borderstone.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:35:77:17:7f:1c:03:79:4f:52:53:20:8c:d3:e7:26:13:fb was issued on by Let's Encrypt.
With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=borderstone.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:35:77:17:7f:1c:03:79:4f:52:53:20:8c:d3:e7:26:13:fbSerial Number (int): 279530123374502113117142319745419394290683
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e7:10:a0:0d:b6:36:1d:a3:ae:98:37:23:b2:3d:9a:6d:15:74:c4:f5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 27:b9:d8:ba:4c:04:d2:aa:ce:17:66:97:4b:28:f3:ca:5c:ae:17:a3
Fingerprint (sha256): 3a:da:60:91:6a:13:bf:68:55:7d:ee:1b:66:90:df:48:84:10:a6:76:95:09:28:52:65:4d:05:a4:88:ec:b1:c6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate borderstone.org
21
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for borderstone.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
betting.krycklan.se
borderstone.org
dev.silvaboreal.com
fast.silvaboreal.com
flo.safedeposit.se
franklin.vfp.slu.se
frm.krycklan.se
gis.krycklan.se
hugin.krycklan.se
legacy.safedeposit.se
lm.safedeposit.se
phloem.se
safedeposit.se
silva.safedeposit.se
silvaboreal.com
svblive.safedeposit.se
symp.krycklan.se
www.borderstone.org
www.phloem.se
www.safedeposit.se
www.silvaboreal.com
borderstone.org
dev.silvaboreal.com
fast.silvaboreal.com
flo.safedeposit.se
franklin.vfp.slu.se
frm.krycklan.se
gis.krycklan.se
hugin.krycklan.se
legacy.safedeposit.se
lm.safedeposit.se
phloem.se
safedeposit.se
silva.safedeposit.se
silvaboreal.com
svblive.safedeposit.se
symp.krycklan.se
www.borderstone.org
www.phloem.se
www.safedeposit.se
www.silvaboreal.com
Other certificates including the domain name borderstone.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for borderstone.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG3TCCBcWgAwIBAgISAzV3F38cA3lPUlMgjNPnJhP7MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTYxMzMwMzdaFw0y MDAzMTUxMzMwMzdaMBoxGDAWBgNVBAMTD2JvcmRlcnN0b25lLm9yZzCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBANMCj+Vj1t/QrGNVHqXswR6IncPvaDYM Nmc8/Fo7bLmOKRdiyE77prO4in1vEzQ0c7tZlwA9S//cMRiJNNwPM0/vybmfYA5m wDmNIx2SVW35UXcuOPEMN5NHrt/b7Op5gXZfVedQTTgAlyCAEWgi45NMKkw7MPaD deTAR1B7iSgIC8mX6PyYiuciPa3gCXwKhPuaKzF7TgUPOSqNLSSVBy0RdwIKSGO9 BOMDlJjxWxj2FKG7ZlZkL/ZCgggbxRca/VnsMoIEZ4sGZRq9R1tGiXAg8D2/2O1M 48H8+R//HNnYTWfFk68BeSKEvyBx7ul0jcAa6zg52peCV8U1HNyWT40CAwEAAaOC A+swggPnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU5xCgDbY2HaOumDcjsj2abRV0 xPUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzCCAZ8GA1UdEQSCAZYwggGSghNiZXR0aW5nLmtyeWNrbGFuLnNlgg9ib3Jk ZXJzdG9uZS5vcmeCE2Rldi5zaWx2YWJvcmVhbC5jb22CFGZhc3Quc2lsdmFib3Jl YWwuY29tghJmbG8uc2FmZWRlcG9zaXQuc2WCE2ZyYW5rbGluLnZmcC5zbHUuc2WC D2ZybS5rcnlja2xhbi5zZYIPZ2lzLmtyeWNrbGFuLnNlghFodWdpbi5rcnlja2xh bi5zZYIVbGVnYWN5LnNhZmVkZXBvc2l0LnNlghFsbS5zYWZlZGVwb3NpdC5zZYIJ cGhsb2VtLnNlgg5zYWZlZGVwb3NpdC5zZYIUc2lsdmEuc2FmZWRlcG9zaXQuc2WC D3NpbHZhYm9yZWFsLmNvbYIWc3ZibGl2ZS5zYWZlZGVwb3NpdC5zZYIQc3ltcC5r cnlja2xhbi5zZYITd3d3LmJvcmRlcnN0b25lLm9yZ4INd3d3LnBobG9lbS5zZYIS d3d3LnNhZmVkZXBvc2l0LnNlghN3d3cuc2lsdmFib3JlYWwuY29tMEwGA1UdIARF MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcA 8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFvDx47PQAABAMASDBG AiEAkVU7JOGTHbrTAx4jePndawYguXPsLKkAOqvZvVHMmqsCIQCbzv5jrZ/GmLTD Dq2FzWk0u8N7muJmFuqL3B8V3mE23QB1AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq 7rxhOhpp06IcAAABbw8eO2kAAAQDAEYwRAIgf6LFSDPjAgDlX/2BGbw4ueli2TOk HFP7vKQQLINMFJ0CICc2ZZi4uS2hUJoF2fE5IBLsYU7tt6ZXWKCRG2FZ+h0VMA0G CSqGSIb3DQEBCwUAA4IBAQBfOo/GDgfZAzxum9eoYroW2/yepKjNnuI+kbdhiJp8 +WPNxknScKsl2fSI3Q8N0XDsmAKHY0FkfwsNIGZBNopzNsWmye7SQTTGUPZ2YSRU