kale.eatingwell.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:5b:f3:3b:bd:61:71:50:e4:56:f7:4b:b3:86:7c:6b:f4:f4 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kale.eatingwell.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:5b:f3:3b:bd:61:71:50:e4:56:f7:4b:b3:86:7c:6b:f4:f4Serial Number (int): 379738151706432391326136925355416182584564
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6c:8b:27:20:30:58:19:75:e1:5c:45:72:d7:6c:62:a5:ee:e7:8d:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a1:f1:eb:70:c7:74:52:97:c3:f7:b9:9f:5c:97:8b:6f:1c:7a:54:cb
Fingerprint (sha256): 60:6e:75:03:06:33:65:b7:28:1e:49:ae:51:9e:6b:10:19:84:c4:7d:d5:ac:71:cb:a6:e7:09:55:2d:b5:ed:ac
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate kale.eatingwell.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kale.eatingwell.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kale.eatingwell.com
Other certificates including the domain name eatingwell.com
(limited to 100 certificates)
sli.eatingwell.com
payments.meredith.com
*.secure.meredith.com
secure.meredith.com
eatingwell.com
my.meredith.com
sli.dailypaws.com
sli.dailypaws.com
eatingwell.com
a-ue1.mydomaine.com
eatingwell.com
payments.meredith.com
promo.eatingwell.com
www.meredith.com
*.eatingwell.com
kale.eatingwell.com
specialoffers.meredith.com
test.aarp.eatingwell.com
ivm.eatingwell.com
promo.eatingwell.com
sli.dailypaws.com
*.agriculture.com
dev.secure.meredith.com
sli.dailypaws.com
lipitor.eatingwell.com
sli.dailypaws.com
secure.meredith.com
eatingwell.com
www.timeinclistrental.com
eatingwell.com
mywedding.com
secure.meredith.com
mywedding.com
www.meredith.com
a-uw2.mydomaine.com
mdp.api.meredith.com
secure.meredith.com
*.eatingwell.com
a-ue1.mydomaine.com
secure.eatingwell.com
promo.eatingwell.com
eatingwell.com
secure.meredith.com
frozenfresh.eatingwell.com
deliveries.eatingwell.com
test.payments.meredith.com
secure.meredith.com
promo.eatingwell.com
www.eatingwell.com
sli.dailypaws.com
a-ue1.mydomaine.com
sli.dailypaws.com
test.secure.meredith.com
links.allrecipes.com
eatingwell.com
sli.dailypaws.com
*.eatingwell.com
cr-iframe.magazine.store
secure.meredith.com
payments.meredith.com
eatingwell.com
*.secure.meredith.com
secure.meredith.com
www.meredith.com
eatingwell.com
frozenfresh.eatingwell.com
cr-iframe.magazine.store
api.meredith.com
payments.meredith.com
ivk.eatingwell.com
*.secure.meredith.com
secure.meredith.com
sli.eatingwell.com
my.meredith.com
test.payments.meredith.com
sli.dailypaws.com
*.eatingwell.com
my.woodmagazine.com
secure.meredith.com
sli.dailypaws.com
sli.dailypaws.com
kale.eatingwell.com
promo.eatingwell.com
www.meredith.com
frozenfresh.eatingwell.com
cr-iframe.magazine.store
secure.meredith.com
mywedding.com
*.agriculture.com
sli.dailypaws.com
www.meredith.com
*.secure.meredith.com
kale.eatingwell.com
www.meredith.com
my.woodmagazine.com
sli.dailypaws.com
www.meredith.com
www.timeinclistrental.com
www.meredith.com
kale.eatingwell.com
payments.meredith.com
*.secure.meredith.com
secure.meredith.com
eatingwell.com
my.meredith.com
sli.dailypaws.com
sli.dailypaws.com
eatingwell.com
a-ue1.mydomaine.com
eatingwell.com
payments.meredith.com
promo.eatingwell.com
www.meredith.com
*.eatingwell.com
kale.eatingwell.com
specialoffers.meredith.com
test.aarp.eatingwell.com
ivm.eatingwell.com
promo.eatingwell.com
sli.dailypaws.com
*.agriculture.com
dev.secure.meredith.com
sli.dailypaws.com
lipitor.eatingwell.com
sli.dailypaws.com
secure.meredith.com
eatingwell.com
www.timeinclistrental.com
eatingwell.com
mywedding.com
secure.meredith.com
mywedding.com
www.meredith.com
a-uw2.mydomaine.com
mdp.api.meredith.com
secure.meredith.com
*.eatingwell.com
a-ue1.mydomaine.com
secure.eatingwell.com
promo.eatingwell.com
eatingwell.com
secure.meredith.com
frozenfresh.eatingwell.com
deliveries.eatingwell.com
test.payments.meredith.com
secure.meredith.com
promo.eatingwell.com
www.eatingwell.com
sli.dailypaws.com
a-ue1.mydomaine.com
sli.dailypaws.com
test.secure.meredith.com
links.allrecipes.com
eatingwell.com
sli.dailypaws.com
*.eatingwell.com
cr-iframe.magazine.store
secure.meredith.com
payments.meredith.com
eatingwell.com
*.secure.meredith.com
secure.meredith.com
www.meredith.com
eatingwell.com
frozenfresh.eatingwell.com
cr-iframe.magazine.store
api.meredith.com
payments.meredith.com
