peterbruns.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:0d:20:86:03:1a:4b:cb:a8:79:7d:cc:eb:49:18:1d:4a:ca was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=peterbruns.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0d:20:86:03:1a:4b:cb:a8:79:7d:cc:eb:49:18:1d:4a:caSerial Number (int): 265803759691827719559333270049667191491274
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7c:3b:67:40:5d:06:09:2d:f3:d7:e9:62:84:bf:40:f7:c9:ff:8c:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 13:9b:8d:a1:bb:a8:fe:e6:bb:64:38:bf:82:c6:d6:b8:1e:94:b5:fd
Fingerprint (sha256): 3d:cc:3b:27:e3:05:1d:e6:0c:f6:bd:69:ad:b4:60:83:ce:e6:a5:6b:69:5d:ab:bf:80:cf:34:6e:45:65:8c:05
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate peterbruns.de
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for peterbruns.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
peterbruns.com
peterbruns.de
peterbruns.isp-vhost04.domservice.de
www.peterbruns.com
www.peterbruns.de
peterbruns.de
peterbruns.isp-vhost04.domservice.de
www.peterbruns.com
www.peterbruns.de
Other certificates including the domain name peterbruns.de
(limited to 100 certificates)
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.isp-vhost04.domservice.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.de
peterbruns.isp-vhost04.domservice.de
Certificate
The complete raw certificate details for peterbruns.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgISAw0ghgMaS8uoeX3M60kYHUrKMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDYwMTE0MzFaFw0y MDA2MDQwMTE0MzFaMBgxFjAUBgNVBAMTDXBldGVyYnJ1bnMuZGUwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCZTNw0vwaXcV3kiRFNJafHH3JwzTSOXWiU oaKRP7L+XM0iP67Lla0W15l7XWCqabtBjuar02JQjkGIqV982GbXqUYMVXAb0qnN ub1hx2CZhhgy6zp99nLZkz2J8rDhvwPr43zYjvfTJIBae2NaSy6XIVqchrDDhR9Y A/XLpf9wnbqForKsvIyF675YOP2QQMstkjzhnV5IpnaE63PJHEM0lXRynrJXE4XW nR+xTiprDeSuYiSh2uzPpNGCGLPf32GYZeKebRh3ZQ61fHEJ2WSUkT1+8A49EIJr OBstzFi6wJLhKdkHH7BM0vJG53Y8qw0faKk6KHiRL0e3ITnxGWsoKGaMBls06HPI 5vKoykiExThR3MoOxWbQ3VguMxJ6r4PELwrBYuYq5a/nikhhZ6gcuJXIvhFZlgbs bmR2K0t8KKeU9hQ5UXBdgBTDT2KCMGJ6lRrr/3pb8lDF22/raVg2NbZ4QC5RD8p8 /P3YinSl69n7v09QR58vcu0fYCXkP2RIWXmrOKtjTREeSD8jGvKTaF8TUv3kum66 bgslH6zHNmprcLH88ll5VXqPEHRD4welpotfZOhbRQQ5NXcgrkwRHUeIDAFO7vz9 L0zRPk92qX73Ec+mfJDXFUi/+5yyIA0Xd1X/pqWiYP8QrXabtT5Ncvad4WP8Nd8g H6JixOozlQIDAQABo4ICwTCCAr0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR8O2dA XQYJLfPX6WKEv0D3yf+M3DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMHUGA1UdEQRuMGyCDnBldGVyYnJ1bnMuY29tgg1w ZXRlcmJydW5zLmRlgiRwZXRlcmJydW5zLmlzcC12aG9zdDA0LmRvbXNlcnZpY2Uu ZGWCEnd3dy5wZXRlcmJydW5zLmNvbYIRd3d3LnBldGVyYnJ1bnMuZGUwTAYDVR0g BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0 cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIA dwDnEvKwN34aYvuOyQxhhPHqezfLVh0RJlvz4PNL8kFUbgAAAXCtn24eAAAEAwBI MEYCIQCg6kWFcqSFkwiXtXu8mFEs6OTieXzXeIge1kP1/zdiyQIhANZfigRsbTCU yQ/Fr3zPlbMiWOiUHUj1/zg4tsJWplKgAHcAB7dcG+V9aP/xsMYdIxXHuuZXfFeU t2ruvGE6GmnTohwAAAFwrZ9uTAAABAMASDBGAiEA0khgqoZjYPMpfFiJ7S4x1b3X RL65RcK100DOKN6WGMwCIQCucLAorEvM5y0U8/F6GEDIiT0qu42eevdQrBeO7sqR 9zANBgkqhkiG9w0BAQsFAAOCAQEAWmcL8Ytw+9QElq/pWlh3kLR6IuCiIdkbCJuI mjv9tPRGmdyHKEzmbdBjuerG8zQaaPh1yuW0a40FmZwCEtckaB+CU+uuZ5XAyURF kGzfag+aviFhXUJGPGzRa1tgqW6tz1a2VS7/HDmuFKwVtDJOUCoxZHYYrE5SXN9T WSGT9W8JRJasVrYDn+RaOR3qpoRHaIeaDEJGKo/Q7e2pY2/EZFg9xQKqdMLBxVrw OWA+5e9ur+fAu6qLSOUdVML0fL9L0rcXsVLEPbA9g39mXQuydHWtol42tBr3et2w /RZnT0QCZPtSrlHq9hpl7/UWscihMzuAOoe0qfX3qHe/17cvzw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmUzcNL8Gl3Fd5IkRTSWn xx9ycM00jl1olKGikT+y/lzNIj+uy5WtFteZe11gqmm7QY7mq9NiUI5BiKlffNhm 