luxuryhome.fr
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:81:a4:be:b8:3e:d7:c9:34:21:2a:0d:9b:9e:e6:a3:3e:fb was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=luxuryhome.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:81:a4:be:b8:3e:d7:c9:34:21:2a:0d:9b:9e:e6:a3:3e:fbSerial Number (int): 305452266792735945212220576598703552544507
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 87:a8:f6:c0:27:e5:ce:4a:ae:76:a1:05:b9:e0:fe:13:8a:87:76:94
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 25:67:94:8f:84:1b:8b:2f:a6:b4:99:3d:79:06:1d:4f:20:8d:6a:29
Fingerprint (sha256): 55:82:fc:45:0d:f1:38:66:96:14:3b:f7:22:27:95:66:5d:96:f4:2a:41:0d:3e:ee:5c:b9:bf:71:85:e3:a2:19
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate luxuryhome.fr
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for luxuryhome.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.domainer.es
autodiscover.luxuryhome.fr
cpanel.domainer.es
cpanel.luxuryhome.fr
domainer-es.radicalnames.com
domainer.es
luxuryhome-fr.radicalnames.com
luxuryhome.fr
mail.domainer.es
mail.luxuryhome.fr
webdisk.domainer.es
webdisk.luxuryhome.fr
webmail.domainer.es
webmail.luxuryhome.fr
www.domainer-es.radicalnames.com
www.domainer.es
www.luxuryhome-fr.radicalnames.com
www.luxuryhome.fr
autodiscover.luxuryhome.fr
cpanel.domainer.es
cpanel.luxuryhome.fr
domainer-es.radicalnames.com
domainer.es
luxuryhome-fr.radicalnames.com
luxuryhome.fr
mail.domainer.es
mail.luxuryhome.fr
webdisk.domainer.es
webdisk.luxuryhome.fr
webmail.domainer.es
webmail.luxuryhome.fr
www.domainer-es.radicalnames.com
www.domainer.es
www.luxuryhome-fr.radicalnames.com
www.luxuryhome.fr
Other certificates including the domain name luxuryhome.fr
(limited to 100 certificates)
Certificate
The complete raw certificate details for luxuryhome.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG6jCCBdKgAwIBAgISA4Gkvrg+18k0ISoNm57moz77MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDQxMzA1MzFaFw0x OTA3MDMxMzA1MzFaMBgxFjAUBgNVBAMTDWx1eHVyeWhvbWUuZnIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0ZzeXlKO+2l6FleNKrREeZsgAYllbRk3H QeieNpk8FPh1Q4f8FRSd0ffFC3HHZdmFszksN3FrYFpQ/ziWJdJWS+lQLqEYV7ng MKphH/idrHCOjYgtTCLnjZVGlfXm3c2ofQub1ctTw/XI8cfKpUmxDeYpRTIj48fA RiL4d3rXz9wX7lUsMcFD9wvSCFZm5S14Or0IjHzCiooLG/h3nDBzDx5vHoTC1Mys sJVq4i6aokXO3/B7F5y8XLzoEAz2mYMhXbarV2zT54mhg8ErOV+gvfZWpnFB4fbp A1Cy4UMjw9nrAlks2Nt3udKTiLcWDTQpEF38/dhEUmUVYwVxsQypAgMBAAGjggP6 MIID9jAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIeo9sAn5c5KrnahBbng/hOKh3aU MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wggGvBgNVHREEggGmMIIBooIYYXV0b2Rpc2NvdmVyLmRvbWFpbmVyLmVzghph dXRvZGlzY292ZXIubHV4dXJ5aG9tZS5mcoISY3BhbmVsLmRvbWFpbmVyLmVzghRj cGFuZWwubHV4dXJ5aG9tZS5mcoIcZG9tYWluZXItZXMucmFkaWNhbG5hbWVzLmNv bYILZG9tYWluZXIuZXOCHmx1eHVyeWhvbWUtZnIucmFkaWNhbG5hbWVzLmNvbYIN bHV4dXJ5aG9tZS5mcoIQbWFpbC5kb21haW5lci5lc4ISbWFpbC5sdXh1cnlob21l LmZyghN3ZWJkaXNrLmRvbWFpbmVyLmVzghV3ZWJkaXNrLmx1eHVyeWhvbWUuZnKC E3dlYm1haWwuZG9tYWluZXIuZXOCFXdlYm1haWwubHV4dXJ5aG9tZS5mcoIgd3d3 LmRvbWFpbmVyLWVzLnJhZGljYWxuYW1lcy5jb22CD3d3dy5kb21haW5lci5lc4Ii d3d3Lmx1eHVyeWhvbWUtZnIucmFkaWNhbG5hbWVzLmNvbYIRd3d3Lmx1eHVyeWhv bWUuZnIwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5 AgQCBIH0BIHxAO8AdQDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAA AWnoq0TbAAAEAwBGMEQCIEBsSITKJuogm2L8ML3jP+DUzaORKquNFUe0yBc6RRFk AiAJL/LnQH7rNS6JXBaS6UyRJiy0nL9dtogl4o+lOsuZoQB2ACk8UZZUyDlluqpQ /FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaeirQ10AAAQDAEcwRQIhAL7stJJ/FecU c8Yx3zxxZaPnbsFh7/FL8Qs0cxbVXCJ7AiAw6lqojTQ0lucM7+FBYrNqGbgebHmF