rayyan.ai
Issued by R3
About this certificate
This digital certificate with serial number 04:c1:4f:d0:31:21:a7:0f:14:85:b2:7f:6a:65:34:03:ef:c7 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=rayyan.ai
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c1:4f:d0:31:21:a7:0f:14:85:b2:7f:6a:65:34:03:ef:c7Serial Number (int): 414229730548699995802376673840617425727431
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 48:27:93:ab:72:08:27:14:3f:a4:a8:b0:30:a0:71:11:f0:c3:4f:d0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 45:ab:e9:c9:7e:b0:fe:36:d6:db:ef:66:d5:48:21:e5:51:ec:1e:8c
Fingerprint (sha256): 4d:82:52:ee:5c:a7:3a:a6:44:c9:22:63:59:6a:d7:21:64:79:d9:62:91:d2:7a:a0:f7:08:29:83:7a:b3:f8:05
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate rayyan.ai
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rayyan.ai
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rayyan.ai
rayyan.io
rayyan.io
Other certificates including the domain name rayyan.ai
(limited to 100 certificates)
jobs.strong.fitness
connect.aventos.com.br
events.ourteams.org
stage.hb-consulting.website
jobs.strong.fitness
20aniversario.aeh2.es
events.ourteams.org
usaidyouthexcel.yotaweb.org
events.iskala.net
virtualexpo.saknquare.com
20aniversario.aeh2.es
www.asiagolfconvention2023.com
connect.aventos.com.br
careers.rayyan.ai
reclutamiento.maxtalenthr.com
www.brightxa.com
opportunity.pickto.co
20aniversario.aeh2.es
events.aliciavernonspeaks.com
events.humanitarianglobal.com
events.humanitarianglobal.com
auraspeaks.ableaura.com
event.msmescaleup.com
careers.pando.ai
reclutamiento.maxtalenthr.com
rayyan.ai
events.closedtitle.com
www.brightxa.com
events.aliciavernonspeaks.com
careers.virtualink.ca
www.eventati.org
evaluationforum.uky.edu
events.aliciavernonspeaks.com
careers.febno.com
events.aliciavernonspeaks.com
www.innovatewithdata.net
events.virtualpethub.com
events.humanitarianglobal.com
events.wisequarter.com
events.closedtitle.com
event.complexelaprovidence.ca
events.eminae.com
reclutamiento.maxtalenthr.com
careers.damianknowles.com
opportunity.pickto.co
www.dotcybersummit.com
wolfden.wolfpackceo.com
events.humanitarianglobal.com
events.closedtitle.com
backstage.spiritedsolutions.org
nyambu.kyalo.co.ke
rayyan.ai
events.humanitarianglobal.com
reclutamiento.maxtalenthr.com
opportunity.pickto.co
rayyan.ai
emplois.bonjourresidences.com
mitmachen.grenzlotsen.de
careers.printrove.com
eventos.inspiriadental.com
events.myriadas.com
events.humanitarianglobal.com
www.ideandoelaula.cl
reclutamiento.maxtalenthr.com
backstage.spiritedsolutions.org
reclutamiento.maxtalenthr.com
events.salam.sa
careers.pando.ai
events.wisequarter.com
events.springstax.com
www.ateliers-mfpci.com
reclutamiento.maxtalenthr.com
evenements.aqta.ca
reclutamiento.maxtalenthr.com
reclutamiento.maxtalenthr.com
reclutamiento.maxtalenthr.com
auraspeaks.ableaura.com
jobs.okawa.sa
events.humanitarianglobal.com
teams.speakoutillinoisllc.com
events.humanitarianglobal.com
jobs.consumersourcesolutions.com
www.eventati.org
www.ateliers-mfpci.com
events.humanitarianglobal.com
stage.hb-consulting.website
wolfden.wolfpackceo.com
events.humanitarianglobal.com
events.humanitarianglobal.com
