store.karttaselain.fi
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:35:e4:53:7a:dc:2d:b2:b0:1d:e5:4d:9b:18:f9:5f:f2:02 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=store.karttaselain.fi
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:35:e4:53:7a:dc:2d:b2:b0:1d:e5:4d:9b:18:f9:5f:f2:02Serial Number (int): 279675320677667007957713566262985576411650
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ee:70:c9:db:cf:d0:f1:f2:7b:11:c3:d5:27:86:73:08:a2:67:e0:4f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d3:9e:77:e2:ce:36:7b:86:c8:3f:fa:e2:14:f5:c6:18:f2:c6:a5:c6
Fingerprint (sha256): 6b:81:6e:0f:ee:f0:a9:df:10:19:cc:69:2b:89:ad:a6:72:d3:83:9c:d1:07:62:b2:64:61:e3:76:50:ae:82:1d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate store.karttaselain.fi
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for store.karttaselain.fi
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
store.karttaselain.fi
Other certificates including the domain name karttaselain.fi
(limited to 100 certificates)
statuspage.io
store.karttaselain.fi
statuspage.io
statuspage.io
ssl376254.cloudflaressl.com
statuspage.io
ssl376255.cloudflaressl.com
sni.cloudflaressl.com
statuspage.io
statuspage.io
*.karttaselain.fi
statuspage.io
statuspage.io
statuspage.io
ssl376254.cloudflaressl.com
statuspage.io
*.karttaselain.fi
statuspage.io
statuspage.io
store.karttaselain.fi
statuspage.io
mapsv2.karttaselain.fi
statuspage.io
statuspage.io
vivobrazil.platformkids.com
sni.cloudflaressl.com
statuspage.io
picturestartprops.com
statuspage.io
ssl376255.cloudflaressl.com
applink.karttaselain.fi
*.karttaselain.fi
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
ssl376253.cloudflaressl.com
blog.karttaselain.fi
statuspage.io
ssl376255.cloudflaressl.com
*.karttaselain.fi
statuspage.io
blog.karttaselain.fi
statuspage.io
statuspage.io
statuspage.io
vivobrazil.platformkids.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
solwall.net
*.karttaselain.fi
ssl376255.cloudflaressl.com
statuspage.io
mindlike.de
blog.karttaselain.fi
ssl376254.cloudflaressl.com
ssl376253.cloudflaressl.com
statuspage.io
ssl376254.cloudflaressl.com
store.karttaselain.fi
ssl376255.cloudflaressl.com
statuspage.io
*.karttaselain.fi
blog.karttaselain.fi
ssl376255.cloudflaressl.com
ssl376255.cloudflaressl.com
mapsv3.karttaselain.fi
statuspage.io
statuspage.io
ssl376253.cloudflaressl.com
sni.cloudflaressl.com
statuspage.io
ssl376255.cloudflaressl.com
statuspage.io
store.karttaselain.fi
statuspage.io
ssl376255.cloudflaressl.com
ssl376255.cloudflaressl.com
ssl376253.cloudflaressl.com
statuspage.io
statuspage.io
store.karttaselain.fi
statuspage.io
statuspage.io
store.karttaselain.fi
statuspage.io
sni.cloudflaressl.com
statuspage.io
*.karttaselain.fi
ssl376253.cloudflaressl.com
www.kaatsh.com
statuspage.io
statuspage.io
login.rtrfm.com.au
store.karttaselain.fi
statuspage.io
statuspage.io
ssl376254.cloudflaressl.com
statuspage.io
ssl376255.cloudflaressl.com
sni.cloudflaressl.com
statuspage.io
statuspage.io
*.karttaselain.fi
statuspage.io
statuspage.io
statuspage.io
ssl376254.cloudflaressl.com
statuspage.io
*.karttaselain.fi
statuspage.io
statuspage.io
store.karttaselain.fi
statuspage.io
mapsv2.karttaselain.fi
statuspage.io
statuspage.io
vivobrazil.platformkids.com
sni.cloudflaressl.com
statuspage.io
picturestartprops.com
statuspage.io
ssl376255.cloudflaressl.com
applink.karttaselain.fi
*.karttaselain.fi
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
ssl376253.cloudflaressl.com
blog.karttaselain.fi
statuspage.io
ssl376255.cloudflaressl.com
*.karttaselain.fi
statuspage.io
blog.karttaselain.fi
statuspage.io
statuspage.io
statuspage.io
vivobrazil.platformkids.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
solwall.net
*.karttaselain.fi
ssl376255.cloudflaressl.com
statuspage.io
mindlike.de
blog.karttaselain.fi
ssl376254.cloudflaressl.com
ssl376253.cloudflaressl.com
statuspage.io
ssl376254.cloudflaressl.com
store.karttaselain.fi
ssl376255.cloudflaressl.com
statuspage.io
*.karttaselain.fi
blog.karttaselain.fi
ssl376255.cloudflaressl.com
ssl376255.cloudflaressl.com
mapsv3.karttaselain.fi
statuspage.io
statuspage.io
ssl376253.cloudflaressl.com
