care.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:62:b2:fd:d0:c6:b2:d6:4e:c7:b6:af:c3:eb:9c:a3:e5:79 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=care.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:62:b2:fd:d0:c6:b2:d6:4e:c7:b6:af:c3:eb:9c:a3:e5:79Serial Number (int): 294922450222371354847323341575791900353913
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 62:84:b5:0e:7c:67:2f:03:2d:b4:35:22:15:62:ee:19:20:eb:1e:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a6:0c:9f:6e:ef:1e:e6:57:21:df:e5:2a:53:58:a9:05:41:9e:e5:57
Fingerprint (sha256): 83:2e:7d:c0:d9:ba:c2:ea:59:a6:f7:b1:76:5e:61:aa:45:c6:4f:c8:ac:0f:e2:14:ba:3d:1b:cf:8f:78:e7:b5
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate care.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for care.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
care.ca
www.care.ca
www.care.ca
Other certificates including the domain name care.ca
(limited to 100 certificates)
covenanthousetorontoevents.ca
bearstatus.oostwestsl.com
power.care.ca
bearstatus.oostwestsl.com
care.ca
dev.care.ca
blog.care.ca
bearstatus.oostwestsl.com
care.ca
webmail.care.ca
care.ca
power.care.ca
power.care.ca
minerva.care.ca
bearstatus.oostwestsl.com
blog.care.ca
staging.care.ca
care.ca
power.care.ca
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
staging.care.ca
power.care.ca
minerva.care.ca
bearstatus.oostwestsl.com
blog.care.ca
bearstatus.oostwestsl.com
care.ca
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
care.ca
covenanthousetorontoevents.ca
bearstatus.oostwestsl.com
care.ca
care.ca
care.ca
minerva.care.ca
care.ca
blog.care.ca
power.care.ca
minerva.care.ca
blog.care.ca
bearstatus.oostwestsl.com
www.care.ca
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
minerva.care.ca
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
staging.care.ca
power.care.ca
care.ca
care.ca
bearstatus.oostwestsl.com
blog.care.ca
webmail.care.ca
care.ca
bearstatus.oostwestsl.com
power.care.ca
bearstatus.oostwestsl.com
care.ca
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
care.ca
bearstatus.oostwestsl.com
care.ca
minerva.care.ca
bearstatus.oostwestsl.com
care.ca
care.ca
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
minerva.care.ca
power.care.ca
care2.wowsite.dev
power.care.ca
care.ca
care.ca
staging.care.ca
blog.care.ca
blog.care.ca
webmail.care.ca
power.care.ca
webmail.care.ca
minerva.care.ca
blog.care.ca
power.care.ca
power.care.ca
care.ca
care.ca
bearstatus.oostwestsl.com
minerva.care.ca
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
power.care.ca
bearstatus.oostwestsl.com
care.ca
dev.care.ca
blog.care.ca
bearstatus.oostwestsl.com
care.ca
webmail.care.ca
care.ca
power.care.ca
power.care.ca
minerva.care.ca
bearstatus.oostwestsl.com
blog.care.ca
staging.care.ca
care.ca
power.care.ca
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
staging.care.ca
power.care.ca
minerva.care.ca
bearstatus.oostwestsl.com
blog.care.ca
bearstatus.oostwestsl.com
care.ca
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
care.ca
covenanthousetorontoevents.ca
bearstatus.oostwestsl.com
care.ca
care.ca
care.ca
minerva.care.ca
care.ca
blog.care.ca
power.care.ca
minerva.care.ca
blog.care.ca
bearstatus.oostwestsl.com
www.care.ca
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
minerva.care.ca
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
staging.care.ca
power.care.ca
care.ca
care.ca
bearstatus.oostwestsl.com
blog.care.ca
webmail.care.ca
care.ca
bearstatus.oostwestsl.com
power.care.ca
bearstatus.oostwestsl.com
care.ca
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
care.ca
bearstatus.oostwestsl.com
care.ca
minerva.care.ca
bearstatus.oostwestsl.com
care.ca
care.ca
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
minerva.care.ca
power.care.ca
care2.wowsite.dev
power.care.ca
care.ca
care.ca
staging.care.ca
blog.care.ca
blog.care.ca
webmail.care.ca
power.care.ca
webmail.care.ca
minerva.care.ca
blog.care.ca
power.care.ca
power.care.ca
care.ca