aCJRGmP2m9P+AUDnoRDgOfMNvO2KJ2djp4Ns7S7ma5NLAU3rHs/Es2ccGbIBDBHx Kebsnup4rvQOKUO/0FgeYqIeFj3yOssZnsuvdEZdlSoJxy8hDPjyFKjt6WgVCpMA ttlsMQkcvnlbPyb35oT9JoMOwZP4IBzgdZSYEGjdv/nizY4LbHNmQqyKppHR9QZy YLxUGe83Ij+rHl7twK8Ed2H4H6bc47PCrpRzsD91M1+u -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wKP5WPW39CsY1UepezB Hoidw+9oNgw2Zzz8WjtsuY4pF2LITvums7iKfW8TNDRzu1mXAD1L/9wxGIk03A8z T+/JuZ9gDmbAOY0jHZJVbflRdy448Qw3k0eu39vs6nmBdl9V51BNOACXIIARaCLj k0wqTDsw9oN15MBHUHuJKAgLyZfo/JiK5yI9reAJfAqE+5orMXtOBQ85Ko0tJJUH LRF3AgpIY70E4wOUmPFbGPYUobtmVmQv9kKCCBvFFxr9WewyggRniwZlGr1HW0aJ cCDwPb/Y7Uzjwfz5H/8c2dhNZ8WTrwF5IoS/IHHu6XSNwBrrODnal4JXxTUc3JZP jQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279530123374502113117142319745419394290683 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 13:30:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 13:30:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'borderstone.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26637545763459957865698328256921367858164493261189215830596339846245452278825697502114858282531113615473875248372321148680999202878509718150402883794178009609267802805620314683064945409082095723857490029454714833180990424418705615199642960908544644704627748711234013145563360342001105443021471158051289913889688914832125745638554070204476543086300314895055884080107918065843990369940652377266061129710673180276018064098785271232581726405939271878871823062789859369755377787554525848669821572170328889826799311695198923314566946092742018448991546325747918888751248443248978306927710984129902040942991996896929889275789 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e710a00db6361da3ae983723b23d9a6d1574c4f5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (406 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betting.krycklan.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borderstone.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.silvaboreal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast.silvaboreal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flo.safedeposit.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklin.vfp.slu.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frm.krycklan.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.krycklan.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugin.krycklan.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.safedeposit.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.safedeposit.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phloem.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safedeposit.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silva.safedeposit.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvaboreal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svblive.safedeposit.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symp.krycklan.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borderstone.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phloem.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safedeposit.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silvaboreal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f0f1e3b3d000004030048304602210091553b24e1931dbad3031e2378f9dd6b0620b973ec2ca9003aabd9bd51cc9aab0221009bcefe63ad9fc698b4c30ead85cd6934bbc37b9ae26616ea8bdc1f15de6136dd00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f0f1e3b69000004030046304402207fa2c54833e30200e55ffd8119bc38b9e962d933a41c53fbbca4102c834c149d022027366598b8b92da1509a05d9f1392012ec614eedb7a65758a0911b6159fa1d15 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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