demo.roostify.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:2f:79:60:8b:77:60:8d:89:b3:cf:8f:19:99:4f:dc:0e:ae was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=demo.roostify.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:2f:79:60:8b:77:60:8d:89:b3:cf:8f:19:99:4f:dc:0e:aeSerial Number (int): 277491466917266209803268196073812675792558
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4a:25:77:3c:2b:d1:92:53:b1:a9:e8:54:a7:c3:77:f3:a8:01:74:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 28:78:61:42:e0:6e:2f:cd:04:34:fc:6a:22:28:96:04:75:4c:d4:d2
Fingerprint (sha256): 61:75:d5:ea:42:d5:fb:f0:a9:56:f4:b1:c6:35:3e:ab:98:b9:99:01:9a:0a:bb:93:4a:3e:6d:a8:9c:ca:9a:8b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate demo.roostify.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for demo.roostify.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
demo.roostify.com
Other certificates including the domain name roostify.com
(limited to 100 certificates)
mortgage.1stbmt.com.roostify.com
guild-admin.roostify.com
roostify.com
books-lb8.airmason.com
insights.roostify.com
books-lb8.airmason.com
homeward-prod-equifax.roostify.com
apply.superiorcu.com
perf-test.roostify.com
guild-admin.roostify.com
www2.roostify.com
www2.roostify.com
ammac-test.roostify.com
dev.roostify.com
apply.superiorcu.com
homeward-prod-equifax.roostify.com
dev-borrower.roostify.com
books-lb8.airmason.com
demo.roostify.com
tdbank-test-optimal.roostify.com
apply.superiorcu.com
www.roostify.com
apply.truecore.org
dev.roostify.com
*.roostify.com
www.roostify.com
roostify.com
books-lb8.airmason.com
books-lb8.airmason.com
roostify.com
clientsuccess.roostify.com
apply.superiorcu.com
ammac-test.roostify.com
apply.truecore.org
bok-qa.roostify.com
demo.roostify.com
books-lb8.airmason.com
roostify.com
insights-dev.roostify.com
apply.truecore.org
ammac-test.roostify.com
dev.roostify.com
apply.superiorcu.com
books-lb8.airmason.com
ammac-test.roostify.com
apply.gomortgagebeast.com
www.roostify.com
www.roostify.com
www2.roostify.com
myapp.guildmortgage.com
books-lb8.airmason.com
mortgage.1stbmt.com
books-lb8.airmason.com
*.roostify.com
www2.roostify.com
guild-admin.roostify.com
www.roostify.com
www.roostify.com
template.roostify.com
www.roostify.com
www.roostify.com
nfcu-test.roostify.com
roostify.com
bok-qa.roostify.com
*.roostify.com
www2.roostify.com
www.roostify.com
roostify.com
mortgage.banksanjuans.com
www2.roostify.com
template.roostify.com
insights-dev.roostify.com
demo.roostify.com
mortgage.gofirstbank.com
dev.roostify.com
books-lb8.airmason.com
clientsuccess.roostify.com
www.roostify.com
bok-qa.roostify.com
roostify.com
www.roostify.com
mortgage.gofirstbank.com
dev.roostify.com
dev.roostify.com
*.roostify.com
bok-qa.roostify.com
botw-test.roostify.com
test-frame.roostify.com
mortgage.1stbmt.com
mortgage.1stbmt.com
www.roostify.com
*.roostify.com
books-lb8.airmason.com
perf-test.roostify.com
demo.roostify.com
ammac-test.roostify.com
www.roostify.com
apply.truecore.org
demo.roostify.com
ammac-test.roostify.com
guild-admin.roostify.com
