www.charliebanana.com
Issued by R3
About this certificate
This digital certificate with serial number 03:80:2c:0f:12:4c:8e:13:63:cc:59:7a:48:38:ee:3f:81:29 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.charliebanana.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:80:2c:0f:12:4c:8e:13:63:cc:59:7a:48:38:ee:3f:81:29Serial Number (int): 304951565048576961113089069833192204108073
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4b:6e:f9:b3:b9:14:27:36:25:08:0e:44:b9:d5:e5:5b:89:48:aa:c3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 50:3b:90:10:4e:fe:b7:ad:7b:c4:7b:f5:4d:ea:36:35:8a:aa:eb:0a
Fingerprint (sha256): 42:a6:09:4a:ee:48:45:1c:9c:14:a1:35:03:af:73:45:00:94:7c:9c:35:01:76:74:ba:4b:ba:6a:d7:67:41:bc
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.charliebanana.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.charliebanana.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.charliebanana.com
Other certificates including the domain name charliebanana.com
(limited to 100 certificates)
tracking.duckvideo.co
b2b.charliebanana.com
agency.ibex.co
hk.charliebanana.com
www.charliebanana.com
www.eu.charliebanana.com
cheetah.apstra.com
hk.charliebanana.com
eu.charliebanana.com
discover.newswire.com
www.charliebanana.com
www.charliebanana.com
eu.charliebanana.com
eu.charliebanana.com
hk.charliebanana.com
charliebanana.com
b2b.charliebanana.com
*.charliebanana.com
beta.charliebanana.com
hk.charliebanana.com
hk.charliebanana.com
b2b.charliebanana.com
agency.ibex.co
www.beta.charliebanana.com
eu.charliebanana.com
*.info.charliebanana.com
can.charliebanana.com
www.eu.charliebanana.com
sales.blueriveranalytics.com
eu.charliebanana.com
charliebanana.com
hk.charliebanana.com
hk.charliebanana.com
hk.charliebanana.com
www.charliebanana.com
www.charliebanana.com
b2b.charliebanana.com
sales.charliebanana.com
hk.charliebanana.com
b2b.charliebanana.com
sales.decent.com
charliebanana.com
hk.charliebanana.com
can.charliebanana.com
sales.xcelservicesgroup.net
fr-eu.charliebanana.com
eu.charliebanana.com
charliebanana.com
eu.charliebanana.com
fr-eu.charliebanana.com
fr-eu.charliebanana.com
hk.charliebanana.com
eu.charliebanana.com
hk.charliebanana.com
charliebanana.com
can.charliebanana.com
hk.charliebanana.com
sales.nuodb.com
can.charliebanana.com
tracking.duckvideo.co
can.charliebanana.com
charliebanana.com
fr-beta-eu.charliebanana.com
hk.charliebanana.com
sales.charliebanana.com
charliebanana.com
eu.charliebanana.com
hk.charliebanana.com
eu.charliebanana.com
eu.charliebanana.com
charliebanana.com
can.charliebanana.com
eu.charliebanana.com
es-beta.charliebanana.com
can.charliebanana.com
can.charliebanana.com
fr-eu.charliebanana.com
Charliebanana.com
www.charliebanana.com
hk.charliebanana.com
can.charliebanana.com
eu.charliebanana.com
www.charliebanana.com
hk.charliebanana.com
can.charliebanana.com
charliebanana.com
beta.charliebanana.com
es-beta.charliebanana.com
can.charliebanana.com
charliebanana.com
www.charliebanana.com
www.charliebanana.com
hk.charliebanana.com
charliebanana.com
www.charliebanana.com
fr-eu.charliebanana.com
www.beta.charliebanana.com
fr-eu.charliebanana.com
b2b.charliebanana.com
