*.castor-informatique.fr
Issued by Amazon
About this certificate
This digital certificate with serial number 03:d1:f8:85:5f:3f:6a:a5:77:2a:9f:e5:b8:2b:9c:cc was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.castor-informatique.fr
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d1:f8:85:5f:3f:6a:a5:77:2a:9f:e5:b8:2b:9c:ccSerial Number (int): 5077914635193588487306644733163183308
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: a5:94:67:0b:f8:df:50:b2:0a:1b:96:f6:3c:67:f6:77:04:5f:1a:b3
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 3f:5d:40:f7:2b:01:74:25:2d:c5:80:07:d2:33:dc:b5:87:05:7c:0d
Fingerprint (sha256): 6d:81:ce:27:20:90:a9:f7:d6:c3:e6:4b:39:9f:c3:b2:28:dd:4e:be:52:a3:58:38:3a:b2:9c:45:18:f8:05:fe
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.castor-informatique.fr
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.castor-informatique.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.castor-informatique.fr
*.concours-alkindi.fr
*.concours-alkindi.epfl.ch
*.concours-alkindi.fr
*.concours-alkindi.epfl.ch
Other certificates including the domain name castor-informatique.fr
(limited to 100 certificates)
coordinateur.castor-informatique.fr
castor-informatique.fr
coordinateur.castor-informatique.fr
concours6.castor-informatique.fr
static4.castor-informatique.fr
*.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
www.castor-informatique.fr
www.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
concours6.castor-informatique.fr
static4.castor-informatique.fr
static4.castor-informatique.fr
*.castor-informatique.fr
badges.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
coordinateur.castor-informatique.fr
coordinateur.castor-informatique.fr
*.castor-informatique.fr
static4.castor-informatique.fr
*.castor-informatique.fr
www.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
castor-informatique.fr
*.castor-informatique.fr
concours3.castor-informatique.fr
static4.castor-informatique.fr
concours3.castor-informatique.fr
badges.castor-informatique.fr
coordinateur.castor-informatique.fr
*.castor-informatique.fr
concours6.castor-informatique.fr
*.castor-informatique.fr
castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
static4.castor-informatique.fr
concours.castor-informatique.fr
coordinateur.castor-informatique.fr
castor.epixode.fr
*.castor-informatique.fr
concours3.castor-informatique.fr
*.castor-informatique.fr
coordinateur.castor-informatique.fr
badges.castor-informatique.fr
castor-informatique.fr
coordinateur.castor-informatique.fr
concours6.castor-informatique.fr
static4.castor-informatique.fr
*.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
www.castor-informatique.fr
www.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
concours6.castor-informatique.fr
static4.castor-informatique.fr
static4.castor-informatique.fr
*.castor-informatique.fr
badges.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
coordinateur.castor-informatique.fr
coordinateur.castor-informatique.fr
*.castor-informatique.fr
static4.castor-informatique.fr
*.castor-informatique.fr
www.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
castor-informatique.fr
*.castor-informatique.fr
concours3.castor-informatique.fr
static4.castor-informatique.fr
concours3.castor-informatique.fr
badges.castor-informatique.fr
coordinateur.castor-informatique.fr
*.castor-informatique.fr
concours6.castor-informatique.fr
*.castor-informatique.fr
castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
static4.castor-informatique.fr
concours.castor-informatique.fr
coordinateur.castor-informatique.fr
castor.epixode.fr
*.castor-informatique.fr
concours3.castor-informatique.fr
*.castor-informatique.fr
coordinateur.castor-informatique.fr
badges.castor-informatique.fr
Certificate