roostify.com
books-lb8.airmason.com
insights.roostify.com
books-lb8.airmason.com
homeward-prod-equifax.roostify.com
apply.superiorcu.com
perf-test.roostify.com
guild-admin.roostify.com
www2.roostify.com
www2.roostify.com
ammac-test.roostify.com
dev.roostify.com
apply.superiorcu.com
homeward-prod-equifax.roostify.com
dev-borrower.roostify.com
books-lb8.airmason.com
demo.roostify.com
tdbank-test-optimal.roostify.com
apply.superiorcu.com
www.roostify.com
apply.truecore.org
dev.roostify.com
*.roostify.com
www.roostify.com
roostify.com
books-lb8.airmason.com
books-lb8.airmason.com
roostify.com
clientsuccess.roostify.com
apply.superiorcu.com
ammac-test.roostify.com
apply.truecore.org
bok-qa.roostify.com
demo.roostify.com
books-lb8.airmason.com
roostify.com
insights-dev.roostify.com
apply.truecore.org
ammac-test.roostify.com
dev.roostify.com
apply.superiorcu.com
books-lb8.airmason.com
ammac-test.roostify.com
apply.gomortgagebeast.com
www.roostify.com
www.roostify.com
www2.roostify.com
myapp.guildmortgage.com
books-lb8.airmason.com
mortgage.1stbmt.com
books-lb8.airmason.com
*.roostify.com
www2.roostify.com
guild-admin.roostify.com
www.roostify.com
www.roostify.com
template.roostify.com
www.roostify.com
www.roostify.com
nfcu-test.roostify.com
roostify.com
bok-qa.roostify.com
*.roostify.com
www2.roostify.com
www.roostify.com
roostify.com
mortgage.banksanjuans.com
www2.roostify.com
template.roostify.com
insights-dev.roostify.com
demo.roostify.com
mortgage.gofirstbank.com
dev.roostify.com
books-lb8.airmason.com
clientsuccess.roostify.com
www.roostify.com
bok-qa.roostify.com
roostify.com
www.roostify.com
mortgage.gofirstbank.com
dev.roostify.com
dev.roostify.com
*.roostify.com
bok-qa.roostify.com
botw-test.roostify.com
test-frame.roostify.com
mortgage.1stbmt.com
mortgage.1stbmt.com
www.roostify.com
*.roostify.com
books-lb8.airmason.com
perf-test.roostify.com
demo.roostify.com
ammac-test.roostify.com
www.roostify.com
apply.truecore.org
demo.roostify.com
ammac-test.roostify.com
Certificate
The complete raw certificate details for demo.roostify.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAy95YIt3YI2Js8+PGZlP3A6uMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTEwMDUxNTFaFw0y MDA2MDkwMDUxNTFaMBwxGjAYBgNVBAMTEWRlbW8ucm9vc3RpZnkuY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfYMFbf6Fi82EiY6bIRUepz/4PA0 HPcWjGaRodkuCSCOSCdhk9vGLUA2CH2i1cx7+dGVKX9iWgmbMiMhOwXIHazc8dK9 7DASBBKAG/NnOe4eFNDtkUw5j+iI7oysdPrwUsXnYIHSMMiR6Z0vHgw1s73cF9RW UgTnvkPm9g5S8nbz7d1TWEsMALNkF/LPABFdMIKF+YGsqKn71Q6TYsU3plq7N5a5 fqljYTimaIDtYCxXz+3q2KDIjcp9tLD7nhibCiZzR2wwiRXMKvTIj1CR1iDj5ktR WJTHitgPz+rLzJikmse6ZHsLQoRmiB7q9uXn/4nnPcgn6y6EWxLU58EQHwIDAQAB o4ICZjCCAmIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRKJXc8K9GSU7Gp6FSnw3fz qAF0EjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw dC5vcmcvMBwGA1UdEQQVMBOCEWRlbW8ucm9vc3RpZnkuY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAsh4F zIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFwx0p6dgAABAMARzBFAiAN JIs46OZoWri6G/HIxzVst75Xa/BDcca8Y/3i+Dy2hgIhAJO3lpQsUnfZcWFbhS9l 