charts.invite.hk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d3:0d:42:12:47:11:65:8a:86:1b:dd:5d:f8:ee:f0:59:fa was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=charts.invite.hk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d3:0d:42:12:47:11:65:8a:86:1b:dd:5d:f8:ee:f0:59:faSerial Number (int): 333154060241850579340692998930370300762618
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a0:1f:f5:2d:4a:ff:81:e4:b0:ee:67:8d:be:c3:8c:8e:ce:ea:8d:b2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 05:50:cd:b0:aa:4d:24:ca:da:3f:2b:18:4a:63:ab:79:ee:23:fb:d9
Fingerprint (sha256): a5:97:56:70:31:7f:0b:4f:b0:cd:05:82:d4:a8:75:8d:fd:2e:ff:d7:1c:79:85:18:5c:c8:fb:49:bc:93:d0:55
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate charts.invite.hk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for charts.invite.hk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
charts.invite.hk
Other certificates including the domain name invite.hk
(limited to 100 certificates)
mail.invite.hk
gateway.invite.hk
www.lockhavencamps.com
admin.invite.hk
www.kylewludwig.com
mail.invite.hk
roberttodar.com
theeagerstudent.com
suncoastcurtains.invite.hk
gateway.invite.hk
asiaweb.invite.hk
mail.invite.hk
link.entango.app
cienciaskincare.invite.hk
asiaweb.invite.hk
mail.invite.hk
fbtest.invite.hk
charts.invite.hk
blog.settlework.com
chef-dev.vegecious.com
admin.invite.hk
secure.invite.hk
worlddancecongo.be
www.coengineers.io
cienciaskincare.invite.hk
cloud.wayout.app
crewmind.co.uk
mail.invite.hk
blog.settlework.com
giris.akillikoc.com
gateway.invite.hk
inout.dependable.tech
cienciaskincare.invite.hk
mannereclass.auxswot.com
secure.invite.hk
audiodescribedart.org
blog.settlework.com
mail.invite.hk
mahamulti.com
aussiegolddetecting.invite.hk
cienciaskincare.invite.hk
admin.invite.hk
sebdesigner.com
aussiegolddetecting.invite.hk
mail.invite.hk
aussiegolddetecting.invite.hk
www.zeromind.app
taloam.com.br
www.afrikavenir.org
fbtest.invite.hk
www.zeromind.app
asiaweb.invite.hk
gateway.invite.hk
my-qa.goodwheel.work
moodlift.io
hyttiset.invite.hk
mail.invite.hk
0ch.app
mail.invite.hk
mail.invite.hk
mail.invite.hk
mail.invite.hk
bizcon.invite.hk
entrepots.africa
showdepremios.ricmais.com.br
r.gtw.vc
admin.invite.hk
admin.invite.hk
moodlift.io
admin.invite.hk
www.rsh.ng
hk.invite.hk
mail.invite.hk
daniyalkhan.tk
showdepremios.ricmais.com.br
0ch.app
developers.kinetik.care
charts.invite.hk
cienciaskincare.invite.hk
suncoastcurtains.invite.hk
marketclickerp.com
cloud.wayout.app
gateway.invite.hk
www.craftswomenship.it
quail.site
hk.invite.hk
www.anyvrkids.com
benslimenesouhail.com
aussiegolddetecting.invite.hk
aussiegolddetecting.invite.hk
asiaweb.invite.hk
autosense.ch
aktashafnafsak.co
ssg.ai
my.tractors.sg
hk.invite.hk
www.bulgarianieruchomosci.com
www.superearly.com
gateway.invite.hk
gateautomationindia.com
gateway.invite.hk
www.lockhavencamps.com
admin.invite.hk
www.kylewludwig.com
mail.invite.hk
roberttodar.com
theeagerstudent.com
suncoastcurtains.invite.hk
gateway.invite.hk
asiaweb.invite.hk
mail.invite.hk
link.entango.app
cienciaskincare.invite.hk
asiaweb.invite.hk
mail.invite.hk
fbtest.invite.hk
charts.invite.hk
blog.settlework.com
chef-dev.vegecious.com
admin.invite.hk
secure.invite.hk
worlddancecongo.be
www.coengineers.io
cienciaskincare.invite.hk
cloud.wayout.app
crewmind.co.uk
mail.invite.hk
blog.settlework.com
giris.akillikoc.com
gateway.invite.hk
inout.dependable.tech
cienciaskincare.invite.hk
mannereclass.auxswot.com
secure.invite.hk
audiodescribedart.org
blog.settlework.com
mail.invite.hk
mahamulti.com
aussiegolddetecting.invite.hk
cienciaskincare.invite.hk
admin.invite.hk
sebdesigner.com
aussiegolddetecting.invite.hk
mail.invite.hk
aussiegolddetecting.invite.hk
www.zeromind.app
taloam.com.br
www.afrikavenir.org
fbtest.invite.hk
www.zeromind.app
asiaweb.invite.hk
gateway.invite.hk
my-qa.goodwheel.work
moodlift.io
hyttiset.invite.hk
mail.invite.hk
0ch.app
mail.invite.hk
mail.invite.hk
mail.invite.hk
mail.invite.hk
bizcon.invite.hk
entrepots.africa
showdepremios.ricmais.com.br
r.gtw.vc
admin.invite.hk
admin.invite.hk
moodlift.io
admin.invite.hk
www.rsh.ng
hk.invite.hk
mail.invite.hk
daniyalkhan.tk
showdepremios.ricmais.com.br
