reshef-aviation.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:7f:c0:c6:08:31:6e:13:ed:71:14:ce:65:2a:72:d4:26:a1 was issued on by Let's Encrypt.
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=reshef-aviation.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:7f:c0:c6:08:31:6e:13:ed:71:14:ce:65:2a:72:d4:26:a1Serial Number (int): 391921244342144389424182227484381977781921
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ab:5d:13:1f:18:3a:55:5b:d9:5d:70:87:ca:4c:c2:a0:4a:26:5e:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): fe:0d:8a:65:74:7e:b1:18:c7:3e:67:cc:e6:c8:df:be:76:23:da:2b
Fingerprint (sha256): 4f:ab:e5:8d:49:48:13:60:35:6e:49:b7:84:0e:ac:62:62:95:f5:dd:5a:10:a5:fa:73:66:6f:51:79:8f:22:27
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate reshef-aviation.com
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for reshef-aviation.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.reshef-aviation.co.il
mail.reshef-aviation.com
reshef-aviation.co.il
reshef-aviation.com
reshef-aviation.media-v.co.il
reshef-aviation2.media-v.co.il
reshef.com.media-v.co.il
saar.dev.media-v.co.il
www.reshef-aviation.co.il
www.reshef-aviation.com
www.reshef-aviation.media-v.co.il
www.reshef-aviation2.media-v.co.il
www.reshef.com.media-v.co.il
www.saar.dev.media-v.co.il
mail.reshef-aviation.com
reshef-aviation.co.il
reshef-aviation.com
reshef-aviation.media-v.co.il
reshef-aviation2.media-v.co.il
reshef.com.media-v.co.il
saar.dev.media-v.co.il
www.reshef-aviation.co.il
www.reshef-aviation.com
www.reshef-aviation.media-v.co.il
www.reshef-aviation2.media-v.co.il
www.reshef.com.media-v.co.il
www.saar.dev.media-v.co.il
Other certificates including the domain name reshef-aviation.com
(limited to 100 certificates)
reshef-aviation.com
reshef-aviation.com
*.media-v.co.il
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
www.reshef-aviation.media-v.co.il
reshef-aviation.com
*.media-v.co.il
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
*.media-v.co.il
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
*.media-v.co.il
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
www.reshef-aviation.media-v.co.il
reshef-aviation.com
*.media-v.co.il
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
*.media-v.co.il
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
Certificate
The complete raw certificate details for reshef-aviation.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG1TCCBb2gAwIBAgISBH/AxggxbhPtcRTOZSpy1CahMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTgyMzA5MjRaFw0x OTEyMTcyMzA5MjRaMB4xHDAaBgNVBAMTE3Jlc2hlZi1hdmlhdGlvbi5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCpi4QV8hbUCiUhfBWuBA0Vwo oK9RxLL94sDV1rpbwlfi/2GVqJU/0v8s6nmLRCf5eDPhfGb1icBIER3eC3+8xSgp NSRYUn8Wr6BHOWVcdVrUX/M/njqzmQW6WQebh2GSJZ7yOyFFUlK5o6krBbKo1pfC iBGRm9K2CNTFOQ7nFKJqw2cTAQTX84LLanBU8txuCBML67Gvco+E7rSBsGpiSs2I ZBemNQQi6737RoVfvlF+y8XYKXJnzWkxoc+bPvFH/AdsoKlr1lNIj1ALszJ1h3XE eHqJQw5SK4TuGILK8fOMPl2rRYNXCDXqdTRA4yag58XhmunQs3DipRWETSw/AgMB AAGjggPfMIID2zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKtdEx8YOlVb2V1wh8pM wqBKJl6HMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wggGVBgNVHREEggGMMIIBiIIabWFpbC5yZXNoZWYtYXZpYXRpb24u Y28uaWyCGG1haWwucmVzaGVmLWF2aWF0aW9uLmNvbYIVcmVzaGVmLWF2aWF0aW9u LmNvLmlsghNyZXNoZWYtYXZpYXRpb24uY29tgh1yZXNoZWYtYXZpYXRpb24ubWVk aWEtdi5jby5pbIIecmVzaGVmLWF2aWF0aW9uMi5tZWRpYS12LmNvLmlsghhyZXNo ZWYuY29tLm1lZGlhLXYuY28uaWyCFnNhYXIuZGV2Lm1lZGlhLXYuY28uaWyCGXd3 dy5yZXNoZWYtYXZpYXRpb24uY28uaWyCF3d3dy5yZXNoZWYtYXZpYXRpb24uY29t giF3d3cucmVzaGVmLWF2aWF0aW9uLm1lZGlhLXYuY28uaWyCInd3dy5yZXNoZWYt YXZpYXRpb24yLm1lZGlhLXYuY28uaWyCHHd3dy5yZXNoZWYuY29tLm1lZGlhLXYu Y28uaWyCGnd3dy5zYWFyLmRldi5tZWRpYS12LmNvLmlsMEwGA1UdIARFMEMwCAYG Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu bGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUAb1N2rDHw MRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFtRtokggAABAMARjBEAiACiFbY 0+Y0P2dCYSsTbdZKNwEb0Ufafx3bH1AWjZlP0gIgHIno+YDjcXfAsdOmnKBlm4Sw jcOe1UBJqDEtsZhL5BgAdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0 eAAAAW1G2iZFAAAEAwBGMEQCIFgjBa3Pe3RkJlrqu7KnBYVa3L4Pl2EmrHf5TxDf Y+TcAiA2rFAuHfOGLI6eoLgj5n6bPxnu4wt+zMch87arKY1WvTANBgkqhkiG9w0B AQsFAAOCAQEAVSyoYz7IyC3BK8Yoq2KggP8wjp1rsthTgllvor9AY9AAuXy9grwu BqU4FGnexpc19Xdh8PwlXKFrJUxYVwf8DAB3rAeTwBO8pgdzCxxujhy3O0r2Jqm8 mT3/LN4e0mdQmL4qlvz4JT+o+AqIQMnhWqEGc+MUdYgROMIs0NIZhL2/XLyR6BWI wv7rriAJ8NTL1/6EtAr6CfZCHcjWBKI8/w1KziQagSoqWynNnOL+m7snl/+1bzJn HxMdix9s5Be26DB9FTz2QNcgDAySbtbOz8GpE/V24z2bvKolSUB9wQNm9RCI5iX3 3Kru8Ws412Q3CaE0jq9+0MnBsnt40HdvcA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwqYuEFfIW1AolIXwVrg QNFcKKCvUcSy/eLA1da6W8JX4v9hlaiVP9L/LOp5i0Qn+Xgz4Xxm9YnASBEd3gt/ vMUoKTUkWFJ/Fq+gRzllXHVa1F/zP546s5kFulkHm4dhkiWe8jshRVJSuaOpKwWy qNaXwogRkZvStgjUxTkO5xSiasNnEwEE1/OCy2pwVPLcbggTC+uxr3KPhO60gbBq YkrNiGQXpjUEIuu9+0aFX75RfsvF2ClyZ81pMaHPmz7xR/wHbKCpa9ZTSI9QC7My dYd1xHh6iUMOUiuE7hiCyvHzjD5dq0WDVwg16nU0QOMmoOfF4Zrp0LNw4qUVhE0s PwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 391921244342144389424182227484381977781921 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 23:09:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 23:09:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reshef-aviation.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21591975508430205364457369641283381889971482006939893245520278824543044189799821094769421013106511745387279786053382014135944001629665484975922640856791767420042109325810669012971745786650589622120531085184500922293463893598698249985933572447937658399650224105496773332098771735546871424585666566819613857282370591638894505921190660723788633722158743381507245214481614149300084383300874708624017570520211740479295295383290943325313858753143405437313479717426407442677373091052611896414976914109729138014963256443194709657417481970696772018562741785925669747981422003863428742889248563627704701118351404056941572205631 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ab5d131f183a555bd95d7087ca4cc2a04a265e87 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (396 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.reshef-aviation.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.reshef-aviation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshef-aviation.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshef-aviation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshef-aviation.media-v.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshef-aviation2.media-v.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshef.com.media-v.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saar.dev.media-v.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reshef-aviation.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reshef-aviation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reshef-aviation.media-v.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reshef-aviation2.media-v.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reshef.com.media-v.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saar.dev.media-v.co.il' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d46da248200000403004630440220028856d8d3e6343f6742612b136dd64a37011bd147da7f1ddb1f50168d994fd202201c89e8f980e37177c0b1d3a69ca0659b84b08dc39ed54049a8312db1984be418007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d46da264500000403004630440220582305adcf7b7464265aeabbb2a705855adcbe0f976126ac77f94f10df63e4dc022036ac502e1df3862c8e9ea0b823e67e9b3f19eee30b7eccc721f3b6ab298d56bd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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