16lGDFVwG9Kpzbm9YcdgmYYYMus6ffZy2ZM9ifKw4b8D6+N82I730ySAWntjWksu lyFanIaww4UfWAP1y6X/cJ26haKyrLyMheu+WDj9kEDLLZI84Z1eSKZ2hOtzyRxD NJV0cp6yVxOF1p0fsU4qaw3krmIkodrsz6TRghiz399hmGXinm0Yd2UOtXxxCdlk lJE9fvAOPRCCazgbLcxYusCS4SnZBx+wTNLyRud2PKsNH2ipOih4kS9HtyE58Rlr KChmjAZbNOhzyObyqMpIhMU4UdzKDsVm0N1YLjMSeq+DxC8KwWLmKuWv54pIYWeo HLiVyL4RWZYG7G5kditLfCinlPYUOVFwXYAUw09igjBiepUa6/96W/JQxdtv62lY NjW2eEAuUQ/KfPz92Ip0pevZ+79PUEefL3LtH2Al5D9kSFl5qzirY00RHkg/Ixry k2hfE1L95Lpuum4LJR+sxzZqa3Cx/PJZeVV6jxB0Q+MHpaaLX2ToW0UEOTV3IK5M ER1HiAwBTu78/S9M0T5Pdql+9xHPpnyQ1xVIv/ucsiANF3dV/6alomD/EK12m7U+ TXL2neFj/DXfIB+iYsTqM5UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 265803759691827719559333270049667191491274 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 01:14:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-04 01:14:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'peterbruns.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 625410394660062520816322439766546420930382093087436656785803630430195226862577108061525216913665762816759547705011410256381068178178360825815398999480288181039712791928039731447607108607494775451807073608544548592022690648755476813160380004949613387601472815572972465424949804728893137643860667024568580535761350550135952757438553639929413523180504406998113215288327355758523362835615896491296659895128667201018160926237210825778678648549261124867980371387816601964604995079908501318701474447690211496246377009927648089237613515592181937919615834982095804304874146465778374121989930203177667030039826354807832989595014530201907568045242241439534356632698081714740512256916840210389118487878332770993298611009140186486929142591280387024969823157164465926984117070346869055944935567783492553488530744445007138054840595624095790203781314805046629850478849020100453101320351076104593658277293245341298913250677307492326477640733383013882904127433508931601837749043742925121724922288042793610034680103590136219749207562003620152430208727366982791743804543386206558789636581370761670116029854914926783358903566392178265863512257951073851750008650816153511546621315213839668623111910891928048534843548128041556333746166328451018398387286933 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7c3b67405d06092df3d7e96284bf40f7c9ff8cdc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterbruns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterbruns.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterbruns.isp-vhost04.domservice.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterbruns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterbruns.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170ad9f6e1e0000040300483046022100a0ea458572a485930897b57bbc98512ce8e4e2797cd778881ed643f5ff3762c9022100d65f8a046c6d3094c90fc5af7ccf95b32258e8941d48f5ff3838b6c256a652a000770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170ad9f6e4c0000040300483046022100d24860aa866360f3297c5889ed2e31d5bdd744beb945c2b5d340ce28de9618cc022100ae70b028ac4bcce72d14f3f17a1840c8893d2abb8d9e7af750ac178eeeca91f7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005a670bf18b70fbd40496afe95a587790b47a22e0a221d91b089b889a3bfdb4f44699dc87284ce66dd063b9eac6f3341a68f875cae5b46b8d05999c0212d724681f8253ebae6795c0c94445906cdf6a0f9abe21615d42463c6cd16b5b60a96eadcf56b6552eff1c39ae14ac15b4324e502a31647618ac4e525cdf53592193f56f094496ac56b6039fe45a391deaa6844768879a0c42462a8fd0ededa9636fc464583dc502aa74c2c1c55af039603ee5ef6eafe7c0bbaa8b48e51d54c2f47cbf4bd2b717b152c43db03d837f665d0bb27475ada25e36b41af77addb0fd16674f440264fb52ae51eaf61a65eff516b1c8a1333b803a87b4a9f5f7a877bfd7b72fcf