www.tecnimont.it
Issued by R3
About this certificate
This digital certificate with serial number 04:26:9f:79:b4:e1:d2:2e:9d:6d:80:12:a5:e5:4e:c5:00:8c was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.tecnimont.it
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:26:9f:79:b4:e1:d2:2e:9d:6d:80:12:a5:e5:4e:c5:00:8cSerial Number (int): 361591852858011445965130389147164474671244
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: c8:2a:86:4e:69:4e:0b:68:40:6f:f1:42:72:36:97:93:47:e7:e4:b4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ef:ca:54:5c:f9:75:9c:82:be:e7:48:d4:5e:48:b8:6a:2d:8f:48:94
Fingerprint (sha256): a0:7f:64:e1:fb:f6:be:e2:d7:82:97:3b:88:37:a8:65:63:8a:a3:1f:45:f8:d3:ad:b3:f1:e7:82:0f:9f:6c:c7
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.tecnimont.it
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.tecnimont.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kt-met.com
mairetecnimont.com
met-development.com
tecnimont.it
www.kt-met.com
www.mairetecnimont.com
www.met-development.com
www.tecnimont.it
mairetecnimont.com
met-development.com
tecnimont.it
www.kt-met.com
www.mairetecnimont.com
www.met-development.com
www.tecnimont.it
Other certificates including the domain name tecnimont.it
(limited to 100 certificates)
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
itmi-exp-edge01.mairetecnimont.it
*.tecnimont.it
hybrid.mairetecnimont.com
www.tecnimont.it
docweb.tecnimont.it
hrp.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
*.tecnimont.it
hybrid.mairetecnimont.com
*.tecnimont.it
MEQ.tecnimont.it
www.tecnimont.it
anywhere.mairetecnimont.com
hrp.tecnimont.it
www.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
hybrid.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.tecnimont.it
hrp.tecnimont.it
www.tecnimont.it
www.tecnimont.it
hrp.tecnimont.it
hybrid.mairetecnimont.com
hybrid.mairetecnimont.com
anywhere.mairetecnimont.com
www.mairetecnimont.com
*.tecnimont.it
www.mairetecnimont.com
sip.unify.mairetecnimont.it
www.mairetecnimont.com
hybrid.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
*.tecnimont.it
www.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
ctxgw.tecnimont.it
onemail.tecnimont.it
www.mairetecnimont.com
www.tecnimont.it
*.tecnimont.it
www.mairetecnimont.com
itmi-exp-edge01.mairetecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
itmi-exp-edge01.mairetecnimont.it
*.tecnimont.it
hybrid.mairetecnimont.com
www.tecnimont.it
docweb.tecnimont.it
hrp.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
*.tecnimont.it
hybrid.mairetecnimont.com
*.tecnimont.it
MEQ.tecnimont.it
www.tecnimont.it
anywhere.mairetecnimont.com
hrp.tecnimont.it
www.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
hybrid.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.tecnimont.it
hrp.tecnimont.it
www.tecnimont.it
www.tecnimont.it
hrp.tecnimont.it
hybrid.mairetecnimont.com
hybrid.mairetecnimont.com
anywhere.mairetecnimont.com
www.mairetecnimont.com
*.tecnimont.it
www.mairetecnimont.com
sip.unify.mairetecnimont.it
www.mairetecnimont.com
hybrid.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
*.tecnimont.it
www.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
ctxgw.tecnimont.it
onemail.tecnimont.it
www.mairetecnimont.com
www.tecnimont.it
*.tecnimont.it
www.mairetecnimont.com
itmi-exp-edge01.mairetecnimont.it
Certificate
