uzsvm.cz
Issued by R3
About this certificate
This digital certificate with serial number 04:c4:ca:ad:27:06:24:9d:b9:dd:bd:40:de:7f:50:18:a4:5f was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=uzsvm.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c4:ca:ad:27:06:24:9d:b9:dd:bd:40:de:7f:50:18:a4:5fSerial Number (int): 415413890757550680613759473263041626809439
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ba:2e:72:a7:0f:23:e0:10:59:fe:34:db:34:7d:60:dc:7c:1f:26:0f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): f3:68:aa:16:a1:20:2d:6e:10:e9:91:97:6f:4e:08:8d:5f:ac:05:ae
Fingerprint (sha256): 41:88:5d:b1:52:9b:91:6a:ed:82:39:5f:28:61:bc:2c:ff:3d:4f:80:e7:9f:ac:6a:55:ac:af:b7:ad:ec:ff:21
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate uzsvm.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for uzsvm.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
Other certificates including the domain name uzsvm.cz
(limited to 100 certificates)
crab.uzsvm.cz
*.uzsvm.cz
uzsvm.cz
uzsvm.cz
crab.uzsvm.cz
crab.uzsvm.cz
crab.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
uzsvm.cz
uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
nabidkysi.uzsvm.cz
uzsvm.cz
crab.uzsvm.cz
uzsvm.cz
crab.uzsvm.cz
uzsvm.cz
www.uzsvm.cz
uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
nabidkysi.uzsvm.cz
crab.uzsvm.cz
uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
nabidkysi.uzsvm.cz
crab.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
nabidkysi.uzsvm.cz
crab.uzsvm.cz
uzsvm.cz
nabidkysi.uzsvm.cz
nabidkysi.uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
nabidkysi.uzsvm.cz
uzsvm.cz
www.uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
uzsvm.cz
www.uzsvm.cz
nabidkysi.uzsvm.cz
crab.uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
mail.uzsvm.cz
asms1.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
uzsvm.cz
www.uzsvm.cz
nabidkysi.uzsvm.cz
crab.uzsvm.cz
mail.uzsvm.cz
crpj.uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
nabidkysi.uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
uzsvm.cz
nabidkysi.uzsvm.cz
crab.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
uzsvm.cz
crab.uzsvm.cz
crab.uzsvm.cz
uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
*.uzsvm.cz
uzsvm.cz
uzsvm.cz
crab.uzsvm.cz
crab.uzsvm.cz
crab.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
uzsvm.cz
uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
nabidkysi.uzsvm.cz
uzsvm.cz
crab.uzsvm.cz
uzsvm.cz
crab.uzsvm.cz
uzsvm.cz
www.uzsvm.cz
uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
nabidkysi.uzsvm.cz
crab.uzsvm.cz
uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
nabidkysi.uzsvm.cz
crab.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
nabidkysi.uzsvm.cz
crab.uzsvm.cz
uzsvm.cz
nabidkysi.uzsvm.cz
nabidkysi.uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
nabidkysi.uzsvm.cz
uzsvm.cz
www.uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
uzsvm.cz
www.uzsvm.cz
nabidkysi.uzsvm.cz
crab.uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
mail.uzsvm.cz
asms1.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
uzsvm.cz
www.uzsvm.cz
nabidkysi.uzsvm.cz
crab.uzsvm.cz
mail.uzsvm.cz
crpj.uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
nabidkysi.uzsvm.cz
nabidkysi.uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
uzsvm.cz
nabidkysi.uzsvm.cz
crab.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
nabidkysi.uzsvm.cz
uzsvm.cz
crab.uzsvm.cz
crab.uzsvm.cz
uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
crab.uzsvm.cz
www.uzsvm.cz
www.uzsvm.cz
Certificate
