www.ooca.co
Issued by GTS CA 1D2
About this certificate
This digital certificate with serial number e4:40:bb:9f:e7:d2:65:51:09:00:00:00:00:09:61:60 was issued on by Google Trust Services.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.ooca.co
Google Trust Services
Organization:
Google Trust Services
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): e4:40:bb:9f:e7:d2:65:51:09:00:00:00:00:09:61:60Serial Number (int): 303400095517526160765392258171562189152
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 11:2e:e0:68:2f:71:04:06:dd:92:a7:38:2d:5a:32:c4:71:5a:02:85
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9
Fingerprint (sha1): d4:9b:79:c1:7d:f3:50:8d:8e:a5:15:07:9a:bf:2a:4d:f7:6c:95:d6
Fingerprint (sha256): 41:8c:fb:f2:c2:18:d7:86:57:f6:6e:a3:ae:4e:cb:f4:38:98:0e:8b:53:39:77:27:63:81:40:41:ff:dd:f1:39
Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt
Revocation information
OCSP Server: http://ocsp.pki.goog/gts1d2CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl
Check the revocation status for certificate www.ooca.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ooca.co
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ooca.co
Other certificates including the domain name ooca.co
(limited to 100 certificates)
testapi.ooca.co
test.ooca.co
match-the-element.rccsonline.com
myex.app
sni.cloudflaressl.com
reinofloral.adparis.es
canpanionnft.com
herbinfo.cpa.ooca.co
admin-corp.ooca.co
ucash.co.in
testapi.ooca.co
auth.ooca.co
v5.rnfirebase.io
www.exenode.com
andersonbrownesolicitors.co.uk
admin.ooca.co
www.bort.cl
www.ngl.link
test.ooca.co
lookturismo.com.br
www.dougmart.in
www.med4us.in
tls.automattic.com
na-beta-app.uleeco.com
fiftheon.com
obgyn.cpa.ooca.co
apigateway.ooca.co
promotionapi.ooca.co
app.staging.ooca.co
app.waseda-onodalab.jp
app.ooca.co
*.ooca.co
www.accesoapp.com
www.sportsdatasolutions.academy
firstcareer.app.1on1navi.com
test.ooca.co
developer.ooca.co
test.ooca.co
test.ooca.co
test.ooca.co
thedevelopers.agency
www.todalacomida.app
promotionapi.ooca.co
api.staging.ooca.co
promotionapi.ooca.co
www.ampletime.com
miastotogra.pl
damoonrashidi.me
potligroceryadmin.estore.business
nanaychat.com
app.ooca.co
pqs-juridisch.koenenenco.nl
www.bhajipala.co
ooca.co
boutiqueincrivel.com
obgynapi.cpa.ooca.co
test.ooca.co
tillhub.ch
promotionapi.ooca.co
links.soupilar.com.br
thenyeripoly.ac.ke
l.artpix3d.com
app.bitpong.it
lookturismo.com.br
www.ooca.co
tls.automattic.com
tls.automattic.com
admin.ooca.co
www.ooca.co
app.ooca.co
obgyn.cpa.ooca.co
ey3k0n.io
apigateway.ooca.co
promotionapi.ooca.co
dsapp.app
app.ooca.co
test.ooca.co
api.ooca.co
www.mupapers.com
exchange.sishi.finance
test.ooca.co
ilgiardinodimelange.it
admin-corp.ooca.co
admin-corp.ooca.co
www.cloudcenter-on-the-go.com
www.arcadenoecj.com.br
01.vue.frontend.notes.ignaczdominik.hu
privilege.ooca.co
app.ooca.co
wizarddresden.com
website1219.estore.business
www.eashl-player-builder.com
