baena.dev
Issued by GTS CA 1D4
About this certificate
This digital certificate with serial number 42:45:7e:51:3d:cd:4b:6a:09:b8:45:1f:6e:e3:ee:88 was issued on by Google Trust Services LLC.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=baena.dev
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 42:45:7e:51:3d:cd:4b:6a:09:b8:45:1f:6e:e3:ee:88Serial Number (int): 88089878225261346009569153608933699208
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 9c:08:30:90:c7:4a:32:a4:32:64:2d:09:0d:c2:ae:1a:90:79:36:60
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92
Fingerprint (sha1): d4:ef:2a:52:e7:51:f3:45:d9:91:51:dc:08:ef:51:1e:c6:96:bd:6d
Fingerprint (sha256): 63:e2:66:67:5a:3f:b2:d2:ce:07:74:8d:5a:a3:7c:a1:5d:8d:da:51:19:a2:eb:12:8c:9e:4f:52:e3:27:cb:e1
Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1d4/g7wtv1vI0SICRL Distribution Point: http://crls.pki.goog/gts1d4/4tH3zExNRPQ.crl
Check the revocation status for certificate baena.dev
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for baena.dev
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
baena.dev
Other certificates including the domain name baena.dev
(limited to 100 certificates)
final-project.baena.dev
brunaneri.com
shoplystr.app
orange.app.nossaff.com
confeccionesnicco.com
www.easycrypto.com.au
mercadopago.loro.com.co
app-staging.baena.dev
www.aljamia.com.au
last-fm.carlosagosto.com
unicorn.apricote.co
app-staging.baena.dev
school.3dgalaxy.be
hadalabo-kouji.com.hk
s.grayoctagon.com
www.baena.dev
pro-gress.app
via.thelevel.ai
dev-admin.stereotheque.com
blog.baena.dev
app.mev.cat
last-fm.carlosagosto.com
final-project.baena.dev
www.fixtter.co
blog.baena.dev
latticelane.com
liberetti.com
kovomik.cz
lnk.dunctebot.com
chatur.app
nutchy.dev
linea-pro-5.ipcmobile.com
lorawan.getcold.io
www.comparateurpompesfunebres.fr
orange.app.nossaff.com
confeccionesnicco.com
baena.dev
baena.dev
colorspark.app
poker.redlemon.app
pyprestaurants.com
fixtter.co
appdynasty.com
www.klinswap.com
dev.futuri.education
app-draft.baena.dev
www.recroomleague.com
zy-ang.com
shubhaminds.com
www.sorrell.dev
mr-mix.me
trees.tomrandolph.design
www.app.myradiant.com.au
www.baena.dev
baena.dev
pogodex.withan.app
go.hiddenharvest.ca
poker.redlemon.app
blog.baena.dev
www.alexanddarcybigday.com
blog.baena.dev
tecnetics.in
lottery.lab.iidangooo.info
www.sorrell.dev
jose.dev
ncr.raxar.com.ar
go.hiddenharvest.ca
snippets.baena.dev
financiamentodecampanha.com
kovomik.cz
hieat.ca
members.aceleaders.org
sherlockholmes.app
funrewards.io
staging.boomernaturalwellness.com
homogalleria.com
nutchy.dev
www.uteach.app
blog.baena.dev
stackweather.com
www.comparateurpompesfunebres.fr
www.clovisleiloeiro.com.br
www.recroomleague.com
appdynasty.com
final-project.baena.dev
app.baena.dev
baena.dev
www.mustmallorca.app
fb.flymble.com
johnzhang.fan
app.masterbsb.com.br
one4all-hb.com
www.aljamia.com.au
baena.dev
blog.baena.dev
blog.baena.dev
brunaneri.com
shoplystr.app
orange.app.nossaff.com
confeccionesnicco.com
www.easycrypto.com.au
mercadopago.loro.com.co
app-staging.baena.dev
www.aljamia.com.au
last-fm.carlosagosto.com
unicorn.apricote.co
app-staging.baena.dev
school.3dgalaxy.be
hadalabo-kouji.com.hk
s.grayoctagon.com
www.baena.dev
pro-gress.app
via.thelevel.ai
dev-admin.stereotheque.com
blog.baena.dev
app.mev.cat
last-fm.carlosagosto.com
final-project.baena.dev
www.fixtter.co
blog.baena.dev
latticelane.com
liberetti.com
kovomik.cz
lnk.dunctebot.com
chatur.app
nutchy.dev
linea-pro-5.ipcmobile.com
lorawan.getcold.io
www.comparateurpompesfunebres.fr
orange.app.nossaff.com
confeccionesnicco.com
baena.dev
baena.dev
colorspark.app
poker.redlemon.app
pyprestaurants.com
fixtter.co
appdynasty.com
www.klinswap.com
dev.futuri.education
app-draft.baena.dev
www.recroomleague.com
zy-ang.com
shubhaminds.com
www.sorrell.dev
mr-mix.me
trees.tomrandolph.design
www.app.myradiant.com.au
www.baena.dev
baena.dev
pogodex.withan.app
go.hiddenharvest.ca
poker.redlemon.app
blog.baena.dev
www.alexanddarcybigday.com
blog.baena.dev
tecnetics.in
lottery.lab.iidangooo.info
www.sorrell.dev
jose.dev
ncr.raxar.com.ar
go.hiddenharvest.ca
snippets.baena.dev
financiamentodecampanha.com
kovomik.cz
hieat.ca
members.aceleaders.org
sherlockholmes.app
funrewards.io
staging.boomernaturalwellness.com
homogalleria.com
nutchy.dev
www.uteach.app
blog.baena.dev
stackweather.com
www.comparateurpompesfunebres.fr
www.clovisleiloeiro.com.br
