puppet.privasphere.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b0:6d:79:4d:37:63:a2:20:a0:db:39:c0:89:8d:42:db:97 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=puppet.privasphere.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b0:6d:79:4d:37:63:a2:20:a0:db:39:c0:89:8d:42:db:97Serial Number (int): 321372070058960271489216451891016073665431
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7c:b5:b2:6f:a8:b8:04:9a:ec:3b:44:6c:55:0c:bf:e1:89:a3:59:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0f:5c:ad:75:b1:be:80:5d:eb:f2:a0:42:ff:da:14:55:f2:bb:f9:91
Fingerprint (sha256): ab:43:4d:48:88:c0:43:b9:db:98:33:d4:e9:36:b6:2d:95:07:e7:45:7b:6b:a0:ec:16:93:f1:a4:2f:c3:c0:d1
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate puppet.privasphere.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for puppet.privasphere.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
puppet.privasphere.com
Other certificates including the domain name privasphere.com
(limited to 100 certificates)
git.privasphere.com
crm.privasphere.com
crm.privasphere.com
bugs.privasphere.com
www-dev.privasphere.com
www-dev.privasphere.com
crm.privasphere.com
crl-dev.privasphere.com
bugs.privasphere.com
typo3.privasphere.com
git.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
typo3.privasphere.com
*.privasphere.com
bugs.privasphere.com
www.privasphere.com
crm.privasphere.com
bugs.privasphere.com
bugs.privasphere.com
crl-dev.privasphere.com
typo3.privasphere.com
www.privasphere.com
git.privasphere.com
tickets.privasphere.com
www.privasphere.com
crm.privasphere.com
crl-dev.privasphere.com
tickets.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
www.privasphere.com
typo3.privasphere.com
typo3.privasphere.com
www.privasphere.com
crm.privasphere.com
tickets.privasphere.com
tickets.privasphere.com
www.privasphere.com
tickets.privasphere.com
*.privasphere.com
smtp.privasphere.com
bugs.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
tickets.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
www-dev.privasphere.com
www.privasphere.com
www.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
crm.privasphere.com
puppet.privasphere.com
www.privasphere.com
tickets.privasphere.com
typo3.privasphere.com
tickets.privasphere.com
typo3.privasphere.com
typo3.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
www-dev.privasphere.com
git.privasphere.com
www.privasphere.com
bugs.privasphere.com
crm.privasphere.com
crl-dev.privasphere.com
puppet.privasphere.com
www.privasphere.com
www.privasphere.com
git.privasphere.com
git.privasphere.com
tickets.privasphere.com
crl-dev.privasphere.com
tickets.privasphere.com
crl-dev.privasphere.com
bugs.privasphere.com
bugs.privasphere.com
typo3.privasphere.com
*.privasphere.com
www.privasphere.com
www.privasphere.com
crm.privasphere.com
typo3.privasphere.com
crm.privasphere.com
typo3.privasphere.com
bugs.privasphere.com
tickets.privasphere.com
bugs.privasphere.com
tickets.privasphere.com
bugs.privasphere.com
crm.privasphere.com
crm.privasphere.com
crm.privasphere.com
bugs.privasphere.com
www-dev.privasphere.com
www-dev.privasphere.com
crm.privasphere.com
crl-dev.privasphere.com
bugs.privasphere.com
typo3.privasphere.com
git.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
typo3.privasphere.com
*.privasphere.com
bugs.privasphere.com
www.privasphere.com
crm.privasphere.com
bugs.privasphere.com
bugs.privasphere.com
crl-dev.privasphere.com
typo3.privasphere.com
www.privasphere.com