Ffmgd/Id0uiIcDANBgkqhkiG9w0BAQsFAAOCAQEAS/hwN1yNBcMIuD3OVDdFEUly wNmec92yMilYEcER0qsMSNWmxPxGPcYy7wMhtawK+1ElFyzk04PBKMxO5LAMpfFw hPBw6XFpmEzK4B+xGsdKH0wZ5ApleudIVAzh2v/RdVI0zOBZI4OaNiIqf9Hc19P/ psbUsZbg7T9dKpCG111/ghib+m+xxh833JJBtkEQVy92JgKl1RFTBGqiCaFaYeFG sR3Xcd4hCOLGGQ/zN4Yq4UE1OuR7walinVjDQDHMg3abDw7iZDyznrmA/6kJSo/2 IvEQFRzmw3pc03/coYWIpq3pGRmSugHIdQGGN3SE62yBt5ycpzzJ9Qj2PkmdPQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Gc3l5SjvtpehZXjSq0R HmbIAGJZW0ZNx0HonjaZPBT4dUOH/BUUndH3xQtxx2XZhbM5LDdxa2BaUP84liXS VkvpUC6hGFe54DCqYR/4naxwjo2ILUwi542VRpX15t3NqH0Lm9XLU8P1yPHHyqVJ sQ3mKUUyI+PHwEYi+Hd618/cF+5VLDHBQ/cL0ghWZuUteDq9CIx8woqKCxv4d5ww cw8ebx6EwtTMrLCVauIumqJFzt/wexecvFy86BAM9pmDIV22q1ds0+eJoYPBKzlf oL32VqZxQeH26QNQsuFDI8PZ6wJZLNjbd7nSk4i3Fg00KRBd/P3YRFJlFWMFcbEM qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 305452266792735945212220576598703552544507 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-04 13:05:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 13:05:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'luxuryhome.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30853044688685306848136342499325934343809716273560881876956470008033111481468006397416003805327295402911896021482574902229552469514387851214122713349720363033412658817023814765962985772031540724782355360772644257762220646885310165921302129545251391159435339555201403492118785441533150047345978455570914708019191138577289727850490564999269562491966212723558783515196301155469054168894675807194412542808245532259593838367196697309833961136444244453200299620299980539133128292701761398083929584833212241028990088311265722248712055993586419785590071993746229626941187096022832294816462552828460054396410882111305992441001 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 87a8f6c027e5ce4aae76a105b9e0fe138a877694 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (422 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.domainer.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.luxuryhome.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.domainer.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.luxuryhome.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainer-es.radicalnames.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainer.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxuryhome-fr.radicalnames.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxuryhome.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.domainer.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.luxuryhome.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.domainer.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.luxuryhome.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.domainer.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.luxuryhome.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domainer-es.radicalnames.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domainer.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxuryhome-fr.radicalnames.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxuryhome.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169e8ab44db00000403004630440220406c4884ca26ea209b62fc30bde33fe0d4cda3912aab8d1547b4c8173a4511640220092ff2e7407eeb352e895c1692e94c91262cb49cbf5db68825e28fa53acb99a1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169e8ab435d0000040300473045022100beecb4927f15e71473c631df3c7165a3e76ec161eff14bf10b347316d55c227b022030ea5aa88d343496e70cefe14162b36a19b81e6c798515f9a077f21dd2e88870 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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