ivk.eatingwell.com
*.secure.meredith.com
secure.meredith.com
sli.eatingwell.com
my.meredith.com
test.payments.meredith.com
sli.dailypaws.com
*.eatingwell.com
my.woodmagazine.com
secure.meredith.com
sli.dailypaws.com
sli.dailypaws.com
kale.eatingwell.com
promo.eatingwell.com
www.meredith.com
frozenfresh.eatingwell.com
cr-iframe.magazine.store
secure.meredith.com
mywedding.com
*.agriculture.com
sli.dailypaws.com
www.meredith.com
*.secure.meredith.com
kale.eatingwell.com
www.meredith.com
my.woodmagazine.com
sli.dailypaws.com
www.meredith.com
www.timeinclistrental.com
www.meredith.com
kale.eatingwell.com
Certificate
The complete raw certificate details for kale.eatingwell.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgISBFvzO71hcVDkVvdLs4Z8a/T0MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTgyMzU0NTVaFw0x OTA3MTcyMzU0NTVaMB4xHDAaBgNVBAMTE2thbGUuZWF0aW5nd2VsbC5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK3jHs2zZAvBFrah9Vcf5r6n8k zksnQAs/2506FQkenHuSc87ReUbeJziHXpGCWksNNtcU6818zkMy0OylYZzgFmhO UGneGZ+D86zChMMBwBrHgWdcudPiI2+AEe5ycDiQEWrQAMjkJsMo9uZE3I56vEnX 6Zr70SaC38lbGwWEtbR6Iym1Jth5yNI+zmfj891ocOG/++F3k+tNTKE+bYqWU3J9 Is2P526L4OHKK4d68EhYHZlys3Xu5JtUII5xo+fU1PI+qjlBdmm7cA9eXITN1x/H G7p/0iS6vzes8YIPWr1DfgWQTWESyrz6jgMQDdgLAPQqHLX58SRQ8BLUIVt9AgMB AAGjggJpMIICZTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGyLJyAwWBl14VxFctds YqXu540eMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wHgYDVR0RBBcwFYITa2FsZS5lYXRpbmd3ZWxsLmNvbTBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3 AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABajMW1gsAAAQDAEgw RgIhAOXBncZYbdqJ4kVDnMPHVbTABX2AeXSxCcUH6pwYfG+WAiEAyCl1H9v1RBeO XDC2qt1vrWOAQqwv75PwMK/+etgRGmkAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily 3KTDDPTlRUf0eAAAAWozFtXgAAAEAwBHMEUCIC8iURjojBo8KZ7Eo3T3QRX7wzfi vIuzj/ocfW71LfMgAiEAvkQvByITHptrV1SgbcubxXMUTtxUXtFAox3wYeDxP/ww DQYJKoZIhvcNAQELBQADggEBAB+WaOKLPBMDv9o9BjOfASJYT72pMxhOMyiiDMLT 8QVi05D6+9s8xjAzIYbV0iW8XdyvtYSm1ZybKQRTap5bzzt2osqoGuGx7N0O8nSo mDvJpNYxYsBHGEFJlA/gMln27bbYXMomhd1tayL7onmvDlpMw448A6js+jfnMNjI MpuKj8nEZ7cv0c0T+kQoVF9N3lzKGz6dW335lhkdiY2tv3uwiM4wmfSb+wMwiAFr u7xXK444UlELryFH1jjxLUFf4GYUPJNWJgjEGaENjInCJ2Zu1PyjcGWiGPFx8WjZ FEhOGXlk52S5X7gcccRJooN/uNaIewYJJJSIoVPLpxVpN6c= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt4x7Ns2QLwRa2ofVXH+ a+p/JM5LJ0ALP9udOhUJHpx7knPO0XlG3ic4h16RglpLDTbXFOvNfM5DMtDspWGc 4BZoTlBp3hmfg/OswoTDAcAax4FnXLnT4iNvgBHucnA4kBFq0ADI5CbDKPbmRNyO erxJ1+ma+9Emgt/JWxsFhLW0eiMptSbYecjSPs5n4/PdaHDhv/vhd5PrTUyhPm2K llNyfSLNj+dui+DhyiuHevBIWB2ZcrN17uSbVCCOcaPn1NTyPqo5QXZpu3APXlyE zdcfxxu6f9Ikur83rPGCD1q9Q34FkE1hEsq8+o4DEA3YCwD0Khy1+fEkUPAS1CFb fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 379738151706432391326136925355416182584564 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-18 23:54:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 23:54:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kale.eatingwell.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25609706051370272268954030295705050798572377437138137785321988332280732360061023538643796255753240519479224242922864545304083161209879357245896063603464495117441581544889622615232597607788084911488111058048589967348401796068082754788421117355838452063951480705528127592976515805033190400256959424199988252035632201282720592024792930109335045027542626829797477167200999839798820208958925657215467376984096558704837488360145437084237137650936666626886950276254278353276487543823681385406325093584902579804304665325452013164065764760604292340940618530347379536293793416343435734328490798089850200843448304475649517640573 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6c8b272030581975e15c4572d76c62a5eee78d1e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kale.eatingwell.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016a3316d60b0000040300483046022100e5c19dc6586dda89e245439cc3c755b4c0057d807974b109c507ea9c187c6f96022100c829751fdbf544178e5c30b6aadd6fad638042ac2fef93f030affe7ad8111a69007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a3316d5e0000004030047304502202f225118e88c1a3c299ec4a374f74115fbc337e2bc8bb38ffa1c7d6ef52df320022100be442f0722131e9b6b5754a06dcb9bc573144edc545ed140a31df061e0f13ffc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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