*.paxitalia.com
Issued by Actalis Domain Validation Server CA G1
About this certificate
This digital certificate with serial number 32:b6:2c:45:48:61:fc:4a was issued on by Actalis S.p.A./03358520967.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.paxitalia.com,OU=Domain Control Validated by Actalis S.p.A.
Actalis S.p.A./03358520967
Organization:
Actalis S.p.A./03358520967
State / Province:
Bergamo
Locality: Ponte San Pietro
Country: IT
Locality: Ponte San Pietro
Country: IT
This certificate has expire since
Certificate Details
Serial Number (hex): 32:b6:2c:45:48:61:fc:4aSerial Number (int): 3654156823736482890
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: b3:0e:69:66:1b:82:ad:04:24:5a:32:82:22:c2:ce:90:12:12:9f:55
AuthorityKeyId: 1b:42:7f:5c:45:7e:ff:7e:1e:1e:41:9c:f3:ad:ae:35:c6:65:eb:c5
Fingerprint (sha1): 9c:61:55:02:e1:9a:1b:17:39:b8:c4:cd:6b:1c:07:4e:d2:43:41:88
Fingerprint (sha256): 8a:f1:0a:f6:b4:37:9c:21:29:d5:db:85:ca:17:16:d1:16:71:d4:f9:c4:b2:be:ad:d2:4e:58:0b:69:a6:30:5b
Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg1
Revocation information
OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G1CRL Distribution Point: ldap://ldap06.actalis.it/cn%3dActalis%20Domain%20Validation%20Server%20CA%20G1,o%3dActalis%20S.p.A./03358520967,c%3dIT?certificateRevocationList;binary
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G1/getLastCRL
Check the revocation status for certificate *.paxitalia.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.paxitalia.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
paxitalia.com
*.paxitalia.com
*.paxitalia.com
Other certificates including the domain name paxitalia.com
(limited to 100 certificates)
www.arcadenoecj.com.br
*.paxitalia.com
referral.khome.com.my
*.paxitalia.com
citycare.resident.love
*.paxitalia.com
links.thehungrybull.com
*.paxitalia.com
console-paxhub.paxitalia.com
www.kishormahrzn.com.np
www.neme.ga
*.paxitalia.com
www.scientific-arts.ca
staging.patient.onecharthealth.com
*.paxitalia.com
*.paxitalia.com
referral.khome.com.my
*.paxitalia.com
citycare.resident.love
*.paxitalia.com
links.thehungrybull.com
*.paxitalia.com
console-paxhub.paxitalia.com
www.kishormahrzn.com.np
www.neme.ga
*.paxitalia.com
www.scientific-arts.ca
staging.patient.onecharthealth.com
*.paxitalia.com
Certificate
The complete raw certificate details for *.paxitalia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG2zCCBcOgAwIBAgIIMrYsRUhh/EowDQYJKoZIhvcNAQELBQAwgZAxCzAJBgNV BAYTAklUMRAwDgYDVQQIDAdCZXJnYW1vMRkwFwYDVQQHDBBQb250ZSBTYW4gUGll dHJvMSMwIQYDVQQKDBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzEvMC0GA1UE AwwmQWN0YWxpcyBEb21haW4gVmFsaWRhdGlvbiBTZXJ2ZXIgQ0EgRzEwHhcNMTgw NjE4MDg1MDU0WhcNMTkwNjE4MDg1MDU0WjBPMTMwMQYDVQQLDCpEb21haW4gQ29u dHJvbCBWYWxpZGF0ZWQgYnkgQWN0YWxpcyBTLnAuQS4xGDAWBgNVBAMMDyoucGF4 aXRhbGlhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK8i+ZYh kSBnGyNUnVCCmbeEl7T8ZJi9/c5FUxN6vm7s+i2mS5sLNTEnVqY1nBlWHH63XkYE DklZa9xDOGiMPuefbFXD9m/dzp9SQNiuxLRaKZvphcqvzQOWP4oMPK5Yeqquv5vp szrDMlpGePCPQ/nLy4oApjyuLs3dI7j2UqBd7kmvrRyVjo0BKR1ThXUToOw4p6Ep eXHlsoDzBivtf3gcmimD4r3HuThqQg/CXYCZwsTBLtSnVQT/oQQ5jCKjTL/iv8Su AKvjHmHNrHCZsh/VICy+WhjrJ2q0IdKeEKibaJBAdeuRhEPhJpTQdsCbG/g9WLEg cR+8jE5FDeGAuokCAwEAAaOCA3cwggNzMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgw FoAUG0J/XEV+/34eHkGc862uNcZl68UwfQYIKwYBBQUHAQEEcTBvMDoGCCsGAQUF BzAChi5odHRwOi8vY2FjZXJ0LmFjdGFsaXMuaXQvY2VydHMvYWN0YWxpcy1hdXRk dmcxMDEGCCsGAQUFBzABhiVodHRwOi8vb2NzcDA2LmFjdGFsaXMuaXQvVkEvQVVU SERWLUcxMCkGA1UdEQQiMCCCDXBheGl0YWxpYS5jb22CDyoucGF4aXRhbGlhLmNv bTBRBgNVHSAESjBIMDwGBiuBHwEXATAyMDAGCCsGAQUFBwIBFiRodHRwczovL3d3 dy5hY3RhbGlzLml0L2FyZWEtZG93bmxvYWQwCAYGZ4EMAQIBMB0GA1UdJQQWMBQG CCsGAQUFBwMCBggrBgEFBQcDATCB7QYDVR0fBIHlMIHiMIGgoIGdoIGahoGXbGRh cDovL2xkYXAwNi5hY3RhbGlzLml0L2NuJTNkQWN0YWxpcyUyMERvbWFpbiUyMFZh