ictaacs.co.zw
Issued by R3
About this certificate
This digital certificate with serial number 04:51:b7:28:7d:e0:50:56:44:5e:20:58:0c:f8:4e:1b:21:de was issued on by Let's Encrypt.
With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ictaacs.co.zw
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:51:b7:28:7d:e0:50:56:44:5e:20:58:0c:f8:4e:1b:21:deSerial Number (int): 376255474415813155075792933607087946801630
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 5b:c8:ff:5f:2b:a6:32:34:31:c7:78:c6:78:8e:db:b1:0f:fb:e0:8b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 5d:d1:7d:b2:6e:d8:3f:98:f5:b9:f3:72:ee:4a:7f:b5:f6:4d:2d:3d
Fingerprint (sha256): 4b:d6:53:3a:db:5f:2a:f4:30:d4:60:8b:f4:76:e2:16:89:c6:32:41:e0:fb:fb:ea:36:23:9e:1e:00:20:f7:d0
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ictaacs.co.zw
23
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ictaacs.co.zw
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.agricom.co.zw
*.cashdaniels.com
*.certifyyourskills.com
*.fivestarindustries.co.zw
*.ictaacs.co.zw
*.ictaacs.com
*.seis.co.zw
*.taacs.co.zw
agricom.co.zw
certifyyourskills.com
fivestarindustries.co.zw
ictaacs.co.zw
ictaacs.com
seis.co.zw
taacs.co.zw
www.agricom.cashdaniels.com
www.alphafortuneproperties.cashdaniels.com
www.certifyyourskills.cashdaniels.com
www.fivestarindustries.cashdaniels.com
www.ictaacs.cashdaniels.com
www.ictaacscom.cashdaniels.com
www.seis.cashdaniels.com
www.taacs.cashdaniels.com
*.cashdaniels.com
*.certifyyourskills.com
*.fivestarindustries.co.zw
*.ictaacs.co.zw
*.ictaacs.com
*.seis.co.zw
*.taacs.co.zw
agricom.co.zw
certifyyourskills.com
fivestarindustries.co.zw
ictaacs.co.zw
ictaacs.com
seis.co.zw
taacs.co.zw
www.agricom.cashdaniels.com
www.alphafortuneproperties.cashdaniels.com
www.certifyyourskills.cashdaniels.com
www.fivestarindustries.cashdaniels.com
www.ictaacs.cashdaniels.com
www.ictaacscom.cashdaniels.com
www.seis.cashdaniels.com
www.taacs.cashdaniels.com
Other certificates including the domain name ictaacs.co.zw
(limited to 100 certificates)
Certificate
The complete raw certificate details for ictaacs.co.zw in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgISBFG3KH3gUFZEXiBYDPhOGyHeMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMDcyMTE4NDFaFw0yNDA2MDUyMTE4NDBaMBgxFjAUBgNVBAMT DWljdGFhY3MuY28uencwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl YLMKxdYOfbE7D0Cdn7bSW0A3XvhRWqrD61euoWTSaklPN1NwmvaMLRWQ8LREROwe 36+8BGnmEIHYov9d+diuF/sHKalxUUI7YukG5fw1sPWfAJ8WOIvr5ISOKRKEgeh3 B7YCu8pGIVw2NJqgM/dcJxCTd5ipWSjOzln28WJbmMCrKmk1ysSoWZ1EFR8Dxejd uoz1IZvU8JILt/t/ecmSCe+XiJKambdMh7LkPIhM6ve51rKrZE9d9UbwT6sJDv0F gCneVeN7WP3NPF9abFj4O+nByDCB/+hQ2qW/eIW53s50gjJ7KGXHBcMcprhKYG0U 51wx03aZevMXnllzwAz5AgMBAAGjggQaMIIEFjAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFFvI/18rpjI0Mcd4xniO27EP++CLMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv MIICIgYDVR0RBIICGTCCAhWCDyouYWdyaWNvbS5jby56d4IRKi5jYXNoZGFuaWVs cy5jb22CFyouY2VydGlmeXlvdXJza2lsbHMuY29tghoqLmZpdmVzdGFyaW5kdXN0 cmllcy5jby56d4IPKi5pY3RhYWNzLmNvLnp3gg0qLmljdGFhY3MuY29tggwqLnNl aXMuY28ueneCDSoudGFhY3MuY28ueneCDWFncmljb20uY28ueneCFWNlcnRpZnl5 b3Vyc2tpbGxzLmNvbYIYZml2ZXN0YXJpbmR1c3RyaWVzLmNvLnp3gg1pY3RhYWNz LmNvLnp3ggtpY3RhYWNzLmNvbYIKc2Vpcy5jby56d4ILdGFhY3MuY28ueneCG3d3 dy5hZ3JpY29tLmNhc2hkYW5pZWxzLmNvbYIqd3d3LmFscGhhZm9ydHVuZXByb3Bl cnRpZXMuY2FzaGRhbmllbHMuY29tgiV3d3cuY2VydGlmeXlvdXJza2lsbHMuY2Fz aGRhbmllbHMuY29tgiZ3d3cuZml2ZXN0YXJpbmR1c3RyaWVzLmNhc2hkYW5pZWxz LmNvbYIbd3d3LmljdGFhY3MuY2FzaGRhbmllbHMuY29tgh53d3cuaWN0YWFjc2Nv bS5jYXNoZGFuaWVscy5jb22CGHd3dy5zZWlzLmNhc2hkYW5pZWxzLmNvbYIZd3d3 LnRhYWNzLmNhc2hkYW5pZWxzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMG CisGAQQB1nkCBAIEgfQEgfEA7wB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7 v6s52IRzAAABjhr/RuYAAAQDAEYwRAIgTy5jJOQyfjyhF5N3CLzg2cN6IpYoAWNl yuMXM2SyXpcCIAyIylBjD0c3yz5P4Et0zj73Dv9bXbNWeoYw1dqY/ho4AHYAouK/ 1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGOGv9G8wAABAMARzBFAiBw RrQDWDw4DVG4nFLi128MrSDce+3bl4p0va9n/7oThgIhAO6Zl0bwdOB6bw5Q5v01 