*.converge.org
Issued by AlphaSSL CA - SHA256 - G4
About this certificate
This digital certificate with serial number 13:bc:8c:22:fd:f6:40:b4:a4:36:c7:51 was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.converge.org
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate will expire on
Certificate Details
Serial Number (hex): 13:bc:8c:22:fd:f6:40:b4:a4:36:c7:51Serial Number (int): 6108155017489892127530207057
Serial Number lenght: 93 bits, 12 octets
SubjectKeyId: f8:8f:3d:86:7b:88:30:ad:64:64:19:40:c8:23:4d:d4:5c:ac:1c:84
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15
Fingerprint (sha1): d2:67:62:14:7c:dc:62:cb:16:eb:c7:c7:36:8c:f3:b7:13:39:f8:2d
Fingerprint (sha256): 57:c5:ce:7f:14:12:79:d3:a6:ff:1b:57:ab:87:96:80:19:94:e2:9f:76:f2:c7:61:d8:87:9c:af:ea:62:c2:df
Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl
Check the revocation status for certificate *.converge.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.converge.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.converge.org
converge.org
converge.org
Other certificates including the domain name converge.org
(limited to 100 certificates)
sts.adfs.converge.org
mafsdp.maf.ae
converge.org
helpdesk.dpsgroupglobal.com
helpdesk.dpsgroupglobal.com
servicedesk.alshareef.com.qa
helpdesk.nibung.com
converge.org
ithelp.converge.org
helpdesk.nibung.com
*.converge.org
converge.org
mafsdp.maf.ae
converge.org
helpdesk.dpsgroupglobal.com
helpdesk.nibung.com
helpdesk.nibung.com
helpdesk.nibung.com
ewhelp.energyworldnet.com
brand.converge.org
*.converge.org
*.converge.org
*.converge.org
helpdesk.purkinje.com
mafsdp.maf.ae
converge.org
helpdesk.nibung.com
helpdesk.nibung.com
converge.org
converge.org
helpdesk.dpsgroupglobal.com
ithelp.converge.org
ewhelp.energyworldnet.com
convergeworldwide.org
helpdesk.nibung.com
helpdesk.dpsgroupglobal.com
mafsdp.maf.ae
ithelp.converge.org
helpdesk.dpsgroupglobal.com
helpdesk.nibung.com
brand.converge.org
ewhelp.energyworldnet.com
ewhelp.energyworldnet.com
converge.org
helpdesk.nibung.com
helpdesk.dpsgroupglobal.com
ithelp.converge.org
brand.converge.org
helpdesk.nibung.com
helpdesk.nibung.com
helpdesk.dpsgroupglobal.com
brand.converge.org
mafsdp.maf.ae
converge.org
helpdesk.dpsgroupglobal.com
helpdesk.dpsgroupglobal.com
servicedesk.alshareef.com.qa
helpdesk.nibung.com
converge.org
ithelp.converge.org
helpdesk.nibung.com
*.converge.org
converge.org
mafsdp.maf.ae
converge.org
helpdesk.dpsgroupglobal.com
helpdesk.nibung.com
helpdesk.nibung.com
helpdesk.nibung.com
ewhelp.energyworldnet.com
brand.converge.org
*.converge.org
*.converge.org
*.converge.org
helpdesk.purkinje.com
mafsdp.maf.ae
converge.org
helpdesk.nibung.com
helpdesk.nibung.com
converge.org
converge.org
helpdesk.dpsgroupglobal.com
ithelp.converge.org
ewhelp.energyworldnet.com
convergeworldwide.org
helpdesk.nibung.com
helpdesk.dpsgroupglobal.com
mafsdp.maf.ae
ithelp.converge.org
helpdesk.dpsgroupglobal.com
helpdesk.nibung.com
brand.converge.org
ewhelp.energyworldnet.com
ewhelp.energyworldnet.com
converge.org
helpdesk.nibung.com
helpdesk.dpsgroupglobal.com
ithelp.converge.org
brand.converge.org
helpdesk.nibung.com
helpdesk.nibung.com
helpdesk.dpsgroupglobal.com
brand.converge.org
Certificate
The complete raw certificate details for *.converge.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIME7yMIv32QLSkNsdRMA0GCSqGSIb3DQEBCwUAMEwxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEc0MB4XDTIzMTExNzE3NTcwN1oXDTI0MTIw ODE0NTQyOVowGTEXMBUGA1UEAwwOKi5jb252ZXJnZS5vcmcwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCqxkIYKDy7sdcBRxPKSaKZzwfxyLoMdTiQLXEu oy/5aAlzn4NNwSwfQCENHFOiiv/0k+DaS14dGjEL+2Na9SbVKsDFZxpxd9yN3a0o 9VE9wJ7W4QecxRgDcry0aTNwiTUi9VESq4q5ea/PCWVjg3tS3YhzRpGpXOaBRsR7 G3NF9+H4buWZvVRA39nSwoWLtBS4SX2del04f/jPJfJDI3wJosSd/jz7zLP4CBA8 5yIgTkbCtKNYNIg1Ml3qwkUdBIJT/239bIZPcHlJrvkYP6EAlgBErTDapUZTVHrG Q1js+BPIDRG0zPjqZ1+iengKhDDjwG0n7bhY+tzPkwpE7wC7AgMBAAGjggNeMIID WjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADCBkwYIKwYBBQUHAQEEgYYw gYMwRgYIKwYBBQUHMAKGOmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2Fj ZXJ0L2FscGhhc3NsY2FzaGEyNTZnNC5jcnQwOQYIKwYBBQUHMAGGLWh0dHA6Ly9v Y3NwLmdsb2JhbHNpZ24uY29tL2FscGhhc3NsY2FzaGEyNTZnNDBXBgNVHSAEUDBO