gitlab.ruizlab.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:c9:ee:f8:8b:9d:dd:ee:8e:8e:08:fc:80:66:5e:a0:f2:4d was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gitlab.ruizlab.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c9:ee:f8:8b:9d:dd:ee:8e:8e:08:fc:80:66:5e:a0:f2:4dSerial Number (int): 330051260330769538718046377477185824944717
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2a:82:1c:8f:3f:d4:0d:ff:4d:61:8f:d9:6b:2f:fc:fb:75:ed:ab:5a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 55:0a:1f:b9:0d:83:3d:a0:37:40:86:4e:71:32:5c:01:93:bf:a8:d8
Fingerprint (sha256): 6f:20:17:6c:8f:27:32:d7:e4:ed:a4:6f:42:fd:88:29:2a:c8:34:66:08:cc:c9:6a:cd:58:1f:83:5d:08:41:37
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate gitlab.ruizlab.org
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gitlab.ruizlab.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ai.ruizlab.org
gitlab.ruizlab.org
registry.gitlab.ruizlab.org
selma.cise.ufl.edu
gitlab.ruizlab.org
registry.gitlab.ruizlab.org
selma.cise.ufl.edu
Other certificates including the domain name ruizlab.org
(limited to 100 certificates)
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
ai.ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ai.ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
ai.ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ai.ruizlab.org
ai.ruizlab.org
Certificate
The complete raw certificate details for gitlab.ruizlab.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGnDCCBYSgAwIBAgISA8nu+Iud3e6Ojgj8gGZeoPJNMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MjQxMzIzNDJaFw0x OTA3MjMxMzIzNDJaMB0xGzAZBgNVBAMTEmdpdGxhYi5ydWl6bGFiLm9yZzCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAN2urakbMqyPAx4jc1XnKf7hK9QE P2SdhFiMz+UCqh/3HzIWG2fPM1sMxsSlCi0uQQ+ruSr2E3WzXPM50g4sA3LwetwP XSTaVT8ODrRSkZ+NTF4zCn2VrJTZ/3X8uhrOub+rC6+F5ly/oQDMJ2i701HhHrmN OWEUIrz0Y8kA4K4Q3MqJmg6D1gwMOuJeqUeDch2dJmK6uLQ4gv9P5Cz0pGzmFBTM hdWNX0Oe3VD9e+56EAKT8P4oDnOYcW4SOLZv8ZwP10bQzK52YFkodJdzZkMcQA7i +afYNhTSziLOPqGaHxtab2Ow08SOk3e2QndLwZyv75EepDXoLZEetww8/w1oFw5/ O/upALp5F2O6GvC58ctFKX+8wX6pW+dl7Q1z9ynMNobfpNSIFakamwLNHLvhDyYk inySpIvwMTQVibTYV5/98R/WHThoetcQA2noFzQN9x6xFgIMijCPAgSBhS3QgI9p j5ygrsidYnTjnG8cFpq/14vVDR3z+fz6AyAzAvgI5ScIkG5FdhdBgzqiUcrW6/Hn 7FUrb/NPq09arSWwYOtxH+9Iyj93jHDtELl+1Uat2K2bQm8Yex7fzPWftJ6sSsi4 YehFNIOdKZwe3llo7IWboqK9duWDzzpZIIcv8KonxKRcmzeczUpIvw0ysVbXQdKO RBkvSO6tTRjgVfmhAgMBAAGjggKnMIICozAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FCqCHI8/1A3/TWGP2Wsv/Pt17ataMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wXgYDVR0RBFcwVYIOYWkucnVpemxhYi5v cmeCEmdpdGxhYi5ydWl6bGFiLm9yZ4IbcmVnaXN0cnkuZ2l0bGFiLnJ1aXpsYWIu b3JnghJzZWxtYS5jaXNlLnVmbC5lZHUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw dC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQB0ftqDMa0zEJEhnM4lT0Jw wr/9XkIgCMY3NXnmEHvMVgAAAWpPuxjJAAAEAwBGMEQCICqPaMulO5EV6AasEVCr S+Evw1uONy5/43A5ft8tRhOPAiBBSvhrt8Rx/+dHJ+jksEvDsovfKr9ykHj9FQz2 r+O4ygB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABak+7FuAA AAQDAEcwRQIhALzgTWY73xDO98vAC5CeUj2ur6dVvgTN3LgkqZzrcqKZAiAokA80 CZN91yNSGMAb2K5McdVk9EyvlXiMZN8terSlOzANBgkqhkiG9w0BAQsFAAOCAQEA e0zOXtFdi8BWicbnaChObhO9pPxKQdQoB57ZwvvbZ3JVDGShlotiYwcEu4Qat4vg UhF9UFUiXZa05cuuD8b7+MswXikld+68NMTDj8+28Hba4ESHJ4xH+Q1B5DhiI+5H qHcgUF2Y3ZaBMvr9BRT63dAiVuS0yCAUKuoXzPrClwV2DG9nuvlYlhLMHZnV6SVq QcwI7EoU5s6GRo+ZbY7z7QkUewq/8qBgUSMi60kEvNfTKJFGdKD9Mk8r/Nc2pwFA VmnXo8ZmMkFIqAGkmYDa0ev7YS3yDWjBhHtq4+D1S1DIrIF91yFhPbnZhtzpTSH1 k6ZfovbaorVp9KJIj4YXTA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3a6tqRsyrI8DHiNzVecp /uEr1AQ/ZJ2EWIzP5QKqH/cfMhYbZ88zWwzGxKUKLS5BD6u5KvYTdbNc8znSDiwD cvB63A9dJNpVPw4OtFKRn41MXjMKfZWslNn/dfy6Gs65v6sLr4XmXL+hAMwnaLvT UeEeuY05YRQivPRjyQDgrhDcyomaDoPWDAw64l6pR4NyHZ0mYrq4tDiC/0/kLPSk bOYUFMyF1Y1fQ57dUP177noQApPw/igOc5hxbhI4tm/xnA/XRtDMrnZgWSh0l3Nm QxxADuL5p9g2FNLOIs4+oZofG1pvY7DTxI6Td7ZCd0vBnK/vkR6kNegtkR63DDz/ DWgXDn87+6kAunkXY7oa8Lnxy0Upf7zBfqlb52XtDXP3Kcw2ht+k1IgVqRqbAs0c u+EPJiSKfJKki/AxNBWJtNhXn/3xH9YdOGh61xADaegXNA33HrEWAgyKMI8CBIGF LdCAj2mPnKCuyJ1idOOcbxwWmr/Xi9UNHfP5/PoDIDMC+AjlJwiQbkV2F0GDOqJR ytbr8efsVStv80+rT1qtJbBg63Ef70jKP3eMcO0QuX7VRq3YrZtCbxh7Ht/M9Z+0 nqxKyLhh6EU0g50pnB7eWWjshZuior125YPPOlkghy/wqifEpFybN5zNSki/DTKx VtdB0o5EGS9I7q1NGOBV+aECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 330051260330769538718046377477185824944717 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 13:23:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 13:23:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.ruizlab.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 904385032554867329005302767520196799295211871163646956591938289952732095481313128980795528954354151135997148097530602288148364805023268618880865496359442738743845849383830878678342873257235625707544078166926772471049111271820137636256223770194055280626735011596672997910479267928310330979320820189126459154740043541447826656651750647885983889928847845824507589411843190223718598711751599706362150054535675887837888389487332536919320604008709757317002067137441254103634711489084052890693198273140086921249981297870816764825667554804332870509120059495143967222554783499242640524637576150417739973720807049800246080710090809930762806303736703185744196305603363182119731969666304414536442504075518503662294127412571176581986274090664201488993067949120172625151751712916972248835312495486809603768397526939430096505881334773603545959253585698101185986340343538118766090106408992924063007990455256879266352412115838559646382084844153535148135751341752387292548932383586980102501657962050502798682135401543393027337308541882547357235488178473181650549707656602921128175292269221000220475795290654676570651589831447712675056636875297207342305552670948573230000034257491870834374416159777493029901450191058453897803479425840194337395235486113 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2a821c8f3fd40dff4d618fd96b2ffcfb75edab5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai.ruizlab.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.ruizlab.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.gitlab.ruizlab.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selma.cise.ufl.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a4fbb18c9000004030046304402202a8f68cba53b9115e806ac1150ab4be12fc35b8e372e7fe370397edf2d46138f0220414af86bb7c471ffe74727e8e4b04bc3b28bdf2abf729078fd150cf6afe3b8ca007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a4fbb16e00000040300473045022100bce04d663bdf10cef7cbc00b909e523daeafa755be04cddcb824a99ceb72a299022028900f3409937dd7235218c01bd8ae4c71d564f44caf95788c64df2d7ab4a53b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007b4cce5ed15d8bc05689c6e768284e6e13bda4fc4a41d428079ed9c2fbdb6772550c64a1968b62630704bb841ab78be052117d5055225d96b4e5cbae0fc6fbf8cb305e292577eebc34c4c38fcfb6f076dae04487278c47f90d41e4386223ee47a87720505d98dd968132fafd0514faddd02256e4b4c820142aea17ccfac29705760c6f67baf9589612cc1d99d5e9256a41cc08ec4a14e6ce86468f996d8ef3ed09147b0abff2a060512322eb4904bcd7d328914674a0fd324f2bfcd736a701405669d7a3c666324148a801a49980dad1ebfb612df20d68c1847b6ae3e0f54b50c8ac817dd721613db9d986dce94d21f593a65fa2f6daa2b569f4a2488f86174c