romeoplus.com
Issued by R3
About this certificate
This digital certificate with serial number 04:00:00:64:02:cc:ca:3d:28:73:be:51:cc:96:cd:73:01:48 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=romeoplus.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:00:00:64:02:cc:ca:3d:28:73:be:51:cc:96:cd:73:01:48Serial Number (int): 348449663013516794336960373823553892712776
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 99:54:76:bb:e7:f6:67:28:8e:42:d4:d1:98:b5:ea:a1:b1:30:ee:2c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 30:95:70:c4:37:63:ad:8b:8e:8a:b5:68:43:06:e3:66:7b:12:a7:52
Fingerprint (sha256): 79:40:e3:f3:cb:0b:d5:40:a8:c3:d7:8b:30:cc:c8:43:71:9b:5a:b2:10:0c:bb:ec:92:55:c9:1f:37:61:ac:da
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate romeoplus.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for romeoplus.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blog.romeoplus.com
dev.romeoplus.com
romeoplus.com
stage.romeoplus.com
dev.romeoplus.com
romeoplus.com
stage.romeoplus.com
Other certificates including the domain name romeoplus.com
(limited to 100 certificates)
mail.delucia.xyz
mail.nosugarbaker.com
mail.crunchconsult.com
mail.gamenightsent.com
correo.formosas.com.co
romeoplus.com
correo.formosas.com.co
mail.delucia.xyz
mail.delucia.xyz
mail.delucia.xyz
correo.formosas.com.co
mail.mundusafrique.com
mail.apolon.com.br
mail.delucia.xyz
mail.altpetroleum.com
mail.delucia.xyz
correo.formosas.com.co
mail.inteliexpress.ge
mail.eliteacademy.eu
mail.podcastnetworksolutions.com
correo.formosas.com.co
correo.formosas.com.co
romeoplus.com
mail.delucia.xyz
mail.delucia.xyz
correo.formosas.com.co
mail.inteliexpress.ge
mail.apolon.com.br
romeoplus.com
romeoplus.com
mail.delucia.xyz
mail.delucia.xyz
mail.heatblush.com
mail.delucia.xyz
romeoplus.com
mail.heatblush.com
correo.formosas.com.co
mail.altpetroleum.com
mail.mundusafrique.com
romeoplus.com
romeoplus.com
mail.gosteli.org
mail.eliteacademy.eu
mail.podcastnetworksolutions.com
mail.crunchconsult.com
romeoplus.com
mail.gamenightsent.com
mail.delucia.xyz
romeoplus.com
mail.delucia.xyz
mail.icryptall.com
mail.delucia.xyz
mail.delucia.xyz
mail.crunchconsult.com
mail.altpetroleum.com
mail.privatedns.us.com
mail.crunchconsult.com
romeoplus.com
mail.gamenightsent.com
mail.mundusafrique.com
mail.gosteli.org
romeoplus.com
mail.heatblush.com
mail.delucia.xyz
romeoplus.com
mail.delucia.xyz
mail.inteliexpress.ge
romeoplus.com
mail.vgtech.org
mail.onpointrental.com
mail.delucia.xyz
romeoplus.com
mail.delucia.xyz
mail.joaoacassio.com.br
mail.delucia.xyz
mail.podcastnetworksolutions.com
mail.integrul.com
mail.onpointrental.com
mail.delucia.xyz
mail.delucia.xyz
mail.nosugarbaker.com
mail.delucia.xyz
mail.podcastnetworksolutions.com
romeoplus.com
mail.heatblush.com
romeoplus.com
mail.vgtech.org
mail.vgtech.org
mail.altpetroleum.com
mail.gosteli.org
mail.onpointrental.com
mail.vgtech.org
mail.inteliexpress.ge
mail.gamenightsent.com
correo.formosas.com.co