beta.charliebanana.com
b2b.charliebanana.com
agency.ibex.co
hk.charliebanana.com
www.charliebanana.com
www.eu.charliebanana.com
cheetah.apstra.com
hk.charliebanana.com
eu.charliebanana.com
discover.newswire.com
www.charliebanana.com
www.charliebanana.com
eu.charliebanana.com
eu.charliebanana.com
hk.charliebanana.com
charliebanana.com
b2b.charliebanana.com
*.charliebanana.com
beta.charliebanana.com
hk.charliebanana.com
hk.charliebanana.com
b2b.charliebanana.com
agency.ibex.co
www.beta.charliebanana.com
eu.charliebanana.com
*.info.charliebanana.com
can.charliebanana.com
www.eu.charliebanana.com
sales.blueriveranalytics.com
eu.charliebanana.com
charliebanana.com
hk.charliebanana.com
hk.charliebanana.com
hk.charliebanana.com
www.charliebanana.com
www.charliebanana.com
b2b.charliebanana.com
sales.charliebanana.com
hk.charliebanana.com
b2b.charliebanana.com
sales.decent.com
charliebanana.com
hk.charliebanana.com
can.charliebanana.com
sales.xcelservicesgroup.net
fr-eu.charliebanana.com
eu.charliebanana.com
charliebanana.com
eu.charliebanana.com
fr-eu.charliebanana.com
fr-eu.charliebanana.com
hk.charliebanana.com
eu.charliebanana.com
hk.charliebanana.com
charliebanana.com
can.charliebanana.com
hk.charliebanana.com
sales.nuodb.com
can.charliebanana.com
tracking.duckvideo.co
can.charliebanana.com
charliebanana.com
fr-beta-eu.charliebanana.com
hk.charliebanana.com
sales.charliebanana.com
charliebanana.com
eu.charliebanana.com
hk.charliebanana.com
eu.charliebanana.com
eu.charliebanana.com
charliebanana.com
can.charliebanana.com
eu.charliebanana.com
es-beta.charliebanana.com
can.charliebanana.com
can.charliebanana.com
fr-eu.charliebanana.com
Charliebanana.com
www.charliebanana.com
hk.charliebanana.com
can.charliebanana.com
eu.charliebanana.com
www.charliebanana.com
hk.charliebanana.com
can.charliebanana.com
charliebanana.com
beta.charliebanana.com
es-beta.charliebanana.com
can.charliebanana.com
charliebanana.com
www.charliebanana.com
www.charliebanana.com
hk.charliebanana.com
charliebanana.com
www.charliebanana.com
fr-eu.charliebanana.com
www.beta.charliebanana.com
fr-eu.charliebanana.com
b2b.charliebanana.com
beta.charliebanana.com
Certificate
The complete raw certificate details for www.charliebanana.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISA4AsDxJMjhNjzFl6SDjuP4EpMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMDEyMjQxOTMyMjhaFw0yMTAzMjQxOTMyMjhaMCAxHjAcBgNVBAMT FXd3dy5jaGFybGllYmFuYW5hLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAMQaTUmoGUwfNT2ItQuwE67/Jhm1f7PBbcGag6svvO+BBFZQJO4v5DDl Z+yqiqZtzqdOgUkfbji5/tMvN/QSSs/+jM/YFRpEXpbw7ePDFz58Kr6rOS0vlgFY fOI6FZ1mnCpDHZel80EfhubSsaJHUVN/kASsXS8b3f0DDGlWI5R7eSW5/HBmxT9e pvpNeimwBCvGzDa3LVaTx/eS6AOUhmkeU6Tz55gd4B7RziMAJptQBU5RjpWBTDGK tZxcQL6I0eI5EV9ga7HzHDzVAeVpQmu9pqKC1Lq3WxkZMJQbIt4n+beY6eXA2OXB A/gqtgsjpqusW0N1aIW1ZHqY+vfoLJcCAwEAAaOCAk4wggJKMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQUS275s7kUJzYlCA5EudXlW4lIqsMwHwYDVR0jBBgwFoAUFC6z F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl bmNyLm9yZy8wIAYDVR0RBBkwF4IVd3d3LmNoYXJsaWViYW5hbmEuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADu AHUAXNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbHDsoAAAF2lnPtwAAABAMA