mvonederland.nl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:06:b6:7f:6b:c8:59:39:13:1b:f8:87:2f:c1:58:fa:95:16 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mvonederland.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:06:b6:7f:6b:c8:59:39:13:1b:f8:87:2f:c1:58:fa:95:16Serial Number (int): 263621133099831332591097616635701717800214
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 96:92:00:89:99:d0:25:05:ab:8f:51:81:91:46:f7:77:a1:33:8b:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c6:79:31:6d:0d:45:e8:e6:d4:93:4e:b8:77:48:28:92:04:37:83:5d
Fingerprint (sha256): 91:12:fd:ca:f0:c1:fc:7f:b8:fa:8d:f6:d0:65:56:a3:aa:55:a1:d7:ab:c5:a6:de:ad:b9:a3:20:e2:68:2f:64
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate mvonederland.nl
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mvonederland.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mvonederland.nl
mvowebsite.testjeapplicatie.nl
www.mvonederland.nl
mvowebsite.testjeapplicatie.nl
www.mvonederland.nl
Other certificates including the domain name mvonederland.nl
(limited to 100 certificates)
mvonederland.nl
www.mvonederland.nl
webmail.mvonederland.nl
www.mvonederland.nl
www.mvonederland.nl
handtekening.mvonederland.nl
mvonederland.nl
accp.mvonederland.nl
redirects.mvonederland.nl
redirects.mvonederland.nl
www.mvonederland.nl
mvonederland.nl
*.mvonederland.nl
accp.mvonederland.nl
redirects.mvonederland.nl
handtekening.mvonederland.nl
redirects.mvonederland.nl
mvonederland.nl
redirects.mvonederland.nl
accp.mvonederland.nl
mvonederland.nl
webmail.mvonederland.nl
mvonederland.nl
mvonederland.nl
redirects.mvonederland.nl
mvonederland.nl
redirects.mvonederland.nl
accp.mvonederland.nl
www.mvonederland.nl
accp.mvonederland.nl
redirects.mvonederland.nl
mvonederland.nl
handtekening.mvonederland.nl
mvonederland.nl
www.mvonederland.nl
www.mvonederland.nl
mvonederland.nl
mvonederland.nl
webmail.mvonederland.nl
mvonederland.nl
handtekening.mvonederland.nl
www.mvonederland.nl
webmail.mvonederland.nl
www.mvonederland.nl
www.mvonederland.nl
handtekening.mvonederland.nl
mvonederland.nl
accp.mvonederland.nl
redirects.mvonederland.nl
redirects.mvonederland.nl
www.mvonederland.nl
mvonederland.nl
*.mvonederland.nl
accp.mvonederland.nl
redirects.mvonederland.nl
handtekening.mvonederland.nl
redirects.mvonederland.nl
mvonederland.nl
redirects.mvonederland.nl
accp.mvonederland.nl
mvonederland.nl
webmail.mvonederland.nl
mvonederland.nl
mvonederland.nl
redirects.mvonederland.nl
mvonederland.nl
redirects.mvonederland.nl
accp.mvonederland.nl
www.mvonederland.nl
accp.mvonederland.nl
redirects.mvonederland.nl
mvonederland.nl
handtekening.mvonederland.nl
mvonederland.nl
www.mvonederland.nl
www.mvonederland.nl
mvonederland.nl
mvonederland.nl
webmail.mvonederland.nl
mvonederland.nl
handtekening.mvonederland.nl
Certificate
