seattle.cru.org
Issued by R3
About this certificate
This digital certificate with serial number 03:a8:db:53:19:af:50:2d:64:e8:16:af:ed:da:4b:09:d9:4b was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=seattle.cru.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a8:db:53:19:af:50:2d:64:e8:16:af:ed:da:4b:09:d9:4bSerial Number (int): 318795827850664538978831271973670798088523
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 41:67:03:93:06:92:a4:fd:3c:44:ba:ca:55:3c:75:76:9e:b1:e6:53
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 29:4a:2b:33:9c:88:48:a4:ee:df:7a:5b:ff:12:a9:b4:42:50:b7:43
Fingerprint (sha256): 89:e3:15:55:9c:1c:81:fe:41:f2:a3:96:cf:bb:7d:85:40:8c:a8:9b:fa:73:1e:84:e7:77:00:49:6a:dc:a0:25
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate seattle.cru.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for seattle.cru.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
seattle.cru.org
Other certificates including the domain name cru.org
(limited to 100 certificates)
*.cru.org
smetrics.cru.org
ml.cru.org
*.cru.org
sites-stage.cru.org
sites.cru.org
sites-stage.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
status.cru.org
*.lh.cru.org
sites-stage.cru.org
techhelp.cru.org
*.cru.org
*.cru.org
e.cru.org
sites-stage.cru.org
e.cru.org
sites.cru.org
techhelp.cru.org
ml.cru.org
ml.cru.org
*.cru.org
*.campuscontacts.cru.org
*.cru.org
ns1.lh.cru.org
smapp.cru.org
sites.cru.org
*.cru.org
*.cru.org
vip-wordpress.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
*.cru.org
*.cru.org
*.cru.org
smapp.cru.org
*.cru.org
sites.cru.org
hybridcall-e.cru.org
give-static-stage.cru.org
*.cru.org
*.cru.org
ns1.lh.cru.org
campuskgp.cru.org
*.lh.cru.org
sites-stage.cru.org
smetrics.cru.org
*.cru.org
jfprintshop.cru.org
*.cru.org
globalstaffweb.org
campuskgp.cru.org
sites.cru.org
*.cru.org
*.cru.org
www.give.cru.org
e.cru.org
*.cru.org
sites.cru.org
atlanta.cru.org
sites-stage.cru.org
*.cru.org
*.cru.org
*.cru.org
sites.cru.org
smetrics.cru.org
sites.cru.org
sites.cru.org
hybridcall-e.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
san-33-s12.tlsprovisioning.exacttarget.com
*.aws.cru.org
*.cru.org
author.cru.org
vip-wordpress.cru.org
*.cru.org
mhub.cc
seattle.cru.org
ml.cru.org
smetrics.cru.org
give-static-stage.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
*.cru.org
*.cru.org
vip-wordpress.cru.org
help.cru.org
sites.cru.org
*.cru.org
help.cru.org
vip-wordpress.cru.org
ibs.cru.org
*.cru.org
vip-wordpress.cru.org
*.cru.org
*.cru.org
*.cru.org
*.cru.org
ml.cru.org
*.lh.cru.org
sites-stage.cru.org
smapp.cru.org
smetrics.cru.org
ml.cru.org
*.cru.org
sites-stage.cru.org
sites.cru.org
sites-stage.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
status.cru.org
*.lh.cru.org
sites-stage.cru.org
techhelp.cru.org
*.cru.org
*.cru.org
e.cru.org
sites-stage.cru.org
e.cru.org
sites.cru.org
techhelp.cru.org
ml.cru.org
ml.cru.org
*.cru.org
*.campuscontacts.cru.org
*.cru.org
ns1.lh.cru.org
smapp.cru.org
sites.cru.org
*.cru.org
*.cru.org
vip-wordpress.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