events.point1wellness.com
jobs.strong.fitness
events.springstax.com
event.msmescaleup.com
rayyan.ai
careers.conciercare.net
events.ybc.club
jobs.strong.fitness
reclutamiento.maxtalenthr.com
events.humanitarianglobal.com
reclutamiento.maxtalenthr.com
connect.aventos.com.br
events.ourteams.org
stage.hb-consulting.website
jobs.strong.fitness
20aniversario.aeh2.es
events.ourteams.org
usaidyouthexcel.yotaweb.org
events.iskala.net
virtualexpo.saknquare.com
20aniversario.aeh2.es
www.asiagolfconvention2023.com
connect.aventos.com.br
careers.rayyan.ai
reclutamiento.maxtalenthr.com
www.brightxa.com
opportunity.pickto.co
20aniversario.aeh2.es
events.aliciavernonspeaks.com
events.humanitarianglobal.com
events.humanitarianglobal.com
auraspeaks.ableaura.com
event.msmescaleup.com
careers.pando.ai
reclutamiento.maxtalenthr.com
rayyan.ai
events.closedtitle.com
www.brightxa.com
events.aliciavernonspeaks.com
careers.virtualink.ca
www.eventati.org
evaluationforum.uky.edu
events.aliciavernonspeaks.com
careers.febno.com
events.aliciavernonspeaks.com
www.innovatewithdata.net
events.virtualpethub.com
events.humanitarianglobal.com
events.wisequarter.com
events.closedtitle.com
event.complexelaprovidence.ca
events.eminae.com
reclutamiento.maxtalenthr.com
careers.damianknowles.com
opportunity.pickto.co
www.dotcybersummit.com
wolfden.wolfpackceo.com
events.humanitarianglobal.com
events.closedtitle.com
backstage.spiritedsolutions.org
nyambu.kyalo.co.ke
rayyan.ai
events.humanitarianglobal.com
reclutamiento.maxtalenthr.com
opportunity.pickto.co
rayyan.ai
emplois.bonjourresidences.com
mitmachen.grenzlotsen.de
careers.printrove.com
eventos.inspiriadental.com
events.myriadas.com
events.humanitarianglobal.com
www.ideandoelaula.cl
reclutamiento.maxtalenthr.com
backstage.spiritedsolutions.org
reclutamiento.maxtalenthr.com
events.salam.sa
careers.pando.ai
events.wisequarter.com
events.springstax.com
www.ateliers-mfpci.com
reclutamiento.maxtalenthr.com
evenements.aqta.ca
reclutamiento.maxtalenthr.com
reclutamiento.maxtalenthr.com
reclutamiento.maxtalenthr.com
auraspeaks.ableaura.com
jobs.okawa.sa
events.humanitarianglobal.com
teams.speakoutillinoisllc.com
events.humanitarianglobal.com
jobs.consumersourcesolutions.com
www.eventati.org
www.ateliers-mfpci.com
events.humanitarianglobal.com
stage.hb-consulting.website
wolfden.wolfpackceo.com
events.humanitarianglobal.com
events.humanitarianglobal.com
events.point1wellness.com
jobs.strong.fitness
events.springstax.com
event.msmescaleup.com
rayyan.ai
careers.conciercare.net
events.ybc.club
jobs.strong.fitness
reclutamiento.maxtalenthr.com
events.humanitarianglobal.com
reclutamiento.maxtalenthr.com
Certificate
The complete raw certificate details for rayyan.ai in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgISBMFP0DEhpw8UhbJ/amU0A+/HMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMDYyMTE2MDdaFw0yNDA2MDQyMTE2MDZaMBQxEjAQBgNVBAMT CXJheXlhbi5haTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALXrrrxA TLXwsP8SgHLMAfVHzqhZZlu34WovtBH6VbsfVAztZv/oPGepmsHrdV+Nz/3JWScs XGPGm6tnlbkyFhFMxC6mTYdw5iatJL5yT9qXAahZbC70HgOWfs9kGqadooDITIXx UpB/7eR6u8ATJhSnpKrCruK2MzpbiMR2/q9ToSvYPYWEvj1dFY1LirJkHCFpwtzT z/8NNO/E7PJVcU9XqZtmvuYOGGRNYEphF3RyKtdYDZXzS1ANQtYaZ4l5BEfYAZB4 