MAgGBmeBDAECATBCBgorBgEEAaAyCgEDMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8v d3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMEEGA1UdHwQ6MDgwNqA0oDKG MGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vYWxwaGFzc2xjYXNoYTI1Nmc0LmNy bDAnBgNVHREEIDAegg4qLmNvbnZlcmdlLm9yZ4IMY29udmVyZ2Uub3JnMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBRPy6yowu+r3YNv a7/OmD1cWCV2FTAdBgNVHQ4EFgQU+I89hnuIMK1kZBlAyCNN1FysHIQwggF+Bgor BgEEAdZ5AgQCBIIBbgSCAWoBaAB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/ KIXs+GRuAAABi95t8rMAAAQDAEcwRQIhAMYpfRh6B6444DbLWvw1hJYXRhJ+UU56 6BGW3EYS/6l9AiB4ThwloB9ocltqm10O9GyGyfiIL/9mfuK/G594GfRTVwB2AEiw 42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi95t9McAAAQDAEcwRQIh AISoyJ7U7MVS3FGhTFwmcqIMOH77bjOquEjQrXk/PipmAiAdDr4K2BAL+GfDYis2 3NNQLeSfNLyF7n8SL4pNJEGIugB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI WUZxH7WbAAABi95t9ZUAAAQDAEcwRQIhAMiNstcQ8Sui8sX22nSGL5OHtynDBzOH 5+TkcQYgBwctAiBYHpYdPsj0I+g6Hr1Y53/rhsKq01BeOUZ6W5n/XoXnFzANBgkq hkiG9w0BAQsFAAOCAQEAlC23xC9hb3vyXQgK0FgW4OBvG8gKVJPEp9NZEnPOEspM NpHHriDCqTkZDfTSBYhoWk60Hyh7Ap292aUy+MqSiFOgdzOkfSe5Bae2Mhv7MmMg nWlHvx5Fx6tP+SRUAz7xVB0GgVrO6rBCNQZcWSQIgmqohMWkw0/FfpueagufNWsk Du9tkUbDK2H/TLfLeApmckBORrdNEWHQLRir4CHrlVqHpNcbQj2poGuX4efDXWK5 YA07spsJjrKGYQiQB77rv/r7VZ/l/zgZwAZ7XOcZ337vOw0VTSz4MZZ67WU03qi5 ADKscAq+Nqqgz23cMC2g40i78anEwVlHqimg8N7dpw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsZCGCg8u7HXAUcTykmi mc8H8ci6DHU4kC1xLqMv+WgJc5+DTcEsH0AhDRxToor/9JPg2kteHRoxC/tjWvUm 1SrAxWcacXfcjd2tKPVRPcCe1uEHnMUYA3K8tGkzcIk1IvVREquKuXmvzwllY4N7 Ut2Ic0aRqVzmgUbEextzRffh+G7lmb1UQN/Z0sKFi7QUuEl9nXpdOH/4zyXyQyN8 CaLEnf48+8yz+AgQPOciIE5GwrSjWDSINTJd6sJFHQSCU/9t/WyGT3B5Sa75GD+h AJYARK0w2qVGU1R6xkNY7PgTyA0RtMz46mdfonp4CoQw48BtJ+24WPrcz5MKRO8A uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6108155017489892127530207057 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 17:57:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-08 14:54:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.converge.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21558276597077181921420011651206379514395757929134580923898849828196330109092907664941581403334424271626897811387356214041007402989109624885246253679538609779382683381465490981835683447341221657221759801465912834905113283199077242902031836154701896671733249749176642036400599154911523813919500720807729129796706853882144217871514302865226017845980213898396087639117511697290809840549604148186887738333653534526868510376537719597039327168581158783326632203384399546990347876829311096522767656983698829803302948167039357378870475974223590646862546319315430105438879965987615873280751390673621354366660118044276027228347 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.converge.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'converge.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f88f3d867b8830ad64641940c8234dd45cac1c84 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 01680076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018bde6df2b30000040300473045022100c6297d187a07ae38e036cb5afc3584961746127e514e7ae81196dc4612ffa97d0220784e1c25a01f68725b6a9b5d0ef46c86c9f8882fff667ee2bf1b9f7819f4535700760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bde6df4c7000004030047304502210084a8c89ed4ecc552dc51a14c5c2672a20c387efb6e33aab848d0ad793f3e2a6602201d0ebe0ad8100bf867c3622b36dcd3502de49f34bc85ee7f122f8a4d244188ba007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bde6df5950000040300473045022100c88db2d710f12ba2f2c5f6da74862f9387b729c3073387e7e4e471062007072d0220581e961d3ec8f423e83a1ebd58e77feb86c2aad3505e39467a5b99ff5e85e717 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00942db7c42f616f7bf25d080ad05816e0e06f1bc80a5493c4a7d3591273ce12ca4c3691c7ae20c2a939190df4d20588685a4eb41f287b029dbdd9a532f8ca928853a07733a47d27b905a7b6321bfb3263209d6947bf1e45c7ab4ff92454033ef1541d06815aceeab04235065c592408826aa884c5a4c34fc57e9b9e6a0b9f356b240eef6d9146c32b61ff4cb7cb780a6672404e46b74d1161d02d18abe021eb955a87a4d71b423da9a06b97e1e7c35d62b9600d3bb29b098eb28661089007beebbffafb559fe5ff3819c0067b5ce719df7eef3b0d154d2cf831967aed6534dea8b90032ac700abe36aaa0cf6ddc302da0e348bbf1a9c4c15947aa29a0f0dedda7