promocaodiapremiado.deere.com.br
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:89:3f:51:5c:0b:56:99:93:e0:53:f6:3c:18:a9:1e:87:87 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=promocaodiapremiado.deere.com.br
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:89:3f:51:5c:0b:56:99:93:e0:53:f6:3c:18:a9:1e:87:87Serial Number (int): 308039705870109295153816487715175541933959
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e3:d0:15:0d:ae:f0:f9:4e:f6:2f:3d:4c:4f:88:a1:3b:7b:fd:fa:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 13:42:02:72:ed:5f:89:9e:30:c5:13:6f:ea:db:bf:9a:ce:07:f6:f8
Fingerprint (sha256): 67:01:99:f7:fc:1c:f6:63:f9:7c:a8:e6:d2:e1:1e:59:df:c4:a7:7b:35:40:c4:3c:d4:36:af:6b:5a:45:4b:04
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate promocaodiapremiado.deere.com.br
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for promocaodiapremiado.deere.com.br
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
promocaodiapremiado.deere.com.br
Other certificates including the domain name deere.com.br
(limited to 100 certificates)
www.deere.com
www.deere.com
pravoce.deere.com.br
eu1.pathadvice.ai
eu1.pathadvice.ai
www.deere.com
himaia.io
jdapps.deere.com.br
zdxiseadmin1.dx.deere.com
www.klacengineering.com
www.deere.com
m.deere.com
www.deere.com
*.deere.com
zdxisepolicy01.dx.deere.com
zdxiseadmin1.dx.deere.com
blog.sarunint.com
chateaudelaroche.eu
craquedevendas.deere.com.br
www.deere.com
deere.com.br
clienteagrishow.deere.com.br
www.deere.com
hazard.finance
mytechsite.co.uk
exchange.criptomerkado.com
mk.sienergie.com
widget.powerfeedback.io
www.deere.com
checklist.deere.com.br
go.1sur10.fr
proposta.abfassistencia.com.br
promocaodiapremiado.deere.com.br
roammtb.com
m.deere.com
www.deere.com
m.deere.com
ponchoui.nl
m.deere.com
www.deere.com
shipper.stage.exofreight.com
www.deere.com.br
m.deere.com
campanhas.deere.com.br
m.deere.com
cleantask.com.br
julian-garcia.uk
www.deere.com
salmanzaheer.com
www.magicdocuments.com
m.deere.com
*.deere.com
links.youbchat.com
aminejait.com
pravoce.deere.com.br
www.deere.com
www.deere.com
www.deere.com
app.banderolka.support
*.deere.com.br
promocaodiapremiado.deere.com.br
*.deere.com
blog.documentnode.io
www.deere.com
promocaodiapremiado.deere.com.br
www.kemaroicl.com
semprenovo.deere.com.br
www.deere.com
app.brewfather.no
*.deere.com
hovdebakkenopp.no
www.deere.com
m.deere.com
m.deere.com
www.deere.com
investors.bioceres.com.ar
www.deere.com
www.deere.com
eosacro.com
megafeiraoriginal.deere.com.br
jdapps.deere.com.br
zdxisepolicy01.dx.deere.com
*.deere.com
www.deere.com
jdapps.deere.com.br
dv4all.com
m.deere.com
www.deere.com
megafeiraoriginal.deere.com.br
*.deere.com
www.deere.com
www.deere.com
www.deere.com
www.deere.com
heartandsoul.com.de
trietsch.dev
www.deere.com
semprenovo.deere.com.br
semprenovo.deere.com.br
www.deere.com
www.deere.com
pravoce.deere.com.br
eu1.pathadvice.ai
eu1.pathadvice.ai
www.deere.com
himaia.io
jdapps.deere.com.br
zdxiseadmin1.dx.deere.com
www.klacengineering.com
www.deere.com
m.deere.com
www.deere.com
*.deere.com
zdxisepolicy01.dx.deere.com
zdxiseadmin1.dx.deere.com
blog.sarunint.com
chateaudelaroche.eu
craquedevendas.deere.com.br
www.deere.com
deere.com.br
clienteagrishow.deere.com.br
www.deere.com
hazard.finance
mytechsite.co.uk
exchange.criptomerkado.com
mk.sienergie.com
widget.powerfeedback.io
www.deere.com
checklist.deere.com.br
go.1sur10.fr
proposta.abfassistencia.com.br
promocaodiapremiado.deere.com.br
roammtb.com
m.deere.com
www.deere.com
m.deere.com
ponchoui.nl
m.deere.com
www.deere.com
shipper.stage.exofreight.com
www.deere.com.br
m.deere.com
campanhas.deere.com.br
m.deere.com
cleantask.com.br
julian-garcia.uk
www.deere.com
salmanzaheer.com
www.magicdocuments.com
m.deere.com
*.deere.com
links.youbchat.com
aminejait.com
pravoce.deere.com.br
www.deere.com
www.deere.com
www.deere.com
app.banderolka.support
*.deere.com.br
promocaodiapremiado.deere.com.br
*.deere.com
blog.documentnode.io
www.deere.com
promocaodiapremiado.deere.com.br
www.kemaroicl.com
semprenovo.deere.com.br
www.deere.com
app.brewfather.no
*.deere.com
hovdebakkenopp.no
www.deere.com
m.deere.com
m.deere.com
www.deere.com
investors.bioceres.com.ar
www.deere.com
www.deere.com
eosacro.com
megafeiraoriginal.deere.com.br
jdapps.deere.com.br
zdxisepolicy01.dx.deere.com
*.deere.com
www.deere.com
jdapps.deere.com.br
dv4all.com
m.deere.com
www.deere.com
megafeiraoriginal.deere.com.br
*.deere.com
www.deere.com
www.deere.com
www.deere.com
www.deere.com
heartandsoul.com.de
trietsch.dev
www.deere.com
semprenovo.deere.com.br
semprenovo.deere.com.br
www.deere.com
Certificate
The complete raw certificate details for promocaodiapremiado.deere.com.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgISA4k/UVwLVpmT4FP2PBipHoeHMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTEwMjAzMTlaFw0y MDA0MTAwMjAzMTlaMCsxKTAnBgNVBAMTIHByb21vY2FvZGlhcHJlbWlhZG8uZGVl cmUuY29tLmJyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+Zr0Z6e hAkPhfEUVoq/4O674hm+pNhqOcs5r4Jn4soC4lM+5ozG2sNt7LjYkuvL/Rr5y2Zi BBYe4ezmgg1tmsJ5SZXC9Nn20fmXp4O6BGrSGc6fiuuJhtQJgpkqrMMjgodaWQsh nsI6Gu34IZiTLN0rH21MOzUBZm4og7+J1CUISpu42jNYrg4ae07KpMIA+a9cBCFV XrV9o4Ho0p6l7u/XAnG3o0Sc6R+mdiue58kwwG4LOyvDri/k6eBRS+lmYu7atvKn vr52sMvzWHWG40O2pDV+2OdmB+kCvMaEpQ7gbiPLZobZs/DMz0r2MUX2E8kHI6Hz PyUAjp0rZ803nQIDAQABo4ICdzCCAnMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTj 0BUNrvD5TvYvPUxPiKE7e/36xTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCIHByb21vY2FvZGlhcHJl bWlhZG8uZGVlcmUuY29tLmJyMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAXqdz+d9WwOe1Nkh90EngMnqRmgyE oRIShBh1loFxRVgAAAFvko5YFAAABAMASDBGAiEAncD+ZlO7Sw2ldpKFR1EHgyFD zZ4AXMQy3eVgoBPkw0MCIQCuj8Y0bOpIeWrWPMeYpRbRS3BRPhxV0l/FIKQqcDpE pwB3AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABb5KOWDIAAAQD AEgwRgIhAOm9RwR4bHqZU35J4oHG5bJxugm0LK5dzqdT4EsMdg+qAiEAoz0so7pd 8HECruq3Ysj4sHegLg1V1RwQRsmTcjjpDmgwDQYJKoZIhvcNAQELBQADggEBAClY IlDP70XNJ2IKNzVciN/RfeMy4M6BAZpnIdp/+tyFBMUi0YnVTCNRmKEoDFmMdZ+7 qRQ5nljYJCsWx3B8JBQ2eyuBLwDg92c2YtFDr7b2Dir2ovE0Md4OmWQHWF6hXIAB FLLLpmCD3ag+zCPk/Fq0Ty8+DlS+7GXwppxcFdP8vrzBlVf769Ut8XrnrHYy+a4X XEo0hzPYRdLaOxJc0A/lWAnWmmT+Ay4cw7pcIC30kt0xsjST8DW51evylB908xYE xSKigzN29+F4sXQkqlgm6Cx9gCqV3B/saXx5VTqIDF9yQdEElo1S4+3eIFKY5uZp /Tccyyi84mr+QS9as44= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+Zr0Z6ehAkPhfEUVoq/ 4O674hm+pNhqOcs5r4Jn4soC4lM+5ozG2sNt7LjYkuvL/Rr5y2ZiBBYe4ezmgg1t msJ5SZXC9Nn20fmXp4O6BGrSGc6fiuuJhtQJgpkqrMMjgodaWQshnsI6Gu34IZiT LN0rH21MOzUBZm4og7+J1CUISpu42jNYrg4ae07KpMIA+a9cBCFVXrV9o4Ho0p6l 7u/XAnG3o0Sc6R+mdiue58kwwG4LOyvDri/k6eBRS+lmYu7atvKnvr52sMvzWHWG 40O2pDV+2OdmB+kCvMaEpQ7gbiPLZobZs/DMz0r2MUX2E8kHI6HzPyUAjp0rZ803 nQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 308039705870109295153816487715175541933959 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 02:03:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 02:03:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'promocaodiapremiado.deere.com.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25740000820559749218258226098766096353679322240131657434455098659641140365700279121625408298364733957667577507074170587821816066514395735949387461886163305266349168993661380844636189811441139373384765861815340774969053733187988860900180109446981625700203051014738523552566370986975711178125356745188713196777329490159766405596480477757048202242980408848018798553632495462328759803242793268457523806320352144015065812788490808279374734800744573492554746270631170021223392201111299820125710695503406533015432100347157446181349836219728335950583824482690113521950496398073540421529316285216602372459109591456267513968541 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e3d0150daef0f94ef62f3d4c4f88a13b7bfdfac5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promocaodiapremiado.deere.com.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f928e581400000403004830460221009dc0fe6653bb4b0da5769285475107832143cd9e005cc432dde560a013e4c343022100ae8fc6346cea48796ad63cc798a516d14b70513e1c55d25fc520a42a703a44a700770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f928e58320000040300483046022100e9bd4704786c7a99537e49e281c6e5b271ba09b42cae5dcea753e04b0c760faa022100a33d2ca3ba5df07102aeeab762c8f8b077a02e0d55d51c1046c9937238e90e68 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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