totemapp.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:2e:b4:4b:17:bf:b6:cf:7d:0f:09:04:e2:46:42:a5:6c:a4 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=totemapp.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:2e:b4:4b:17:bf:b6:cf:7d:0f:09:04:e2:46:42:a5:6c:a4Serial Number (int): 277229497616834161262599970182284162985124
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 49:8e:a1:f0:14:28:97:0f:d8:c4:78:d1:4e:16:d9:a2:12:ff:79:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f2:ae:7a:50:3b:2b:b7:f6:e3:f4:31:7d:96:89:fc:6d:f3:e1:9e:ce
Fingerprint (sha256): 95:26:06:80:07:ef:ee:f0:31:d6:b8:69:f0:0b:7b:e4:00:88:5d:26:dd:1a:87:78:a7:f3:c8:76:63:be:b4:52
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate totemapp.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for totemapp.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
totemapp.net
www.totemapp.net
www.totemapp.net
Other certificates including the domain name totemapp.net
(limited to 100 certificates)
bannerman.totemapp.net
about.ksting.com
fluxx.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
www.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
diy.totemapp.net
about.ksting.com
easymarkit.totemapp.net
diy.totemapp.net
archmission.totemapp.net
adamlyonsw.totemapp.net
archmission.totemapp.net
dojo-madness.totemapp.net
about.ksting.com
totemapp.net
about.ksting.com
about.ksting.com
totemapp.net
about.ksting.com
about.ksting.com
about.ksting.com
about.ksting.com
archmission.totemapp.net
totemapp.net
archmission.totemapp.net
press.getsundaily.com
archmission.totemapp.net
totemapp.net
about.ksting.com
archmission.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
dodo.totemapp.net
about.ksting.com
bannerman.totemapp.net
totem.alltrails.com
fluxx.totemapp.net
archmission.totemapp.net
*.totemapp.net
press.swipecast.com
archmission.totemapp.net
archmission.totemapp.net
picachocoffee.totemapp.net
about.ksting.com
archmission.totemapp.net
bonusly.totemapp.net
intothewhoknows.totemapp.net
archmission.totemapp.net
about.ksting.com
diy.totemapp.net
totemapp.net
archmission.totemapp.net
about.ksting.com
about.ksting.com
press.getsundaily.com
archmission.totemapp.net
www.totemapp.net
totemapp.net
archmission.totemapp.net
about.ksting.com
britttest.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
about.ksting.com
totemapp.net
fourpointsbar.totemapp.net
about.ksting.com
about.ksting.com
archmission.totemapp.net
totemapp.net
diy.totemapp.net
archmission.totemapp.net
insitome.totemapp.net
about.ksting.com
beardedbastard.totemapp.net
totemapp.net
archmission.totemapp.net
about.ksting.com
archmission.totemapp.net
about.ksting.com
totemapp.net
archmission.totemapp.net
about.ksting.com
archmission.totemapp.net
*.totemapp.net
about.ksting.com
openwork.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
about.ksting.com
about.ksting.com
about.ksting.com
diy.totemapp.net
adamlyonsw.totemapp.net
totemapp.net
about.ksting.com
fluxx.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
www.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
diy.totemapp.net
about.ksting.com
easymarkit.totemapp.net
diy.totemapp.net
archmission.totemapp.net
adamlyonsw.totemapp.net
archmission.totemapp.net
dojo-madness.totemapp.net
about.ksting.com
totemapp.net
about.ksting.com
about.ksting.com
totemapp.net
about.ksting.com
about.ksting.com
about.ksting.com
about.ksting.com
archmission.totemapp.net
totemapp.net
archmission.totemapp.net
press.getsundaily.com
archmission.totemapp.net
totemapp.net
about.ksting.com
archmission.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
dodo.totemapp.net
about.ksting.com
bannerman.totemapp.net
totem.alltrails.com
fluxx.totemapp.net
archmission.totemapp.net
*.totemapp.net
press.swipecast.com
archmission.totemapp.net
archmission.totemapp.net
picachocoffee.totemapp.net
about.ksting.com
archmission.totemapp.net
bonusly.totemapp.net
intothewhoknows.totemapp.net
archmission.totemapp.net
about.ksting.com
diy.totemapp.net
totemapp.net
archmission.totemapp.net
about.ksting.com
about.ksting.com
press.getsundaily.com
archmission.totemapp.net
www.totemapp.net
totemapp.net
archmission.totemapp.net
about.ksting.com
britttest.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
about.ksting.com
totemapp.net
fourpointsbar.totemapp.net
about.ksting.com