bGlkYXRpb24lMjBTZXJ2ZXIlMjBDQSUyMEcxLG8lM2RBY3RhbGlzJTIwUy5wLkEu LzAzMzU4NTIwOTY3LGMlM2RJVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0O2Jp bmFyeTA9oDugOYY3aHR0cDovL2NybDA2LmFjdGFsaXMuaXQvUmVwb3NpdG9yeS9B VVRIRFYtRzEvZ2V0TGFzdENSTDAdBgNVHQ4EFgQUsw5pZhuCrQQkWjKCIsLOkBIS n1UwDgYDVR0PAQH/BAQDAgWgMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAb1N2 rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFkEiApOwAABAMASDBGAiEA ggL7nejngTbxhFBmT2pFo5M5REV4o70W0AzDZAPTeNcCIQCzd8ebnrVxMyi2zQX6 XjjZd1c3N6xGO5dd1wiQ8yO+cgB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDE e4l6qP3LAAABZBIgKLYAAAQDAEcwRQIhAI2gGA4oTLrW9yZqblLF5COTTzl/QMRF 0j/jZNftD8F9AiAGMWwms4Q9TbwJQtFeY8NEtDyx3Pr/a/IZPVg08XScpzANBgkq hkiG9w0BAQsFAAOCAQEAKC7zQeFmbBwC7Izz5rXGfkRYkZaDb5wF3WuY9Ts+57Sy 22X8oUdaCro20ElqGw7g9zEGENqRLh9g17HKfdljKeLz1NtN/4hs7VthzBKvMZ7u bn2cpPVdDOdaSfEvqSVszKbWVxzOrgglInaLSGfCyVXy5dZSld2/RIPu2lM7X46F E77Jy1GdSKuInuBekxXoGldD8ufgkU0J4IatrNYK3FostRhFhMyyQM+5OpiMbNXi dvVXE1JdKkSobHtlzmWzcDhJ1XHgSw7lv+SnVD7B9Qs1aLKyJ/56w9muk7E9yo3U RcqgJrBbkMSDA8gzR3ejKFV8JIbv7ld+MUqc+sHpqA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryL5liGRIGcbI1SdUIKZ t4SXtPxkmL39zkVTE3q+buz6LaZLmws1MSdWpjWcGVYcfrdeRgQOSVlr3EM4aIw+ 559sVcP2b93On1JA2K7EtFopm+mFyq/NA5Y/igw8rlh6qq6/m+mzOsMyWkZ48I9D +cvLigCmPK4uzd0juPZSoF3uSa+tHJWOjQEpHVOFdROg7DinoSl5ceWygPMGK+1/ eByaKYPivce5OGpCD8JdgJnCxMEu1KdVBP+hBDmMIqNMv+K/xK4Aq+MeYc2scJmy H9UgLL5aGOsnarQh0p4QqJtokEB165GEQ+EmlNB2wJsb+D1YsSBxH7yMTkUN4YC6 iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3654156823736482890 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-18 08:50:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 08:50:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domain Control Validated by Actalis S.p.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.paxitalia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22108950158256669552911453588400194813243649585890126709673992524843679728684624150710479206175650287670744958113958511277382678974565386921885597839655478275710908292688294686499934546958444453589458118224342640593658723523960907722986024803297746891027140529908538449556678146143886153446758513714000757155563110184843681056074768037337625376256022412406549639507609913918202415070394922978915962512673816326458723777229969387679016981072316899581989521434476537815836726711563466066844310070055778024810667229399505654540194785972834487630547129417243132969339158988270052349421337412084099251229097903253297871497 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1b427f5c457eff7e1e1e419cf3adae35c665ebc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg1' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G1' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paxitalia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paxitalia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (229 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap06.actalis.it/cn%3dActalis%20Domain%20Validation%20Server%20CA%20G1,o%3dActalis%20S.p.A./03358520967,c%3dIT?certificateRevocationList;binary' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G1/getLastCRL' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b30e69661b82ad04245a328222c2ce9012129f55 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001641220293b00000403004830460221008202fb9de8e78136f18450664f6a45a39339444578a3bd16d00cc36403d378d7022100b377c79b9eb5713328b6cd05fa5e38d977573737ac463b975dd70890f323be72007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000164122028b600000403004730450221008da0180e284cbad6f7266a6e52c5e423934f397f40c445d23fe364d7ed0fc17d022006316c26b3843d4dbc0942d15e63c344b43cb1dcfaff6bf2193d5834f1749ca7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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