www.betterfield.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d7:f2:c1:60:95:2f:9d:ae:1e:12:53:23:db:54:2b:34:9b was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.betterfield.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d7:f2:c1:60:95:2f:9d:ae:1e:12:53:23:db:54:2b:34:9bSerial Number (int): 334820243930487211031719787295262420710555
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d6:8e:b8:e7:f5:19:aa:99:e1:44:92:00:e9:13:84:cc:43:a7:39:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d1:25:57:b5:2d:e4:5f:64:ab:72:4a:14:f0:93:8f:ab:91:60:74:31
Fingerprint (sha256): 69:ec:68:2b:de:dc:14:50:f6:87:16:6c:64:66:1f:c3:c5:dc:62:d6:f6:fb:65:46:9c:4d:89:27:9e:2d:df:79
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.betterfield.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.betterfield.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
betterfield.net
www.betterfield.net
www.betterfield.net
Other certificates including the domain name betterfield.net
(limited to 100 certificates)
support.vesal.tech
ftb.regalpay.help
support.vesal.tech
ftb.regalpay.help
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
ftb.regalpay.help
ss-aqua.ysknet.co.jp
support.trackyourdebt.co.za
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.trackyourdebt.co.za
support.trackyourdebt.co.za
support.vesal.tech
support.vesal.tech
support.trackyourdebt.co.za
ftb.regalpay.help
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
www.betterfield.net
support.vesal.tech
support.vesal.tech
ftb.regalpay.help
ftb.regalpay.help
support.vesal.tech
support.vesal.tech
support.trackyourdebt.co.za
support.vesal.tech
support.vesal.tech
support.trackyourdebt.co.za
help.mycardholdersupport.com
ftb.regalpay.help
support.vesal.tech
ftb.regalpay.help
support.vesal.tech
betterfield.net
merchantdoodle.execupay.help
www.betterfield.net
support.vesal.tech
ftb.regalpay.help
ftb.regalpay.help
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
ftb.regalpay.help
www.betterfield.net
ftb.regalpay.help
support.trackyourdebt.co.za
support.vesal.tech
www.betterfield.net
ftb.regalpay.help
ftb.regalpay.help
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
ftb.regalpay.help
support.vesal.tech
www.betterfield.net
ftb.regalpay.help
ftb.regalpay.help
support.vesal.tech
support.vesal.tech
support.vesal.tech
ftb.regalpay.help
ftb.regalpay.help
help.aureo-systems.com
support.vesal.tech
ftb.regalpay.help
ftb.regalpay.help
support.vesal.tech
www.betterfield.net
support.vesal.tech
ftb.regalpay.help
support.kinectcommunications.com
support.trackyourdebt.co.za
ftb.regalpay.help
support.vesal.tech
support.vesal.tech
www.betterfield.net
www.betterfield.net
help.aureo-systems.com
support.vesal.tech
support.trackyourdebt.co.za
support.vesal.tech
ftb.regalpay.help
ftb.regalpay.help
support.vesal.tech
ftb.regalpay.help
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
ftb.regalpay.help
ss-aqua.ysknet.co.jp
support.trackyourdebt.co.za
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.trackyourdebt.co.za
support.trackyourdebt.co.za
support.vesal.tech
support.vesal.tech
support.trackyourdebt.co.za
ftb.regalpay.help
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
www.betterfield.net
support.vesal.tech
support.vesal.tech
ftb.regalpay.help
ftb.regalpay.help
support.vesal.tech
support.vesal.tech
support.trackyourdebt.co.za
support.vesal.tech
support.vesal.tech
support.trackyourdebt.co.za
help.mycardholdersupport.com
ftb.regalpay.help
support.vesal.tech
ftb.regalpay.help
support.vesal.tech
betterfield.net
merchantdoodle.execupay.help
www.betterfield.net
support.vesal.tech
ftb.regalpay.help
ftb.regalpay.help
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
ftb.regalpay.help
www.betterfield.net
ftb.regalpay.help
support.trackyourdebt.co.za
support.vesal.tech
www.betterfield.net
ftb.regalpay.help
ftb.regalpay.help
support.vesal.tech
support.vesal.tech
support.vesal.tech
support.vesal.tech
ftb.regalpay.help
support.vesal.tech
www.betterfield.net
ftb.regalpay.help
ftb.regalpay.help
support.vesal.tech
support.vesal.tech
support.vesal.tech
ftb.regalpay.help
ftb.regalpay.help
help.aureo-systems.com
support.vesal.tech
ftb.regalpay.help
