boid.se
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:7c:9f:6f:c9:2f:a5:6b:43:f3:0c:92:8b:6e:a5:52:5f:84 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=boid.se
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:7c:9f:6f:c9:2f:a5:6b:43:f3:0c:92:8b:6e:a5:52:5f:84Serial Number (int): 303743798970297457073710040920729760980868
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f4:20:ff:9a:18:a5:04:c7:16:82:c0:c8:42:44:06:f9:0d:d0:1a:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 51:19:eb:98:53:ff:e8:bb:0d:a8:15:f8:b1:b8:7d:94:d3:01:0f:15
Fingerprint (sha256): 4b:69:90:2b:f6:80:2b:47:43:62:1c:05:13:2a:0b:26:af:95:51:b9:c3:9b:5c:8c:c5:76:8d:e7:cf:f6:64:13
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate boid.se
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for boid.se
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
boid.se
www.boid.se
www.boid.se
Other certificates including the domain name boid.se
(limited to 100 certificates)
rpieducation.com
dev-admin.lifewithgolf.app-daydelight.com
clicks.boid.se
kokos.boid.se
auth.cloud.orchesty.io
crlfe.ca
www.audiovideoplanet.com
boid.se
pieceofcake.ai
www.adnpc.ml
boid.se
cybergod.app
pruebas.navike21.com
www.couplemonitor.app
thomastkh.tk
subjoin.io
boid.se
www.admin.k-9access.com
boid.se
boid.se
admin.dev.getperkify.com
www.dbdmobilehack.com
kokos.boid.se
www.marcrufeis.de
cybergod.app
bandcamp.viasacra.band
kokos.boid.se
ardrarehab.com
invertecfoods.cl
clicks.boid.se
www.relevoz.com
www.science-master.jp
antonbilonog.com
xtract.boid.se
teamleader.ingestigator.com
personalbillett.staging.entur.no
app-stage.shopin-solothurn.ch
ardrarehab.com
personalbillett.staging.entur.no
app-stage.shopin-solothurn.ch
shutme.app
thepaymentbutton.com
server-cdn.staging.net.in
auth.cloud.orchesty.io
toki.w125.jp
www.jasonkelly.info
www.redstonemail.app
dev.boid.se
slw.ai
www.flexform.app
boid.se
a.dashifi.app
mobile.servicevanguard.com
phylo.rebus.com.co
claim.okinalabs.io
kokos.boid.se
dev-admin.lifewithgolf.app-daydelight.com
clicks.boid.se
kokos.boid.se
auth.cloud.orchesty.io
crlfe.ca
www.audiovideoplanet.com
boid.se
pieceofcake.ai
www.adnpc.ml
boid.se
cybergod.app
pruebas.navike21.com
www.couplemonitor.app
thomastkh.tk
subjoin.io
boid.se
www.admin.k-9access.com
boid.se
boid.se
admin.dev.getperkify.com
www.dbdmobilehack.com
kokos.boid.se
www.marcrufeis.de
cybergod.app
bandcamp.viasacra.band
kokos.boid.se
ardrarehab.com
invertecfoods.cl
clicks.boid.se
www.relevoz.com
www.science-master.jp
antonbilonog.com
xtract.boid.se
teamleader.ingestigator.com
personalbillett.staging.entur.no
app-stage.shopin-solothurn.ch
ardrarehab.com
personalbillett.staging.entur.no
app-stage.shopin-solothurn.ch
shutme.app
thepaymentbutton.com
server-cdn.staging.net.in
auth.cloud.orchesty.io
toki.w125.jp
www.jasonkelly.info
www.redstonemail.app
dev.boid.se
slw.ai
www.flexform.app
boid.se
a.dashifi.app
mobile.servicevanguard.com
phylo.rebus.com.co
claim.okinalabs.io
kokos.boid.se
Certificate
The complete raw certificate details for boid.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISA3yfb8kvpWtD8wySi26lUl+EMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDcxMDA4MjBaFw0y MDAxMDUxMDA4MjBaMBIxEDAOBgNVBAMTB2JvaWQuc2UwggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQCmbxrzh8+1UxzBmScz5tYz/1RXXC+8IbCTvBe92GTU KKLymOWR4obHEbfSWD0Wu/ynbXzNrjBtOwLEIGSxEoh9IgqfeUH9Iz8WuYHXHQ4K 6+AfCXTLIRYMgIwbgOos0Cak2WBPGBbm44j3rK/y8PpCZUMQQDMEaUBaGOHmwfGt JaN7zXCWXWWLjmNvGUSB8478X3Ml3XHT3uk0Q69oHL+Bdf8OkP3OGOha4ARp43tV 2KJA6Ht/3KvxtaChOvGF0Le5v9khmjJ315WHh0GLy/Ov8OIyZAEPUmmP8IiHCYUt 9SWT8U41lxs1+7VsX/qOsdMQyEGjrf0fG5Gq84NkoggZwY8tQ4eLHZriN81NA4u7 ftLV6A4MWtR/b6GQRJ+NV4LE2S/lwYmF0E9nD/ZJfb/bDk5kjwWxsj6gvRrzJxNQ 5eF/azvsUej0N+jp4o5YifFfmlIrTf0/JJUL+BPQaE92NGj11btLINbdi5NDrabv bJoM2X7eU1eW2n/y2XLCvyIazAAlwwaqoxk5O41kZ2abR+yKFQ/JFF2pvFUJXycF 9Og7fzuvnP+0HbHjVWnt7won1x+JLRZuPmIiBC/wSgvSIyb1WCUoXRmzqb2xOq3b 9Q2MrJ9dwf8ivB3thhWfOhn9VhtPNtGQxs84DmnerG8iwXTIX75qvFGoxY2Y3jXE EQIDAQABo4ICaDCCAmQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT0IP+aGKUExxaC