care.ca
bearstatus.oostwestsl.com
minerva.care.ca
bearstatus.oostwestsl.com
bearstatus.oostwestsl.com
Certificate
The complete raw certificate details for care.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISA2Ky/dDGstZOx7avw+uco+V5MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTgxNjU5MDhaFw0y MDAxMTYxNjU5MDhaMBIxEDAOBgNVBAMTB2NhcmUuY2EwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQC7A0V2xH7vfjIHpWFaXMH4EsS3G2TwGJrJeOV+1A4+ /5oPPeWx+ldcLsJGzKMo/N8Y9yDRWPcpgqQ6rXl4q6qUZAHkanvmV8lJ3OzZ0wQo POh4L0H7qwVHtFC4iRF8KUqWI5fd17FyZcSNmmFDhcuC950TjmXETXjbozxqrvKI b0VW/Q7Kiy5Ltxyfb3/KosPM9I+rIB+fdDSao7uM3tT3Mu+Je3FrlkxG7eVgPsZA zUwa5vilQPia1lwdYPbnmYXgS+QbPSwQL8RCYJ3uAkLHwPd2WWt6QF77xQr/lWQ7 Cxvq/i0t16vVbTpb/mjr5P4OZC+1Lgs07V85JoKDIKtZAgMBAAGjggJrMIICZzAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFGKEtQ58Zy8DLbQ1IhVi7hkg6x6XMB8GA1Ud IwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggr BgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggr BgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHwYD VR0RBBgwFoIHY2FyZS5jYYILd3d3LmNhcmUuY2EwTAYDVR0gBEUwQzAIBgZngQwB AgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRz ZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwBep3P531bA57U2 SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW3gBfCMAAAEAwBIMEYCIQCAev8+Z9s7 fCm3saDRd4r3u8Y1VeJCS9IXE+CB6E7YqQIhAJitpmMT05azLty4IDoQZQDg45a7 xinPjO4rk8ubBZTyAHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4A AAFt4AXwYAAABAMASDBGAiEAzpUSWj9JqvLUO3F9No7o7MCzM2UY1fNm9NUgMVr/ sH0CIQCyn1vry3XaYjaS+kB++UKipLbZgurw8V5a31nhcuPM9zANBgkqhkiG9w0B AQsFAAOCAQEAH7LTZbkPM4LP0J5eu0r7oTwbT3emRDgU64UZ/xiZ9mkASSI7wABG X4WETtKt1/lzkQZxrmQnkgHuhH6m7E12dWjAdQsR90iPFHJ6c4TCclfKAvb2/VDE E2Hilv4oIpqrwHH8JXRF/lce5KNBDWfqee4hBUM6PuOohiPiKSaMnxq2FIdlxUSv 4oHDLR+BzTHcOnxTg2lXKjod7Dpa3yDjYeUPRWDG/a0kTbKzk3G3fTOGVpVlR9gM Dm8a7howf/sukoQyIRhljJjed2QsS2A8kT6KZmHgr0uVn/BN2t8rvMeUlKi/1fUS 3H3K4Cmruh6bCiCsNc6LgLRbEMHc1dfNTA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwNFdsR+734yB6VhWlzB +BLEtxtk8BiayXjlftQOPv+aDz3lsfpXXC7CRsyjKPzfGPcg0Vj3KYKkOq15eKuq lGQB5Gp75lfJSdzs2dMEKDzoeC9B+6sFR7RQuIkRfClKliOX3dexcmXEjZphQ4XL gvedE45lxE1426M8aq7yiG9FVv0OyosuS7ccn29/yqLDzPSPqyAfn3Q0mqO7jN7U 9zLviXtxa5ZMRu3lYD7GQM1MGub4pUD4mtZcHWD255mF4EvkGz0sEC/EQmCd7gJC x8D3dllrekBe+8UK/5VkOwsb6v4tLder1W06W/5o6+T+DmQvtS4LNO1fOSaCgyCr WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 294922450222371354847323341575791900353913 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 16:59:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 16:59:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'care.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23608176188255686933510126051139411520077275893595426902009525819708215393341576108457622984397306902930800358286796713221751402679868994036594766667982148396497384155987595186006201162080677139191137040535004445408620657236354480428094863196386205541167708238994853106166340637511520569684678141857785611322604202765861931220640192666593758076065927786508384168366052977389462887307994641529727813247501035577351368806800751795639254338325667535685706352199708013603077625876489747810545721294031760798143606391436172505957429835612558498954826120673733886741138193037160720138733691581453407755908142117076873554777 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6284b50e7c672f032db435221562ee1920eb1e97 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.care.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016de005f08c0000040300483046022100807aff3e67db3b7c29b7b1a0d1778af7bbc63555e2424bd21713e081e84ed8a902210098ada66313d396b32edcb8203a106500e0e396bbc629cf8cee2b93cb9b0594f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016de005f0600000040300483046022100ce95125a3f49aaf2d43b717d368ee8ecc0b3336518d5f366f4d520315affb07d022100b29f5bebcb75da623692fa407ef942a2a4b6d982eaf0f15e5adf59e172e3ccf7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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