h5.test.justalk.com
Issued by Encryption Everywhere DV TLS CA - G1
About this certificate
This digital certificate with serial number 01:da:21:d0:8a:23:38:0a:4a:ef:82:d0:41:3a:67:37 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=h5.test.justalk.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:da:21:d0:8a:23:38:0a:4a:ef:82:d0:41:3a:67:37Serial Number (int): 2461834552671740169451956228046087991
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: e6:d3:c9:0b:0a:f0:b5:a8:e2:e0:cf:39:c2:9c:e7:4a:29:a0:c9:ac
AuthorityKeyId: 55:74:4f:b2:72:4f:f5:60:ba:50:d1:d7:e6:51:5c:9a:01:87:1a:d7
Fingerprint (sha1): 63:85:ca:6b:f1:21:53:10:2c:11:c4:8b:67:bd:f4:2a:fc:f0:f5:4e
Fingerprint (sha256): a4:0d:48:7f:b6:b9:f7:1e:03:36:73:be:d3:59:89:87:09:3c:69:80:7e:f4:3b:1a:e5:ff:0d:9e:39:62:37:a9
Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCheck the revocation status for certificate h5.test.justalk.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for h5.test.justalk.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
h5.test.justalk.com
Other certificates including the domain name justalk.com
(limited to 100 certificates)
nutrition-origin.me2-prd.gmal.app
daily.justalk.com
rentscore.africa
cdn.justalk.com
daily.justalk.com
h5.justalk.com
proper-ly.com
justalk.com
dev.nomadgrab.com
quiz.justalk.com
mvishal.in
intl.api.duonumber.justalk.com
quiz.justalk.com
www.justalk.com
justalk.com
test.game.justalk.com
app.realtystreem.com
rappisuper.com
cn.h5.justalk.com
static.ig.justalk.com
justalk.com
h5src.justalk.com
www.justalkcloud.com
kids.justalk.com
navmap.kmcat.uk
classify.org.uk
remotedev.co
intl.api.secondphone.justalk.com
khacphucrori.com
www.justalkcloud.com
ll.myroomabroad.com
www.justalk.com
test.game.justalk.com
web.justalk.com
test.intl.api.justalk.com
cdn.justalk.com
h5.justalk.com
justalk.com
web.justalk.com
game.justalk.com
meet.justalk.com
justalk.com
static.ig.justalk.com
justalk.com
cms.justalk.com
static2.ig.justalk.com
kids.justalk.com
engineering.polymerize.io
intl.api.justalk.com
target.dataplace.ai
app.dev.wioski.co
dl.justalk.com
sixwindsorplace.com
test.daq.morgansolar.xyz
kids.justalk.com
app.dimironventures.com
cdn.justalk.com
h5src.justalk.com
gauntletcalendar.com
pushplaydigital.online
cn.h5.justalk.com
alicn.api.justalk.com
justalk.com
old-river-garden-services.com
status.bienparabien.com
static.ig.justalk.com
quiz.justalk.com
www.justalkcloud.com
staging.kurstrainer.fitseveneleven.de
h5.test.justalk.com
cdn.justalk.com
bizzybooks.com
cdn.justalk.com
classify.org.uk
cn.test.justalk.com
kids.justalk.com
cms.justalk.com
api.justalk.com
justalk.com
webhook.justalk.com
announcements.justalk.com
www.pendikkaynarcaasm.com
meet.justalk.com
webhook.justalk.com
www.justalkcloud.com
convert.denzildoyle.me
gift.nairio.com
endoscopes.me
alacarte.app
daily.justalk.com
daily.justalk.com
nidahub.com
cn.h5src.justalk.com
daily.justalk.com
api.mobile.tradesbarn.com
americorps.ink
quiz.justalk.com
whatsonnear.us