mail.aarialife.co
romeoplus.com
mail.joaoacassio.com.br
zmail.inweasta.com
mail.delucia.xyz
mail.nosugarbaker.com
mail.crunchconsult.com
mail.gamenightsent.com
correo.formosas.com.co
romeoplus.com
correo.formosas.com.co
mail.delucia.xyz
mail.delucia.xyz
mail.delucia.xyz
correo.formosas.com.co
mail.mundusafrique.com
mail.apolon.com.br
mail.delucia.xyz
mail.altpetroleum.com
mail.delucia.xyz
correo.formosas.com.co
mail.inteliexpress.ge
mail.eliteacademy.eu
mail.podcastnetworksolutions.com
correo.formosas.com.co
correo.formosas.com.co
romeoplus.com
mail.delucia.xyz
mail.delucia.xyz
correo.formosas.com.co
mail.inteliexpress.ge
mail.apolon.com.br
romeoplus.com
romeoplus.com
mail.delucia.xyz
mail.delucia.xyz
mail.heatblush.com
mail.delucia.xyz
romeoplus.com
mail.heatblush.com
correo.formosas.com.co
mail.altpetroleum.com
mail.mundusafrique.com
romeoplus.com
romeoplus.com
mail.gosteli.org
mail.eliteacademy.eu
mail.podcastnetworksolutions.com
mail.crunchconsult.com
romeoplus.com
mail.gamenightsent.com
mail.delucia.xyz
romeoplus.com
mail.delucia.xyz
mail.icryptall.com
mail.delucia.xyz
mail.delucia.xyz
mail.crunchconsult.com
mail.altpetroleum.com
mail.privatedns.us.com
mail.crunchconsult.com
romeoplus.com
mail.gamenightsent.com
mail.mundusafrique.com
mail.gosteli.org
romeoplus.com
mail.heatblush.com
mail.delucia.xyz
romeoplus.com
mail.delucia.xyz
mail.inteliexpress.ge
romeoplus.com
mail.vgtech.org
mail.onpointrental.com
mail.delucia.xyz
romeoplus.com
mail.delucia.xyz
mail.joaoacassio.com.br
mail.delucia.xyz
mail.podcastnetworksolutions.com
mail.integrul.com
mail.onpointrental.com
mail.delucia.xyz
mail.delucia.xyz
mail.nosugarbaker.com
mail.delucia.xyz
mail.podcastnetworksolutions.com
romeoplus.com
mail.heatblush.com
romeoplus.com
mail.vgtech.org
mail.vgtech.org
mail.altpetroleum.com
mail.gosteli.org
mail.onpointrental.com
mail.vgtech.org
mail.inteliexpress.ge
mail.gamenightsent.com
correo.formosas.com.co
mail.aarialife.co
romeoplus.com
mail.joaoacassio.com.br
zmail.inweasta.com
mail.delucia.xyz
Certificate
The complete raw certificate details for romeoplus.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISBAAAZALMyj0oc75RzJbNcwFIMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTUwMjEzMjRaFw0yNDAzMTQwMjEzMjNaMBgxFjAUBgNVBAMT DXJvbWVvcGx1cy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS TOLnnHPQEaaDiPAj2EENIPIxAYHnQuKydU2ia0mMiE9vu8YeVMgfCuW7GyV/bWJn iQ64moxyEFvO3L7dhLJ1H8fcMxH1VOWHC0b4ZhLUB3bIX7kZsKn61X9EPj4oERx6 0iFw8cyy/P3oSQq8EETSYRZpO2KjteCrwdj8U5hKCnmub1P5S3dMbboOge5P9BmC B3i7Iw6GBgSygyvJUgO3G21cn1aIkIa/1UgA/k8tH+3cZeRuFlwXfbr+TNNlDPdF gtgqWwzIiVi9ARWH6gwysfhZDsLaaH9+iUhJyUX2lCSS+3KqsMhzEiNHj9Mjlsdy fa9NjUoRI/Cr6nZs/Af9AgMBAAGjggJKMIICRjAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFJlUdrvn9mcojkLU0Zi16qGxMO4sMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv MFQGA1UdEQRNMEuCEmJsb2cucm9tZW9wbHVzLmNvbYIRZGV2LnJvbWVvcGx1cy5j b22CDXJvbWVvcGx1cy5jb22CE3N0YWdlLnJvbWVvcGx1cy5jb20wEwYDVR0gBAww CjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQB2/4g/Crb7lVHC Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYxrdupxAAAEAwBGMEQCIFaIAy8b2d3r hDH1odxVuDtMLPAS4nijxw0LIGITKvAlAiB50nDHIwR7TXrekl5UpKRWd4u5TDLT ZwB4kqme1h9LOQB2ACnQOhu2dKpxHNMDW2VXwU+Kp4tP6DiUSeykU/lEvSRoAAAB jGt26voAAAQDAEcwRQIhALmzzv9uDrcahkhDZh7Bulb670DU9NAvsgfQJnWAtpyY AiAnyQASpSxKupq+eswQ29z7dFaB4tmM53sQBqsw7tmosjANBgkqhkiG9w0BAQsF AAOCAQEAh9vbpWm8/QtdDS/p765OStAOKM06HWk8TdqsV9hcaEC4khcDWL7tVcuh KG5rCi2BO3JJb/xpUoAK02eIvh5XmnAC4NK/ZXbvHIl5N2fxDXVgF1zdR5dXZVSS BW2ufXp8pBmTg7t24tJ/VBTcUAAb4UxvC2Lbec/RB2fhrb493ok6p+UCBfr+xU1D UzoyYniCXI3SYqp6dPieHr3HYBVFJXx9ICJwe1IV8Y51T72QKUn9IooIx5zOMvDK yR/zEvIGNa/U94f2lm+xDAs/3ynoOG+WjdUsCfDLLpZlDXvybjqzB6PF3C96Ygn7 7CUwOmxB/dpplT/BxYYeefJQ+H0dxA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kzi55xz0BGmg4jwI9hB DSDyMQGB50LisnVNomtJjIhPb7vGHlTIHwrluxslf21iZ4kOuJqMchBbzty+3YSy dR/H3DMR9VTlhwtG+GYS1Ad2yF+5GbCp+tV/RD4+KBEcetIhcPHMsvz96EkKvBBE 0mEWaTtio7Xgq8HY/FOYSgp5rm9T+Ut3TG26DoHuT/QZggd4uyMOhgYEsoMryVID txttXJ9WiJCGv9VIAP5PLR/t3GXkbhZcF326/kzTZQz3RYLYKlsMyIlYvQEVh+oM MrH4WQ7C2mh/folISclF9pQkkvtyqrDIcxIjR4/TI5bHcn2vTY1KESPwq+p2bPwH /QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 348449663013516794336960373823553892712776 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 02:13:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 02:13:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'romeoplus.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26547958113460275992389416680434035228778196134490331583991617939111105982740981458401975268020247378473146845777711523804914108767589698603865429321219041250026449603678761792127201305351834481120806471032419250403110522942173446479938385209039785240029589992911673547537927926876528586684162899674119087188635587717232902411503989152427979958089168437225522672996513705102422688139279069692879677317402689357856106901154383194853226371308426227519440712663213852006676867768860384779804718387249740582998147909468186610199191331491501078932016651749943914782203415178409044786798375506203517621936996701667396945917 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 995476bbe7f667288e42d4d198b5eaa1b130ee2c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.romeoplus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.romeoplus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romeoplus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.romeoplus.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c6b76ea71000004030046304402205688032f1bd9ddeb8431f5a1dc55b83b4c2cf012e278a3c70d0b2062132af025022079d270c723047b4d7ade925e54a4a456778bb94c32d367007892a99ed61f4b3900760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c6b76eafa0000040300473045022100b9b3ceff6e0eb71a864843661ec1ba56faef40d4f4d02fb207d0267580b69c98022027c90012a52c4aba9abe7acc10dbdcfb745681e2d98ce77b1006ab30eed9a8b2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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