reshef-aviation.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b7:a4:a9:70:c9:42:3f:b5:24:67:00:8f:ee:04:bd:b4:06 was issued on by Let's Encrypt.
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=reshef-aviation.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b7:a4:a9:70:c9:42:3f:b5:24:67:00:8f:ee:04:bd:b4:06Serial Number (int): 323827404118865536645443599790443182535686
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 46:18:55:a7:49:33:3a:80:5a:7c:89:a0:90:ff:04:a5:d0:bf:84:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 48:24:23:4c:3b:61:bf:f6:ee:85:8f:c9:c5:d1:5d:9c:50:c8:a1:7e
Fingerprint (sha256): 62:39:61:a3:23:49:4b:ed:ee:3f:b8:00:7a:ed:a5:bf:cc:c0:db:3e:c5:ec:81:89:ce:32:a5:d3:9a:2b:0d:2f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate reshef-aviation.com
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for reshef-aviation.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.reshef-aviation.co.il
mail.reshef-aviation.com
reshef-aviation.co.il
reshef-aviation.com
reshef-aviation.media-v.co.il
reshef-aviation2.media-v.co.il
reshef.com.media-v.co.il
saar.dev.media-v.co.il
www.reshef-aviation.co.il
www.reshef-aviation.com
www.reshef-aviation.media-v.co.il
www.reshef-aviation2.media-v.co.il
www.reshef.com.media-v.co.il
www.saar.dev.media-v.co.il
mail.reshef-aviation.com
reshef-aviation.co.il
reshef-aviation.com
reshef-aviation.media-v.co.il
reshef-aviation2.media-v.co.il
reshef.com.media-v.co.il
saar.dev.media-v.co.il
www.reshef-aviation.co.il
www.reshef-aviation.com
www.reshef-aviation.media-v.co.il
www.reshef-aviation2.media-v.co.il
www.reshef.com.media-v.co.il
www.saar.dev.media-v.co.il
Other certificates including the domain name reshef-aviation.com
(limited to 100 certificates)
reshef-aviation.com
reshef-aviation.com
*.media-v.co.il
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
www.reshef-aviation.media-v.co.il
reshef-aviation.com
*.media-v.co.il
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
*.media-v.co.il
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
*.media-v.co.il
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
www.reshef-aviation.media-v.co.il
reshef-aviation.com
*.media-v.co.il
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
*.media-v.co.il
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
reshef-aviation.com
Certificate
The complete raw certificate details for reshef-aviation.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG2DCCBcCgAwIBAgISA7ekqXDJQj+1JGcAj+4EvbQGMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMjAyMTEyNTdaFw0y MDA2MTgyMTEyNTdaMB4xHDAaBgNVBAMTE3Jlc2hlZi1hdmlhdGlvbi5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmp/g5nLJXHuEDgdhf+whxbB5i KfIx89tGUB/OuiXxi7OI8oqj+0/0lVywQGoiOenJ1cjernNOmzvlXtKo+CNbxrxt d8h0eJ+6aSuqGszTlyCOuiAA1v1Gna6xwfq2GrKQ/bLnJhiX3USAOO9ldikf59Fu tES2BMmuDxAw6wTnYumNNsAmw93C84X4PJa7xCPVW/dcu6DUjt6wKWlXQ8zmMGtj MZXAToVWEmoaqAl4VE4y/wKumRi2sAzoeMEUsx1zDPyAY2tkIT4LyNR6wtxl4/df aR6fPbs2F/7KgZQ8VT+N3edYxBzPTkgqWsdq1zuD3MLaVQ2H3lPFutZcZ3TDAgMB AAGjggPiMIID3jAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEYYVadJMzqAWnyJoJD/ BKXQv4TcMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wggGVBgNVHREEggGMMIIBiIIabWFpbC5yZXNoZWYtYXZpYXRpb24u Y28uaWyCGG1haWwucmVzaGVmLWF2aWF0aW9uLmNvbYIVcmVzaGVmLWF2aWF0aW9u LmNvLmlsghNyZXNoZWYtYXZpYXRpb24uY29tgh1yZXNoZWYtYXZpYXRpb24ubWVk aWEtdi5jby5pbIIecmVzaGVmLWF2aWF0aW9uMi5tZWRpYS12LmNvLmlsghhyZXNo ZWYuY29tLm1lZGlhLXYuY28uaWyCFnNhYXIuZGV2Lm1lZGlhLXYuY28uaWyCGXd3 dy5yZXNoZWYtYXZpYXRpb24uY28uaWyCF3d3dy5yZXNoZWYtYXZpYXRpb24uY29t giF3d3cucmVzaGVmLWF2aWF0aW9uLm1lZGlhLXYuY28uaWyCInd3dy5yZXNoZWYt YXZpYXRpb24yLm1lZGlhLXYuY28uaWyCHHd3dy5yZXNoZWYuY29tLm1lZGlhLXYu Y28uaWyCGnd3dy5zYWFyLmRldi5tZWRpYS12LmNvLmlsMEwGA1UdIARFMEMwCAYG Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu bGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA8JWkWfIA 0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFw+gGnOQAABAMARzBFAiEAyeDQ yL8oC2BwLZzX0uIyCEXAI3D6+8pWjev+g+6IIigCIGplpdsj5lh00u2YJKQdP4ry tcOS/zNwJoVMXv7x9tfKAHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+L kF4AAAFw+gGnLQAABAMASDBGAiEA2bsaj5hRquaYaPRzZS3a8G1trMuUmgl/vSqv eMs9MmUCIQCKtf8TekoF4xH3CJnfn7LFnlcKlf9HrmXGQiqhMaz2JjANBgkqhkiG 9w0BAQsFAAOCAQEAES7POBj3znAhEECSKW6KU2zkHe4uBQYYfh0UgeNxGfG/wXQn PYrZ3ZnlEadk/jymTt4ojfyZmljve2zKSJ8HvdjU7tE031ZYv8sAzqG6+4NFptzL p4vZCYMmJqMbTvvhtVAeAbgeiTLQoRCVNSa09MEu1LJi0/CDqh2rvy13tFQ+sdtn jaRBNE5OGiHIDDSCi1ah12LYQX+rmtXGQWyenMR+DaNsOUayHQPrlpnIho5IHwhv M4aanRfJSRrsQDOMX6semiNgQZDS4LBNqWFtnJoHLRFDTMtjmupmOupH5vZ0iFQC 8eXttP3QQ+S4NXFKch2gBZVYOpmQLUAGXOfIWA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qf4OZyyVx7hA4HYX/sI cWweYinyMfPbRlAfzrol8YuziPKKo/tP9JVcsEBqIjnpydXI3q5zTps75V7SqPgj W8a8bXfIdHifumkrqhrM05cgjrogANb9Rp2uscH6thqykP2y5yYYl91EgDjvZXYp H+fRbrREtgTJrg8QMOsE52LpjTbAJsPdwvOF+DyWu8Qj1Vv3XLug1I7esClpV0PM 5jBrYzGVwE6FVhJqGqgJeFROMv8CrpkYtrAM6HjBFLMdcwz8gGNrZCE+C8jUesLc ZeP3X2kenz27Nhf+yoGUPFU/jd3nWMQcz05IKlrHatc7g9zC2lUNh95TxbrWXGd0 wwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 323827404118865536645443599790443182535686 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-20 21:12:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-18 21:12:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reshef-aviation.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29117639053373964458459312127251436224584506067486489204749963453402597256087988810450388067650390107626335149486021197471819741557786301353697509543783589153973842339050881766284257877599147421524586653588973969887905870200607262033184295904231837766690996669086891662752396926811995057385245967279897950206989089456965873634212712901879491444140409200777080601928535998140810676096467137716318393681412222248619640977709514132787639478318721560538629700928451400018280754321387928812849969316763633657030581125824248270920973482311027803205294146116174273022939455226541167258364335408682202027899497917293579957443 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 461855a749333a805a7c89a090ff04a5d0bf84dc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (396 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.reshef-aviation.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.reshef-aviation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshef-aviation.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshef-aviation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshef-aviation.media-v.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshef-aviation2.media-v.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshef.com.media-v.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saar.dev.media-v.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reshef-aviation.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reshef-aviation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reshef-aviation.media-v.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reshef-aviation2.media-v.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reshef.com.media-v.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saar.dev.media-v.co.il' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170fa01a7390000040300473045022100c9e0d0c8bf280b60702d9cd7d2e2320845c02370fafbca568debfe83ee88222802206a65a5db23e65874d2ed9824a41d3f8af2b5c392ff337026854c5efef1f6d7ca007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170fa01a72d0000040300483046022100d9bb1a8f9851aae69868f473652ddaf06d6daccb949a097fbd2aaf78cb3d32650221008ab5ff137a4a05e311f70899df9fb2c59e570a95ff47ae65c6422aa131acf626 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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