The complete raw certificate details for uzsvm.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgISBMTKrScGJJ253b1A3n9QGKRfMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTkyMjIwMzNaFw0yNDAzMTgyMjIwMzJaMBMxETAPBgNVBAMT CHV6c3ZtLmN6MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzomV3OM1 /TBTgHCGPUlTykozyGHynT9BJou5vbNxmSVBrEOseGtLZsEKhLOcA+B/GtWSbCU7 ah4yM6NhGTHAqvMF95k92WxsGzNcIrqnWTWdQ0EjYSpg3E2X7dne788rUk7IXCuE MDOZpeikVGYIkEU3fV/kOb/GEr9l2oHy8u4zfLaqAworog8XLsTilDYK8ti6ZH7k iyrAswVBxJSfxLApubvVopuctK0UOQbukWQCZ3RmAxzBBgRCNTauwLYjPCYPe6Hl F6EA+0fzWQHG7J8xAMPeuEHGHUJ55/DcaHjf4pa2rrqFz5HnTq87cESRLPvfRpKm MQTqrWffS14hbQIDAQABo4ICGTCCAhUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS6 LnKnDyPgEFn+NNs0fWDcfB8mDzAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+d ixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxl bmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAhBgNV HREEGjAYggh1enN2bS5jeoIMd3d3LnV6c3ZtLmN6MBMGA1UdIAQMMAowCAYGZ4EM AQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAouK/1h7eLy8HoNZObTen3GVD sMa1LqLat4r4mm31F9gAAAGMhGGJzQAABAMASDBGAiEAogT2FCVK36tlXbeu+Sx0 uZjeR/eBcGX1sSieYN48keQCIQDho02UsPtEiW0JBo6jFeyR9RsZqi8wBimZxSZ2 hkW+gQB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjIRhibsA AAQDAEcwRQIgBtzyBNmneLpxduYq2DcQzwjHx3LvOb3vvJ1TmnyPtzUCIQDxXXJy blKURbSMgbnnNBe5vXq6v+GR+hjqbW2csKOREjANBgkqhkiG9w0BAQsFAAOCAQEA IjDVjZxrJAkYlj4HG1ZvNKRFCLYyNonU76WD/F0r3eKjJY0txokaYuCiQJFkyCUq 4UUQJb4S0bezpADy/doRDFjcgcCaEYNm6XHt46UIysr/B8FR7/0EdGDBxSVd57k4 IR6l5pGAjojAGzPq7gBb1997bOjJCqh/rJWGIy5DnLuIR/kKDBsKlqw8ZRGXd1xq BMoiTgnk+qkWoWpcSuffcwWcKROz3JikL2JCf0smKWnbgJAllENSccYatgff9A2c THfn42erTUao12q682jhO32AG7edD8Vm5Y3iau4KV7WEKgaJy2Tki5BNkgw+A7OR sw0GY74fHJHfSarrJSGpQg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzomV3OM1/TBTgHCGPUlT ykozyGHynT9BJou5vbNxmSVBrEOseGtLZsEKhLOcA+B/GtWSbCU7ah4yM6NhGTHA qvMF95k92WxsGzNcIrqnWTWdQ0EjYSpg3E2X7dne788rUk7IXCuEMDOZpeikVGYI kEU3fV/kOb/GEr9l2oHy8u4zfLaqAworog8XLsTilDYK8ti6ZH7kiyrAswVBxJSf xLApubvVopuctK0UOQbukWQCZ3RmAxzBBgRCNTauwLYjPCYPe6HlF6EA+0fzWQHG 7J8xAMPeuEHGHUJ55/DcaHjf4pa2rrqFz5HnTq87cESRLPvfRpKmMQTqrWffS14h bQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 415413890757550680613759473263041626809439 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 22:20:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 22:20:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uzsvm.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26072936713250331249631064402628618203144800632571550729669676370423925112019758578042557801566698610807637680333680538247151199360547850165370617168147117781896232772181253964211307446751376545665682882279057903105145158308464679629474973020445300241891691865221706368584069894663020959779328176389173388384203870896505974001102226392931152891979600040902667058462049397445092108709348807428627424765837199143723389546624872308296355587732171342767478500802704115611274642327204098588458507271577403090492981096147974694695799107734418982578475665595284377696927427369903714319952883811171972736106665437729717625197 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ba2e72a70f23e01059fe34db347d60dc7c1f260f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzsvm.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uzsvm.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c846189cd0000040300483046022100a204f614254adfab655db7aef92c74b998de47f7817065f5b1289e60de3c91e4022100e1a34d94b0fb44896d09068ea315ec91f51b19aa2f30062999c526768645be8100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c846189bb0000040300473045022006dcf204d9a778ba7176e62ad83710cf08c7c772ef39bdefbc9d539a7c8fb735022100f15d72726e529445b48c81b9e73417b9bd7ababfe191fa18ea6d6d9cb0a39112 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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