*.di-support.com
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 0c:3c:7f:8a:a3:1b:ba:8b:89:6b:b5:4b:0b:d1:7c:21 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.di-support.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:3c:7f:8a:a3:1b:ba:8b:89:6b:b5:4b:0b:d1:7c:21Serial Number (int): 16264860610916749395354232442219232289
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 33:e4:53:b3:6b:ce:de:18:26:ae:17:ce:d1:66:67:ea:9f:5b:9b:bb
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 93:f5:e0:6a:dd:bd:08:88:00:91:5b:e7:3c:9e:29:c7:1c:09:05:76
Fingerprint (sha256): 6f:4f:a6:b2:d9:96:7d:59:94:46:c0:fc:0e:d7:ef:1c:94:5a:ba:82:39:a8:c5:f3:d9:c0:5e:c1:76:89:2e:a2
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate *.di-support.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.di-support.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.di-support.com
di-support.com
di-support.com
Other certificates including the domain name di-support.com
(limited to 100 certificates)
apitest2.fotowelt.di-support.com
remote.di-support.com
lostark-helper.com
api.iserve.today
panizrecipes.com
pay.emma.to
www.nguoicaotuoi.xyz
s.symptohealth.com
jintaica.com
wizlontime.com
splingo.net
uw2.stefanowatches.com
www.coursereview.matv.io
worker.deerbot.cf
www.stou.ch
www.city2citytaxi.com
lankastatistics.com
files.moonshotgames.co.uk
www.kitapbis.com
ephotobook.di-support.com
*.di-support.com
www.vrpassport.org
*.di-support.com
getraisetechnologies.com
staging.media-backend.di-support.com
devakarthik.com
www.idylworld.com
cwlau.com
gentlestots.com
*.di-support.com
staging.media-frontend.di-support.com
agenda.especialidadesmedicastepepan.com.mx
any1share.com
*.di-support.com
chromatic.world
tasquet.app
admin.logs4dogs.com
canary.videoanalysis.app
skynet.liberate.ai
link.clustertruck.app
www.maluejose.com
storybook.staging.creditoexpress.com.br
vac.life
www.nikhilnarvekar.com
app.di-support.com
www.photolab24.de
jkbm.in
media-backend.di-support.com
ratemytransit.app
auth.di-support.com
devizee.ro
printcube.di-support.com
visite-manufacture.cartier.com
terrestrial.in
media-frontend.di-support.com
inscricao.gohacking.com.br
*.di-support.com
media-backend.di-support.com
www.centra-k.ca
topsuites.com.br
www.myictsolutions.nl
lankastatistics.com
ktopik.edu.vn
*.di-support.com
di-support.com
api.controlcenter3.rtest.di-support.com
remote.di-support.com
lostark-helper.com
api.iserve.today
panizrecipes.com
pay.emma.to
www.nguoicaotuoi.xyz
s.symptohealth.com
jintaica.com
wizlontime.com
splingo.net
uw2.stefanowatches.com
www.coursereview.matv.io
worker.deerbot.cf
www.stou.ch
www.city2citytaxi.com
lankastatistics.com
files.moonshotgames.co.uk
www.kitapbis.com
ephotobook.di-support.com
*.di-support.com
www.vrpassport.org
*.di-support.com
getraisetechnologies.com
staging.media-backend.di-support.com
devakarthik.com
www.idylworld.com
cwlau.com
gentlestots.com
*.di-support.com
staging.media-frontend.di-support.com
agenda.especialidadesmedicastepepan.com.mx
any1share.com
*.di-support.com
chromatic.world
tasquet.app
admin.logs4dogs.com
canary.videoanalysis.app
skynet.liberate.ai
link.clustertruck.app
www.maluejose.com
storybook.staging.creditoexpress.com.br
vac.life
www.nikhilnarvekar.com
app.di-support.com
www.photolab24.de
jkbm.in
media-backend.di-support.com
ratemytransit.app
auth.di-support.com
devizee.ro
printcube.di-support.com
visite-manufacture.cartier.com
terrestrial.in
media-frontend.di-support.com
inscricao.gohacking.com.br
*.di-support.com
media-backend.di-support.com
www.centra-k.ca
topsuites.com.br
www.myictsolutions.nl
lankastatistics.com
ktopik.edu.vn
*.di-support.com
di-support.com
api.controlcenter3.rtest.di-support.com
Certificate
