kaizenbarcelona.com
Issued by GTS CA 1D4
About this certificate
This digital certificate with serial number a3:f3:02:24:73:58:be:24:09:90:63:27:0c:78:62:07 was issued on by Google Trust Services LLC.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=kaizenbarcelona.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): a3:f3:02:24:73:58:be:24:09:90:63:27:0c:78:62:07Serial Number (int): 217925934902296367729894924614991634951
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 89:3e:ea:38:20:e0:24:6c:be:39:fd:4c:dc:38:57:ee:4f:21:c3:a4
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92
Fingerprint (sha1): 19:79:7e:0c:de:90:74:5a:35:72:6c:f4:32:94:05:a6:29:64:da:64
Fingerprint (sha256): 7e:52:e2:1a:f1:23:db:44:96:e0:d6:39:69:75:fb:8a:22:36:94:15:4d:c8:14:8e:ed:17:16:52:4b:cd:5a:36
Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1d4/rF68w-mcQnQCRL Distribution Point: http://crls.pki.goog/gts1d4/DjrvjChw-PU.crl
Check the revocation status for certificate kaizenbarcelona.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kaizenbarcelona.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kaizenbarcelona.com
Other certificates including the domain name kaizenbarcelona.com
(limited to 100 certificates)
booknow.amplifysales.co.uk
meeting.spectral.se
booking.tanktestingservices.com
bookings.waps.solutions
callback.topinsure.ie
termin.s-s-b.de
apply.leadingedgeaviation.com
booking.thehospicecharitypartnership.co.uk
bookings.charac.co.uk
booknow.michaelbanks.photo
bookings.waps.solutions
installations.woosage.com
booking.meditop.dk
bookings.charac.co.uk
apply.leadingedgeaviation.com
kaizenbarcelona.com
bookings.waps.solutions
bookings.neopartement.com
citas.yacrea.com
bookings.waps.solutions
bookings.hakoh.com
imworkingonit.thirtynin.com
citas.yacrea.com
confirmation-rdv.degentravel.com
termine.haering-consulting.de
bookings.hakoh.com
booknow.michaelbanks.photo
confirmation-rdv.degentravel.com
rdv.qbisme.com
bookings.merits.ie
booking.upfront.ie
citas.yacrea.com
bookings.waps.solutions
cyou.digimlabs.net
booknow.adeptcloud.co.uk
cyou.digimlabs.net
bookings.routescoaching.com
booking.thehospicecharitypartnership.co.uk
installations.woosage.com
calendar.halosync.io
meet.kaizenbarcelona.com
bookings.waps.solutions
bookings.waps.solutions
apply.leadingedgeaviation.com
kaizenbarcelona.com
booking.upfront.ie
callback.topinsure.ie
callback.topinsure.ie
bookings.waps.solutions
bookings.amazix.com
calendar.halosync.io
imworkingonit.thirtynin.com
cyou.digimlabs.net
bookings.waps.solutions
bookings.waps.solutions
bookings.grenzenlosefreiheit.com
bookings.thehandyteam.net
cyou.digimlabs.net
bookings.charac.co.uk
bookings.charac.co.uk
rdv.qbisme.com
booking.tanktestingservices.com
cyou.digimlabs.net
booking.tanktestingservices.com
imworkingonit.thirtynin.com
booknow.michaelbanks.photo
callback.topinsure.ie
citas.yacrea.com
cyou.digimlabs.net
apply.leadingedgeaviation.com
imworkingonit.thirtynin.com
cyou.digimlabs.net
booking.the-minted.com
bookings.evansandco.uk
meeting.spectral.se
booking.tanktestingservices.com
bookings.waps.solutions
callback.topinsure.ie
termin.s-s-b.de
apply.leadingedgeaviation.com
booking.thehospicecharitypartnership.co.uk
bookings.charac.co.uk
booknow.michaelbanks.photo
bookings.waps.solutions
installations.woosage.com
booking.meditop.dk
bookings.charac.co.uk
apply.leadingedgeaviation.com
kaizenbarcelona.com
bookings.waps.solutions
bookings.neopartement.com
citas.yacrea.com
bookings.waps.solutions
bookings.hakoh.com
imworkingonit.thirtynin.com
citas.yacrea.com
confirmation-rdv.degentravel.com
termine.haering-consulting.de
bookings.hakoh.com
booknow.michaelbanks.photo
confirmation-rdv.degentravel.com
rdv.qbisme.com
bookings.merits.ie
booking.upfront.ie
citas.yacrea.com
bookings.waps.solutions
cyou.digimlabs.net
booknow.adeptcloud.co.uk
cyou.digimlabs.net
bookings.routescoaching.com
booking.thehospicecharitypartnership.co.uk
installations.woosage.com
calendar.halosync.io
meet.kaizenbarcelona.com
bookings.waps.solutions
bookings.waps.solutions
apply.leadingedgeaviation.com
kaizenbarcelona.com
booking.upfront.ie
callback.topinsure.ie
callback.topinsure.ie
bookings.waps.solutions
bookings.amazix.com
calendar.halosync.io
imworkingonit.thirtynin.com
cyou.digimlabs.net
bookings.waps.solutions
bookings.waps.solutions
bookings.grenzenlosefreiheit.com
bookings.thehandyteam.net
cyou.digimlabs.net
bookings.charac.co.uk
bookings.charac.co.uk
rdv.qbisme.com