erSxklZLRes7Tj64sY6tvDKun+pv25ErNqmOCWfrMbvl/lmeW1x52Fng/4Hy1yGL jImRdSj6VsxHOLMCAwEAAaOCAhUwggIRMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU SCeTq3IIJxQ/pKiwMKBxEfDDT9AwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wHwYD VR0RBBgwFoIJcmF5eWFuLmFpgglyYXl5YW4uaW8wEwYDVR0gBAwwCjAIBgZngQwB AgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBIsONr2qZHNA/lagL6nTDrHFIB y1bdLIHZu7+rOdiEcwAAAY4V1pJsAAAEAwBGMEQCIBd1a8fJbgF4VMNxM2Bx9YXQ tqvSb2lKZ3oX4Ua+WCyNAiAvO2IBCGnJimy2C4clsOeCUXE0clNwKVNBnVPzlyqP eQB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjhXWkkYAAAQD AEcwRQIhAKAlPzzZVlWqHZCjJv0NQkjhzJ5feoC/dRMmOcrzme73AiB0TP9KYpJC 7vV8DD/1SwULgpuLPN4LfcNuvG2Nr6nIujANBgkqhkiG9w0BAQsFAAOCAQEAnnwY 04sbRnPBpJLtZYQayf2ab5cV6/gWsrCmgqz4KrcrPF1GZ6sHBRMxWYCe0hniu9ri wD/etoH5Tp4jl/ZlEKULMNG0DKQqqkBVCTYpD0YRPvv+RpS5tggPxaWzxTFbTRxs nDEZSUUzr3/Xxc8WRjayytWMr9bNpabjrOPodRWnZ9g6fGn5wSGrpiiIgT/B8hxb 3pdqYXin13OC7RTnkAiE/KWyliS58f2ZZjoB3AKQzCDy1DpW4V4Bf1Td0Cl0yniw t9uw+JWztogxOynY0WGWwcGTxjNuYhuSM2ozWADEfK3z+z42ujwLi6aNWjSlWLut 5gGVyquU1v0RAxHsTQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteuuvEBMtfCw/xKAcswB 9UfOqFlmW7fhai+0EfpVux9UDO1m/+g8Z6mawet1X43P/clZJyxcY8abq2eVuTIW EUzELqZNh3DmJq0kvnJP2pcBqFlsLvQeA5Z+z2Qapp2igMhMhfFSkH/t5Hq7wBMm FKekqsKu4rYzOluIxHb+r1OhK9g9hYS+PV0VjUuKsmQcIWnC3NPP/w0078Ts8lVx T1epm2a+5g4YZE1gSmEXdHIq11gNlfNLUA1C1hpniXkER9gBkHh6tLGSVktF6ztO Prixjq28Mq6f6m/bkSs2qY4JZ+sxu+X+WZ5bXHnYWeD/gfLXIYuMiZF1KPpWzEc4 swIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 414229730548699995802376673840617425727431 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 21:16:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 21:16:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rayyan.ai' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22965352600741592720736045645969308678662975113281056916207799277577931824844342207100378404881236578232734556952050389730070052520986511844188288498554001226539098399192211291095224985429908577371313510738537996125573328571918458332835291760226058074803183425600354654123199270705708984009015273912566908030585738387895301955858439268586516015303049129539908290182238456085816239048890900555320062664217193266506267005670085092745782694181986644547145385775842461340186911336934038916539432758633246727851323206701960093778433582541289103244545856915066458721007541777233084115613804282849958470980022291304959916211 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 482793ab720827143fa4a8b030a07111f0c34fd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayyan.ai' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayyan.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e15d6926c0000040300463044022017756bc7c96e017854c371336071f585d0b6abd26f694a677a17e146be582c8d02202f3b62010869c98a6cb60b8725b0e7825171347253702953419d53f3972a8f79007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e15d692460000040300473045022100a0253f3cd95655aa1d90a326fd0d4248e1cc9e5f7a80bf75132639caf399eef70220744cff4a629242eef57c0c3ff54b050b829b8b3cde0b7dc36ebc6d8dafa9c8ba . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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