*.cru.org
*.cru.org
*.cru.org
smapp.cru.org
*.cru.org
sites.cru.org
hybridcall-e.cru.org
give-static-stage.cru.org
*.cru.org
*.cru.org
ns1.lh.cru.org
campuskgp.cru.org
*.lh.cru.org
sites-stage.cru.org
smetrics.cru.org
*.cru.org
jfprintshop.cru.org
*.cru.org
globalstaffweb.org
campuskgp.cru.org
sites.cru.org
*.cru.org
*.cru.org
www.give.cru.org
e.cru.org
*.cru.org
sites.cru.org
atlanta.cru.org
sites-stage.cru.org
*.cru.org
*.cru.org
*.cru.org
sites.cru.org
smetrics.cru.org
sites.cru.org
sites.cru.org
hybridcall-e.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
san-33-s12.tlsprovisioning.exacttarget.com
*.aws.cru.org
*.cru.org
author.cru.org
vip-wordpress.cru.org
*.cru.org
mhub.cc
seattle.cru.org
ml.cru.org
smetrics.cru.org
give-static-stage.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
*.cru.org
*.cru.org
vip-wordpress.cru.org
help.cru.org
sites.cru.org
*.cru.org
help.cru.org
vip-wordpress.cru.org
ibs.cru.org
*.cru.org
vip-wordpress.cru.org
*.cru.org
*.cru.org
*.cru.org
*.cru.org
ml.cru.org
*.lh.cru.org
sites-stage.cru.org
smapp.cru.org
Certificate
The complete raw certificate details for seattle.cru.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISA6jbUxmvUC1k6Bav7dpLCdlLMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA3MDgxMzA5MzFaFw0yMzEwMDYxMzA5MzBaMBoxGDAWBgNVBAMT D3NlYXR0bGUuY3J1Lm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB ALVUH1Hvaxz4/aDJBGzuUa3CuWy7PtJs/9KftmzmL/ZZe3ko8JTrU7949t4MIS+S 6rkYf75z75r3wBTk1ItGxQJyoGW0bJwo+B6q1lTyrH3MBlS4Zwv+51oDinmdoCxi RwgYPEVSp2RTTcBRdQxk4mRIHeG1NkyK1GRSdT00H4FMMzax8jkaMYw1qSbvYiBS kSRxqP7tXXcZOufdKZJnY2bCbwKCfM1NEwP27j3YEA62M7Vbj++LgVpWODuM6kH4 FynlYH1wbBQSkqVX2lmHx0zao3NDgFPh03Pp7Do9wqUCmLbasRRWWt44ADBY91ud 4aDlPz7TZilQUxbBNHkpza8JRkmQRgcy4Eun4Dej7klXhha44iNjhBYGktD4QbqF RXcrVOBOMZPd8uv9hiJyRoa26LEV6GvNSL2IJooc0levSYcQRYBE652qnvNW2mda zylrj8sxBIUdo/in8hIWrFH1qMMIKUqVWCJaPdQXOkVlV69P9VvKhvwPREzEO0Jp 85VH4X21vw2xRXkaN2Vb8W3ubFbFbKVLKMXtrhthBSVnBCFRhpPN6MoIndqJOnJ1 gc5Hd94c6wuz812aXog8NXmmYUMmnUQSt0Lp+54XsuOUqKy+875e5DkUDxpXFrdK RD7HkPTyUSHSoYtrWxsd/ni5qk3gy7V1fi6kkvfDnRu3AgMBAAGjggIRMIICDTAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFEFnA5MGkqT9PES6ylU8dXaeseZTMB8GA1Ud IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw Oi8vcjMuaS5sZW5jci5vcmcvMBoGA1UdEQQTMBGCD3NlYXR0bGUuY3J1Lm9yZzAT BgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AHoy jFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiTXWG9MAAAQDAEYwRAIg KCBBQ2J6wj6PQIFjg+BhyuBlsthALXGn4I8UFLdpKmwCIC5jD94VFSUIpFBqUIFI pX+GlfGcEGlfvHubwNTQz6VOAHcArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWG NOvcgooAAAGJNdYcUQAABAMASDBGAiEAsQnYjNQUf5GTEXpv1eY0oy+IiBkQ556Y F3MJKEDq9MQCIQD2Cphz9b1zJQqB3ow890AUlhNNNFaIUae5nquGIMYLGjANBgkq hkiG9w0BAQsFAAOCAQEAatFswpQbCngy7MV5nFVgVKM1k0yONwLIr+mBEs3kIZ35 xldRxvPN12tEHrN6Nn3/xyuwRdObEqhwPDKYYFSLOBMaYIPKJIFPEdOz33UqvYlU cP3me8R1cUyeClkYaGH8c0tN5leV0qtG7korNHVnRelq/9D8M526Dhzi8vS1Yop4 N1khv/UR6fNOpnnjIjiMSpz5V5FsR7IDnnK+utb5qlBTNMBJ0BW7khRu5SszROyj NUmjLSdVlszkkrMA7Aa5CZqpObApCXfLeZDQb04UQtsVhDxhij7muJ5irDrtDCt6 /dja/aMy8t0JoxdO03WNu9UShX0C+8GRZpWDsBbV0w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtVQfUe9rHPj9oMkEbO5R rcK5bLs+0mz/0p+2bOYv9ll7eSjwlOtTv3j23gwhL5LquRh/vnPvmvfAFOTUi0bF AnKgZbRsnCj4HqrWVPKsfcwGVLhnC/7nWgOKeZ2gLGJHCBg8RVKnZFNNwFF1DGTi ZEgd4bU2TIrUZFJ1PTQfgUwzNrHyORoxjDWpJu9iIFKRJHGo/u1ddxk6590pkmdj ZsJvAoJ8zU0TA/buPdgQDrYztVuP74uBWlY4O4zqQfgXKeVgfXBsFBKSpVfaWYfH TNqjc0OAU+HTc+nsOj3CpQKYttqxFFZa3jgAMFj3W53hoOU/PtNmKVBTFsE0eSnN rwlGSZBGBzLgS6fgN6PuSVeGFrjiI2OEFgaS0PhBuoVFdytU4E4xk93y6/2GInJG hrbosRXoa81IvYgmihzSV69JhxBFgETrnaqe81baZ1rPKWuPyzEEhR2j+KfyEhas UfWowwgpSpVYIlo91Bc6RWVXr0/1W8qG/A9ETMQ7QmnzlUfhfbW/DbFFeRo3ZVvx be5sVsVspUsoxe2uG2EFJWcEIVGGk83oygid2ok6cnWBzkd33hzrC7PzXZpeiDw1 eaZhQyadRBK3Qun7nhey45SorL7zvl7kORQPGlcWt0pEPseQ9PJRIdKhi2tbGx3+ eLmqTeDLtXV+LqSS98OdG7cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 318795827850664538978831271973670798088523 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 13:09:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 13:09:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'seattle.cru.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 739756159208578910755073327683152273305094023914402007329942410703652035540079642766873700684885078245380422420802259687693161433320834557694677995842843195786624186557428142717610795344806000374360226610552318489414971892164824873660221027497650015399478545249203872702582581794246910643796393027912946754493338627063089097240918718426955876059270770499735033888771378252859355807353961216752349946891870109402484397484010348148628386662537283856471743971001498660069354520115805911217655517986700810205131581384438168083044016133617189565161109672252902241436632782998129499214465443597827401003730592600824219388604839768909657653694820173800384470017104937655938984817992803964380509554731672935312109283314929613834850177271392558813380601039635188764332810457249314969032508364938109781637820227101988777471188703305721833130216951531805657678622547473843326191139365114229453302345174068618314226095289302574650144535335845054032706896790702173994560597764843464431426457443539346101555529692238894449866645179927676705124631148751932666173317031795424302433364832022970035752068099952062499832552595043246617386043270425934780512033689339616325475304047001947858477134718144340272502006928009140935955362549427886516445453239 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 416703930692a4fd3c44baca553c75769eb1e653 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattle.cru.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018935d61bd30000040300463044022028204143627ac23e8f40816383e061cae065b2d8402d71a7e08f1414b7692a6c02202e630fde15152508a4506a508148a57f8695f19c10695fbc7b9bc0d4d0cfa54e007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018935d61c510000040300483046022100b109d88cd4147f9193117a6fd5e634a32f88881910e79e981773092840eaf4c4022100f60a9873f5bd73250a81de8c3cf7401496134d34568851a7b99eab8620c60b1a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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