staging.opkey.com
Issued by R3
About this certificate
This digital certificate with serial number 03:9d:dc:4b:aa:27:81:ed:45:b9:34:33:b6:3e:dc:d0:c9:1a was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=staging.opkey.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9d:dc:4b:aa:27:81:ed:45:b9:34:33:b6:3e:dc:d0:c9:1aSerial Number (int): 315054012434344891677518669155169477904666
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 84:a7:45:3c:7b:52:5f:88:e7:ea:2a:67:52:c1:21:92:75:07:12:5f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 24:55:8b:42:e6:a8:85:2a:8f:10:d4:79:0f:64:5b:7b:db:9e:4c:c0
Fingerprint (sha256): a4:a9:c1:5c:a6:78:f5:ee:2e:c8:fe:cb:07:69:f1:85:7c:f2:62:5f:0d:c1:8b:58:63:a8:c4:bf:1f:a4:93:81
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate staging.opkey.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for staging.opkey.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.staging.opkey.com
staging.opkey.com
staging.opkey.com
Other certificates including the domain name opkey.com
(limited to 100 certificates)
*.opkey.com
sugarcrm.opkey.com
idempiere.opkey.com
backup.opkey.com
*.opkey.com
itsupport.nationalable.org
idempiere.opkey.com
itsupport.nationalable.org
fergusonsupport.opkey.com
odoo.opkey.com
ls.opkey.com
support.redmop.com
*.support.opkey.com
idempiere.opkey.com
idempiere.opkey.com
helpdesk.vacorp.com
sugarcrm.opkey.com
opkey.com
odoo.opkey.com
odoo.opkey.com
backup.opkey.com
support.opkey.com
odoo.opkey.com
itsupport.nationalable.org
odoo.opkey.com
*.opkey.com
fergusonsupport.opkey.com
*.sugarcrm.opkey.com
*.backup.opkey.com
*.staging.opkey.com
sugarcrm.opkey.com
opkey.com
*.helpdocs.opkey.com
*.opkey.com
www.testui.opkey.com
backup.opkey.com
openproject.opkey.com
openproject.opkey.com
ls.opkey.com
*.sugarcrm.opkey.com
backup.opkey.com
atencion.traffilog.mx
getit.saiapex.in
*.support.opkey.com
studentsupport.atpstar.com
support.opkey.com
www.account.opkey.com
*.openproject.opkey.com
getit.saiapex.in
itsupport.nationalable.org
idempiere.opkey.com
*.opkey.com
idempiere.opkey.com
opkey.com
opkey.com
getit.saiapex.in
support.ksportusa.com
support.opkey.com
pfizer.opkey.com
opkey.com
sales.miraclesmind.site
*.helpdocs.opkey.com
opkey.com
odoo.opkey.com
staging.opkey.com
backup.opkey.com
openproject.opkey.com
sugarcrm.opkey.com
openproject.opkey.com
sales.miraclesmind.site
*.openproject.opkey.com
sales.miraclesmind.site
getit.saiapex.in
support.egicat.com
sugarcrm.opkey.com
opkey.com
odoo.opkey.com
ls.opkey.com
idempiere.opkey.com
fergusonsupport.opkey.com
opkey.com
sugarcrm.opkey.com
openproject.opkey.com
support.tekxiph.com
backup.opkey.com
www.ct.opkey.com
ct.opkey.com
*.staging.opkey.com
www.testui.opkey.com
opkey.com
support.egicat.com
fergusonsupport.opkey.com
opkey.com
m.opkey.com
*.opkey.com
m.opkey.com
openproject.opkey.com
openproject.opkey.com
*.opkey.com
sales.miraclesmind.site
sugarcrm.opkey.com
idempiere.opkey.com
backup.opkey.com
*.opkey.com
itsupport.nationalable.org
idempiere.opkey.com