ftb.regalpay.help
support.vesal.tech
www.betterfield.net
support.vesal.tech
ftb.regalpay.help
support.kinectcommunications.com
support.trackyourdebt.co.za
ftb.regalpay.help
support.vesal.tech
support.vesal.tech
www.betterfield.net
www.betterfield.net
help.aureo-systems.com
support.vesal.tech
support.trackyourdebt.co.za
support.vesal.tech
ftb.regalpay.help
Certificate
The complete raw certificate details for www.betterfield.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgISA9fywWCVL52uHhJTI9tUKzSbMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMjAyMTMyMjlaFw0x OTA0MjAyMTMyMjlaMB4xHDAaBgNVBAMTE3d3dy5iZXR0ZXJmaWVsZC5uZXQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXs8YVb+XmxPRwap2BfnEPbDU 4cNfK95g06BjnzMhIv4uucuIyIN0EcSS32tBeZatzEn6FjsYOeUrAZS6UNAgTRLP dI2zgrIb1JMXYuQ1+RItEJbd59qGQxa4HigA/xvDDprfg/OMpDa77rYqzE2XF1f0 OuekhhiBuTTN4R8W5m8PJ9x01ujZUg/Zl+3dYZoINUe/pYV9t0s81URbOiwxpN2k rB/ZPHI5QMAAzts+Mn79F1g32Ht4Avo9wgtafjPkAq4m/OadlnegnLeqA2dS9ZwK klimwM0bP30i+DzbBEIUtoW1i7PMOaL+a7Vf3KpqpIXDOq8R6AFWecJsrYENAgMB AAGjggJ4MIICdDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNaOuOf1GaqZ4USSAOkT hMxDpzmuMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wLwYDVR0RBCgwJoIPYmV0dGVyZmllbGQubmV0ghN3d3cuYmV0dGVy ZmllbGQubmV0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYB BAHWeQIEAgSB9ASB8QDvAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7 zFYAAAFobWTNawAABAMARzBFAiAOZlmTFvfi7MwNEerKPBMVrc8gjFe2mXmBo4E/ hu0A3wIhAOzQBIpuq2ybIWpOStVZA1TTIOlxqq6AfJF7+4HRZht9AHUAKTxRllTI OWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFobWTNwwAABAMARjBEAiB9Z9ju L0bseTVaI84cvt2MwFxJ2LSui99vhEmQrf96WQIgDjgWmujcFg8kHORmdwwQMdG5 SjaQXX/v5MhX1lShPpswDQYJKoZIhvcNAQELBQADggEBAHMBdE5dQ1OfjYhODeIh FU08k9MpIlC7jCrtFOJf5zXI6ggBaTA/O8Z+WWcjW7cf7SX6psfEwYLwxOl0u21j RfmKi3Q0gR15nvzQnjLsjLi7ONmd8b+pwWpWEISjGc3GAFRWku3zDseajE8DP+T4 C5LPyvqFJD4XowzdhuUBRN7HXJzaDgOKB6TwUpu9LmaYiXZw1cmZOpO6q4zQk/1R bKvvBXtnOpZ7KsZrocD7Kqf95r9P9jUqthfP0mIiZ6lssqkxu/p0d0P4vKesUtxB q/qR1TxXRQm7SVvoOxkDWvMsYJ+S72YehhN7rmEAwvJBm+EZD1MZK15/TnKTZf2B 7iw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp17PGFW/l5sT0cGqdgX5 xD2w1OHDXyveYNOgY58zISL+LrnLiMiDdBHEkt9rQXmWrcxJ+hY7GDnlKwGUulDQ IE0Sz3SNs4KyG9STF2LkNfkSLRCW3efahkMWuB4oAP8bww6a34PzjKQ2u+62KsxN lxdX9DrnpIYYgbk0zeEfFuZvDyfcdNbo2VIP2Zft3WGaCDVHv6WFfbdLPNVEWzos MaTdpKwf2TxyOUDAAM7bPjJ+/RdYN9h7eAL6PcILWn4z5AKuJvzmnZZ3oJy3qgNn UvWcCpJYpsDNGz99Ivg82wRCFLaFtYuzzDmi/mu1X9yqaqSFwzqvEegBVnnCbK2B DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 334820243930487211031719787295262420710555 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-20 21:32:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-20 21:32:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.betterfield.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21128548972481274560414857052936007229066972978681978231020549388404926309529935088802997334345266517220897851260627123852606765480959304860151124088152155422039640671754475824254722174237323435106129294843424385641352887026746158937670353057085993478405696133382144401774767125946010547436358173118673193231700688133405733167813725340664344433432598574086289765429306911516780170233749044189185767440564026955772154395659948187461225117624332932180588051773344505713671585257768696108379117106121843927191570472640052228090181634670496907467281938635528705883683613840759214689231353579756502850614220903440246997261 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d68eb8e7f519aa99e1449200e91384cc43a739ae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterfield.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betterfield.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001686d64cd6b000004030047304502200e66599316f7e2eccc0d11eaca3c1315adcf208c57b6997981a3813f86ed00df022100ecd0048a6eab6c9b216a4e4ad5590354d320e971aaae807c917bfb81d1661b7d007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001686d64cdc3000004030046304402207d67d8ee2f46ec79355a23ce1cbedd8cc05c49d8b4ae8bdf6f844990adff7a5902200e38169ae8dc160f241ce466770c1031d1b94a36905d7fefe4c857d654a13e9b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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