wMhCRAb5DdAa6DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz ZW5jcnlwdC5vcmcvMB8GA1UdEQQYMBaCB2JvaWQuc2WCC3d3dy5ib2lkLnNlMEwG A1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEW Gmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB 8QDvAHUAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFtpefh9gAA BAMARjBEAiAl4NIUkAqJIPc44eNqvnxuUNFYONkMyLHB5r3jtpEQOgIgGfCZeNlS 2ZRzAho7DSADQNOcbGz3VHSb4NJU8FcdmtQAdgApPFGWVMg5ZbqqUPxYB9S3b79Y eily3KTDDPTlRUf0eAAAAW2l5+QQAAAEAwBHMEUCIEVzeFbyPQs+/Ooja5GnBNjo tSk71VoifbgZWJqadO5YAiEA/G2H7K7CVAXS8GjnA/VeuJLhVwP0vCYEbMUrgL0d sR4wDQYJKoZIhvcNAQELBQADggEBAJW9fUvJo6jpk7fdk/M3NzVY2u/t+TlysMXs 8jKeA51zt0+DuJuTiHNEnFBsFd+9c0JgnX8u9Mn4F43SMiqGE4gX/DVRW2Sb4Nig We6GzHUQ+EN5TrehaHrakeZVInMji0qrBDf/gPOMZexNcL3fvLKx8aGzY1VTyf9e w3PTQKpa+YR+vyqIK0gc/n7CIiOupt0+WDL/HZHYUi4dgfBkwNOPwi5niN7kp9ne cE5st918KBnG/UkJurigbkDwGYbr43VsRXFtgNZ8prxOBFCC3GhAtWOesCeIdrIB 94WYSWBKDkH2MXsJL2irCasmFjYdmqHu5uwqL+JC0qxsR0mM8o8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApm8a84fPtVMcwZknM+bW M/9UV1wvvCGwk7wXvdhk1Cii8pjlkeKGxxG30lg9Frv8p218za4wbTsCxCBksRKI fSIKn3lB/SM/FrmB1x0OCuvgHwl0yyEWDICMG4DqLNAmpNlgTxgW5uOI96yv8vD6 QmVDEEAzBGlAWhjh5sHxrSWje81wll1li45jbxlEgfOO/F9zJd1x097pNEOvaBy/ gXX/DpD9zhjoWuAEaeN7VdiiQOh7f9yr8bWgoTrxhdC3ub/ZIZoyd9eVh4dBi8vz r/DiMmQBD1Jpj/CIhwmFLfUlk/FONZcbNfu1bF/6jrHTEMhBo639HxuRqvODZKII GcGPLUOHix2a4jfNTQOLu37S1egODFrUf2+hkESfjVeCxNkv5cGJhdBPZw/2SX2/ 2w5OZI8FsbI+oL0a8ycTUOXhf2s77FHo9Dfo6eKOWInxX5pSK039PySVC/gT0GhP djRo9dW7SyDW3YuTQ62m72yaDNl+3lNXltp/8tlywr8iGswAJcMGqqMZOTuNZGdm m0fsihUPyRRdqbxVCV8nBfToO387r5z/tB2x41Vp7e8KJ9cfiS0Wbj5iIgQv8EoL 0iMm9VglKF0Zs6m9sTqt2/UNjKyfXcH/Irwd7YYVnzoZ/VYbTzbRkMbPOA5p3qxv IsF0yF++arxRqMWNmN41xBECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 303743798970297457073710040920729760980868 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 10:08:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 10:08:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'boid.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678991501190870901895707101751418471928726321961424549878872568314265585926532891648793051347929565312101330222249305115608330336082881736579479723827257399357281365362172662424473482989612394254539266570578773423878656524526689294409433060046137618815547285466899520352697781673292172380626972388349811831592929889364516693581641614266203142049090998892386878555030602969803474489287034733391986818197503168673601039971992545793558767124459825133782644988478301914735300349858530558271341783467822974686713647250693644357839203029222857702962761052531480535046617780970561892525991863921154481250874801557113311479019865568300980576504097688906943293107407554797774015886844226077282030179584259688701609842874359843350446122768838996432444640055239472740924328327375217377179827597627105762719342530208095705696893023765260625648903603122288743754383610746118041981888236378989738938160558185741945466160867967185183888634454308526576585261897900017318455643388599019307465016667621183230069648327150193627658018719173391974553629002507944164159225254202166272201631584774226013401428579824515745447294580577076083498710774391487338673652692711313581195533119838393185011945807731544500105028622139634897564465646467379814244664337 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f420ff9a18a504c71682c0c8424406f90dd01ae8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boid.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boid.se' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016da5e7e1f60000040300463044022025e0d214900a8920f738e1e36abe7c6e50d15838d90cc8b1c1e6bde3b691103a022019f09978d952d99473021a3b0d200340d39c6c6cf754749be0d254f0571d9ad4007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016da5e7e4100000040300473045022045737856f23d0b3efcea236b91a704d8e8b5293bd55a227db819589a9a74ee58022100fc6d87ecaec25405d2f068e703f55eb892e15703f4bc26046cc52b80bd1db11e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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