itsupport.nationalable.org
fergusonsupport.opkey.com
odoo.opkey.com
ls.opkey.com
support.redmop.com
*.support.opkey.com
idempiere.opkey.com
idempiere.opkey.com
helpdesk.vacorp.com
sugarcrm.opkey.com
opkey.com
odoo.opkey.com
odoo.opkey.com
backup.opkey.com
support.opkey.com
odoo.opkey.com
itsupport.nationalable.org
odoo.opkey.com
*.opkey.com
fergusonsupport.opkey.com
*.sugarcrm.opkey.com
*.backup.opkey.com
*.staging.opkey.com
sugarcrm.opkey.com
opkey.com
*.helpdocs.opkey.com
*.opkey.com
www.testui.opkey.com
backup.opkey.com
openproject.opkey.com
openproject.opkey.com
ls.opkey.com
*.sugarcrm.opkey.com
backup.opkey.com
atencion.traffilog.mx
getit.saiapex.in
*.support.opkey.com
studentsupport.atpstar.com
support.opkey.com
www.account.opkey.com
*.openproject.opkey.com
getit.saiapex.in
itsupport.nationalable.org
idempiere.opkey.com
*.opkey.com
idempiere.opkey.com
opkey.com
opkey.com
getit.saiapex.in
support.ksportusa.com
support.opkey.com
pfizer.opkey.com
opkey.com
sales.miraclesmind.site
*.helpdocs.opkey.com
opkey.com
odoo.opkey.com
staging.opkey.com
backup.opkey.com
openproject.opkey.com
sugarcrm.opkey.com
openproject.opkey.com
sales.miraclesmind.site
*.openproject.opkey.com
sales.miraclesmind.site
getit.saiapex.in
support.egicat.com
sugarcrm.opkey.com
opkey.com
odoo.opkey.com
ls.opkey.com
idempiere.opkey.com
fergusonsupport.opkey.com
opkey.com
sugarcrm.opkey.com
openproject.opkey.com
support.tekxiph.com
backup.opkey.com
www.ct.opkey.com
ct.opkey.com
*.staging.opkey.com
www.testui.opkey.com
opkey.com
support.egicat.com
fergusonsupport.opkey.com
opkey.com
m.opkey.com
*.opkey.com
m.opkey.com
openproject.opkey.com
openproject.opkey.com
*.opkey.com
sales.miraclesmind.site
Certificate
The complete raw certificate details for staging.opkey.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISA53cS6onge1FuTQztj7c0MkaMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA5MjQwMTQwMDVaFw0yMjEyMjMwMTQwMDRaMBwxGjAYBgNVBAMT EXN0YWdpbmcub3BrZXkuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlUjnFboxxWXfS2bDHvIceklZBVIJHwDoko5U1MamriPcJ5JBzZNOpgx/i0I S831Ap9fWRJ3274Sehb+TFbbQ4dicGTuonoa7PjXixUXrmmSJicIDc9AvRjrt2AL JL8Nh2QvCR4HmZ0B9Bxut5u2pfYNAe1n8HeVxQXlB45YNkQaEUpdz1dg5N9BZ0fq ub95Qp4VIAaZuOqv4PyNf2Rql2HpxxzM/oJ20y6W7f/mhyM4ixgt0bCInbJuKeZI /45nm36aaT/R3TQHBIfBusYB/YXEHjl6wctuuqf6bMxXmCC+Avd8a5idFpXpXJEq N+fOlv6dyvhlJugKFVLp3sNpnQIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBSEp0U8e1JfiOfqKmdSwSGSdQcSXzAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzAxBgNVHREEKjAoghMqLnN0YWdpbmcub3BrZXkuY29tghFzdGFnaW5nLm9w a2V5LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYG CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB 1nkCBAIEgfUEgfIA8AB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kT AAABg21dxBEAAAQDAEcwRQIgdGlkxl1E/gzu8UtO9dfMUgZFwqjROt9fx08IBWhQ Mr4CIQCPB7kpq51/hUGQHDBbmFPEBEJtRiR9JJOCvn5Te5RfJAB2AEalVet1+pEg MLWiiWn0830RLEF0vv1JuIWr8vxw/m1HAAABg21dxBMAAAQDAEcwRQIgJJ/h3cZf 6W32yy/SUys5i7JC3wH1u2pSQkqd9FlOD68CIQD8Dfu0FQrg4S8lNExLeurzJAoJ riByGBRYAoHcR6FsqTANBgkqhkiG9w0BAQsFAAOCAQEAEDt6AK6F1WyLWc+6kt3n ZT2TFOesq3cftF44vtey/Pzor9ShiSPrEIBl+OtL1VGggWScR9+DLhDW+g8knCgK oFbhWbrwT0DN8NS1gfZVsTc0QZZkI3IC+yWbtnU99wh1cgbCd/t0AiSnulRGtd5T dC11yOt6hrIWWC2xSs8D+Xg6Y6ODnMr9ijiYizyfu3Aa/9zMI7LNrO78QgwUx1H/ tc/hqKRwPLYaAWdobVEWUkGm2OUu0LSQrs6lv6gOJwA+Knb9d6HB1447bT4CwAe9 xlY3FeSrFmHdm6FQCF5W3jzWfTr9xIv+okoobEM8u7RtFMYxpN4LlSypK9L+oNaO yQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlUjnFboxxWXfS2bDHvI ceklZBVIJHwDoko5U1MamriPcJ5JBzZNOpgx/i0IS831Ap9fWRJ3274Sehb+TFbb Q4dicGTuonoa7PjXixUXrmmSJicIDc9AvRjrt2ALJL8Nh2QvCR4HmZ0B9Bxut5u2 pfYNAe1n8HeVxQXlB45YNkQaEUpdz1dg5N9BZ0fqub95Qp4VIAaZuOqv4PyNf2Rq l2HpxxzM/oJ20y6W7f/mhyM4ixgt0bCInbJuKeZI/45nm36aaT/R3TQHBIfBusYB /YXEHjl6wctuuqf6bMxXmCC+Avd8a5idFpXpXJEqN+fOlv6dyvhlJugKFVLp3sNp nQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 315054012434344891677518669155169477904666 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-24 01:40:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-23 01:40:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.opkey.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24532214820498667421808171310170356867452604585807175860309245285809310537128204834134961686096274817194946661168005764302770625619345268973283752493126111835025247935462721600110819799930770057072139806659411000398670520918245435009726959112282969397354780432645207706618329255990831637588339705079245487150226201301539395463927255094318786533596459866494217021234811385732124795785925579966192645255610589780482096371098540580493024754225022903273298481202044566862019637972451615037701458946992898691746363133872115991495704039315603156299695757165889135974804815878415221846144586846570130812426647774025771870621 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 84a7453c7b525f88e7ea2a6752c121927507125f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.opkey.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.opkey.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001836d5dc41100000403004730450220746964c65d44fe0ceef14b4ef5d7cc520645c2a8d13adf5fc74f0805685032be0221008f07b929ab9d7f8541901c305b9853c404426d46247d249382be7e537b945f2400760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001836d5dc41300000403004730450220249fe1ddc65fe96df6cb2fd2532b398bb242df01f5bb6a52424a9df4594e0faf022100fc0dfbb4150ae0e12f25344c4b7aeaf3240a09ae20721814580281dc47a16ca9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00103b7a00ae85d56c8b59cfba92dde7653d9314e7acab771fb45e38bed7b2fcfce8afd4a18923eb108065f8eb4bd551a081649c47df832e10d6fa0f249c280aa056e159baf04f40cdf0d4b581f655b13734419664237202fb259bb6753df708757206c277fb740224a7ba5446b5de53742d75c8eb7a86b216582db14acf03f9783a63a3839ccafd8a38988b3c9fbb701affdccc23b2cdaceefc420c14c751ffb5cfe1a8a4703cb61a0167686d51165241a6d8e52ed0b490aecea5bfa80e27003e2a76fd77a1c1d78e3b6d3e02c007bdc6563715e4ab1661dd9ba150085e56de3cd67d3afdc48bfea24a286c433cbbb46d14c631a4de0b952ca92bd2fea0d68ec9