*.kubity.com
Issued by R3
About this certificate
This digital certificate with serial number 03:6c:21:c5:74:26:9c:61:19:02:ac:60:d9:03:02:0b:c9:52 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.kubity.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6c:21:c5:74:26:9c:61:19:02:ac:60:d9:03:02:0b:c9:52Serial Number (int): 298132243184902708823345725433449672329554
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b5:b5:a3:92:f0:5f:58:31:ad:29:ae:c1:44:93:64:bf:3e:00:c2:d7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 94:53:12:42:14:11:d9:91:51:ce:b5:2e:c0:e1:6b:0a:5d:00:b1:82
Fingerprint (sha256): 88:9f:fd:44:b1:c5:ef:e1:bb:ee:43:00:35:db:89:b6:1d:d0:25:c0:b3:d1:2c:79:b7:a0:f7:2f:86:b2:46:97
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.kubity.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.kubity.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.kubity.com
*.rvt2skp.com
*.spktechnology.com
*.rvt2skp.com
*.spktechnology.com
Other certificates including the domain name kubity.com
(limited to 100 certificates)
ghouse.zedext.com
tls.automattic.com
tls.automattic.com
play29.com
deckf.org
tls.automattic.com
tls.automattic.com
preprod.mirror.kubity.com
helios.vade.ai
geccele.tech
app.kubity.com
sri.mandirr.com
mirror.kubity.com
www.kubity.com
preprod.mirror.kubity.com
www.newjoshicateringservice.com
preprod.mirror.kubity.com
mirror.kubity.com
about.kubity.com
farmart.com.au
*.kubity.com
getsleeptimer.com
tls.automattic.com
app.kubity.com
*.kubity.com
preprod.mirror.kubity.com
pro.kubity.com
pro.kubity.com
mirror.kubity.com
*.kubity.com
*.platform.kubity.com
*.preprod.kubity.com
pricingdev.corp-internal.rxo.com
*.kubity.com
tls.automattic.com
tls.automattic.com
mirror.kubity.com
tls.automattic.com
mirror.kubity.com
about.kubity.com
*.kliporchestrator.kubity.com
dulux.o4s.io
about.kubity.com
a0a2.foodle.su
pro.kubity.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
mannfriday.com
mirror.kubity.com
tls.automattic.com
tls.automattic.com
*.kubity.com
duelingground.swingteam6.com
pro.kubity.com
auth3.hiddenlogin.com
www.fisicolega.com
www.germanmutualia.com
dev.admin.kubity.com
preprod.kubity.com
rxodmsmain.corp-internal.rxo.com
pro.kubity.com
*.kubity.com
tls.automattic.com
*.kubity.com
www.biryanijunctionpa.com
course.emipd.tw
pro.kubity.com
pro.kubity.com
*.kliporchestrator.kubity.com
www.epayindia.com
helios.vade.ai
tls.automattic.com
pro.kubity.com
www.sheremetiev.pro
backend.kubity.com
tls.automattic.com
shangjunjiang.com
preprod.kubity.com
tls.automattic.com
deckf.org
mirror.kubity.com
tls.automattic.com
tls.automattic.com
mirror.kubity.com
maskmydata.com
*.mirror.kubity.com
tls.automattic.com
app.kubity.com
go.kubity.com
mirror.kubity.com
tls.automattic.com
preprod.mirror.kubity.com
tls.automattic.com
about.kubity.com
preprod.kubity.com
tls.automattic.com
tls.automattic.com
pro.kubity.com
pro.kubity.com
tls.automattic.com
tls.automattic.com
play29.com
deckf.org
tls.automattic.com
tls.automattic.com
preprod.mirror.kubity.com
helios.vade.ai
geccele.tech
app.kubity.com
sri.mandirr.com
mirror.kubity.com
www.kubity.com
preprod.mirror.kubity.com
www.newjoshicateringservice.com
preprod.mirror.kubity.com
mirror.kubity.com
about.kubity.com
farmart.com.au
*.kubity.com
getsleeptimer.com
tls.automattic.com
app.kubity.com
*.kubity.com
preprod.mirror.kubity.com
pro.kubity.com
pro.kubity.com
mirror.kubity.com
*.kubity.com
*.platform.kubity.com
*.preprod.kubity.com
pricingdev.corp-internal.rxo.com
*.kubity.com
tls.automattic.com
tls.automattic.com
mirror.kubity.com
tls.automattic.com
mirror.kubity.com
about.kubity.com
*.kliporchestrator.kubity.com
dulux.o4s.io
about.kubity.com
a0a2.foodle.su
pro.kubity.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
mannfriday.com
mirror.kubity.com
tls.automattic.com
tls.automattic.com
*.kubity.com
duelingground.swingteam6.com
pro.kubity.com
auth3.hiddenlogin.com
www.fisicolega.com
www.germanmutualia.com
dev.admin.kubity.com
preprod.kubity.com
rxodmsmain.corp-internal.rxo.com
pro.kubity.com
*.kubity.com
tls.automattic.com
*.kubity.com
www.biryanijunctionpa.com
course.emipd.tw
pro.kubity.com
pro.kubity.com
*.kliporchestrator.kubity.com
www.epayindia.com
helios.vade.ai
tls.automattic.com
pro.kubity.com
www.sheremetiev.pro
backend.kubity.com