The complete raw certificate details for mvonederland.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGijCCBXKgAwIBAgISAwa2f2vIWTkTG/iHL8FY+pUWMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTkxMDAxMzZaFw0x OTEwMTcxMDAxMzZaMBoxGDAWBgNVBAMTD212b25lZGVybGFuZC5ubDCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBANLrnDP6SuzQbXFssrANarBTY1EclBr/ AJub+Evb0PN2z9gkKyUYhnx8sVE35JRd3Cda6cd9B0Eb2xVT2FTnZJEeaF9vFuy5 NQMO71vgPVg8T1oymNMt7T0xDLqqnhdoaPjRiwWIy7aRf+49O2eiGnIl9onbzUSX eXWkX/UARFzdmVcCKiyayki4bCbesj1qKQWCmXWD53rc03vwBVGohfrtHbGtuGWL MbMxMBxCY0BYdeNZ+fX7evpY3iFSZEs0cXHLxWJWPNCs62oG/DFR/7lB1SYPYJS9 5sefAshzP0vmgy4J0z31hOcKGaZ2/yGkgDvNDuWCOz7dFGAp8SVcAIkwXKUIqjHt 0mS8sTsjT2HhiyULefLzHmOkOC7nt9wLrIHJEmB4dngp0jnn6sMCngWfC0KN5njG +DbvUu7CtvWzORQAOAExfis5cnJfPc8BhuQcpQHM3Of0FdwWKziW1mC0hCVvA7WP CXJnLHpPc3ahTMZyG5n0kcrC0iGOyPboNss0Hcf8WBs1lRDAI41V7AE5kdbCy5L0 C13VKjoBwfv1gOjV/EWaMwX63DgljqrGK+0se6WOo4nLFNHlPM8zv5i1hbXLH+M1 nKUXOumKur9i3PKz/cs83BOXK6zHjiwFt8sDgk6OOrXcVp8Fn3RpU8silwzh0Ab7 8lvTRYwbTCl3AgMBAAGjggKYMIIClDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJaS AImZ0CUFq49RgZFG93ehM4vCMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wTwYDVR0RBEgwRoIPbXZvbmVkZXJsYW5kLm5s gh5tdm93ZWJzaXRlLnRlc3RqZWFwcGxpY2F0aWUubmyCE3d3dy5tdm9uZWRlcmxh bmQubmwwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5 AgQCBIH0BIHxAO8AdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAA AWwJ5PffAAAEAwBHMEUCIQDDUTCZbVLyjh+66OfbEnbE6rffl6WRt31lH/WvgH+C DAIgOnFrhA1A3AL3chXfAyDsrr/Bjd4OkRdbXhW0eyMwTy0AdQBj8tvN6DvMLM8L coQnV2szpI1hd4+9daY4scdoVEvYjQAAAWwJ5Pn3AAAEAwBGMEQCIAW89sEE1WEl GIFWsef7r+Bp9FeBAc0BdQBHXFAxhh+mAiACqDG/6Y6RoeLMESkKYO0A9z1hRIei XbJEeKp7MPLuHzANBgkqhkiG9w0BAQsFAAOCAQEAjk8IhzB0EtCpAsgQflxplkk6 0OqVAKlggZ6FxBK1AHuCIKG0TNMlCuhNL6ard0M3BSIXLkLtaWYu8myG83fAL6vB ARm4H/5PBLEeI2nW0olQK+yuhR3HWEcyzw/lRJ0nMDwFYR5TNTXI5QMI3Naw38yP QVnlLxQC1HJHPPGv2RZu1J1Z+9Colobh4lv74paQFzS5shwFLFLO09Rklt/th409 yrOm6PxtGPbmJ0xvAG51h3fz0giGjnSD6lxMw/IS6L868IQ0rxxVoneRc4pgitXk 6RGhRS+Re2z23G3Yo9WPx5QDX3RxKLo644rjcwyeIl4BV3mBHRD7xkd3xDSZUg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0uucM/pK7NBtcWyysA1q sFNjURyUGv8Am5v4S9vQ83bP2CQrJRiGfHyxUTfklF3cJ1rpx30HQRvbFVPYVOdk kR5oX28W7Lk1Aw7vW+A9WDxPWjKY0y3tPTEMuqqeF2ho+NGLBYjLtpF/7j07Z6Ia ciX2idvNRJd5daRf9QBEXN2ZVwIqLJrKSLhsJt6yPWopBYKZdYPnetzTe/AFUaiF +u0dsa24ZYsxszEwHEJjQFh141n59ft6+ljeIVJkSzRxccvFYlY80Kzragb8MVH/ uUHVJg9glL3mx58CyHM/S+aDLgnTPfWE5woZpnb/IaSAO80O5YI7Pt0UYCnxJVwA iTBcpQiqMe3SZLyxOyNPYeGLJQt58vMeY6Q4Lue33AusgckSYHh2eCnSOefqwwKe BZ8LQo3meMb4Nu9S7sK29bM5FAA4ATF+Kzlycl89zwGG5BylAczc5/QV3BYrOJbW YLSEJW8DtY8Jcmcsek9zdqFMxnIbmfSRysLSIY7I9ug2yzQdx/xYGzWVEMAjjVXs ATmR1sLLkvQLXdUqOgHB+/WA6NX8RZozBfrcOCWOqsYr7Sx7pY6jicsU0eU8zzO/ mLWFtcsf4zWcpRc66Yq6v2Lc8rP9yzzcE5crrMeOLAW3ywOCTo46tdxWnwWfdGlT yyKXDOHQBvvyW9NFjBtMKXcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 263621133099831332591097616635701717800214 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-19 10:01:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 10:01:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mvonederland.