The complete raw certificate details for www.tecnimont.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISBCafebTh0i6dbYASpeVOxQCMMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA5MTUwODA1MTBaFw0yMjEyMTQwODA1MDlaMBsxGTAXBgNVBAMT EHd3dy50ZWNuaW1vbnQuaXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC39tvr7LtmWSd10NjVC/A436unscxjlF8BHWVVF/0hrbRA0FY+71ilJsSGiyoL QCcAAuY8VCxvTWqdcf1mgtFfdODQXqmO4K1L5iujCqqoCqkUyKezMcT8aIlxIHbo yI1EPG+jsZpSciMc5+eQ/QwKJgNKZsJmXxjYoGDQOJgnHhAm1EDLTcYFkhirsRIB QCe5cU3Evp/6fY5SdjOn18wFe045fxt/ZA5odVTgBQgOVUaxpmMfYHAXfSjrBxRC Lni74Aw7awU1sZpwAGPU3X47nvpFiax1JWKtEs1P5YCXgN5avdqpuCqzrirjXs8o 7wPm2zlElNUxHnv6vPbUKJOdAgMBAAGjggLTMIICzzAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFMgqhk5pTgtoQG/xQnI2l5NH5+S0MB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMIGhBgNVHREEgZkwgZaCCmt0LW1ldC5jb22CEm1haXJldGVjbmltb250LmNv bYITbWV0LWRldmVsb3BtZW50LmNvbYIMdGVjbmltb250Lml0gg53d3cua3QtbWV0 LmNvbYIWd3d3Lm1haXJldGVjbmltb250LmNvbYIXd3d3Lm1ldC1kZXZlbG9wbWVu dC5jb22CEHd3dy50ZWNuaW1vbnQuaXQwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw dC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgDfpV6raIJPH2yt7rhfTj5a 6s2iEqRqXo47EsAgRFwqcwAAAYNAZRdxAAAEAwBHMEUCIBuVgzi1K+A7m/HcQBOE fAk9paQJl6/N0s+DiFxHLVAoAiEAhRZfC+cKy2zMeareMxi35kEWYiTNB4d1y8db LMefGlgAdwBGpVXrdfqRIDC1oolp9PN9ESxBdL79SbiFq/L8cP5tRwAAAYNAZReZ AAAEAwBIMEYCIQDx6WJDvw6NEbV22V6d3s02uo2SrCqMOvLpDRLsFwC25AIhALL6 QjXlz+BfgVZ5EQwPZFG6GC18P2PrYRbpn3JsMwKOMA0GCSqGSIb3DQEBCwUAA4IB AQBB82YvsrCBHya+we1BRRAr9BqfSBZIqCYWkmHGBVIEyEPLqWFbWVemtwuhP0i/ Vye9mv9hmbpoQ4gU9vAm6AcNtfViKk4uguFbW5wK0XmLv9ZB+aOKiu7F5HkR6gof CySk7Af/JBKKk62OZrQMTXoQA7PyUMzGeFy0u/e2gjeI2YHIeMS/hXeY6Fb0NwF4 62MMTzguhAfW5/2ILoP0vMgL01JHJNZG4vIaPatb4SAuVXe+VFWwbiRtT5rld7rk 60QnnHnMve9Re2wXBxceHfZfF3l1nb69RgwJQX7CgB5FF7TgFK1czZB4xPcGzwPA DAqmDQcR/NSU8EK21HR4ihjt -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/bb6+y7ZlknddDY1Qvw ON+rp7HMY5RfAR1lVRf9Ia20QNBWPu9YpSbEhosqC0AnAALmPFQsb01qnXH9ZoLR X3Tg0F6pjuCtS+YrowqqqAqpFMinszHE/GiJcSB26MiNRDxvo7GaUnIjHOfnkP0M CiYDSmbCZl8Y2KBg0DiYJx4QJtRAy03GBZIYq7ESAUAnuXFNxL6f+n2OUnYzp9fM BXtOOX8bf2QOaHVU4AUIDlVGsaZjH2BwF30o6wcUQi54u+AMO2sFNbGacABj1N1+ O576RYmsdSVirRLNT+WAl4DeWr3aqbgqs64q417PKO8D5ts5RJTVMR57+rz21CiT nQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 361591852858011445965130389147164474671244 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-15 08:05:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-14 08:05:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tecnimont.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23223340552519694991155483528782736027182189716393816374330049535461746215124966405443226431050667145798432475192315447636661752687636730370937246230287423949204720708790797980463953641634763884575787458010603891201293030664815906062549289878967335662015777915402786697948188823526436047457559679284750011404018601308192313876222793211493478187716549984136558407204420926204764007793610084387325634820888002738705918530514360685913550971333771459100613456383250565947798627298192568873466668619317157437346746474537699216875214814812820384319066444882799089239132610261977829485312526945901746536937568210047484859293 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c82a864e694e0b68406ff1427236979347e7e4b4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kt-met.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mairetecnimont.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'met-development.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnimont.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kt-met.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mairetecnimont.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.met-development.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecnimont.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000018340651771000004030047304502201b958338b52be03b9bf1dc4013847c093da5a40997afcdd2cf83885c472d502802210085165f0be70acb6ccc79aade3318b7e641166224cd078775cbc75b2cc79f1a5800770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000183406517990000040300483046022100f1e96243bf0e8d11b576d95e9ddecd36ba8d92ac2a8c3af2e90d12ec1700b6e4022100b2fa4235e5cfe05f815679110c0f6451ba182d7c3f63eb6116e99f726c33028e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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