5QIkAZmNVuGLEp1SvRcE/39LMA0GCSqGSIb3DQEBCwUAA4IBAQAYpl6A2UtvKI84 9t85iBPA1ZndAm8y/+FsYX8qUq3ZsNwAAAkP9D5uU7agNCsWi41p4jCZ6Fw+5FE1 11cXUpst2KFAaSRrkZ8xXFOz3+FzmPnLMb+73enjPg7IBgimf9q0ro8muqz2IWWb YwInRajxOmbPpZtVlFk38dn1PuU25k+V4s7T5Mmj8hzdBVfD3MgiGK+MA/FfSfFN Qv9no6kTQun9ers7anDnSFh9htujHQ8GufZeU+uZyO/HP8mzviveKzJ1bE92DQe8 t1ti6bFFYZ4XvVWo77EeUnDmRNNeSqqezOuXFpYywdWgLwJYojEY/KKDbVJD7aKb cgRiAYpF -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWCzCsXWDn2xOw9AnZ+2 0ltAN174UVqqw+tXrqFk0mpJTzdTcJr2jC0VkPC0RETsHt+vvARp5hCB2KL/XfnY rhf7BympcVFCO2LpBuX8NbD1nwCfFjiL6+SEjikShIHodwe2ArvKRiFcNjSaoDP3 XCcQk3eYqVkozs5Z9vFiW5jAqyppNcrEqFmdRBUfA8Xo3bqM9SGb1PCSC7f7f3nJ kgnvl4iSmpm3TIey5DyITOr3udayq2RPXfVG8E+rCQ79BYAp3lXje1j9zTxfWmxY +Dvpwcgwgf/oUNqlv3iFud7OdIIyeyhlxwXDHKa4SmBtFOdcMdN2mXrzF55Zc8AM +QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 376255474415813155075792933607087946801630 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 21:18:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 21:18:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ictaacs.co.zw' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20877004562437075271078543428121942129685730343512498832257579792455794905177866340373777830390067992263360887385674295870329869448706940844114848925361910612092144334537452453932774321263339496865001137792751598383670675631044876399123030995557137457304252710354357941344220760762497848456509659969539927670682499626828981357644805688342110671242248537602278591067807148102812060200652556432388819673516136636397696882535065741111785733866337862406313651070476077353571821920307963055158038127847763737960021702172493514733188090615376889362843100037880945702705752104989947397713963707466134605167007272903462882553 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5bc8ff5f2ba6323431c778c6788edbb10ffbe08b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (537 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agricom.co.zw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cashdaniels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.certifyyourskills.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fivestarindustries.co.zw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ictaacs.co.zw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ictaacs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seis.co.zw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taacs.co.zw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agricom.co.zw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifyyourskills.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fivestarindustries.co.zw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ictaacs.co.zw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ictaacs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seis.co.zw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taacs.co.zw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agricom.cashdaniels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alphafortuneproperties.cashdaniels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.certifyyourskills.cashdaniels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fivestarindustries.cashdaniels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ictaacs.cashdaniels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ictaacscom.cashdaniels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seis.cashdaniels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taacs.cashdaniels.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e1aff46e6000004030046304402204f2e6324e4327e3ca117937708bce0d9c37a229628016365cae3173364b25e9702200c88ca50630f4737cb3e4fe04b74ce3ef70eff5b5db3567a8630d5da98fe1a38007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e1aff46f3000004030047304502207046b403583c380d51b89c52e2d76f0cad20dc7beddb978a74bdaf67ffba1386022100ee999746f074e07a6f0e50e6fd35e5022401998d56e18b129d52bd1704ff7f4b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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