jobs.odt.co.nz
jobs.odt.co.nz
jbadams.nz
digital1.odt.co.nz
subs.odt.co.nz
subs.odt.co.nz
content.aimatch.com
employment.odt.co.nz
subs.odt.co.nz
odt.co.nz
Certificate
The complete raw certificate details for odt.co.nz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISBCC7Z4qlKcFVSFZlwhXr43j5MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjkwNzI5NThaFw0yNDA3MjgwNzI5NTdaMBQxEjAQBgNVBAMT CW9kdC5jby5uejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANezR8XL mXTzhvGnYdbyzrKJIb+41MZwrDeoe9FGMeO/chqyWfJuflwh4SYU4kyjDvvm3fGh xztzxD30IAkq3NEZhrjvLVU98yZ3/aga2889A+eAcnsG5WTXVwJrMY4BGQIiFnnc oGooNSb+h1GLFlTmkVytYI9Aj4zpQfnCNNYfoXXeq5gkeNuCf+f/uJ3Ly/olDWau rzwPwomqv1pEIOJdVPvGzW1VEzCSk2tpTB69eJJSNZ3P4ZgVcO3CnwWQ0AAo4Q/T 9OU0mTc2gy9PeVUNbdfaDUozlN5zqzy5GC9bCpyO6rOgtoA/rtonA6vP0kv7Kxot neeOEhvoaTszZBMCAwEAAaOCAjcwggIzMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU 38YdK2xC3s9w50v5wKAvjiGkOL0wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wQQYD VR0RBDowOIIcb2R0LXByb2QuY2F0YWx5c3RkZW1vLm5ldC5ueoIJb2R0LmNvLm56 gg13d3cub2R0LmNvLm56MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHW eQIEAgSB9ASB8QDvAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMA AAGPKPmeigAABAMARzBFAiBf+RD3lq5PbR4JpilEFFZWtxkc9ASHzNnm3BzSFNkH 0QIhAOPCyTXgVhCBxH6TvQMn7J0W0KpX53lfOaLp7GChe1DTAHUAPxdLT9ciR1iU HWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGPKPmeggAABAMARjBEAiBvTcVGC6m5 HYJyHbMPaaGM0PoJiVWBKibcpcDxaWQ0twIgNyb4CyeC4sADGKqyJ/SC9LIS9Z5a MU2UasKbq3SlL9kwDQYJKoZIhvcNAQELBQADggEBACIdeH0TqZL1tk9BN+fl5hsZ yWdDHh4/7UM+p93J2he20rGp9ukPS/vY1L6tZLIKLBFTVZWFKlpeWu2QSAMsQ4tV 5mLS9/y8lSmZ76mkLYZTcC9l56yTR5MXRMzTcWL223VWzZaDzrRsLZd3e3Zmr53C INnDBOQKyAVSBStjR2Njwh+vJ1+ermPXNfgmwnZrOalXb0k1jpQQlkqEm0DZfRTh Dn5lePDdNwHdffviMWzDBsxetDfiTuw+rNNj9clSnD0XprmIVWz5TJ6oByz23yZr WECyMTJzpl0n0gqlb199N9XIq/6D44thePXBr1zteVLaXsQv5eqfNSllk4kF2wU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17NHxcuZdPOG8adh1vLO sokhv7jUxnCsN6h70UYx479yGrJZ8m5+XCHhJhTiTKMO++bd8aHHO3PEPfQgCSrc 0RmGuO8tVT3zJnf9qBrbzz0D54ByewblZNdXAmsxjgEZAiIWedygaig1Jv6HUYsW VOaRXK1gj0CPjOlB+cI01h+hdd6rmCR424J/5/+4ncvL+iUNZq6vPA/Ciaq/WkQg 4l1U+8bNbVUTMJKTa2lMHr14klI1nc/hmBVw7cKfBZDQACjhD9P05TSZNzaDL095 VQ1t19oNSjOU3nOrPLkYL1sKnI7qs6C2gD+u2icDq8/SS/srGi2d544SG+hpOzNk EwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 359587282722357320502407873200931677108473 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 07:29:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-28 07:29:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'odt.co.nz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27229642009092374483436604421318270226673230405931542699016663106601195946905410399127742977312945311417857914375348634020732596651032102930637392742236484552281104247091393875535150058843281266747223627577985606481111775254802397068647618004279264994938192946991233360570463973512481161558391310175735733822670909337447521299710562135059741842094655693679292048070957043631791530243553673043798714122786037358366862061242162242271730522050976835703855169183860868059131384880173469746192805827596846955400371121079300921064040370097765331760840203154564952897420264017565293055450762295053508609519784050742369936403 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dfc61d2b6c42decf70e74bf9c0a02f8e21a438bd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odt-prod.catalystdemo.net.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odt.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odt.co.nz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f28f99e8a000004030047304502205ff910f796ae4f6d1e09a62944145656b7191cf40487ccd9e6dc1cd214d907d1022100e3c2c935e0561081c47e93bd0327ec9d16d0aa57e7795f39a2e9ec60a17b50d30075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f28f99e82000004030046304402206f4dc5460ba9b91d82721db30f69a18cd0fa098955812a26dca5c0f1696434b702203726f80b2782e2c00318aab227f482f4b212f59e5a314d946ac29bab74a52fd9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00221d787d13a992f5b64f4137e7e5e61b19c967431e1e3fed433ea7ddc9da17b6d2b1a9f6e90f4bfbd8d4bead64b20a2c11535595852a5a5e5aed9048032c438b55e662d2f7fcbc952999efa9a42d8653702f65e7ac9347931744ccd37162f6db7556cd9683ceb46c2d97777b7666af9dc220d9c304e40ac80552052b63476363c21faf275f9eae63d735f826c2766b39a9576f49358e9410964a849b40d97d14e10e7e6578f0dd3701dd7dfbe2316cc306cc5eb437e24eec3eacd363f5c9529c3d17a6b988556cf94c9ea8072cf6df266b5840b2313273a65d27d20aa56f5f7d37d5c8abfe83e38b6178f5c1af5ced7952da5ec42fe5ea9f352965938905db05