test.intl.api.justalk.com
wisphero.com
daily.justalk.com
rentscore.africa
cdn.justalk.com
daily.justalk.com
h5.justalk.com
proper-ly.com
justalk.com
dev.nomadgrab.com
quiz.justalk.com
mvishal.in
intl.api.duonumber.justalk.com
quiz.justalk.com
www.justalk.com
justalk.com
test.game.justalk.com
app.realtystreem.com
rappisuper.com
cn.h5.justalk.com
static.ig.justalk.com
justalk.com
h5src.justalk.com
www.justalkcloud.com
kids.justalk.com
navmap.kmcat.uk
classify.org.uk
remotedev.co
intl.api.secondphone.justalk.com
khacphucrori.com
www.justalkcloud.com
ll.myroomabroad.com
www.justalk.com
test.game.justalk.com
web.justalk.com
test.intl.api.justalk.com
cdn.justalk.com
h5.justalk.com
justalk.com
web.justalk.com
game.justalk.com
meet.justalk.com
justalk.com
static.ig.justalk.com
justalk.com
cms.justalk.com
static2.ig.justalk.com
kids.justalk.com
engineering.polymerize.io
intl.api.justalk.com
target.dataplace.ai
app.dev.wioski.co
dl.justalk.com
sixwindsorplace.com
test.daq.morgansolar.xyz
kids.justalk.com
app.dimironventures.com
cdn.justalk.com
h5src.justalk.com
gauntletcalendar.com
pushplaydigital.online
cn.h5.justalk.com
alicn.api.justalk.com
justalk.com
old-river-garden-services.com
status.bienparabien.com
static.ig.justalk.com
quiz.justalk.com
www.justalkcloud.com
staging.kurstrainer.fitseveneleven.de
h5.test.justalk.com
cdn.justalk.com
bizzybooks.com
cdn.justalk.com
classify.org.uk
cn.test.justalk.com
kids.justalk.com
cms.justalk.com
api.justalk.com
justalk.com
webhook.justalk.com
announcements.justalk.com
www.pendikkaynarcaasm.com
meet.justalk.com
webhook.justalk.com
www.justalkcloud.com
convert.denzildoyle.me
gift.nairio.com
endoscopes.me
alacarte.app
daily.justalk.com
daily.justalk.com
nidahub.com
cn.h5src.justalk.com
daily.justalk.com
api.mobile.tradesbarn.com
americorps.ink
quiz.justalk.com
whatsonnear.us
test.intl.api.justalk.com
wisphero.com
Certificate
The complete raw certificate details for h5.test.justalk.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIQAdoh0IojOApK74LQQTpnNzANBgkqhkiG9w0BAQsFADBu MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS0wKwYDVQQDEyRFbmNyeXB0aW9uIEV2ZXJ5d2hlcmUg RFYgVExTIENBIC0gRzEwHhcNMTkxMTE0MDAwMDAwWhcNMjAxMTEzMTIwMDAwWjAe MRwwGgYDVQQDExNoNS50ZXN0Lmp1c3RhbGsuY29tMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAp/iII/VPV7VltwbdUN0NBoOT6gm/OoAd4LvwMXpojVgx 9JL5UIbvA4JTB4GxT2Oyl2dY25Rn2sYf3mysksG4oVLarANR/me6MhFT15+Fdlei s75y/tNF/ZUJyXOoBA79knpcHMU/7dCGs1mRW2/VCYnsKGuKvnVyK753JERxjI9g lW35cPeCTYsrq81dYKzgn6uNRpeG3tSG+KeB2YrhFcbcuHEtXjbZFDvdhfPJnoOC dzZJlw7HBKXAHLO+6p7cRHbxlu4At/mZHKA7XHkh5RXfkhk+2MJVFlXbiEJ2ldys 47vsmXqXK3Ca84lfkd/cyhwVgTpvO/jYojbg/8SVmwIDAQABo4ICdzCCAnMwHwYD VR0jBBgwFoAUVXRPsnJP9WC6UNHX5lFcmgGHGtcwHQYDVR0OBBYEFObTyQsK8LWo 4uDPOcKc50opoMmsMB4GA1UdEQQXMBWCE2g1LnRlc3QuanVzdGFsay5jb20wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBMBgNV HSAERTBDMDcGCWCGSAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k aWdpY2VydC5jb20vQ1BTMAgGBmeBDAECATCBgAYIKwYBBQUHAQEEdDByMCQGCCsG AQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSgYIKwYBBQUHMAKGPmh0 dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9FbmNyeXB0aW9uRXZlcnl3aGVyZURW VExTQ0EtRzEuY3J0MAkGA1UdEwQCMAAwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA dgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAW5nkhX6AAAEAwBH MEUCIQDRQnES72lsmqAwasQGEAkEoIBsOBNJLwR3bnBz7CkiKgIgRCarb7iPjm1g bBfgt1L9HelgVyHQUBQmdIhyWaBrkRMAdgBep3P531bA57U2SH3QSeAyepGaDISh EhKEGHWWgXFFWAAAAW5nkhVvAAAEAwBHMEUCICV7A9vrZF/9i6OTPaqb+BCY/RDg jYII/cuZE2WsPw9pAiEA0naAf41siAYZSFBr9RLbowZZAMOWiD2i610dQOycTEEw DQYJKoZIhvcNAQELBQADggEBABK5cDnkPFCEm0moDCBjtQ/1RZV/zGPLNILxMcsO TExbX9zCBJ2KwyduIoe9ADqWZGhKTFSwaJmO0Y0rJDjG1osgxjZYDCBKKTSHWxMh 88g97UMrFri1MPGcsdtTBdU/YyZ/HfEFwYBkTlWVBq2Sbs+C6I1dhxjPcvasCBrq 6ijiUjgZI6beOuMy0LZ6+yBiGAxncyA919v+rHggJqLTpBBCldblvLQR60Insve0 b+JdVOnNdsObDvf8mdiXc1DYbkzePTP4vlw6EtPWDRSmd+FC+MtCnO3ybk9qy8hB UZGuQ6KSeNGv3Dh2leDPkOBwgS2VDj1rqU33FGYFrBvRFtM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/iII/VPV7VltwbdUN0N BoOT6gm/OoAd4LvwMXpojVgx9JL5UIbvA4JTB4GxT2Oyl2dY25Rn2sYf3mysksG4 oVLarANR/me6MhFT15+Fdleis75y/tNF/ZUJyXOoBA79knpcHMU/7dCGs1mRW2/V CYnsKGuKvnVyK753JERxjI9glW35cPeCTYsrq81dYKzgn6uNRpeG3tSG+KeB2Yrh FcbcuHEtXjbZFDvdhfPJnoOCdzZJlw7HBKXAHLO+6p7cRHbxlu4At/mZHKA7XHkh 5RXfkhk+2MJVFlXbiEJ2ldys47vsmXqXK3Ca84lfkd/cyhwVgTpvO/jYojbg/8SV mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2461834552671740169451956228046087991 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'h5.test.justalk.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21204352526970194368248572770595769387985221262299207680894394799963399923620557357280918779204844441155861762452639899514392725540110648386338549151189360661100905018944869499088694662627082405469490450755050640011637356461484276321168603227473106751123056748547286249677743440325458238923956490407901726255510557212378022865539923024936695249123005335922950757606604956862278854558189829151673201864630928472723011255630832223875934971485478698521380052507374639142415965093256443167080542610030785329827023289464790948133722471180634036074760218183175833817688160513101809873634987109542064784460898513548128589211 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55744fb2724ff560ba50d1d7e6515c9a01871ad7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e6d3c90b0af0b5a8e2e0cf39c29ce74a29a0c9ac . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h5.test.justalk.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016e679215fa0000040300473045022100d1427112ef696c9aa0306ac406100904a0806c3813492f04776e7073ec29222a02204426ab6fb88f8e6d606c17e0b752fd1de9605721d050142674887259a06b91130076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e6792156f00000403004730450220257b03dbeb645ffd8ba3933daa9bf81098fd10e08d8208fdcb991365ac3f0f69022100d276807f8d6c88061948506bf512dba3065900c396883da2eb5d1d40ec9c4c41 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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