RjBEAiATnpCkkph9h5yGX+6x59TDtG4umeIKgU42ljH0Fzp+OgIgNIMIyXstRv+h +DVB8wv/j8wa8NmVjDBmMf8uAcB90wsAdQB9PvL4j/+IVWgkwsDKnlKJeSvFDngJ fy5ql2iZfiLw1wAAAXaWc+4hAAAEAwBGMEQCIBnML56F0djAhu/K3qsonpDed3hc swX1ECmghEA0UzYJAiABORV9vIJ1sVDyaExF4EOglcC6sBRS7qU7MgtATuUhKzAN BgkqhkiG9w0BAQsFAAOCAQEAbGwzL1MP9mZz5p6e1RNaWicyJixFfarAzTtnrTdj YZSjG6TuTBzrAaIsVWTV6ZZzoHuAEYiSMQK4QobV85FkhSn7BEdXI54VjJDMd/gL eCa2mAjn0AfdoHMbS0Mj7EKdQFiGBtiPR3JD0KqNx2fy8RY5St/l5VWMK8SDqki3 HQX+qOu9s4NxMPIOTYlKPycEvfQj0mx3s/zJ54G98PdusAKGRFWmqajqskJ1XPRE uEswOydbtStgIhzSuoRXFaXxUO5JyHi+Jt7v4aA24OkS636tyH3PxcvaLzAZ85+C 09HNYmlzmCv2l/wPIisCVy7WS1ygyCpy6Jelid9utdv6Jg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBpNSagZTB81PYi1C7AT rv8mGbV/s8FtwZqDqy+874EEVlAk7i/kMOVn7KqKpm3Op06BSR9uOLn+0y839BJK z/6Mz9gVGkRelvDt48MXPnwqvqs5LS+WAVh84joVnWacKkMdl6XzQR+G5tKxokdR U3+QBKxdLxvd/QMMaVYjlHt5Jbn8cGbFP16m+k16KbAEK8bMNrctVpPH95LoA5SG aR5TpPPnmB3gHtHOIwAmm1AFTlGOlYFMMYq1nFxAvojR4jkRX2BrsfMcPNUB5WlC a72mooLUurdbGRkwlBsi3if5t5jp5cDY5cED+Cq2CyOmq6xbQ3VohbVkepj69+gs lwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 304951565048576961113089069833192204108073 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-24 19:32:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-24 19:32:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.charliebanana.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24755677726179176463188977968465335594285564200443305246129264188087147353226079824378629876846275763783043799943953325446251814820520479380321515558460844776713515036508910614521065683190421903436969163687926753434911384455419159847902944268066434118505429039446215247868621673448945056370998448144828104094658827393387723502589269496237318906167604996456340713492910967758549300192113838439830134745748124278928729925563470191668697294714333784512853126999117129268103401049517180881261282809243572068987732158522821319233566123541532229833291975511952883531851286469856076288038758585939256289356958762550092639383 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4b6ef9b3b914273625080e44b9d5e55b8948aac3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charliebanana.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001769673edc000000403004630440220139e90a492987d879c865feeb1e7d4c3b46e2e99e20a814e369631f4173a7e3a0220348308c97b2d46ffa1f83541f30bff8fcc1af0d9958c306631ff2e01c07dd30b0075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001769673ee210000040300463044022019cc2f9e85d1d8c086efcadeab289e90de77785cb305f51029a084403453360902200139157dbc8275b150f2684c45e043a095c0bab01452eea53b320b404ee5212b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 006c6c332f530ff66673e69e9ed5135a5a2732262c457daac0cd3b67ad37636194a31ba4ee4c1ceb01a22c5564d5e99673a07b801188923102b84286d5f391648529fb044757239e158c90cc77f80b7826b69808e7d007dda0731b4b4323ec429d40588606d88f477243d0aa8dc767f2f116394adfe5e5558c2bc483aa48b71d05fea8ebbdb3837130f20e4d894a3f2704bdf423d26c77b3fcc9e781bdf0f76eb002864455a6a9a8eab242755cf444b84b303b275bb52b60221cd2ba845715a5f150ee49c878be26deefe1a036e0e912eb7eadc87dcfc5cbda2f3019f39f82d3d1cd626973982bf697fc0f222b02572ed64b5ca0c82a72e897a589df6eb5dbfa26