itinerary.travelalberta.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:d9:62:ba:5b:c6:05:68:12:b8:76:e7:8e:5c:33:5b:49:b6 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=itinerary.travelalberta.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:d9:62:ba:5b:c6:05:68:12:b8:76:e7:8e:5c:33:5b:49:b6Serial Number (int): 422421649321075365743397427231107338422710
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2b:87:57:96:19:1c:ca:81:4b:08:df:cb:d4:21:6a:3a:c9:50:5d:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f2:5c:47:4f:e0:60:23:9b:f9:e5:17:69:51:f1:8c:03:dd:a8:1a:62
Fingerprint (sha256): 41:fb:f0:34:18:d8:9a:71:41:59:37:00:be:de:b6:1a:1c:a2:19:27:f3:f3:91:1d:b2:24:03:c7:17:a4:f4:9a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate itinerary.travelalberta.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for itinerary.travelalberta.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
itinerary.travelalberta.com
Other certificates including the domain name travelalberta.com
(limited to 100 certificates)
wadetrim.trubytraining.com
incapsula.com
wadetrim.trubytraining.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
academy.boulderinsight.com
incapsula.com
incapsula.com
www.travelalberta.cn
internal.hedgucation.assurehedge.com
ta-cgy-ise01.corp.travelalberta.com
admin.travelalberta.com
digitalsupport.travelalberta.com
incapsula.com
sip2-noram.s4b.my-ucaas.com
sip2-noram.s4b.my-ucaas.com
incapsula.com
incapsula.com
incapsula.com
mail.travelalberta.com
incapsula.com
serpentine.polo-development.com
polopark.polo-development.com
incapsula.com
incapsula.com
staff.arcsystechnologies.com
access01.partnerhosted.com
industry.travelalberta.com
www.bloombehive.com
incapsula.com
*.travelalberta.com
incapsula.com
incapsula.com
incapsula.com
digitalsupport.travelalberta.com
incapsula.com
incapsula.com
imperva.com
sip2-noram.s4b.my-ucaas.com
digitalsupport.travelalberta.com
industry.travelalberta.com
polobern.polo-development.com
incapsula.com
incapsula.com
incapsula.com
mail.travelalberta.com
incapsula.com
fs.travelalberta.com
incapsula.com
ta-cgy-ise01.corp.travelalberta.com
access01.partnerhosted.com
competence.rosen-group.com
uni.airportlogistics.org
blogauthor.travelalberta.com
elearning.toyota.com.ph
incapsula.com
incapsula.com
sip2-noram.s4b.my-ucaas.com
incapsula.com
digitalsupport.travelalberta.com
access01.partnerhosted.com
incapsula.com
academy.boulderinsight.com
learning.travelalberta.com
incapsula.com
alp.arcsystechnologies.com
internal.hedgucation.assurehedge.com
incapsula.com
access01.partnerhosted.com
incapsula.com
*.travelalberta.com
incapsula.com
www.bloombehive.com
www.pts.org
incapsula.com
incapsula.com
litifam-training.litify.com
incapsula.com
incapsula.com
itinerary.travelalberta.com
incapsula.com
academy.evgo.com
multimedia.travelalberta.com
mail.travelalberta.com
basecamp.travelalberta.com
access01.partnerhosted.com
incapsula.com
incapsula.com
digitalsupport.travelalberta.com
access01.partnerhosted.com
incapsula.com
sip2-noram.s4b.my-ucaas.com
elearning.toyota.com.ph
sip2-noram.s4b.my-ucaas.com
brand.polo-development.com
fairchild.trubytraining.com
www.travelalberta.cn
incapsula.com
incapsula.com
wadetrim.trubytraining.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
academy.boulderinsight.com
incapsula.com
incapsula.com
www.travelalberta.cn
internal.hedgucation.assurehedge.com
ta-cgy-ise01.corp.travelalberta.com
admin.travelalberta.com
digitalsupport.travelalberta.com
incapsula.com
sip2-noram.s4b.my-ucaas.com
sip2-noram.s4b.my-ucaas.com
incapsula.com
incapsula.com
incapsula.com
mail.travelalberta.com
incapsula.com
serpentine.polo-development.com
polopark.polo-development.com
incapsula.com
incapsula.com
staff.arcsystechnologies.com
access01.partnerhosted.com
industry.travelalberta.com
www.bloombehive.com
incapsula.com
*.travelalberta.com
incapsula.com
incapsula.com
incapsula.com
digitalsupport.travelalberta.com
incapsula.com
incapsula.com
imperva.com
sip2-noram.s4b.my-ucaas.com
digitalsupport.travelalberta.com
industry.travelalberta.com
polobern.polo-development.com
incapsula.com
incapsula.com
incapsula.com
mail.travelalberta.com
incapsula.com
fs.travelalberta.com
incapsula.com
ta-cgy-ise01.corp.travelalberta.com
access01.partnerhosted.com
competence.rosen-group.com
uni.airportlogistics.org
blogauthor.travelalberta.com
elearning.toyota.com.ph
incapsula.com
incapsula.com
sip2-noram.s4b.my-ucaas.com
incapsula.com
digitalsupport.travelalberta.com
access01.partnerhosted.com
incapsula.com
academy.boulderinsight.com
