privilege.ooca.co
Issued by GTS CA 1D2
About this certificate
This digital certificate with serial number 8e:ff:78:95:17:fe:c7:8b:09:00:00:00:00:09:0c:16 was issued on by Google Trust Services.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=privilege.ooca.co
Google Trust Services
Organization:
Google Trust Services
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 8e:ff:78:95:17:fe:c7:8b:09:00:00:00:00:09:0c:16Serial Number (int): 190076856801959252523202142274375453718
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 49:42:f6:cb:48:35:50:1d:d2:cd:06:20:51:d6:8d:8b:c7:b5:32:ae
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9
Fingerprint (sha1): 72:90:50:61:62:fa:05:dd:6e:c8:53:b5:46:7b:1d:fd:8e:a0:3f:5d
Fingerprint (sha256): 3b:dc:63:78:90:54:c6:7a:55:04:0f:b0:4b:88:f2:16:d0:f7:36:18:6a:33:4a:fc:4b:35:2b:04:49:8c:32:cc
Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt
Revocation information
OCSP Server: http://ocsp.pki.goog/gts1d2CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl
Check the revocation status for certificate privilege.ooca.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for privilege.ooca.co
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
privilege.ooca.co
Other certificates including the domain name ooca.co
(limited to 100 certificates)
testapi.ooca.co
test.ooca.co
match-the-element.rccsonline.com
myex.app
sni.cloudflaressl.com
reinofloral.adparis.es
canpanionnft.com
herbinfo.cpa.ooca.co
admin-corp.ooca.co
ucash.co.in
testapi.ooca.co
auth.ooca.co
v5.rnfirebase.io
www.exenode.com
andersonbrownesolicitors.co.uk
admin.ooca.co
www.bort.cl
www.ngl.link
test.ooca.co
lookturismo.com.br
www.dougmart.in
www.med4us.in
tls.automattic.com
na-beta-app.uleeco.com
fiftheon.com
obgyn.cpa.ooca.co
apigateway.ooca.co
promotionapi.ooca.co
app.staging.ooca.co
app.waseda-onodalab.jp
app.ooca.co
*.ooca.co
www.accesoapp.com
www.sportsdatasolutions.academy
firstcareer.app.1on1navi.com
test.ooca.co
developer.ooca.co
test.ooca.co
test.ooca.co
test.ooca.co
thedevelopers.agency
www.todalacomida.app
promotionapi.ooca.co
api.staging.ooca.co
promotionapi.ooca.co
www.ampletime.com
miastotogra.pl
damoonrashidi.me
potligroceryadmin.estore.business
nanaychat.com
app.ooca.co
pqs-juridisch.koenenenco.nl
www.bhajipala.co
ooca.co
boutiqueincrivel.com
obgynapi.cpa.ooca.co
test.ooca.co
tillhub.ch
promotionapi.ooca.co
links.soupilar.com.br
thenyeripoly.ac.ke
l.artpix3d.com
app.bitpong.it
lookturismo.com.br
www.ooca.co
tls.automattic.com
tls.automattic.com
admin.ooca.co
www.ooca.co
app.ooca.co
obgyn.cpa.ooca.co
ey3k0n.io
apigateway.ooca.co
promotionapi.ooca.co
dsapp.app
app.ooca.co
test.ooca.co
api.ooca.co
www.mupapers.com
exchange.sishi.finance
test.ooca.co
ilgiardinodimelange.it
admin-corp.ooca.co
admin-corp.ooca.co
www.cloudcenter-on-the-go.com
www.arcadenoecj.com.br
01.vue.frontend.notes.ignaczdominik.hu
privilege.ooca.co
app.ooca.co
wizarddresden.com
website1219.estore.business
www.eashl-player-builder.com
www.ooca.co
www.ooca.co
docs.storysynth.org
admin2.ooca.co
tls.automattic.com
api.ooca.co
makotopty.com
test.ooca.co
test.ooca.co
