fitness.tchibo.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:34:50:b6:02:9b:70:34:07:ab:99:67:ab:c2:ec:47:6d:57 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fitness.tchibo.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:34:50:b6:02:9b:70:34:07:ab:99:67:ab:c2:ec:47:6d:57Serial Number (int): 366251110097500742913530711104400946326871
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 8d:68:95:14:8a:72:a2:d7:2a:ec:95:77:a3:a7:6b:29:e1:09:74:94
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 9e:58:de:ab:31:e7:67:ef:b3:77:4c:18:c1:50:20:86:14:c1:3b:f0
Fingerprint (sha256): 54:d7:ab:4d:cd:25:25:77:57:90:27:5d:24:33:22:c7:62:bf:90:96:ad:16:71:b6:19:ff:dc:0e:44:b7:f0:e6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate fitness.tchibo.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fitness.tchibo.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fitness.tchibo.de
Other certificates including the domain name tchibo.de
(limited to 100 certificates)
tschibo.de
news.tchibo.de
news2.tchibo.de
buchung-reisen.tchibo.de
news2.tchibo.de
www.tchibo.de
contractmanagement.tchibo.de
tschibo.de
news.tchibo.de
*.tchibo.de
gewinnen.tchibo.de
news.tchibo.de
news.tchibo.de
blumen.tchibo.de
ihreurlaubsbuchung.tchibo.de
images.tchibo.de
tracking.tchibo.de
news.tchibo.de
fitness.tchibo.de
*.tchibo.de
news.tchibo.de
tagm.tchibo.de
*.reisedeals.tchibo.de
news.tchibo.de
black-n-white.tchibo.de
tracking.tchibo.de
www.strom.tchibo.de
fitness.tchibo.de
gewinnen.tchibo.de
community.tchibo.de
www.tchibo.de
tagm.tchibo.de
blumen.tchibo.de
news.tchibo.de
news.tchibo.de
access.tchibo.com
tschibo.de
access.tchibo.com
news.tchibo.de
tschibo.de
service.tchibo.de
sip.tchibo.com
ltur.tchibo.de
www.tchibo.de
mobilfunk.tchibo.de
ctagm.tchibo.de
reisen.tchibo.de
foto.tchibo.de
fitness.tchibo.de
fitness.tchibo.de
order-reisen.tchibo.de
tschibo.de
70.tchibo.de
tschibo.de
gas.tchibo.de
www.tchibo.de
blumen.tchibo.de
fitness.tchibo.de
smartman-test.tchibo.de
www.tchibo.de
b2bt.tchibo.de
tschibo.de
fitness.tchibo.de
service.tchibo.de
news.tchibo.de
order-reisen.tchibo.de
tschibo.de
www.tchibo.de
www.tchibo.de
*.tchibo.de
tschibo.de
images.tchibo.de
service.tchibo.de
*.tchibo.de
ctagm.tchibo.de
*.tchibo.de
tschibo.de
service.tchibo.de
news.tchibo.de
community.tchibo.de
news.tchibo.de
fitness.tchibo.de
blumen.tchibo.de
www.tchibo.de
dsx.tchibo.de
reisen.tchibo.de
tschibo.de
tracking.tchibo.de
reisebuchung.tchibo.de
www.tchibo.de
reisebuchung.tchibo.de
community.tchibo.de
service.tchibo.de
www.tchibo.de
order-reisen.tchibo.de
news.tchibo.de
fitness.tchibo.de
tracking.tchibo.de
*.tchibo.de
fitness.tchibo.de
news.tchibo.de
news2.tchibo.de
buchung-reisen.tchibo.de
news2.tchibo.de
www.tchibo.de
contractmanagement.tchibo.de
tschibo.de
news.tchibo.de
*.tchibo.de
gewinnen.tchibo.de
