*.clue.no
- Clue Norge AS -
Issued by GeoTrust TLS RSA CA G1
About this certificate
This digital certificate with serial number 0e:e3:55:d6:90:94:61:88:e5:e5:53:de:5f:b5:dc:8e was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Clue Norge AS
Organization:
Clue Norge AS
State / Province:
Oslo
Locality: Oslo
Country: NO
Locality: Oslo
Country: NO
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0e:e3:55:d6:90:94:61:88:e5:e5:53:de:5f:b5:dc:8eSerial Number (int): 19789584332264539567332428458638040206
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 7e:eb:05:e3:71:08:c7:cf:24:e5:51:8c:ab:ff:6f:e5:3b:da:21:77
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57
Fingerprint (sha1): 0b:99:81:4a:ba:37:62:88:e7:2f:19:6b:92:b2:1b:5c:f9:fd:bf:f6
Fingerprint (sha256): 48:ef:58:34:d9:b9:65:ef:52:85:26:8a:a1:4b:68:44:36:f0:78:dd:bf:7b:91:a0:d7:f0:88:7c:0b:03:35:10
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
Check the revocation status for certificate *.clue.no
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.clue.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.clue.no
clue.no
clue.no
Other certificates including the domain name clue.no
(limited to 100 certificates)
*.clue.no
clue.no
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
clue.no
*.clue.no
clue.no
tls.automattic.com
*.clue.no
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
*.clue.no
*.clue.no
clue.no
*.clue.no
tls.automattic.com
*.clue.no
tls.automattic.com
demo.clue.no
clue.no
clue.no
clue.no
tls.automattic.com
tls.automattic.com
clubulvirtutilor.ro
clue.no
tls.automattic.com
*.clue.no
clue.no
clue.no
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
clue.no
*.clue.no
clue.no
tls.automattic.com
*.clue.no
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
*.clue.no
*.clue.no
clue.no
*.clue.no
tls.automattic.com
*.clue.no
tls.automattic.com
demo.clue.no
clue.no
clue.no
clue.no
tls.automattic.com
tls.automattic.com
clubulvirtutilor.ro
clue.no
tls.automattic.com
*.clue.no
clue.no
Certificate
The complete raw certificate details for *.clue.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIQDuNV1pCUYYjl5VPeX7XcjjANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTIzMDQyNDAwMDAwMFoXDTI0MDUyMTIzNTk1OVowVzELMAkGA1UEBhMCTk8x DTALBgNVBAgTBE9zbG8xDTALBgNVBAcTBE9zbG8xFjAUBgNVBAoTDUNsdWUgTm9y Z2UgQVMxEjAQBgNVBAMMCSouY2x1ZS5ubzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKQdYrgrBnWMTKZRviJTv9lDd1yWFWxRHHjVMty4yYHnDeT1w/gW 8yWdmZGyYz+f4MzZ0GL6hB9Ok6v/t6JqZAUdaBuJ9xxpQ0M2IEHwhPi/bRdv3Thk CaB9DnhJllivMYhA7lDtGtSi7qIjSK3hNytWg2KJamAfFmP7BqazJNtTh4OTyzE9 GWTadlr6PoggSHhzdcns4WEgt9b5EikJjiaYCA4Sw1RzKa29CjMq3QRqL9iFgg29 9vDS/pdgkyGoUnRT1zB+L1oNZCgBkQyd0slMNWrI3c6eslISiqihw21G8jOeonAr gTqrX8VHIlJgX80lWHfSq9a2Vl0E9qKAh/sCAwEAAaOCAxgwggMUMB8GA1UdIwQY MBaAFJRP1F2L5KTipoD+/dj5AO+jvgJXMB0GA1UdDgQWBBR+6wXjcQjHzyTlUYyr /2/lO9ohdzAdBgNVHREEFjAUggkqLmNsdWUubm+CB2NsdWUubm8wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA/BgNVHR8EODA2 MDSgMqAwhi5odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JTQUNB RzEuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6 Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB2BggrBgEFBQcBAQRqMGgwJgYIKwYBBQUH MAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD4GCCsGAQUFBzAChjJodHRw Oi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RUTFNSU0FDQUcxLmNydDAJ BgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdQDuzdBk1dsazsVc t520zROiModGfLzs3sNRSFlGcR+1mwAAAYeyB+KLAAAEAwBGMEQCIFFTsuBnq7fK HQn8F5t2hUxyQk5hq90WgRSXX4iz0Zu1AiAylHEjtemZjstOEQ/miwxAIIE2V4Mk jBrWfY0GADYhEgB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAAB h7IH4sMAAAQDAEcwRQIhAKfJxPQjgGcE5NArvmgIkBcbUNJSCIzF/n8TR8JC6nQJ AiAIxnVQofCE9jhBbwx0f6zvUo5QCyD4GNh5iNWq6iR+VQB3ANq2v2s/tbYin5vC u1xr6HCRcWy7UYSFNL2kPTBI1/urAAABh7IH4osAAAQDAEgwRgIhAKjcd/SuRh6G stRdweyxn10OofIsO3jZ/n5ZMwe99GjQAiEA6zEjm3uGUbYhS6/pwPdJ+yVIKzJj leScLM+pPs+UpS8wDQYJKoZIhvcNAQELBQADggEBAKFTHTjhA9XAgxLd/IY5wLPv W0Bs35UFYhYCmI1JswcGNbKNp5wos4mnUC1yDGLCBjdUCaP+GkZXNvkfSLiuzkcL LrxH/W8BqTJt0IV8SVt/p6XPVa8Nm7PdtYgxd+mDI9+B49VhBBI4Zh2Zmm5Cs4DZ ADevLV2JyTHlJa4RpnxZXQE2WMYERmnMxZW1Z7j0K0A6QacnKjZ5+kgVAH4Ay/dp b5GS62JgxIa+BB1n6SJb6uNRRscoTx/sXogbiw+RWCtopfy/lr9fenNhA7r0mMwt 8CRjmFNmKGiHir/Xd1uQTQnrJIEfaoLgHzZTQKmiW89LCdo7ujz7VhdapuXo4Xc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB1iuCsGdYxMplG+IlO/ 2UN3XJYVbFEceNUy3LjJgecN5PXD+BbzJZ2ZkbJjP5/gzNnQYvqEH06Tq/+3ompk BR1oG4n3HGlDQzYgQfCE+L9tF2/dOGQJoH0OeEmWWK8xiEDuUO0a1KLuoiNIreE3 K1aDYolqYB8WY/sGprMk21OHg5PLMT0ZZNp2Wvo+iCBIeHN1yezhYSC31vkSKQmO JpgIDhLDVHMprb0KMyrdBGov2IWCDb328NL+l2CTIahSdFPXMH4vWg1kKAGRDJ3S yUw1asjdzp6yUhKKqKHDbUbyM56icCuBOqtfxUciUmBfzSVYd9Kr1rZWXQT2ooCH +wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19789584332264539567332428458638040206 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oslo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oslo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Clue Norge AS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.clue.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20717572605049664258337440339178682238384360575497365783793591595897351238461004188928899387429421238984470076861827873427850692638635931607426678755105978552698829970737857538515370546852957806391091920754518195994721554228361165492121186822715003863782744713489937775238991362126952929734147365813440689867232688364762513500552149909272381547139799436890485699190011730843050412583549623119847277047545870390308604376788623662000528191102784773363137827287125375348837933155502554956110383964211314296833401025695916768860575895327130744847647848779175224654046920882752008948127193770201120645434839672389130815483 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7eeb05e37108c7cf24e5518cabff6fe53bda2177 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clue.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clue.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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