5eWiYMQsoO8szM6Mt2WqK3pCAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2y CJo32RMAAAFwx0p6iQAABAMARzBFAiAKIGgah783OutKSMWorIhnFfLhOH1wXSjd GwNJEnt8ZwIhAPOyXcg9jr4Sl8M+TyEK5fw7ATdxq1X3mmmtNkwvxF1EMA0GCSqG SIb3DQEBCwUAA4IBAQB8yOJRmzQe7jf8nV7dqav6QRWPZq6kuzZLmXllOZ/bkpRa Q3MqEhzM24H1UskslVKp2CoLTGmjvkpgguoAJz4QiHwUh9sS+HGYX6GGK5qbPa7Y IZbWtBnwgXREBckgAkLAAs1sjWJ4kPzYeMlegKkzTf32/MEWZp/azRRUYb+O23GW 9iWOrOWnKNBnCD/XOuEDebIPeF8EPG9VkB0j9uSbIprjVeok110+/w0Hg+LPmtJL bLneSFhoh/cOPLNqRg2XpFoylQF7XhREBGjMx5osuuWyb1dKcjdsx6Y+4TplOu+x nTkYlBSIwOhowHgRLZXPNzsr14OGxM7A13gkMr2C -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfYMFbf6Fi82EiY6bIRU epz/4PA0HPcWjGaRodkuCSCOSCdhk9vGLUA2CH2i1cx7+dGVKX9iWgmbMiMhOwXI Hazc8dK97DASBBKAG/NnOe4eFNDtkUw5j+iI7oysdPrwUsXnYIHSMMiR6Z0vHgw1 s73cF9RWUgTnvkPm9g5S8nbz7d1TWEsMALNkF/LPABFdMIKF+YGsqKn71Q6TYsU3 plq7N5a5fqljYTimaIDtYCxXz+3q2KDIjcp9tLD7nhibCiZzR2wwiRXMKvTIj1CR 1iDj5ktRWJTHitgPz+rLzJikmse6ZHsLQoRmiB7q9uXn/4nnPcgn6y6EWxLU58EQ HwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 277491466917266209803268196073812675792558 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 00:51:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 00:51:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'demo.roostify.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22465510378514354828059836595149550752610034407120326462254738524527716741778465829973559713842922649005355695625153174094244339752901089039868165185619632518412087357297393649658099897029254926468771244988982456648966102479375246325863593933187983391564987145503071098817244581138244940120530641546608697891001043676513375393116935898303428003680432373821971406291250124732042253109101254091227728997854124010567457784525569123906730572611768015828991170334169774476691720112068373678759580401906141080406966491955138352503216839790249379374640105581773087632009761989554542346818150531466149486305587954059300638751 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4a25773c2bd19253b1a9e854a7c377f3a8017412 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.roostify.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170c74a7a76000004030047304502200d248b38e8e6685ab8ba1bf1c8c7356cb7be576bf04371c6bc63fde2f83cb68602210093b796942c5277d971615b852f65e5e5a260c42ca0ef2cccce8cb765aa2b7a420076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170c74a7a89000004030047304502200a20681a87bf373aeb4a48c5a8ac886715f2e1387d705d28dd1b0349127b7c67022100f3b25dc83d8ebe1297c33e4f210ae5fc3b013771ab55f79a69ad364c2fc45d44 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007cc8e2519b341eee37fc9d5edda9abfa41158f66aea4bb364b997965399fdb92945a43732a121cccdb81f552c92c9552a9d82a0b4c69a3be4a6082ea00273e10887c1487db12f871985fa1862b9a9b3daed82196d6b419f081744405c9200242c002cd6c8d627890fcd878c95e80a9334dfdf6fcc116669fdacd145461bf8edb7196f6258eace5a728d067083fd73ae10379b20f785f043c6f55901d23f6e49b229ae355ea24d75d3eff0d0783e2cf9ad24b6cb9de48586887f70e3cb36a460d97a45a3295017b5e14440468ccc79a2cbae5b26f574a72376cc7a63ee13a653aefb19d3918941488c0e868c078112d95cf373b2bd78386c4cec0d7782432bd82