news.tchibo.de
news.tchibo.de
blumen.tchibo.de
ihreurlaubsbuchung.tchibo.de
images.tchibo.de
tracking.tchibo.de
news.tchibo.de
fitness.tchibo.de
*.tchibo.de
news.tchibo.de
tagm.tchibo.de
*.reisedeals.tchibo.de
news.tchibo.de
black-n-white.tchibo.de
tracking.tchibo.de
www.strom.tchibo.de
fitness.tchibo.de
gewinnen.tchibo.de
community.tchibo.de
www.tchibo.de
tagm.tchibo.de
blumen.tchibo.de
news.tchibo.de
news.tchibo.de
access.tchibo.com
tschibo.de
access.tchibo.com
news.tchibo.de
tschibo.de
service.tchibo.de
sip.tchibo.com
ltur.tchibo.de
www.tchibo.de
mobilfunk.tchibo.de
ctagm.tchibo.de
reisen.tchibo.de
foto.tchibo.de
fitness.tchibo.de
fitness.tchibo.de
order-reisen.tchibo.de
tschibo.de
70.tchibo.de
tschibo.de
gas.tchibo.de
www.tchibo.de
blumen.tchibo.de
fitness.tchibo.de
smartman-test.tchibo.de
www.tchibo.de
b2bt.tchibo.de
tschibo.de
fitness.tchibo.de
service.tchibo.de
news.tchibo.de
order-reisen.tchibo.de
tschibo.de
www.tchibo.de
www.tchibo.de
*.tchibo.de
tschibo.de
images.tchibo.de
service.tchibo.de
*.tchibo.de
ctagm.tchibo.de
*.tchibo.de
tschibo.de
service.tchibo.de
news.tchibo.de
community.tchibo.de
news.tchibo.de
fitness.tchibo.de
blumen.tchibo.de
www.tchibo.de
dsx.tchibo.de
reisen.tchibo.de
tschibo.de
tracking.tchibo.de
reisebuchung.tchibo.de
www.tchibo.de
reisebuchung.tchibo.de
community.tchibo.de
service.tchibo.de
www.tchibo.de
order-reisen.tchibo.de
news.tchibo.de
fitness.tchibo.de
tracking.tchibo.de
*.tchibo.de
fitness.tchibo.de
Certificate
The complete raw certificate details for fitness.tchibo.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISBDRQtgKbcDQHq5lnq8LsR21XMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMTUyMjQ0MzJaFw0x OTA2MTMyMjQ0MzJaMBwxGjAYBgNVBAMTEWZpdG5lc3MudGNoaWJvLmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xrlXJKhKN2rgAMEPxCOnFWK1VYP DbjdPas21thQ5+tgkC1t/PKFgvcwXgmXcIOQn+5WGEQSx/NU9r4nSCOk81p+DSoR YYvsn2/Y6I95Ni00Hff64aQTiLOK9lPgTTnd7BfhRq5Hog19zWA1Wy7L1xV2ZNr+ 9xWsHZowcDOqKgH3Feyf37SwbmPYuYFGhzkz0znGJp/1aZemdP8FGZs5V4D2OzZt cdzAHaSEyQKSLTF9kF7i0deuY9l2Pg7rjLnN0JwDk+fmrgdyYWJgP39Mft/rgyl7 ril8niJY/cI8fPg3BNJZiWnVgvSQflvSawwo/L+yCOx774r0BP4OBLrEkQIDAQAB o4ICZTCCAmEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSNaJUUinKi1yrslXejp2sp 4Ql0lDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw dC5vcmcvMBwGA1UdEQQVMBOCEWZpdG5lc3MudGNoaWJvLmRlMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAdH7a gzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFpg74r2gAABAMARjBEAiBL rba/54IWYzFKeCY/34A7VLaobhWTmKnl4XoshiXWfwIgDAwypmaNTFpgkXDPzEne DNUs5PvmvnTEGoBbb0kUnzoAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTl RUf0eAAAAWmDvi3LAAAEAwBHMEUCIQCRmXLx2fqIGYy+pHvj29X8Ew1FTomGwAXf eZWo0ohAVwIgPRpVCfbnLs0rkvj/MyFrTbW07ZKq9X4hEvvChj2q1nowDQYJKoZI hvcNAQELBQADggEBAIR96MQ7I8XUeV9aKKvD6pPcL83piuQK8JWWumf9bfIsvIQr