The complete raw certificate details for *.castor-informatique.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgIQA9H4hV8/aqV3Kp/luCuczDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA4MjIwMDAwMDBaFw0xOTA5MjIx MjAwMDBaMCMxITAfBgNVBAMMGCouY2FzdG9yLWluZm9ybWF0aXF1ZS5mcjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJYWe0aljXJlQtnLoqpPgBeXTAAg 3S6A/6pTAORuUVfOm4UtGxALejryyuKVGt7tznEUxOLF60ZFzKoZnXoZ+MqJA+wP 6aOFqojak4U6mHYsGl60bxzEDLzvG5TjT3SgowkLdl0dlrB1IowRqgivT7AjdpJk V72rdeR6j71UTPOH/NPcUWXyr6d9+nm8xYQVpQ2dh18ZY1YbBnMm1v6Qae6kPwya SWt0QUN1s6nY+8y6LVJKdFZ20juoqtmjBTBDselj9So5VKZ7XqSCF7eVceG28Zbx HqPE+Mzpu6z2VaXMGrYdncHYrdij25G8sTmSi0Ig7kymw1jzQ2/i1P9t2ckCAwEA AaOCArcwggKzMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1Ud DgQWBBSllGcL+N9QsgoblvY8Z/Z3BF8aszBWBgNVHREETzBNghgqLmNhc3Rvci1p bmZvcm1hdGlxdWUuZnKCFSouY29uY291cnMtYWxraW5kaS5mcoIaKi5jb25jb3Vy cy1hbGtpbmRpLmVwZmwuY2gwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNj YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgB hv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0 cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw Oi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/ BAIwADCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AKS5CZC0GFgUh7sTosxncAo8 NZgE+RvfuON3zQ7IDdwQAAABZWHX4KYAAAQDAEcwRQIhAIPRjzfSI4wIu4UZh7Pm 3vncHJ8niqzxrrNhCDiCdxEnAiB5bODMnVaCTAriI0jvv1Fa5Nckdw4gO+uSwY1P 7NA7AgB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABZWHX4WwA AAQDAEcwRQIhAM2giN8U4SNgX855fLGaXTdYCPPouhp3V9clG1+yoph9AiAa0gyr HDHCtoiW5ykqgBGn3a3jyPG6L3hnwmpJnzcIqTANBgkqhkiG9w0BAQsFAAOCAQEA Y0AzTaiF/f+WyinqYjkwki1mD5xD9uqthpv5Y7ui1fZvHNWrDw+DjXMvOm7gab3m ztqq7nb3mUnFyeN0KUvLevSmtHIea2jzaKplUu9FwPLdBNo/iYfQMqcNbPjVYC3e robQlFQQyh7iGt2EHn4d100kXPpHDFnlG6IYbCXw7hdLI+wxIxDDIXQtzEYVgR1D QRBBYuje3z2ounchDQiktzHX9FKhQh8M4NsHnulcx31zsNsWsqd91vwPw2OBw5w9 WT1pPfgyMuKAhS6eEv/jiDDz7nJeW/wdKO6BvltS8Inyg1V5YrRoQIxRbbXKzP0f i68YIUXQn0DARuok7aENHg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhZ7RqWNcmVC2cuiqk+A F5dMACDdLoD/qlMA5G5RV86bhS0bEAt6OvLK4pUa3u3OcRTE4sXrRkXMqhmdehn4 yokD7A/po4WqiNqThTqYdiwaXrRvHMQMvO8blONPdKCjCQt2XR2WsHUijBGqCK9P sCN2kmRXvat15HqPvVRM84f809xRZfKvp336ebzFhBWlDZ2HXxljVhsGcybW/pBp 7qQ/DJpJa3RBQ3Wzqdj7zLotUkp0VnbSO6iq2aMFMEOx6WP1KjlUpntepIIXt5Vx 4bbxlvEeo8T4zOm7rPZVpcwath2dwdit2KPbkbyxOZKLQiDuTKbDWPNDb+LU/23Z yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5077914635193588487306644733163183308 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.castor-informatique.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18946831808786062136378626064653574954946060312111714857916315387911173173863597898880895350896006498780537862676282288163084757736192219861839392369346882140748677695891036304973509371658427217677987726269339970000907065865329953602180540757370027458985804043304088805521701740472906016643448021301391206103651100938255589473878725326974119355202040461815693510939267091392319313592475960613185071239250387918605826444151266934107862975016924590311548888504265739057979031125480558458033304419354686551460567081747138833517621909356666858021849505153802147259325823959648742151659720058584535800223799841448463817161 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a594670bf8df50b20a1b96f63c67f677045f1ab3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.castor-informatique.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concours-alkindi.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concours-alkindi.epfl.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016561d7e0a6000004030047304502210083d18f37d2238c08bb851987b3e6def9dc1c9f278aacf1aeb3610838827711270220796ce0cc9d56824c0ae22348efbf515ae4d724770e203beb92c18d4fecd03b020076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016561d7e16c0000040300473045022100cda088df14e123605fce797cb19a5d375808f3e8ba1a7757d7251b5fb2a2987d02201ad20cab1c31c2b68896e7292a8011a7ddade3c8f1ba2f7867c26a499f3708a9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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