t.sunx.me
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:50:eb:0a:47:d2:55:d8:59:7d:93:96:f3:81:23:41:cd:7b was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=t.sunx.me
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:50:eb:0a:47:d2:55:d8:59:7d:93:96:f3:81:23:41:cd:7bSerial Number (int): 288871869107649421359033404091829198114171
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 76:f3:c4:67:70:00:c2:47:d7:b2:1e:14:59:ff:36:6f:9c:12:c5:31
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): fd:c7:51:ec:c5:0d:1d:5d:25:cb:a0:2c:8a:09:64:10:05:b5:36:6e
Fingerprint (sha256): 97:23:42:bb:0d:ae:d6:d7:28:b8:e4:55:10:55:78:f4:7b:1a:de:29:a1:65:fe:6c:80:e5:30:ac:17:7b:3c:f4
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate t.sunx.me
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for t.sunx.me
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
t.sunx.me
Other certificates including the domain name sunx.me
(limited to 100 certificates)
img.j.sunx.me
mail.sunx.me
etna.sunx.me
sunx.me
sunx.me
mail.sunx.me
sunx.cc
mail.sunx.name
tools.sunx.me
tools.sunx.me
sunx.me
*.sunx.me
sunx.me
sunx.cc
sunx.me
tools.sunx.me
j.sunx.me
sunx.me
sunx.cc
tools.sunx.me
sunx.cc
sunx.me
sunx.me
sunx.me
etna.sunx.me
tools.sunx.me
sunx.cc
etna.sunx.me
ff-sync.sunx.me
mail.sunx.name
sunx.me
tools.sunx.me
sunx.cc
tools.sunx.me
tools.sunx.me
tools.sunx.me
sunx.me
sunx.me
sunx.me
sunx.cc
t.sunx.me
sunx.me
storage.sunx.cc
mail.sunx.me
ff-sync.sunx.me
www.sunx.me
tools.sunx.me
sunx.me
sunx.cc
sunx.me
img.j.sunx.me
t.sunx.me
seafile.sunx.me
t.sunx.me
sunx.me
sunx.cc
sunx.me
sunx.me
sunx.su
sunx.me
tools.sunx.me
sunx.me
sunx.me
tools.sunx.me
storage.sunx.cc
tools.sunx.me
img.j.sunx.me
www.sunx.me
ff-sync.sunx.me
sunx.me
sunx.cc
sunx.me
sunx.me
tools.sunx.me
sunx.cc
t.sunx.me
sunx.me
sunx.me
t.sunx.me
sunx.me
tools.sunx.me
mail.sunx.me
etna.sunx.me
sunx.me
sunx.me
mail.sunx.me
sunx.cc
mail.sunx.name
tools.sunx.me
tools.sunx.me
sunx.me
*.sunx.me
sunx.me
sunx.cc
sunx.me
tools.sunx.me
j.sunx.me
sunx.me
sunx.cc
tools.sunx.me
sunx.cc
sunx.me
sunx.me
sunx.me
etna.sunx.me
tools.sunx.me
sunx.cc
etna.sunx.me
ff-sync.sunx.me
mail.sunx.name
sunx.me
tools.sunx.me
sunx.cc
tools.sunx.me
tools.sunx.me
tools.sunx.me
sunx.me
sunx.me
sunx.me
sunx.cc
t.sunx.me
sunx.me
storage.sunx.cc
mail.sunx.me
ff-sync.sunx.me
www.sunx.me
tools.sunx.me
sunx.me
sunx.cc
sunx.me
img.j.sunx.me
t.sunx.me
seafile.sunx.me
t.sunx.me
sunx.me
sunx.cc
sunx.me
sunx.me
sunx.su
sunx.me
tools.sunx.me
sunx.me
sunx.me
tools.sunx.me
storage.sunx.cc
tools.sunx.me
img.j.sunx.me
www.sunx.me
ff-sync.sunx.me
sunx.me
sunx.cc
sunx.me
sunx.me
tools.sunx.me
sunx.cc
t.sunx.me
sunx.me
sunx.me
t.sunx.me
sunx.me
tools.sunx.me
Certificate