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 860479963755801371638564978481491769436422446650783500622357348567530957794927053436808699600631293101266897395334847197821070300275167671265145240898106278342413551418793552412188195649931920082863118031911499979417752456733630382306905730279743480640699171016294526472028459183027936031718986456009160699244646461533825486162335043812449582031815538711257101987069707470979926590586648335855834387326641484912781640665432650728284864757728934201753234701128761380579873803174572038431223574597535720667054577646519130271111290358177116100390675326555597432116490450115854982079684127884713802139185879285692002748265661378026049988578107432247655438476996883720896109412393440480923370534755268602731404956166467850018135151758026367954216624069453963739858558306988592313927139896358107256280196180489597515127959712322128504987020724675413139470813142496162073597144681689055429151108351651635327118715235109586324761764245766281328578060680659048115960176785449099627319892654595547533932007020848782606208717083768212447161642122150915202899907141011990568910173042457427957626790854822193495017648987108420340625468376075001330494378956440936625485173116392054026924940752502115987366130946313430754114737337600960484120209783 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9692008999d02505ab8f51819146f777a1338bc2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvonederland.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvowebsite.testjeapplicatie.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvonederland.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c09e4f7df0000040300473045022100c35130996d52f28e1fbae8e7db1276c4eab7df97a591b77d651ff5af807f820c02203a716b840d40dc02f77215df0320ecaebfc18dde0e91175b5e15b47b23304f2d00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c09e4f9f70000040300463044022005bcf6c104d56125188156b1e7fbafe069f4578101cd017500475c5031861fa6022002a831bfe98e91a1e2cc11290a60ed00f73d614487a25db24478aa7b30f2ee1f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008e4f0887307412d0a902c8107e5c6996493ad0ea9500a960819e85c412b5007b8220a1b44cd3250ae84d2fa6ab7743370522172e42ed69662ef26c86f377c02fabc10119b81ffe4f04b11e2369d6d289502becae851dc7584732cf0fe5449d27303c05611e533535c8e50308dcd6b0dfcc8f4159e52f1402d472473cf1afd9166ed49d59fbd0a89686e1e25bfbe296901734b9b21c052c52ced3d46496dfed878d3dcab3a6e8fc6d18f6e6274c6f006e758777f3d208868e7483ea5c4cc3f212e8bf3af08434af1c55a27791738a608ad5e4e911a1452f917b6cf6dc6dd8a3d58fc794035f747128ba3ae38ae3730c9e225e015779811d10fbc64777c4349952