learning.travelalberta.com
incapsula.com
alp.arcsystechnologies.com
internal.hedgucation.assurehedge.com
incapsula.com
access01.partnerhosted.com
incapsula.com
*.travelalberta.com
incapsula.com
www.bloombehive.com
www.pts.org
incapsula.com
incapsula.com
litifam-training.litify.com
incapsula.com
incapsula.com
itinerary.travelalberta.com
incapsula.com
academy.evgo.com
multimedia.travelalberta.com
mail.travelalberta.com
basecamp.travelalberta.com
access01.partnerhosted.com
incapsula.com
incapsula.com
digitalsupport.travelalberta.com
access01.partnerhosted.com
incapsula.com
sip2-noram.s4b.my-ucaas.com
elearning.toyota.com.ph
sip2-noram.s4b.my-ucaas.com
brand.polo-development.com
fairchild.trubytraining.com
www.travelalberta.cn
incapsula.com
Certificate
The complete raw certificate details for itinerary.travelalberta.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISBNliulvGBWgSuHbnjlwzW0m2MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMTAwNTQ2NDdaFw0x OTAzMTAwNTQ2NDdaMCYxJDAiBgNVBAMTG2l0aW5lcmFyeS50cmF2ZWxhbGJlcnRh LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIctpZrgju/DbWLv 1gtvuWZGY8y//Yq4plNqoxFd7oF7MViQc7nbRznGXp622O3fPdvYB8Z7d2CmEKGy LmMlS9Dg31UZEebTCDpnwORLIbca4/9bNYal2pc5kjT6SoS7x2zGC8nvUpL0WBLI xtHBR64BVNji4WbVn7VyOIVHsR7XBkEj/G/YrHIgC4oOIp0kmhgh03SJnaRcz69d kgZ+O+RwUVJqgdU4BD05ehs1RaKeCxo+qczUzL0eh4R8KapWlg4oZaprro3AN1/R 2a6ZS1k1lr7jlHtkJl31cZiE0W7JkaoIg9k32ghL3VEek4pbFCL+yQd70SU5wl5Q E/l2hN0CAwEAAaOCAnIwggJuMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUK4dXlhkc yoFLCN/L1CFqOslQXYgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzAmBgNVHREEHzAdghtpdGluZXJhcnkudHJhdmVsYWxi ZXJ0YS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEE AdZ5AgQCBIH3BIH0APIAdwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvM VgAAAWeW3kD1AAAEAwBIMEYCIQDcjV9mjEYtMuVywxCyDYAunK90hon+RJRLB4YL GDUqEwIhAMfKOMiK84vE2K7h2IDW5dcHiwM4NtotyNPCUCd0ETr5AHcAY/Lbzeg7 zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFnlt5C8gAABAMASDBGAiEA8785 x0KA519kAZMlxKICAibk+O9eEorMUkJB/k564LcCIQD22/2hLwtHn0EzM35kN7Lf 1SdhE+ydd1iXzryv8AOaszANBgkqhkiG9w0BAQsFAAOCAQEAlMphU45uAk/ZR2jD cNmNpjmkZf0bSt89GowEtoYFQscRyMZigHyiSy5Ta89EPvKuxC7en/sopOIQPTKR km8lD0RccMWpQiD2BlFksWnOQd/mYCJnkX+yw/Cbr7iimMGT6hjy4ZtGQ+jEqJi4 FcXTu/ERHTUtYq6ivi24yH1Tsh9OextpdMcK0ELryVeKtWkTCucls1vwHPO8x2OV AiEbIH4vOWZPrxBTyyP2WX0AepHQML6hJIHNES21P1F+4FbxD4Mpb/uFyY72B+Rp YEFdoA7mz5igZUYIRb34+Q1XjWaBKblou4vaEDAZ0ddiH3F9Oyjnd94SLuS4izbA ZbN67A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy2lmuCO78NtYu/WC2+5 ZkZjzL/9irimU2qjEV3ugXsxWJBzudtHOcZenrbY7d8929gHxnt3YKYQobIuYyVL 0ODfVRkR5tMIOmfA5Eshtxrj/1s1hqXalzmSNPpKhLvHbMYLye9SkvRYEsjG0cFH rgFU2OLhZtWftXI4hUexHtcGQSP8b9isciALig4inSSaGCHTdImdpFzPr12SBn47 5HBRUmqB1TgEPTl6GzVFop4LGj6pzNTMvR6HhHwpqlaWDihlqmuujcA3X9HZrplL WTWWvuOUe2QmXfVxmITRbsmRqgiD2TfaCEvdUR6TilsUIv7JB3vRJTnCXlAT+XaE 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 422421649321075365743397427231107338422710 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-10 05:46:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-10 05:46:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itinerary.travelalberta.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17064680493024005589752957906774566439434540883035829274790912236576088141596880831251911783795654460862689499269978210702710744535526148590291309776889253807078714886129646837109287758260277883212925622002899824787155116522208650815926381696591789402746086477041728918944292846535475215312388242234582714728793877236667943693777250155893238419663106117940045531946587961523497547968143139020003955136902007905127630725020525277079617963300570707979501353581610800839824077124499467058533311065914825561342797505415927385859192922485216765202479873222123559278877295571682045541051017565315737687678132967097918457053 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2b875796191cca814b08dfcbd4216a3ac9505d88 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itinerary.travelalberta.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016796de40f50000040300483046022100dc8d5f668c462d32e572c310b20d802e9caf748689fe44944b07860b18352a13022100c7ca38c88af38bc4d8aee1d880d6e5d7078b033836da2dc8d3c2502774113af900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016796de42f20000040300483046022100f3bf39c74280e75f64019325c4a2020226e4f8ef5e128acc524241fe4e7ae0b7022100f6dbfda12f0b479f4133337e6437b2dfd5276113ec9d775897cebcaff0039ab3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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