www.recroomleague.com
appdynasty.com
final-project.baena.dev
app.baena.dev
baena.dev
www.mustmallorca.app
fb.flymble.com
johnzhang.fan
app.masterbsb.com.br
one4all-hb.com
www.aljamia.com.au
baena.dev
blog.baena.dev
blog.baena.dev
Certificate
The complete raw certificate details for baena.dev in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIQQkV+UT3NS2oJuEUfbuPuiDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yNDAzMjAxNjI4MTlaFw0yNDA2MTgx NzE5MTFaMBQxEjAQBgNVBAMTCWJhZW5hLmRldjCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKCF7iIKWSEJoeIu8gSJ6oxe3gPu0HPeN1TA514QR0XZ6ee7 ayeo44V28XFo/rafgKSE3YTp0wlRxa14vordnQEVOJx8VPuHooVM/s0Z0IfPP0y+ axve7tjvtyytTFTK+d8cfJrcjwJPPlhkiWi1cc4NapN1jEBDYPObhSEzQFVKqgLv ZjN0xDB/1YlAm6lO2pogrdpLwXaIe0nPr+f3HHkKu3d/C5ZY1K4U0iu7PkZunXrk RhK+raLq2hS2sGzsTpQmdHq8/RM8cw+C0/KJzuctgSrwL4NuNt1gOI3xfBjQ95mV LKLG/NKrqxKaF1yN07h4wTVbCoOm/7ydGopyVxMCAwEAAaOCAm4wggJqMA4GA1Ud DwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBScCDCQx0oypDJkLQkNwq4akHk2YDAfBgNVHSMEGDAWgBQl4hgOsleR lCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUHMAGGKWh0dHA6 Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0L2c3d3R2MXZJMFNJMDEGCCsGAQUFBzAC hiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQuZGVyMBQGA1UdEQQN MAuCCWJhZW5hLmRldjAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEEAdZ5AgUD MDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5nb29nL2d0czFkNC80 dEgzekV4TlJQUS5jcmwwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQB2/4g/Crb7 lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY5c6B+YAAAEAwBGMEQCIBmOgRu8 tCeQptCqSQBOwsGC/3C1kLZE6PcXjufLuANcAiAL5ZX/D7c6sgXpLu/S4KGQZ3IA 6y9OF1IAC1pc2jmP0gB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/ur AAABjlzoH6IAAAQDAEYwRAIgBMyzd9ckfHuzYGeot8eMXn8cJFQPZNqzRNHgA2bL 1FYCIG/KmWJOk/QxiPEsljlvNbXvi/zlxKwLi86CMVSWBJzCMA0GCSqGSIb3DQEB CwUAA4IBAQBuln+j53mDGurrjCRLaOj1/6j3kWU5jk6PoxwQyJr8tPDlqgDSDJ6s iZLfkEnSNneSdfWQRWlmeWh0gphVj2yAeMbvO07yuMKdnmfN//SMZTqKVkMxKh8l NWOSiky3mz02dd58TfmybUzs6A2mDFjeVvXVkngiNprw0tGtRhmoNrWPO2rdrYQb TKzFdAQQ8eDUFaX6UFpIg3m92od0uDMyPf6UfrjJ+C7jxgWpQgmK/5Rtof6s4UA6 sFDPLCBzSND5MFcMJj5iCiLUYcun75Y3Uax0quPC/ikeyT1MG88U+oT9dMHZPwus j2lMfAAyMuJt1tRrHbbKw+uyU9Aqv/jm -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIXuIgpZIQmh4i7yBInq jF7eA+7Qc943VMDnXhBHRdnp57trJ6jjhXbxcWj+tp+ApITdhOnTCVHFrXi+it2d ARU4nHxU+4eihUz+zRnQh88/TL5rG97u2O+3LK1MVMr53xx8mtyPAk8+WGSJaLVx zg1qk3WMQENg85uFITNAVUqqAu9mM3TEMH/ViUCbqU7amiCt2kvBdoh7Sc+v5/cc eQq7d38LlljUrhTSK7s+Rm6deuRGEr6touraFLawbOxOlCZ0erz9EzxzD4LT8onO 5y2BKvAvg2423WA4jfF8GND3mZUsosb80qurEpoXXI3TuHjBNVsKg6b/vJ0ainJX EwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 88089878225261346009569153608933699208 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 16:28:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 17:19:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'baena.dev' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20264172241072435022468570314063497148229560523384591599224658764313707545541842772634984809078248064748277419974702454124315815166839374479961094103187973301207214755427980290656336014908637103239975469048941273009343536581679636171079696837067553756521103558510915373256957706870374582275135321744949998253303222792470646071069927773376860735347206405258146331659513489113152583672854765872109448656084232968800679536195820188450738879431829454981333197876814365275686677160227279511007710143854042757119316472595215496353074570827316611951743659915065018599498813670695502064822235967960926396436946712174584289043 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9c083090c74a32a432642d090dc2ae1a90793660 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/g7wtv1vI0SI' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baena.dev' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/4tH3zExNRPQ.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e5ce81f9800000403004630440220198e811bbcb42790a6d0aa49004ec2c182ff70b590b644e8f7178ee7cbb8035c02200be595ff0fb73ab205e92eefd2e0a190677200eb2f4e1752000b5a5cda398fd2007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e5ce81fa20000040300463044022004ccb377d7247c7bb36067a8b7c78c5e7f1c24540f64dab344d1e00366cbd45602206fca99624e93f43188f12c96396f35b5ef8bfce5c4ac0b8bce82315496049cc2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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