The complete raw certificate details for *.di-support.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIQDDx/iqMbuouJa7VLC9F8ITANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0yMDAxMjkwMDAwMDBaFw0yMTAxMjgxMjAwMDBaMBsxGTAXBgNVBAMMECouZGkt c3VwcG9ydC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVdRrF nNKFGGRA9S9QnMTvJD2Hx2SMsCpY+vRdcubddW6Rov91aaLAsjc4EClyC7oYbc17 tjxQMCKj0RMMcP1lgi1h+MKBLG22RflUCXehu39a1NAONzAN70IxvnFNt2f8Puh5 /PqUhINog6ufrU2KE7/cYM6bMnfIHRaiLiIAf8LdWK+2xgThBF0LN+P0/JFoxXQZ uH+CtBf5LH8wp4pAYrCkpZtZbZY7V6uCiKpFe2dNIMMCz6pRMkzD2iYr2vj0aXVj ph4Gp9JqnmfJVXvNKsgw5WU7qu3L2p/Hw31TPkSq88K6wKYrb2t61bGRHVxxCuMb U1K/+FzutGKZirA7AgMBAAGjggK5MIICtTAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3 se3yo0MWOJ5sxTAdBgNVHQ4EFgQUM+RTs2vO3hgmrhfO0WZn6p9bm7swKwYDVR0R BCQwIoIQKi5kaS1zdXBwb3J0LmNvbYIOZGktc3VwcG9ydC5jb20wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1 MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAx OC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0 cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwdQYIKwYBBQUHAQEE aTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9Bggr BgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNB Q0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA 9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAFv8MVvxgAABAMASDBG AiEAyBW46tX4fowVdRT+pyFqclNVRcPgH3nKnttil4Zy7ckCIQDEs5vLDiR7gcLT LhjDLZPuUVRgqghNCQlu8o0IDpjvSgB2AFzcQ5L+5qtFRLFemtRW5hA3+9X6R9yh c5SyXub2xw7KAAABb/DFb+0AAAQDAEcwRQIhAPxO0XK79IHJAOTntntBQ8gDhUbT KW8o9eDQJA3U1bIEAiBFYx55lQQvEjgsT8LOqm3MHC1YkFrh7a5fmPWboVfcdTAN BgkqhkiG9w0BAQsFAAOCAQEAa0szKSlmksMf+6ImBPz/AT6g5vVK2kXjtfKeV6t8 Lrny7aAe/R4FjZr1mpWLudLrqr6kC6G3UygS5JNJJLPoAIhLLUmAHpN/xaNtgvGF yslQDtRlBp15bdjOSZ6wgH/FkHTHt7O5v6jKYbql8wz+1LskFk963gbUeiBZN1pY 3aXzW+q1yS5LvmR1zi70d1rZT4ItX+x9bLS7qsB7Cdjh0khY3VgobEi/Imiqnk6H oJ6GyY9kyySXySQl+StYOw49+gz+768Xjcf6D6NJ8IrzfxmMoKcubttIi/E7oiIh B8AQtRcbxQskr2ZA2gUcoewKDw7Y+RAyjgRdYxtB/3B8KQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXUaxZzShRhkQPUvUJzE 7yQ9h8dkjLAqWPr0XXLm3XVukaL/dWmiwLI3OBApcgu6GG3Ne7Y8UDAio9ETDHD9 ZYItYfjCgSxttkX5VAl3obt/WtTQDjcwDe9CMb5xTbdn/D7oefz6lISDaIOrn61N ihO/3GDOmzJ3yB0Woi4iAH/C3VivtsYE4QRdCzfj9PyRaMV0Gbh/grQX+Sx/MKeK QGKwpKWbWW2WO1ergoiqRXtnTSDDAs+qUTJMw9omK9r49Gl1Y6YeBqfSap5nyVV7 zSrIMOVlO6rty9qfx8N9Uz5EqvPCusCmK29retWxkR1ccQrjG1NSv/hc7rRimYqw OwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16264860610916749395354232442219232289 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-28 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.di-support.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18867253859508640015386291821922232087014230999416972562622292846325518375315904206345623439119037039407398961185870312220234459003633946104170409008623181186869411664847854420130629006974584615124862386410847216179595964044340293178676187331825568775182891855519248841619256404472534454108867867205949515811060048255473206939636089703227123805255992903643586403555673025346913495430440423916112929999808744659692484935258976798906582128282420453698008145225350465512040352960154548611283436390178757692710020701830505008121356793740181095424739389688767862856628621972373585509527120870598324974808897960469336862779 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 33e453b36bcede1826ae17ced16667ea9f5b9bbb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.di-support.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'di-support.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000016ff0c56fc60000040300483046022100c815b8ead5f87e8c157514fea7216a72535545c3e01f79ca9edb62978672edc9022100c4b39bcb0e247b81c2d32e18c32d93ee515460aa084d09096ef28d080e98ef4a0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000016ff0c56fed0000040300473045022100fc4ed172bbf481c900e4e7b67b4143c8038546d3296f28f5e0d0240dd4d5b204022045631e7995042f12382c4fc2ceaa6dcc1c2d58905ae1edae5f98f59ba157dc75 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 006b4b3329296692c31ffba22604fcff013ea0e6f54ada45e3b5f29e57ab7c2eb9f2eda01efd1e058d9af59a958bb9d2ebaabea40ba1b7532812e4934924b3e800884b2d49801e937fc5a36d82f185cac9500ed465069d796dd8ce499eb0807fc59074c7b7b3b9bfa8ca61baa5f30cfed4bb24164f7ade06d47a2059375a58dda5f35beab5c92e4bbe6475ce2ef4775ad94f822d5fec7d6cb4bbaac07b09d8e1d24858dd58286c48bf2268aa9e4e87a09e86c98f64cb2497c92425f92b583b0e3dfa0cfeefaf178dc7fa0fa349f08af37f198ca0a72e6edb488bf13ba2222107c010b5171bc50b24af6640da051ca1ec0a0f0ed8f910328e045d631b41ff707c29