tls.automattic.com
shangjunjiang.com
preprod.kubity.com
tls.automattic.com
deckf.org
mirror.kubity.com
tls.automattic.com
tls.automattic.com
mirror.kubity.com
maskmydata.com
*.mirror.kubity.com
tls.automattic.com
app.kubity.com
go.kubity.com
mirror.kubity.com
tls.automattic.com
preprod.mirror.kubity.com
tls.automattic.com
about.kubity.com
preprod.kubity.com
tls.automattic.com
tls.automattic.com
pro.kubity.com
pro.kubity.com
Certificate
The complete raw certificate details for *.kubity.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISA2whxXQmnGEZAqxg2QMCC8lSMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA4MzAxMTQ4NThaFw0yMTExMjgxMTQ4NTdaMBcxFTATBgNVBAMM DCoua3ViaXR5LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ3P 4ZVCzhNs+p/ShQOzmmXJcAs61uovRnQX7VQbP3cvXAzRDgSpXs9HS6ph+gQS6WDs XLEDtgNHj1ki3VvjuLp2Vvx2qsuDknFw/mDi8/vyCBQ2wyWZY7Q7fE1T8X4sTfxt eRl5smnO0+69W+n5kFE52Svl6dUCpj+x4rbMO9odkRrrhzz7yl2sUMDmazJ0mrSA h/HWnrzDooqeVQs8ap/WaXvwelMu8cAfC5/lgyGUczsGVQOPGirm1KGpsVvE/Uu0 Cfly9sx4CHidP8jDvAUZixFzakyarhWsJvo8oQCW4Hd759OmDFL1X7ZVxbuDuQR+ DnMQKEbB6UVOizf8ZmcCAwEAAaOCAmswggJnMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUtbWjkvBfWDGtKa7BRJNkvz4AwtcwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w OwYDVR0RBDQwMoIMKi5rdWJpdHkuY29tgg0qLnJ2dDJza3AuY29tghMqLnNwa3Rl Y2hub2xvZ3kuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYK KwYBBAHWeQIEAgSB9QSB8gDwAHYAlCC8Ho7VjWyIcx+CiyIsDdHaTV5sT5Q9YdtO L1hNosIAAAF7lxsRlQAABAMARzBFAiEApQhRcNzhi4bU7WRHsdLOqYv9SVXeXdgS ZOrtxmsieD4CIASpJTLTYCkPDGJ6hYLZD1KCSrvS2TPksze17AG8rENbAHYA9lyU L9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAF7lxsTewAABAMARzBFAiEA 3Mh/6DA1xvCr1JY18q1+AaZuvCYz/OYA1PeUog0er4kCIGj7MmLgFiPysl4DGR7v MgTzl7cBqkcLFXuhMdgOxQ1JMA0GCSqGSIb3DQEBCwUAA4IBAQA/duR17eArdsum 3XfYGB8YyL8eIqnQGjE7ufW4oCcRQ+6qR3sGAq2UI7MwEcnX8KOlh0lqDVHN87W1 91vZBHdu19fkp5ws/LNZvO1pcTq2V7orPZ5H6aaSLeWmCPBOj/mKYVUk1orJqJLi 7l796AZGyDk7t5zy1Dh+x+HfUnDmgpUZE11Z9FaEuKQ7kwYMvWB4AYOpBgCj9ltd jBG42AK+hpdr2c9izgTb4M2LCFQVAh+bMD0O+sJGs9WYnJdygLU36ea1uy4X6Wt+ 77NDn566MMCY6GV7Lj/UNd2LqLS2pzcODuocqsweJ61wvAcgu2xuCb/k211Kg0QE OagyOmAV -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc/hlULOE2z6n9KFA7Oa ZclwCzrW6i9GdBftVBs/dy9cDNEOBKlez0dLqmH6BBLpYOxcsQO2A0ePWSLdW+O4 unZW/Haqy4OScXD+YOLz+/IIFDbDJZljtDt8TVPxfixN/G15GXmyac7T7r1b6fmQ UTnZK+Xp1QKmP7Hitsw72h2RGuuHPPvKXaxQwOZrMnSatICH8daevMOiip5VCzxq n9Zpe/B6Uy7xwB8Ln+WDIZRzOwZVA48aKubUoamxW8T9S7QJ+XL2zHgIeJ0/yMO8 BRmLEXNqTJquFawm+jyhAJbgd3vn06YMUvVftlXFu4O5BH4OcxAoRsHpRU6LN/xm ZwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 298132243184902708823345725433449672329554 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-30 11:48:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-28 11:48:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kubity.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19921923911999997888173295164857405866722517723875540863862862123346881096080406171540610841889914586858622372149067407088563791288142716217623155578888541901882258004052122579798302046730281529115042041718632340580738280006693911153654038293387037663501572116734742557449279574110686622042110455715287884232183457039724171982640650966953813987841131454073503226749346846832087073156087238957857600882386944225330599292180039244796656698655286036586471534858106705885563193401736094968033034280731039556367283779768364546180479085927196580052434910091961664277460834313106900355972057640232653825839557549870649468519 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b5b5a392f05f5831ad29aec1449364bf3e00c2d7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kubity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rvt2skp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spktechnology.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017b971b11950000040300473045022100a5085170dce18b86d4ed6447b1d2cea98bfd4955de5dd81264eaedc66b22783e022004a92532d360290f0c627a8582d90f52824abbd2d933e4b337b5ec01bcac435b007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017b971b137b0000040300473045022100dcc87fe83035c6f0abd49635f2ad7e01a66ebc2633fce600d4f794a20d1eaf89022068fb3262e01623f2b25e03191eef3204f397b701aa470b157ba131d80ec50d49 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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