match-the-element.rccsonline.com
myex.app
sni.cloudflaressl.com
reinofloral.adparis.es
canpanionnft.com
herbinfo.cpa.ooca.co
admin-corp.ooca.co
ucash.co.in
testapi.ooca.co
auth.ooca.co
v5.rnfirebase.io
www.exenode.com
andersonbrownesolicitors.co.uk
admin.ooca.co
www.bort.cl
www.ngl.link
test.ooca.co
lookturismo.com.br
www.dougmart.in
www.med4us.in
tls.automattic.com
na-beta-app.uleeco.com
fiftheon.com
obgyn.cpa.ooca.co
apigateway.ooca.co
promotionapi.ooca.co
app.staging.ooca.co
app.waseda-onodalab.jp
app.ooca.co
*.ooca.co
www.accesoapp.com
www.sportsdatasolutions.academy
firstcareer.app.1on1navi.com
test.ooca.co
developer.ooca.co
test.ooca.co
test.ooca.co
test.ooca.co
thedevelopers.agency
www.todalacomida.app
promotionapi.ooca.co
api.staging.ooca.co
promotionapi.ooca.co
www.ampletime.com
miastotogra.pl
damoonrashidi.me
potligroceryadmin.estore.business
nanaychat.com
app.ooca.co
pqs-juridisch.koenenenco.nl
www.bhajipala.co
ooca.co
boutiqueincrivel.com
obgynapi.cpa.ooca.co
test.ooca.co
tillhub.ch
promotionapi.ooca.co
links.soupilar.com.br
thenyeripoly.ac.ke
l.artpix3d.com
app.bitpong.it
lookturismo.com.br
www.ooca.co
tls.automattic.com
tls.automattic.com
admin.ooca.co
www.ooca.co
app.ooca.co
obgyn.cpa.ooca.co
ey3k0n.io
apigateway.ooca.co
promotionapi.ooca.co
dsapp.app
app.ooca.co
test.ooca.co
api.ooca.co
www.mupapers.com
exchange.sishi.finance
test.ooca.co
ilgiardinodimelange.it
admin-corp.ooca.co
admin-corp.ooca.co
www.cloudcenter-on-the-go.com
www.arcadenoecj.com.br
01.vue.frontend.notes.ignaczdominik.hu
privilege.ooca.co
app.ooca.co
wizarddresden.com
website1219.estore.business
www.eashl-player-builder.com
www.ooca.co
www.ooca.co
docs.storysynth.org
admin2.ooca.co
tls.automattic.com
api.ooca.co
makotopty.com
test.ooca.co
Certificate
The complete raw certificate details for privilege.ooca.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIRAI7/eJUX/seLCQAAAAAJDBYwDQYJKoZIhvcNAQELBQAw QjELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczET MBEGA1UEAxMKR1RTIENBIDFEMjAeFw0yMDAxMzExODI5MjlaFw0yMDA0MzAxODI5 MjlaMBwxGjAYBgNVBAMTEXByaXZpbGVnZS5vb2NhLmNvMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAvODu3/hlPUygxu1vL8SagzF2QzqQr3WM3fTeG/tn ADOAxd87pt5CXcPE7P12tPNHicNgJTbIVC1Wb32mwUdeSVUQQfeAyRKfijo+Dri3 rtUSKmvELrpBjombiQ86QypC5a/0iuHxYwSYGv3o/CJ98UWmMHo2op7QukFFn9Ep 5oWpOJiHk6Fu8TxENpVH9+Eb7SmFb/L+c4PWIlAMYo7Beu/5swau/4lYMzp9FirE pO7gCwRMgw0XcMtsWAOMYUuegJ87ZSBC+i3RrTCNMzWLOuA7dCSDy0XVQinJEO8I /B048NcISiXIZP6Zh3iQzaaG2WZxF8PdjvDHihoOWQv7ZwIDAQABo4ICVzCCAlMw DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFElC9stINVAd0s0GIFHWjYvHtTKuMB8GA1UdIwQYMBaAFLHd Ml3otzdy0s5czib+R3niAQjpMGQGCCsGAQUFBwEBBFgwVjAnBggrBgEFBQcwAYYb aHR0cDovL29jc3AucGtpLmdvb2cvZ3RzMWQyMCsGCCsGAQUFBzAChh9odHRwOi8v cGtpLmdvb2cvZ3NyMi9HVFMxRDIuY3J0MBwGA1UdEQQVMBOCEXByaXZpbGVnZS5v b2NhLmNvMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwLwYDVR0f BCgwJjAkoCKgIIYeaHR0cDovL2NybC5wa2kuZ29vZy9HVFMxRDIuY3JsMIIBBAYK KwYBBAHWeQIEAgSB9QSB8gDwAHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklT Le+LkF4AAAFv/RRjvgAABAMASDBGAiEA1GuY2Fq49eZBV7eCYMwOE94gtovRuWkC