The complete raw certificate details for t.sunx.me in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgISA1DrCkfSVdhZfZOW84EjQc17MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjUxNzU3MDRaFw0x OTA5MjMxNzU3MDRaMBQxEjAQBgNVBAMTCXQuc3VueC5tZTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBALK56+x1X+h8PkNrhF77mw3lmcDpgEwy3zicWW7K Z83vZDiNIosN6kGWwAu4VeVoJ7s8/qYAmD22WgDhIGd6BptTFIkmLLNn07ZqRZen gr18jvrtBeDNTzYW6U+BaQgDmp87dQI5WLj8fUfTF8SMW2EUCsE4ms1j8LG8huAc ytJDoZZfwGGU6hnlZ0X9cXPmRnk7dcoPgDTIfqiWdd7W4UjwxuzToLEUcv7IScKA lOEzt9INBqxmkwQEfzU0PD3lRJCHJdrA7azvfYukuVNw9HtPBaJdZYwjXXmZBBPV BYEU3dzRzQNVCXkmySUQGleKFipnWJ2AnSiynHlmETDrK8E5DLr3+63Atvo41kUA doQLI7U9bqEl1AJunMD7Q/MEOtNRn+wX8wXt2KgDquFxfM04hXNpP3TF8AnsdFJQ HFnNh0dl/X2TJvKyNkiabgQIHfDAOBG85HoVad+XoMNHdPSNktrZ5ybofhNJ9EJS xLTjDSZ1QTP5hpTnf+XHiwBirbbto5dvlcgKUwC2DwJkcAD0sYW2f9UWia7eaOOC McTrnj61TCI1x5Po7AFyf5xRefXJ7XKG71IpHc5xyz50AKxaz3v2DzWo/6TwtJaX beKVslIXP5SmzOrD61ctuNeHd4PvesctJY4yVchhESVABWTGceZlkJ+fU6G6DZs4 L8hXAgMBAAGjggJfMIICWzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHbzxGdwAMJH 17IeFFn/Nm+cEsUxMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJdC5zdW54Lm1lMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA4mlL ribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFrj/+kvAAABAMASDBGAiEA 3xCR1aRaV6GB5Ar4APeMv9JMNMT182EAEkfXlxOhMG4CIQDeLdxXX5MLdNYXRnqI sDw9FrA+a0pL1wrcgIngPbs+HwB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM 9OVFR/R4AAABa4//pp8AAAQDAEcwRQIgZe2Y2muWuiCAfQAvOtQHHlaGgjEuxQB5 jZXqJflDIh8CIQDN65HNl+ALOZFHFPeCb9+Q7wbrpBa4V6A0jWKCw84I3TANBgkq hkiG9w0BAQsFAAOCAQEAgecwzp5xEntgBNyfjDxias/AVTbfJLMPvCk/sjB4NN/7 uC/2FGRjt9SrQeZGqO8WBEN4uowCyjjodrD8K3U5j+7qzP/purOn8iLIpA1DyuER BEKZlm+aInTRzGAg0W3vWbycBWjmGaFERfRYiTjtau8GSbeseylVrXIpW3GNgcOy r1bRSFn1NDJi4weneJEOt+0a3pbfpj8KHqc4t6SOIKv00FNpLND31L7RRorDs8s/ uZf9iCiIIYtd2S5OFYA0AfWicXtoq33/sL9eeKC6ycmh57Yl9TMlN5GzUuwNOE+8 xWayZBs8TVtvoYk8TBnYsSivuPxli4lVZgt7jqB/cg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsrnr7HVf6Hw+Q2uEXvub DeWZwOmATDLfOJxZbspnze9kOI0iiw3qQZbAC7hV5Wgnuzz+pgCYPbZaAOEgZ3oG m1MUiSYss2fTtmpFl6eCvXyO+u0F4M1PNhbpT4FpCAOanzt1AjlYuPx9R9MXxIxb YRQKwTiazWPwsbyG4BzK0kOhll/AYZTqGeVnRf1xc+ZGeTt1yg+ANMh+qJZ13tbh SPDG7NOgsRRy/shJwoCU4TO30g0GrGaTBAR/NTQ8PeVEkIcl2sDtrO99i6S5U3D0 e08Fol1ljCNdeZkEE9UFgRTd3NHNA1UJeSbJJRAaV4oWKmdYnYCdKLKceWYRMOsr wTkMuvf7rcC2+jjWRQB2hAsjtT1uoSXUAm6cwPtD8wQ601Gf7BfzBe3YqAOq4XF8 zTiFc2k/dMXwCex0UlAcWc2HR2X9fZMm8rI2SJpuBAgd8MA4EbzkehVp35egw0d0 9I2S2tnnJuh+E0n0QlLEtOMNJnVBM/mGlOd/5ceLAGKttu2jl2+VyApTALYPAmRw APSxhbZ/1RaJrt5o44IxxOuePrVMIjXHk+jsAXJ/nFF59cntcobvUikdznHLPnQA rFrPe/YPNaj/pPC0lpdt4pWyUhc/lKbM6sPrVy2414d3g+96xy0ljjJVyGERJUAF ZMZx5mWQn59ToboNmzgvyFcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 