drXQTsS+Vbn1guj8sL5J+J6imbjx+ZJTvZcyVR+ml2dTBg7Sz2oSxBX7KuucDQ7y /sm6pBgzjclfHNYd7Eqv7HrrWrKI5nI+Hd0bxUz/R4se5qek4Y9TgdS8EsudsAyM ZQSKDVrl9haYkXlLnsrzbi/bCvZuuUgJObGn580Leqp+p4LEBNG8Xcwk9tGHtJk1 RZ9oYay4sXSBqOsapTTNpbRFyS0RHh6sif3qOeInoMWCu2sgn9wTAejTHv+ly8xH AvQefubP66WFW1r/Nn33DGfm2Wk3WHzTdoB9PI8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xrlXJKhKN2rgAMEPxCO nFWK1VYPDbjdPas21thQ5+tgkC1t/PKFgvcwXgmXcIOQn+5WGEQSx/NU9r4nSCOk 81p+DSoRYYvsn2/Y6I95Ni00Hff64aQTiLOK9lPgTTnd7BfhRq5Hog19zWA1Wy7L 1xV2ZNr+9xWsHZowcDOqKgH3Feyf37SwbmPYuYFGhzkz0znGJp/1aZemdP8FGZs5 V4D2OzZtcdzAHaSEyQKSLTF9kF7i0deuY9l2Pg7rjLnN0JwDk+fmrgdyYWJgP39M ft/rgyl7ril8niJY/cI8fPg3BNJZiWnVgvSQflvSawwo/L+yCOx774r0BP4OBLrE kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 366251110097500742913530711104400946326871 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 22:44:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 22:44:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fitness.tchibo.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27659451671768290364241936197331962683581369398160712807338486899604766065414822810636019779451411320733405155186126629726527629942941419968363883135146458396225082966577072204320273543604872122317415753813652030589410287544990661903810839735055149986097817115126287753909559534770888326173892878430891348088263993917329413646017830172300868024078191987742394226536411451388926928339200082825943530386394878326361720455240834866232648893774103041016793126381091820880455716387377321667840691440161724142591654106796076651849629313642316865574976598721326162176740021591405083440584088886858042387775632050167182181521 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8d6895148a72a2d72aec9577a3a76b29e1097494 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitness.tchibo.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016983be2bda000004030046304402204badb6bfe7821663314a78263fdf803b54b6a86e159398a9e5e17a2c8625d67f02200c0c32a6668d4c5a609170cfcc49de0cd52ce4fbe6be74c41a805b6f49149f3a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016983be2dcb0000040300473045022100919972f1d9fa88198cbea47be3dbd5fc130d454e8986c005df7995a8d288405702203d1a5509f6e72ecd2b92f8ff33216b4db5b4ed92aaf57e2112fbc2863daad67a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00847de8c43b23c5d4795f5a28abc3ea93dc2fcde98ae40af09596ba67fd6df22cbc842b76b5d04ec4be55b9f582e8fcb0be49f89ea299b8f1f99253bd9732551fa6976753060ed2cf6a12c415fb2aeb9c0d0ef2fec9baa418338dc95f1cd61dec4aafec7aeb5ab288e6723e1ddd1bc54cff478b1ee6a7a4e18f5381d4bc12cb9db00c8c65048a0d5ae5f6169891794b9ecaf36e2fdb0af66eb9480939b1a7e7cd0b7aaa7ea782c404d1bc5dcc24f6d187b49935459f6861acb8b17481a8eb1aa534cda5b445c92d111e1eac89fdea39e227a0c582bb6b209fdc1301e8d31effa5cbcc4702f41e7ee6cfeba5855b5aff367df70c67e6d96937587cd376807d3c8f