TISaK0X6wZoCIQCkhy8i1EKjmUAYcygaB6kkJ7Vph1JuizQ/hBpPr19JeAB1AF6n c/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABb/0UY+8AAAQDAEYwRAIg H6++GD8eHup/BU82peBp5D0Lzuy7Okf/v10bF/gX49ICIBbAKiCB4KbLLGiWaYAp 4Vk5pdw1aCkLWKRc4O23W/hOMA0GCSqGSIb3DQEBCwUAA4IBAQCHGgrPqvaZhvYh qUdc+xAjMccs/jzS5ce4buXGZmu0AGeR61BiHMfr9P4nifaeMmucS9rbd6DG4xnk GaahBWSSGsuO9POW/CLXRgWq/0wgAyVet3SLoH2tqa+cGRyrOR8n7nBl5c33Q+nU oIIp/M8YtxX1YVwJO20U2OlwwnhsJ+2BklEikUt36QvKFK5xSeF5/o0MQNPnChja X1gle8QRcKSViRHJFnZDbSyo/j5OXilsrmvUBYIgXJv+ndKU1Kh+EATXvr7cbyCk w63qC9U6dZQYc05fuiTtc4LKQ9pEkyP+zaTIYM3Ld0A5jxycOKon9OqfnFDH+GjL PAXA+VF/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvODu3/hlPUygxu1vL8Sa gzF2QzqQr3WM3fTeG/tnADOAxd87pt5CXcPE7P12tPNHicNgJTbIVC1Wb32mwUde SVUQQfeAyRKfijo+Dri3rtUSKmvELrpBjombiQ86QypC5a/0iuHxYwSYGv3o/CJ9 8UWmMHo2op7QukFFn9Ep5oWpOJiHk6Fu8TxENpVH9+Eb7SmFb/L+c4PWIlAMYo7B eu/5swau/4lYMzp9FirEpO7gCwRMgw0XcMtsWAOMYUuegJ87ZSBC+i3RrTCNMzWL OuA7dCSDy0XVQinJEO8I/B048NcISiXIZP6Zh3iQzaaG2WZxF8PdjvDHihoOWQv7 ZwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 190076856801959252523202142274375453718 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-31 18:29:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-30 18:29:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'privilege.ooca.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23843719981696783568747805607601079254922397817323498338809562729105609395744372588697019907542993149048476494248791547829585912762608071118998108827462900216649904156882119508390770662884806768665320841812992859306132370327796310688396006100792590158800991446316609241683981194002015939062940648873411574590090908832743699355950949578104605691094640815175362191730351776807784308584182585536988939211955889882140842549468035320526131217960609534866158585435306892617617650163698211090570937040221829914925355757639972713868965046429423725337693833493305707472025779492661483504751856020861490741567528241728980777831 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4942f6cb4835501dd2cd062051d68d8bc7b532ae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privilege.ooca.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ffd1463be0000040300483046022100d46b98d85ab8f5e64157b78260cc0e13de20b68bd1b969024c849a2b45fac19a022100a4872f22d442a399401873281a07a92427b56987526e8b343f841a4faf5f49780075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ffd1463ef000004030046304402201fafbe183f1e1eea7f054f36a5e069e43d0bceecbb3a47ffbf5d1b17f817e3d2022016c02a2081e0a6cb2c6896698029e15939a5dc3568290b58a45ce0edb75bf84e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00871a0acfaaf69986f621a9475cfb102331c72cfe3cd2e5c7b86ee5c6666bb4006791eb50621cc7ebf4fe2789f69e326b9c4bdadb77a0c6e319e419a6a10564921acb8ef4f396fc22d74605aaff4c2003255eb7748ba07dada9af9c191cab391f27ee7065e5cdf743e9d4a08229fccf18b715f5615c093b6d14d8e970c2786c27ed81925122914b77e90bca14ae7149e179fe8d0c40d3e70a18da5f58257bc41170a4958911c91676436d2ca8fe3e4e5e296cae6bd40582205c9bfe9dd294d4a87e1004d7bebedc6f20a4c3adea0bd53a759418734e5fba24ed7382ca43da449323fecda4c860cdcb7740398f1c9c38aa27f4ea9f9c50c7f868cb3c05c0f9517f