icann.jobs
Issued by R3
About this certificate
This digital certificate with serial number 03:b1:7f:d8:fd:28:bb:48:c9:20:15:61:23:29:b6:3f:7c:60 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=icann.jobs
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b1:7f:d8:fd:28:bb:48:c9:20:15:61:23:29:b6:3f:7c:60Serial Number (int): 321736775366549693725241844068799110675552
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 19:cd:c3:2c:a4:64:0e:74:96:22:08:39:e5:2e:ed:b1:4f:e9:53:32
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): fa:ae:16:0b:a6:81:7c:20:ee:98:4e:b3:fa:1a:49:4d:54:4a:14:79
Fingerprint (sha256): 93:56:e2:20:17:c5:68:77:20:1a:a0:d1:78:26:e0:e4:3e:27:e1:0d:65:68:da:16:0b:36:7f:47:f9:ee:fc:5d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate icann.jobs
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for icann.jobs
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
iana.jobs
icann.jobs
icann.mobi
me.icann.org
public.icann.org
www.iana.jobs
www.icann.jobs
www.icann.mobi
icann.jobs
icann.mobi
me.icann.org
public.icann.org
www.iana.jobs
www.icann.jobs
www.icann.mobi
Other certificates including the domain name icann.jobs
(limited to 100 certificates)
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
Certificate
The complete raw certificate details for icann.jobs in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgISA7F/2P0ou0jJIBVhIym2P3xgMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MDcxMzExNTNaFw0yMzA4MDUxMzExNTJaMBUxEzARBgNVBAMT CmljYW5uLmpvYnMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC1iJay UDPN8R9rYSBfHTJ9IwRDNODN6w+LtkDaNIvsFnRKnC+Fc+w0LO5BQCVsiMv6SFNL keHQbQO1T50hDH9qH2mV7mXOW95Aeo5loii6YsMhh9It7B7enrcr83zVBg6F47Lg navbxFJmmutIz2RG4jIWd8i4P6uNCUkQT9DPzIZSgUDb1Bi5vLrQBJwJGpmo/dSE /Xp7RyNoVKRzF1Csfj249Afp9e7mMUUv/Rbimyz4inXcRcxCEnokc0XUiBP/Ks1d ss0WHXfcvMevwDZC+6zbEOkt0AWK9q5AKRm8qpkbvLjpANoxLjkPpt6fh/IzDabd Iu/0+JtT2khlL1hYTMu1T3OCEl1wLw9SoEG1hiqMpHTGsvxbM5BhfQztgBYzWAyp COgUaF3Oemge4E4Ux/9kD+JM9+gwT5WeLWTK3k0Gw77Ww2ie+LF49xcIMmAB697z TuP9z5KYfR9VmZgx6vi0MpDzS/0PPBGme6s0Hc8KNmFP/o3RXh9ml7yv40QbIqr/ 4mNYVibLZYxJpHpX32Ciev0xiFnNdFrj8W8OcpuB5GS36OzZpH2QJCo60RdKxTYA 01CXHBc6AQrRpsk0EiGR0CwNdLCw+UjsXD/nHkgwu12KwOIxlxCSX6GbBKkZFI2r mI6Z/qFmFISTuLNMjNMTcQZO5l19l4bIr1w0ZwIDAQABo4ICqjCCAqYwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBQZzcMspGQOdJYiCDnlLu2xT+lTMjAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzB7BgNVHREEdDBygglpYW5hLmpvYnOCCmljYW5uLmpvYnOC CmljYW5uLm1vYmmCDG1lLmljYW5uLm9yZ4IQcHVibGljLmljYW5uLm9yZ4INd3d3 LmlhbmEuam9ic4IOd3d3LmljYW5uLmpvYnOCDnd3dy5pY2Fubi5tb2JpMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHUAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGH9o3+4QAABAMA RjBEAiANfvvITLQE5cm0Ca77lN1ya1SSs8G/62BNx3fTCMVD6gIgSvElwGmhkfok etaeicRszzz2VhfsWvpraitz5E7+tMwAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr 7Otp4Xd9bQa9bgAAAYf2jf7ZAAAEAwBHMEUCIQDfZr34mlF8KrH+AWu+lt38DDnQ cvl+INygKz6PlDW7FQIgL0RIVmdPANHp7mgA9wX7A25Vek/XOmhiGOCJF+nFnd4w DQYJKoZIhvcNAQELBQADggEBAHxWbKHdo1DMZvX78GNh8XY5IdXOyHf4vFSPqsjc QMgwZqzJPYpjPpNaNDB2D6SRD8v28BJOnG9bgMnY7K+1sYssnWgUbv4q4PwjjRtt H9aZESCMBisJPtE55XNN9A5DLrEDNAQvk4YQKIhO9EXhNxrALpyULRk+gXy4R1VC FEYUc/zf1TOYjb1q9wPGnZtABWKUpoKLusJx1q8oN5wJDylagpAzPaWdSyOq9cJ0 2GLRsi/1ZYDCz/2bFXZo7lqfDlIpHgsAu7H3M2+hTs8d3Q1/BxXYzonQJFHSJSc/ cItpVA9NR7iCXrsBXQRGG1Nbihd5ck4nHXeiH7jhF+wTD9E= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtYiWslAzzfEfa2EgXx0y