nagrady.by
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:55:a1:a6:a4:5f:97:1d:9b:85:6a:48:1e:ce:57:9f:c6:c4 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=nagrady.by
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:55:a1:a6:a4:5f:97:1d:9b:85:6a:48:1e:ce:57:9f:c6:c4Serial Number (int): 290475729946049016038671122878389769193156
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 63:4e:15:85:56:5a:a4:94:02:c2:16:42:a4:a5:97:9a:38:02:57:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 34:47:a8:de:f6:1a:3d:0d:6d:41:96:c3:d9:8e:ce:37:2f:1e:09:58
Fingerprint (sha256): 75:08:61:c0:13:98:9b:41:74:bb:55:80:b4:f6:6e:4b:85:0a:5a:ce:b0:45:d8:b0:9e:ad:0b:5d:06:42:3f:e7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate nagrady.by
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nagrady.by
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nagrady.by
Other certificates including the domain name nagrady.by
(limited to 100 certificates)
app.giflytics.com
goldentrumpetproduction.co.ke
cuentas.niquelsoft.com
prazskabojovka.cz
nagrady.by
margarita.palmero.xyz
adapt-wa.com
www.exenode.com
nagrady.by
www.storemato.com
enishi.nanaimori.com
www.amitavasaha.com
bbf2.autolmeventos.com.br
nagrady.by
www.laurajaeero22.fi
www.sic.k-9apps.com
woprog.com
dl.xrink.me
food.zeroq.ai
www.nagrady.by
exfreight.loadsure.net
app.giflytics.com
blacksquaremedia.com
www.danielschreitter.de
family.mcdonaldsnederland.app
lyuartwork.com
portal.washoo.ae
asjpmm.com
www.swamper.info
unclechefs.com
sdg.un-haiti.org
tuukinken-search.neko-ni-naritai.com
gater.livneh-iot.xyz
phyideas.com
www.larico.net
www.pansper.me
www.getcryptograph.app
www.danebakes.com
www.sudhanshumishra.dev
smartlabs.com.co
portal.washoo.ae
app.kahier.fr
auth-stage.butter.us
www.jessedevs.com
nagrady.by
khgdlongan.xbot.com.vn
www.ipotracker.app
www.budmalart.pl
grapher.life
devmulti02.wowdesk.jp
demo-en.snapmentor.no
buckyconverts.com
english-app.sharenows.com
www.jowe.app
register.goodmooddudes.com
www.ductaiphung.de
www.banco.credit
app.presentie.cz
www.joinslip.com
lib.voxelcubes.com
app.lancerural.com.br
stadsmissionen.mooova.io
www.marsharobertscoaching.com
getlookforward.app
comercialluizinho.com.br
agents.rallytree.com
food.zeroq.ai
omaralhoori.me
www.jowe.app
jetonnonfongible.ca
sharedmobility.africa
www.acls.games
dashboard.assisthub.io
app.mytuner-radio.com
open-drill.org
portal.vtmoney.com.br
app.mytuner-radio.com
nayansukhcare.com
www.strata-music.com
www.strata-music.com
s4fin.hi-ya.com
www.danebakes.com
trimurtieng.com
gymtrao.pro
www.nompilookyere.com
careers.logisian.in
ru.nagrady.by
www.timelogger.me
dlombasegglvodralb.de
go1.paidvideocall.com
launchwolf.com
gewoon.marketing
www.discountpocket.app
www.pinklightningwebsite.website
appios.vpnsafenet.com
befrolic.com
ecc.cems.app
www.opinifyme.com
it117.info
demo-en.snapmentor.no
goldentrumpetproduction.co.ke
cuentas.niquelsoft.com
prazskabojovka.cz
nagrady.by
margarita.palmero.xyz
adapt-wa.com
www.exenode.com
nagrady.by
www.storemato.com
enishi.nanaimori.com
www.amitavasaha.com
bbf2.autolmeventos.com.br
nagrady.by
www.laurajaeero22.fi
www.sic.k-9apps.com
woprog.com
dl.xrink.me
food.zeroq.ai
www.nagrady.by
exfreight.loadsure.net
app.giflytics.com
blacksquaremedia.com
www.danielschreitter.de
family.mcdonaldsnederland.app
lyuartwork.com
portal.washoo.ae
asjpmm.com
www.swamper.info
unclechefs.com
sdg.un-haiti.org
tuukinken-search.neko-ni-naritai.com
gater.livneh-iot.xyz
phyideas.com
www.larico.net
www.pansper.me
www.getcryptograph.app
www.danebakes.com
www.sudhanshumishra.dev
smartlabs.com.co
portal.washoo.ae
app.kahier.fr
auth-stage.butter.us
www.jessedevs.com
nagrady.by
khgdlongan.xbot.com.vn
www.ipotracker.app
www.budmalart.pl
grapher.life
devmulti02.wowdesk.jp
demo-en.snapmentor.no
buckyconverts.com
english-app.sharenows.com
www.jowe.app
register.goodmooddudes.com
www.ductaiphung.de
www.banco.credit
app.presentie.cz
www.joinslip.com
lib.voxelcubes.com
app.lancerural.com.br
stadsmissionen.mooova.io
www.marsharobertscoaching.com
getlookforward.app
comercialluizinho.com.br
agents.rallytree.com
food.zeroq.ai
omaralhoori.me
www.jowe.app
jetonnonfongible.ca
sharedmobility.africa
www.acls.games
dashboard.assisthub.io