0ch.app
developers.kinetik.care
charts.invite.hk
cienciaskincare.invite.hk
suncoastcurtains.invite.hk
marketclickerp.com
cloud.wayout.app
gateway.invite.hk
www.craftswomenship.it
quail.site
hk.invite.hk
www.anyvrkids.com
benslimenesouhail.com
aussiegolddetecting.invite.hk
aussiegolddetecting.invite.hk
asiaweb.invite.hk
autosense.ch
aktashafnafsak.co
ssg.ai
my.tractors.sg
hk.invite.hk
www.bulgarianieruchomosci.com
www.superearly.com
gateway.invite.hk
gateautomationindia.com
Certificate
The complete raw certificate details for charts.invite.hk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISA9MNQhJHEWWKhhvdXfju8Fn6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjQxNzIyNTBaFw0y MDA0MjMxNzIyNTBaMBsxGTAXBgNVBAMTEGNoYXJ0cy5pbnZpdGUuaGswggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL3m2eo1Du7ON0MWYo0DXKIrdnEm4Z /v2GakV7+ybwE+2eLXmOt4HasylpeStmTGGVuG934lbxxIy5mNTvWHNQWsNIANZc 7LGmatqNxCic7/5B1k4BevbetOns52FCWcfvZn3y4gzwkUeU4ssXhaQg0mvnoEPV ciQeo5Wf1gkLjMiAbhhKN/sMSblixi+iBeVIegWdZL9c61WAglUcSjTCX9ykmsYz myxIm8zYr836V1vcLAT4LA8HDxNJLx5JspP4E5O6lUTcEUmIzKmC+iguBBEJqhG4 IROwmSzyYgxobrmBPR0NPjVsIObos6gTo4GBOuwsBF7gys0GKpfTisA7AgMBAAGj ggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKAf9S1K/4HksO5njb7DjI7O 6o2yMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wGwYDVR0RBBQwEoIQY2hhcnRzLmludml0ZS5oazBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3ALIeBcyL os2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABb9jK2wAAAAQDAEgwRgIhAOuo 0yCpa5UZDJZ/X/5fd5Zcb415PVLSMo9OZ0AIK/gCAiEAu83UIO0WoWx4Hw6DRw63 EZZ2WrHQ7X+T4lR6boyfGtUAdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCo qo6ycwAAAW/Yyt0AAAAEAwBHMEUCIDO47RCbcPk7BLTmANW0wpA8E/wktkhmw1bO dmQ+wmDzAiEA7ukjV6cEQXypR64c7DsfrjHUFvO/etAqCpvObIF5biowDQYJKoZI hvcNAQELBQADggEBADbbmx6qi/Htg39Utzt4j31SAU3knRR6sdDhTaHwPejc+gH+ L3OqFLbIrOxXoEQkNwheUgy69mZxPyDtzYo7a7Cs3tsSboNO6nJLj7qh2DwVFIfO TJZf8rqEphIiuByalz/f8o4JhEr2CJgJzaGG8BjewNdD0DlpTdwdMuO6tFR5Gr4t oOx9G/05CgFs2JAG8M2Hi/nmStRYNsSt6A2Njm3Cq8+zxdwvt13UABD/AF7v1sHI 85fmTNLJ0AhCbrCnulFF+QNKlSk2iE4kvmi9obNicYin6CcQmpnXTD6C/ClyFpzL Gh65cx0GRCL2ugrYOROQn5BERmuls9YZjukcI6I= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy95tnqNQ7uzjdDFmKNA1 yiK3ZxJuGf79hmpFe/sm8BPtni15jreB2rMpaXkrZkxhlbhvd+JW8cSMuZjU71hz UFrDSADWXOyxpmrajcQonO/+QdZOAXr23rTp7OdhQlnH72Z98uIM8JFHlOLLF4Wk INJr56BD1XIkHqOVn9YJC4zIgG4YSjf7DEm5YsYvogXlSHoFnWS/XOtVgIJVHEo0 wl/cpJrGM5ssSJvM2K/N+ldb3CwE+CwPBw8TSS8eSbKT+BOTupVE3BFJiMypgvoo LgQRCaoRuCETsJks8mIMaG65gT0dDT41bCDm6LOoE6OBgTrsLARe4MrNBiqX04rA OwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 333154060241850579340692998930370300762618 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 17:22:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-23 17:22:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'charts.invite.hk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25736059342411091752056839758313778149611115828695004360331780495983899952690893011384238952540434401810318097110397690620549880791759864371116763744150046798938799606065090859435166000446127268463716195601254648712528670078027605630111177136668366539534641184828583752816251724169164326532294350476422997428728386519669742790305877861835920106265226533356331715979368235855395767183011892452738827058699477478644565665856048629753780066287602482813354612703563832738929483894395799132463477581630598141440691962268470731113250441808072316567893609717675892507705962625836606467429694606726821842563851284721762484283 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a01ff52d4aff81e4b0ee678dbec38c8eceea8db2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charts.invite.hk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fd8cadb000000040300483046022100eba8d320a96b95190c967f5ffe5f77965c6f8d793d52d2328f4e6740082bf802022100bbcdd420ed16a16c781f0e83470eb71196765ab1d0ed7f93e2547a6e8c9f1ad5007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fd8cadd000000040300473045022033b8ed109b70f93b04b4e600d5b4c2903c13fc24b64866c356ce76643ec260f3022100eee92357a704417ca947ae1cec3b1fae31d416f3bf7ad02a0a9bce6c81796e2a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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