sni.cloudflaressl.com
statuspage.io
ssl376255.cloudflaressl.com
statuspage.io
store.karttaselain.fi
statuspage.io
ssl376255.cloudflaressl.com
ssl376255.cloudflaressl.com
ssl376253.cloudflaressl.com
statuspage.io
statuspage.io
store.karttaselain.fi
statuspage.io
statuspage.io
store.karttaselain.fi
statuspage.io
sni.cloudflaressl.com
statuspage.io
*.karttaselain.fi
ssl376253.cloudflaressl.com
www.kaatsh.com
statuspage.io
statuspage.io
login.rtrfm.com.au
Certificate
The complete raw certificate details for store.karttaselain.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISAzXkU3rcLbKwHeVNmxj5X/ICMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDcyMDQ2MThaFw0y MDAzMDYyMDQ2MThaMCAxHjAcBgNVBAMTFXN0b3JlLmthcnR0YXNlbGFpbi5maTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM7AK8WbkyMhjq8faA0JIVDW /Hrz/+BW2AEA9oECIFuOh74EDBEDDVbVUioShHaRcCSfQFQEWs+1Rw0rQb6I4ul+ J51NhEToooDYHEQ/KFeGxscn62IyxZVIcVHIuLjpNNw1yXN1jpGkp6qPHgILn31I eGLhcyN5BGO3cjT1XpS6PM6cd6SkBoyw36YNe3ncfVzFhYBLg73DsRtM4kcFkMbH J2uo2V1mho1x785BZv5qZSJ0MmDoCE2UJTrUMWdMn35B4rxwnhpJ8I72uh7xSpd0 Xs5M0YRxzXsBQC4P2eGKN4JVnCFdELASR+87m3QcibTvntwxRFCKSJLhY6M30lcC AwEAAaOCAmowggJmMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU7nDJ28/Q8fJ7EcPV J4ZzCKJn4E8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzAgBgNVHREEGTAXghVzdG9yZS5rYXJ0dGFzZWxhaW4uZmkwTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdQAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW7iU+GMAAAE AwBGMEQCIBoZhwAvU9oYWERv+2u7KZevFjPohuMSLnD5+GvQfR+AAiBCBU8xZrnu jm+zjh1FEEZzI+SAAS8tiyZG0C/x6J4TBAB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZ AsEAKQaNsgiaN9kTAAABbuJT4v0AAAQDAEgwRgIhAMQ8b5bjs5FpBp0WkqNsFHSY 2Hyn33fsipqGxqncr6X9AiEAw+7fxQsp6lWR4QH21Rqh+wIKYybK9KIdr3J9uzHq M9kwDQYJKoZIhvcNAQELBQADggEBACi12a/hZngQe8SiDpGxyKq0eWb6IoA/TJqj pC1a0K1ZICQh4dqO1rHgaUkQ0sGywfF1gQWPXMhhm0FEWd+ZoU4cekF0gg7r8YVj 36S0JYP6OL5MZuA+voZnB3ejFaj1qAeQYKqaI75GsYON7zWBM03qEXhLpO4rRzmm cQHgzG3H8a93NAA4sDFCF6vGM3v8q0i+h+rJCFHEqeHv38cvS9LxtEubZEpCRwxV gCGQ7xBX0F2cgVNBFe81lbAH8g/CDMNwHMX4qHzOXXiVdOmY4nQ1kDLY+hDVwlbC iJkr8SxPOso7THf9L4s3GWnMKJFyKgmepdzPJcks/yp2pYZSDCc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsArxZuTIyGOrx9oDQkh UNb8evP/4FbYAQD2gQIgW46HvgQMEQMNVtVSKhKEdpFwJJ9AVARaz7VHDStBvoji 6X4nnU2EROiigNgcRD8oV4bGxyfrYjLFlUhxUci4uOk03DXJc3WOkaSnqo8eAguf fUh4YuFzI3kEY7dyNPVelLo8zpx3pKQGjLDfpg17edx9XMWFgEuDvcOxG0ziRwWQ xscna6jZXWaGjXHvzkFm/mplInQyYOgITZQlOtQxZ0yffkHivHCeGknwjva6HvFK l3RezkzRhHHNewFALg/Z4Yo3glWcIV0QsBJH7zubdByJtO+e3DFEUIpIkuFjozfS VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279675320677667007957713566262985576411650 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-07 20:46:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 20:46:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'store.karttaselain.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26099853867087677605469471375161068321780922283166520283608953884013713532826347362712881550733976437154528059000853397240864587481816167313333721262122748266141931059631237521771597819327975930188293505715842813149539028525763912260196473298946834008413004690971294504049125560282515025844733666501230439263702248737800705954731670148631385129139917837890209146476974816011271860874320443275232848418860085889095419114624449840442774862604362580653635879800294989559157246643916534669881317933861291921005935579796420831315004395973619836607726118291425405199801783335161193045869202456124627065782802301424567308887 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ee70c9dbcfd0f1f27b11c3d527867308a267e04f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.karttaselain.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ee253e18c000004030046304402201a1987002f53da1858446ffb6bbb2997af1633e886e3122e70f9f86bd07d1f80022042054f3166b9ee8e6fb38e1d4510467323e480012f2d8b2646d02ff1e89e13040077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ee253e2fd0000040300483046022100c43c6f96e3b39169069d1692a36c147498d87ca7df77ec8a9a86c6a9dcafa5fd022100c3eedfc50b29ea5591e101f6d51aa1fb020a6326caf4a21daf727dbb31ea33d9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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