fSMEQzTgzesPi7ZA2jSL7BZ0SpwvhXPsNCzuQUAlbIjL+khTS5Hh0G0DtU+dIQx/ ah9ple5lzlveQHqOZaIoumLDIYfSLewe3p63K/N81QYOheOy4J2r28RSZprrSM9k RuIyFnfIuD+rjQlJEE/Qz8yGUoFA29QYuby60AScCRqZqP3UhP16e0cjaFSkcxdQ rH49uPQH6fXu5jFFL/0W4pss+Ip13EXMQhJ6JHNF1IgT/yrNXbLNFh133LzHr8A2 Qvus2xDpLdAFivauQCkZvKqZG7y46QDaMS45D6ben4fyMw2m3SLv9PibU9pIZS9Y WEzLtU9zghJdcC8PUqBBtYYqjKR0xrL8WzOQYX0M7YAWM1gMqQjoFGhdznpoHuBO FMf/ZA/iTPfoME+Vni1kyt5NBsO+1sNonvixePcXCDJgAeve807j/c+SmH0fVZmY Mer4tDKQ80v9DzwRpnurNB3PCjZhT/6N0V4fZpe8r+NEGyKq/+JjWFYmy2WMSaR6 V99gonr9MYhZzXRa4/FvDnKbgeRkt+js2aR9kCQqOtEXSsU2ANNQlxwXOgEK0abJ NBIhkdAsDXSwsPlI7Fw/5x5IMLtdisDiMZcQkl+hmwSpGRSNq5iOmf6hZhSEk7iz TIzTE3EGTuZdfZeGyK9cNGcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321736775366549693725241844068799110675552 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-07 13:11:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-05 13:11:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'icann.jobs' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740592268146703700069077856537335459764277965231568593273482211964237985706092521345234713127840231054807722959625860487721077812105360757038875185677246253586397142665840445771020904625773658510377037964547344619991354228012802315680040813870930905922876468250004388797834559594671274939822706053143029240128951794465944611062016125448877525575496629493026757962099402290359555666783770354307872451937636835953266534375546961653906401923734019287428168589020025404107415386454983468906437868212622102032586339138683816873592391321960964728036268322715805816955659752759429974965887783153082223725046950983643817335272951849751013751614908683007403066472417539885392867312977864999464315030153454081224957910960700552693127158391127358205216693803950492828987473935701471977053942450318024090186426690173471681915664623134989402392473615550226688155564654035947674451285284924846379025241500090881837578275276284932032615966963470033173258649856472496838281493588217049785722973743279104150619198393229171341422426796286428534434000398055365122141396620438093406855602218738326379844358605466507519258341090844845936760019395980363407585598775485060124902197997452872390875365845255510880854788865756598495316206739207011730703791207 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 19cdc32ca4640e7496220839e52eedb14fe95332 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iana.jobs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icann.jobs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icann.mobi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.icann.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.icann.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iana.jobs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icann.jobs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icann.mobi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187f68dfee1000004030046304402200d7efbc84cb404e5c9b409aefb94dd726b5492b3c1bfeb604dc777d308c543ea02204af125c069a191fa247ad69e89c46ccf3cf65617ec5afa6b6a2b73e44efeb4cc007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187f68dfed90000040300473045022100df66bdf89a517c2ab1fe016bbe96ddfc0c39d072f97e20dca02b3e8f9435bb1502202f444856674f00d1e9ee6800f705fb036e557a4fd73a686218e08917e9c59dde . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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