about.ksting.com
archmission.totemapp.net
totemapp.net
diy.totemapp.net
archmission.totemapp.net
insitome.totemapp.net
about.ksting.com
beardedbastard.totemapp.net
totemapp.net
archmission.totemapp.net
about.ksting.com
archmission.totemapp.net
about.ksting.com
totemapp.net
archmission.totemapp.net
about.ksting.com
archmission.totemapp.net
*.totemapp.net
about.ksting.com
openwork.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
about.ksting.com
about.ksting.com
about.ksting.com
diy.totemapp.net
adamlyonsw.totemapp.net
totemapp.net
Certificate
The complete raw certificate details for totemapp.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAy60Sxe/ts99DwkE4kZCpWykMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDUwMTMxMTFaFw0y MDAxMDMwMTMxMTFaMBcxFTATBgNVBAMTDHRvdGVtYXBwLm5ldDCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAORzXrB/tZyV1wo70K40Bcg0mIZECf/E5G+Z 7zbZrmFhPBgSr0QnrNavtBTP0a3oBa0CkwTJollDKyRgF3Sz8B2xMJIXgBBMTibm KK7Fn72u/E3EAdCKxqHzZLHGw6M6ig+tQwarC6wUOpcqJjMtguKAsBHGoI6lLpJK tu3i9l0rA70jBgp+OZDknrK+S4c8zSauYACDhCfM5r8vI97TdH7akOf+xgKv+kIQ n2ZiGiRy0gQo2NWI/Zx1rphl6o1jdiAVWP74/zBrfx9ao2SAYa9kq1izpljS+YDm ze29aIAa0860w8yhGDUc+WFvUDCvdY1TNpw2w9V6CnNjmhvn4kECAwEAAaOCAnQw ggJwMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUSY6h8BQolw/YxHjRThbZohL/eWow HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzApBgNVHREEIjAgggx0b3RlbWFwcC5uZXSCEHd3dy50b3RlbWFwcC5uZXQwTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHz APEAdwBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW2ZwbcJAAAE AwBIMEYCIQCORvVHWX7ySg5sHYQ6kHkDc5waQ/j2hc6dyAwqj1SofAIhAMv9dAQA d+ONQLtq94z7UCpXLTrSVWx6ScVQXPBj4oFhAHYAsh4FzIuizYogTodm+Su5iiUg Z2va+nDnsklTLe+LkF4AAAFtmcG1DQAABAMARzBFAiAyeHdUaL6EoOSCMgmIZFCP gkU6gGp4+7Hg5D7RSBbRAgIhAN/lcPmMkWzO32X47EJAHnGb3IEuI5UTTmeCWdUn 7TqJMA0GCSqGSIb3DQEBCwUAA4IBAQBziiCtO0L6tsgP1b+ZVPoU8ExqslHxcawY ky5kvEZV/d/q6VxqVKTooRU5GxoudK41bU8ptsF2qiK2KNyndowV29dc9y0VqpZc Ee+3y5RJRdObntDYSbUX1DaYiyNB+edcbvwFb2uOm/CeFtzA2LznsuM4m1GOq9RO /IiJAty59nKF25B8WQs/rn3tXRGTjmB8ZF6/CKO3l54cy7ZPLiiF5YeMhsLcn1zj YHLyGQQS6gSBtzuIiu0sh3FpHTkh2y3pYryk8TC7jbB8foNo50d21Hj4DbYtkWQs fqfEBMpjsQ+l40YNTT3w2VfJSuHfJeOTyMNImZgS+snVMksy4Wie -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HNesH+1nJXXCjvQrjQF yDSYhkQJ/8Tkb5nvNtmuYWE8GBKvRCes1q+0FM/RregFrQKTBMmiWUMrJGAXdLPw HbEwkheAEExOJuYorsWfva78TcQB0IrGofNkscbDozqKD61DBqsLrBQ6lyomMy2C 4oCwEcagjqUukkq27eL2XSsDvSMGCn45kOSesr5LhzzNJq5gAIOEJ8zmvy8j3tN0 ftqQ5/7GAq/6QhCfZmIaJHLSBCjY1Yj9nHWumGXqjWN2IBVY/vj/MGt/H1qjZIBh r2SrWLOmWNL5gObN7b1ogBrTzrTDzKEYNRz5YW9QMK91jVM2nDbD1XoKc2OaG+fi QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 277229497616834161262599970182284162985124 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-05 01:31:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-03 01:31:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'totemapp.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28839224540771218509053515523245404195111733059996364145648487471547532374968671378281336340727497875069138778596223305582189901493670830437050515826343423215654187757787869929440970802942364880107324092005179018447483288795825161073509177680285449563867478651872677817045349322860158088244885886606188714960052371451884996926563629012416768294359143244085575456690722334630672830199579163004332945417824385468539462302620779853346545462412122921246233059917340359735361142466804438712511598440466922780748708784636101624317707391285944642884857309383267116092546721847352384809276825871992563069620431435812334723649 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 498ea1f01428970fd8c478d14e16d9a212ff796a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totemapp.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totemapp.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d99c1b70900000403004830460221008e46f547597ef24a0e6c1d843a907903739c1a43f8f685ce9dc80c2a8f54a87c022100cbfd74040077e38d40bb6af78cfb502a572d3ad2556c7a49c5505cf063e28161007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016d99c1b50d000004030047304502203278775468be84a0e48232098864508f82453a806a78fbb1e0e43ed14816d102022100dfe570f98c916ccedf65f8ec42401e719bdc812e2395134e678259d527ed3a89 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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