booking.tanktestingservices.com
cyou.digimlabs.net
booking.tanktestingservices.com
imworkingonit.thirtynin.com
booknow.michaelbanks.photo
callback.topinsure.ie
citas.yacrea.com
cyou.digimlabs.net
apply.leadingedgeaviation.com
imworkingonit.thirtynin.com
cyou.digimlabs.net
booking.the-minted.com
bookings.evansandco.uk
Certificate
The complete raw certificate details for kaizenbarcelona.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIRAKPzAiRzWL4kCZBjJwx4YgcwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjQwNTA5MTA0NjA0WhcNMjQwODA3 MTEzMjM0WjAeMRwwGgYDVQQDExNrYWl6ZW5iYXJjZWxvbmEuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFZSG2MyeIAZemsePUwFu6j5WBMrtIbH ZvWUsiO2tJfBoql9i3Xy2ndXDlRoueUE1xrjG0CNMXZ9TYC+iajJ9R1R+AcV6lb9 GkrsHNK10duciasJz/VLFbIAC4q8LvH4bjvJrXkN4AazK7bAqgcwBPhOC6NfMK3u XOkaCKJHTsPDmbszLPoN8U6lZzDZ3jovkgSLwkbi9HpClI49f9I44yA82Hkeiztz Sdbl2ZxnSaqXysb5/Ktl6J6mrTcaBf8f6t6qWTFfbFsEHktFGLLREZUocXosN1o7 23hp7LZubCyk8+645wANetPgaghrLWmTNHkGtG1tOlmPJGgEPBAAQQIDAQABo4IC ejCCAnYwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFIk+6jgg4CRsvjn9TNw4V+5PIcOkMB8GA1UdIwQY MBaAFCXiGA6yV5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEBBGwwajA1BggrBgEF BQcwAYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQvckY2OHctbWNRblEw MQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFkNC5k ZXIwHgYDVR0RBBcwFYITa2FpemVuYmFyY2Vsb25hLmNvbTAhBgNVHSAEGjAYMAgG BmeBDAECATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9j cmxzLnBraS5nb29nL2d0czFkNC9EanJ2akNody1QVS5jcmwwggEEBgorBgEEAdZ5 AgQCBIH1BIHyAPAAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAA AY9dLMWKAAAEAwBHMEUCIA51ttjWk+QtPW5lB8LaP4Ls8NHvuVCBoOi77ZLmeN5P AiEAnYRS6Y1n/sdQNGmyw39oZpUFH5hlLlEPu7S3jXF1inAAdgB2/4g/Crb7lVHC Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY9dLMFxAAAEAwBHMEUCIQDSUFE/y8u0 V8VQaPwny4SjaA3UDr7B16+G4jVbZEW2kwIgRRe0bfSLI/uw8ruZV502HYY0Gwzj FRGy0gsInPE2XIQwDQYJKoZIhvcNAQELBQADggEBAFn/GIbyLot5bEXRD9TtFq0C ctNqWdeRYqmHUPdIJskVFEMgurt+l3isrJAYcSau3fgf44Q1NJ9AEqufcV6mxdEx QsUpVTqgw8sC9sUMwBK2tQ7WnT42UEEREkiN2cl5/PqGQeVBTu9GFXrXoDy60Bzc flNpTzo+sk5QrLFaShfYg+R0ZEoMvDlQ7MUCFsFISxJ9UWy+qcdzpqQjHgFvkgRV vSxLx74xyrZpLzBEB7PZX8SvrQ2l6pT6tRKX3EWhNtn5rNa+ZthvgCopWipG+tag qaVxJlTdoaJnPqJVgG/g9GgXAiqCpSuY1s2PuGeGcm0o7cPFu4V5lJpbaapfcd4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFZSG2MyeIAZemsePUwF u6j5WBMrtIbHZvWUsiO2tJfBoql9i3Xy2ndXDlRoueUE1xrjG0CNMXZ9TYC+iajJ 9R1R+AcV6lb9GkrsHNK10duciasJz/VLFbIAC4q8LvH4bjvJrXkN4AazK7bAqgcw BPhOC6NfMK3uXOkaCKJHTsPDmbszLPoN8U6lZzDZ3jovkgSLwkbi9HpClI49f9I4 4yA82HkeiztzSdbl2ZxnSaqXysb5/Ktl6J6mrTcaBf8f6t6qWTFfbFsEHktFGLLR EZUocXosN1o723hp7LZubCyk8+645wANetPgaghrLWmTNHkGtG1tOlmPJGgEPBAA QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 217925934902296367729894924614991634951 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 10:46:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-07 11:32:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kaizenbarcelona.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22260508012655682671165375666936244665837699971982932307307474491020458683389971685020230228906819686811939019132574076024733829617414266701373087673595350286580727869841743893711093960267530993692057849892423627587936766798561951917667414852032809434390520434637085684128186769934284530083421064867022339184939054349861072931445335187258920358155976154431885637754412239878876932276553560320980919255778635408257751888250826048333367906984757497996562932295129186751739331068998952413570394474614940559998886619044566785929780767978834079957875607296890960449162578130670926792663871866695556850323498798968262885441 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 893eea3820e0246cbe39fd4cdc3857ee4f21c3a4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/rF68w-mcQnQ' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaizenbarcelona.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/DjrvjChw-PU.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018f5d2cc58a000004030047304502200e75b6d8d693e42d3d6e6507c2da3f82ecf0d1efb95081a0e8bbed92e678de4f0221009d8452e98d67fec7503469b2c37f686695051f98652e510fbbb4b78d71758a7000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f5d2cc1710000040300473045022100d250513fcbcbb457c55068fc27cb84a3680dd40ebec1d7af86e2355b6445b69302204517b46df48b23fbb0f2bb99579d361d86341b0ce31511b2d20b089cf1365c84 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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