app.mytuner-radio.com
open-drill.org
portal.vtmoney.com.br
app.mytuner-radio.com
nayansukhcare.com
www.strata-music.com
www.strata-music.com
s4fin.hi-ya.com
www.danebakes.com
trimurtieng.com
gymtrao.pro
www.nompilookyere.com
careers.logisian.in
ru.nagrady.by
www.timelogger.me
dlombasegglvodralb.de
go1.paidvideocall.com
launchwolf.com
gewoon.marketing
www.discountpocket.app
www.pinklightningwebsite.website
appios.vpnsafenet.com
befrolic.com
ecc.cems.app
www.opinifyme.com
it117.info
demo-en.snapmentor.no
Certificate
The complete raw certificate details for nagrady.by in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISA1WhpqRflx2bhWpIHs5Xn8bEMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMjcxMTE5MThaFw0x OTA0MjcxMTE5MThaMBUxEzARBgNVBAMTCm5hZ3JhZHkuYnkwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCrxxsM7cYB+Oqps88IF0+iy3w0xGYS5u/zmBd5 yWXuZkwfmpJ9M+4H+i4VYve08x/VTy6xZ6hJQr/jzJq3MEbCaPUoqWRpb0xLZCTJ 3O1Gn6Qfwu9vNtC8aSe44tYYcEAstPXuj/cNjG4Dkudd1j68u8lbKBCgWvY39eGe FSNybo5pAQmkjKTJ19sFAZBIS5AgjDh6CmB0eRgmMI5gCxe5JKCA3z8UANMJ5zRH NWN8VNKgneFX0csT0zwwJJeO6jQAn8xsDGr3VLxeYNxGMcIJ3tnD42MejxzFkJDo 2oa+ffHDHxqGaZsL4LIMRwjIklkrZi/6oTihLxBl9pf9FoczAgMBAAGjggJfMIIC WzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGNOFYVWWqSUAsIWQqSll5o4AleXMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w FQYDVR0RBA4wDIIKbmFncmFkeS5ieTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0 Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AOJpS64m6OlACeiGG7Y7g9Q+ 5/50iPukjyiTAZ3d8dv+AAABaI8/78EAAAQDAEcwRQIhANLzC1YjD1Ga8wuliWul rIop3hfEJQh8qn83SXzXhzUBAiBw0mQIOBp/6b5y9iXLI0QK2xDa1ozIq3PEEH1e Ht9FnwB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaI8/78EA AAQDAEcwRQIgYp0dpnq894FnAm5XLC4nbnlZXMWhml9+nAn/L24ur/4CIQD1Yr8z gKrd0A7XV7P3HXx78oOt7UUH9s2YOxbg/5tj+TANBgkqhkiG9w0BAQsFAAOCAQEA ahy0oQMFlueXkJ5ouiWslJcNkyI07y/JNMGotHM9OHcTnzuF8ar9418ozVhA+cTC 4VPYYfuEg3Rw/8ISTpXoaj2eF4IUzvR5IFIGyoKV+XPN5zzdHJZSq2tJqP8b3afS ABjVXC9lQjYRzz8sg6n0A49vvvZ7hZyTjrJ60iclaS29uy9pRQh/5ErT/dZAooG7 O4yQcTzlb/k2Kl3KB1pqC4RCBujY056LLGOOp9QPZ+1vYvcOg9L5SkiNieIzQup4 pNjQi8eBeTwoUu3wjg4ve1JC0em9KE7LRjsvfhEXC1RfU3sV/HGoHiYZiBfGNXsG BZ6BHbs4J9oJpmq8ugFzMQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8cbDO3GAfjqqbPPCBdP ost8NMRmEubv85gXecll7mZMH5qSfTPuB/ouFWL3tPMf1U8usWeoSUK/48yatzBG wmj1KKlkaW9MS2QkydztRp+kH8LvbzbQvGknuOLWGHBALLT17o/3DYxuA5LnXdY+ vLvJWygQoFr2N/XhnhUjcm6OaQEJpIykydfbBQGQSEuQIIw4egpgdHkYJjCOYAsX uSSggN8/FADTCec0RzVjfFTSoJ3hV9HLE9M8MCSXjuo0AJ/MbAxq91S8XmDcRjHC Cd7Zw+NjHo8cxZCQ6NqGvn3xwx8ahmmbC+CyDEcIyJJZK2Yv+qE4oS8QZfaX/RaH MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 290475729946049016038671122878389769193156 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-27 11:19:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 11:19:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nagrady.by' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21684932812432339646485683289655448296763540159596927263572843107755452821772205858541782411956564211973624337617207176622427042211013286642959366491304222944727866775172072982367814387353074518963001766468903543469337743825150329977113528125897698254486215006583088920422238693934709511770745506935307541283380282216423639407749721171137985135319637461835549367631299935702939510878201137001564437372006570938688782647412537759804896865989512853861860648627621268112490228810625334887949996480090147872368112925042345727211662765214683746309439757755278105132904504583883278031982199528718312111745903516814279083827 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 634e1585565aa49402c21642a4a5979a38025797 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagrady.by' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001688f3fefc10000040300473045022100d2f30b56230f519af30ba5896ba5ac8a29de17c425087caa7f37497cd7873501022070d26408381a7fe9be72f625cb23440adb10dad68cc8ab73c4107d5e1edf459f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001688f3fefc100000403004730450220629d1da67abcf78167026e572c2e276e79595cc5a19a5f7e9c09ff2f6e2eaffe022100f562bf3380aaddd00ed757b3f71d7c7bf283aded4507f6cd983b16e0ff9b63f9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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