288871869107649421359033404091829198114171 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-25 17:57:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 17:57:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 't.sunx.me' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 729139510740363285195967470445868521002883700670267166247185139195158637919694324078216837610312164846203238162970871489474853909009751179706606716002275540538258181142875592834963085524956566403081351836557935261788352998636892590545069179164763655553750916712173824583142492695437171020506374179509438172707019097622567464251141316480279532206730938932091474677253882577969687827654936542980869814183787455783599533422866242691062441501010868106930860069993180794377375243837837169968242194270352477833737715831891876450785189415712444607835250820876006339855686249603575579225870697850206879323148978446221754104078474563489731353172420155735571996430612152193105451245834796078029433784779449648092706738253489079552966032022860972681292134476909356393817357369703213143575714267700538193450788902592172596348385171827020705615216589133891615444318129344787532015649627377411948287712043354402476149920346781963535720176925573694916628846401621356748202581724304141659734834591178129222534224823378273045118041409113510401812137394263089580514527781753406135361679555034105444523756938443531005535340842664933999345167494843388725844516066457802691448499252667299958412106023389943311517181930213940253403170820359987144147585111 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 76f3c4677000c247d7b21e1459ff366f9c12c531 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.sunx.me' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b8fffa4bc0000040300483046022100df1091d5a45a57a181e40af800f78cbfd24c34c4f5f361001247d79713a1306e022100de2ddc575f930b74d617467a88b03c3d16b03e6b4a4bd70adc8089e03dbb3e1f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b8fffa69f0000040300473045022065ed98da6b96ba20807d002f3ad4071e568682312ec500798d95ea25f943221f022100cdeb91cd97e00b39914714f7826fdf90ef06eba416b857a0348d6282c3ce08dd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0081e730ce9e71127b6004dc9f8c3c626acfc05536df24b30fbc293fb2307834dffbb82ff6146463b7d4ab41e646a8ef16044378ba8c02ca38e876b0fc2b75398feeeaccffe9bab3a7f222c8a40d43cae111044299966f9a2274d1cc6020d16def59bc9c0568e619a14445f4588938ed6aef0649b7ac7b2955ad72295b718d81c3b2af56d14859f5343262e307a778910eb7ed1ade96dfa63f0a1ea738b7a48e20abf4d053692cd0f7d4bed1468ac3b3cb3fb997fd882888218b5dd92e4e15803401f5a2717b68ab7dffb0bf5e78a0bac9c9a1e7b625f533253791b352ec0d384fbcc566b2641b3c4d5b6fa1893c4c19d8b128afb8fc658b8955660b7b8ea07f72