www.ooca.co
www.ooca.co
docs.storysynth.org
admin2.ooca.co
tls.automattic.com
api.ooca.co
makotopty.com
test.ooca.co
test.ooca.co
match-the-element.rccsonline.com
myex.app
sni.cloudflaressl.com
reinofloral.adparis.es
canpanionnft.com
herbinfo.cpa.ooca.co
admin-corp.ooca.co
ucash.co.in
testapi.ooca.co
auth.ooca.co
v5.rnfirebase.io
www.exenode.com
andersonbrownesolicitors.co.uk
admin.ooca.co
www.bort.cl
www.ngl.link
test.ooca.co
lookturismo.com.br
www.dougmart.in
www.med4us.in
tls.automattic.com
na-beta-app.uleeco.com
fiftheon.com
obgyn.cpa.ooca.co
apigateway.ooca.co
promotionapi.ooca.co
app.staging.ooca.co
app.waseda-onodalab.jp
app.ooca.co
*.ooca.co
www.accesoapp.com
www.sportsdatasolutions.academy
firstcareer.app.1on1navi.com
test.ooca.co
developer.ooca.co
test.ooca.co
test.ooca.co
test.ooca.co
thedevelopers.agency
www.todalacomida.app
promotionapi.ooca.co
api.staging.ooca.co
promotionapi.ooca.co
www.ampletime.com
miastotogra.pl
damoonrashidi.me
potligroceryadmin.estore.business
nanaychat.com
app.ooca.co
pqs-juridisch.koenenenco.nl
www.bhajipala.co
ooca.co
boutiqueincrivel.com
obgynapi.cpa.ooca.co
test.ooca.co
tillhub.ch
promotionapi.ooca.co
links.soupilar.com.br
thenyeripoly.ac.ke
l.artpix3d.com
app.bitpong.it
lookturismo.com.br
www.ooca.co
tls.automattic.com
tls.automattic.com
admin.ooca.co
www.ooca.co
app.ooca.co
obgyn.cpa.ooca.co
ey3k0n.io
apigateway.ooca.co
promotionapi.ooca.co
dsapp.app
app.ooca.co
test.ooca.co
api.ooca.co
www.mupapers.com
exchange.sishi.finance
test.ooca.co
ilgiardinodimelange.it
admin-corp.ooca.co
admin-corp.ooca.co
www.cloudcenter-on-the-go.com
www.arcadenoecj.com.br
01.vue.frontend.notes.ignaczdominik.hu
privilege.ooca.co
app.ooca.co
wizarddresden.com
website1219.estore.business
www.eashl-player-builder.com
www.ooca.co
www.ooca.co
docs.storysynth.org
admin2.ooca.co
tls.automattic.com
api.ooca.co
makotopty.com
test.ooca.co
Certificate
The complete raw certificate details for www.ooca.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIRAORAu5/n0mVRCQAAAAAJYWAwDQYJKoZIhvcNAQELBQAw QjELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczET MBEGA1UEAxMKR1RTIENBIDFEMjAeFw0yMDAyMDIxODExMDZaFw0yMDA1MDIxODEx MDZaMBYxFDASBgNVBAMTC3d3dy5vb2NhLmNvMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAtRSqSojmlY364ELlx3ayTGY6C/mCk7sNdXY+8sqljGwOgw3p URBGzFPZx4QnMgivJm9gj28y4XR/kZ8VIbXTOPcGRBXCIiXKkdSOGPjEHbPhBF/s TaT6zmDQORGtU+lo/lOH6xMJ7wRqKcnush1arIFD7+zx43aX38mN0KbsOmiOt3/h MW9yOZekyZCapLNJL9PRuYKHnMdpC2uBJHd4iOhNMfn2LFelVW1IlgX33rVXAGCz BJZJ4G6ydBGD4ZxL3ZAiu3oR/1jBVkywaMJFOHxzAUfszwCkmAUg24apGRzhShO0 xgT3hpQiDFkMDNdIanz0+PRu2Wrw2XLtfU2olwIDAQABo4ICUDCCAkwwDgYDVR0P AQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFBEu4GgvcQQG3ZKnOC1aMsRxWgKFMB8GA1UdIwQYMBaAFLHdMl3otzdy 0s5czib+R3niAQjpMGQGCCsGAQUFBwEBBFgwVjAnBggrBgEFBQcwAYYbaHR0cDov L29jc3AucGtpLmdvb2cvZ3RzMWQyMCsGCCsGAQUFBzAChh9odHRwOi8vcGtpLmdv b2cvZ3NyMi9HVFMxRDIuY3J0MBYGA1UdEQQPMA2CC3d3dy5vb2NhLmNvMCEGA1Ud IAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwLwYDVR0fBCgwJjAkoCKgIIYe aHR0cDovL2NybC5wa2kuZ29vZy9HVFMxRDIuY3JsMIIBAwYKKwYBBAHWeQIEAgSB 9ASB8QDvAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFwB1BK NgAABAMARzBFAiEA1Fh8lAofoPyQ0bBr8LYaTChGKCBzAKyd1p5+ukVqEMkCIFCU Jp+TqmNsw8Z6YtMFK9ayhLdgwn6eQFxprc3nJyNmAHUAXqdz+d9WwOe1Nkh90Eng MnqRmgyEoRIShBh1loFxRVgAAAFwB1BKVwAABAMARjBEAiAZDttJo905u2ZEzhtU uk6SWdI060lTlYEokqHRlmpPgQIgFtnsirB7y/4ThN05J5LEGR6ZozTrmwZyPaSz VCh1ifcwDQYJKoZIhvcNAQELBQADggEBAA0UciTX0qLbnMrrpMGVFzSRIgVgqgoR l7WMej1e8vhJCHzc7KXR3EVT3CS/m1g7GDWx0nBDzS4UX6E5Uayos7D9KEam38Ai J64cOAzEFCP/xm7Adu+DWsqHWA4oAy2WXEeSjNe3LVAaHOayCtXJ6Q1E4a9xSbdD 1coITXCP9oxRthg5Ufc/32UrSy0qkrRaJOKudKriZSVb5AAZB8k08KTcpHTplUQK Pfb8zku0bnKNML7FGOyiNHJFVD5O7ohkUN58L4xZb3rl5nsDrW9vz+H563Q8yP5A 8nyWLp2GBwqE+yrxXhKnqZ3/+nF4i2uZSJAHsc1XHIRHzpzmPgEVt/4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRSqSojmlY364ELlx3ay TGY6C/mCk7sNdXY+8sqljGwOgw3pURBGzFPZx4QnMgivJm9gj28y4XR/kZ8VIbXT OPcGRBXCIiXKkdSOGPjEHbPhBF/sTaT6zmDQORGtU+lo/lOH6xMJ7wRqKcnush1a rIFD7+zx43aX38mN0KbsOmiOt3/hMW9yOZekyZCapLNJL9PRuYKHnMdpC2uBJHd4 iOhNMfn2LFelVW1IlgX33rVXAGCzBJZJ4G6ydBGD4ZxL3ZAiu3oR/1jBVkywaMJF OHxzAUfszwCkmAUg24apGRzhShO0xgT3hpQiDFkMDNdIanz0+PRu2Wrw2XLtfU2o lwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 303400095517526160765392258171562189152 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 18:11:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 18:11:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ooca.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22859323588684104273194633655643437158688120120248359104810432467702611329253471811407063005750993203095592879436426987166951440720794368544234148533155917351630041488249253363465205551696644506426784287634640384101058963380931052804464261761755904147635933421355664325835376853615729926715355301344866199382054122924989092413654093168278018232855986534312567433941933490081828027806359737459951296673119041288595714241552171336907547746077833311902574069170718565894793734617020153999643384172717683499839256766332761483635842715753618632488889207383499254691535609337690840426914875534936122987278753473422399744151 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 112ee0682f710406dd92a7382d5a32c4715a0285 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ooca.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017007504a360000040300473045022100d4587c940a1fa0fc90d1b06bf0b61a4c284628207300ac9dd69e7eba456a10c902205094269f93aa636cc3c67a62d3052bd6b284b760c27e9e405c69adcde72723660075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017007504a5700000403004630440220190edb49a3dd39bb6644ce1b54ba4e9259d234eb495395812892a1d1966a4f81022016d9ec8ab07bcbfe1384dd392792c4191e99a334eb9b06723da4b354287589f7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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