git.privasphere.com
tickets.privasphere.com
www.privasphere.com
crm.privasphere.com
crl-dev.privasphere.com
tickets.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
www.privasphere.com
typo3.privasphere.com
typo3.privasphere.com
www.privasphere.com
crm.privasphere.com
tickets.privasphere.com
tickets.privasphere.com
www.privasphere.com
tickets.privasphere.com
*.privasphere.com
smtp.privasphere.com
bugs.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
tickets.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
www-dev.privasphere.com
www.privasphere.com
www.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
crm.privasphere.com
puppet.privasphere.com
www.privasphere.com
tickets.privasphere.com
typo3.privasphere.com
tickets.privasphere.com
typo3.privasphere.com
typo3.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
www-dev.privasphere.com
git.privasphere.com
www.privasphere.com
bugs.privasphere.com
crm.privasphere.com
crl-dev.privasphere.com
puppet.privasphere.com
www.privasphere.com
www.privasphere.com
git.privasphere.com
git.privasphere.com
tickets.privasphere.com
crl-dev.privasphere.com
tickets.privasphere.com
crl-dev.privasphere.com
bugs.privasphere.com
bugs.privasphere.com
typo3.privasphere.com
*.privasphere.com
www.privasphere.com
www.privasphere.com
crm.privasphere.com
typo3.privasphere.com
crm.privasphere.com
typo3.privasphere.com
bugs.privasphere.com
tickets.privasphere.com
bugs.privasphere.com
tickets.privasphere.com
bugs.privasphere.com
crm.privasphere.com
Certificate
The complete raw certificate details for puppet.privasphere.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISA7BteU03Y6IgoNs5wImNQtuXMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDUwMzAxMjNaFw0y MDA1MDUwMzAxMjNaMCExHzAdBgNVBAMTFnB1cHBldC5wcml2YXNwaGVyZS5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhA4XdAvaSBjyrGciEF9yt quXORr9zm3Bknxe1ASNV3OzREaq2ZtVVCAhF+yU+syRLD8g8mpQ1Yf6RzZNC/BHu koAANdoxtHRxYdeDSznhsosJQV/BLKqMsd+goZWwT32/D68KifAjS5ZnKjjZEQXf AQfys0n2zk9qUd7J5mUxB6z5PB/LgozfFImVEiuRxOkc5YoKLOZaz3AKnsYH6zy9 8SkLMbc0vR+bSPdF6xpFSMgJrn+4kuR/dg5CbKF48QvCMRF6cuSVK9creZkZyaxe bQho9eyDRXtUwfWRsgjJ0bJWQoD5O29cnoiY7ahcUc9MNiQ83lH+OgZfALb0JL65 AgMBAAGjggJqMIICZjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHy1sm+ouASa7DtE bFUMv+GJo1moMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wIQYDVR0RBBowGIIWcHVwcGV0LnByaXZhc3BoZXJlLmNvbTBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQE gfEA7wB1AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcBOCfY0A AAQDAEYwRAIgCfAuco5s3IVc8/Qd0i24USNGy6038MVjv6N/T9DKpUwCIF9s7fWD bYrwiHb4ulsroO1LZDjW63Aq31DWwKIYg4JYAHYAsh4FzIuizYogTodm+Su5iiUg Z2va+nDnsklTLe+LkF4AAAFwE4J9fAAABAMARzBFAiEA8igCEOGr+sw+G61c48e0 R5PBgbzT+QCWQjTBsvExR5ACIG6gz8JRbQeUTJI/2QEUzWSweKBFcbhz486i3AG3 1vuLMA0GCSqGSIb3DQEBCwUAA4IBAQBQb5Szwupp1Ua3x4FjCof/xu9vBo/HartC G8zQmYi8QKQtQGrysHw5qzuFGqTsY0984B5nSSz5iGT8xAljNWdr4xVuIRJh/0/Q jEhbS7Xi9cQD0bHFg4xFlWjaSIBycSym0t/yWZSOYK/fjGuYAZCLYsYJDhfXzp+K u/G67BdHrB5ja9RvBEERwzWnF1gqFc1+g+7ewXxPwFtJygyVd8SzVepib5ZlF3HQ KrQ1JNEKSqU62WtGI4laqp6yx9b4nGetdnCpvy0Xmje5rgAgUFzvav/QPNVeu5GB /sPYfh9/Uflsb+FPPsv+6Ra64aOpHW8q2PcLT1COSNbv1gf1AWoG -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QOF3QL2kgY8qxnIhBfc rarlzka/c5twZJ8XtQEjVdzs0RGqtmbVVQgIRfslPrMkSw/IPJqUNWH+kc2TQvwR 7pKAADXaMbR0cWHXg0s54bKLCUFfwSyqjLHfoKGVsE99vw+vConwI0uWZyo42REF 3wEH8rNJ9s5PalHeyeZlMQes+Twfy4KM3xSJlRIrkcTpHOWKCizmWs9wCp7GB+s8 vfEpCzG3NL0fm0j3ResaRUjICa5/uJLkf3YOQmyhePELwjERenLklSvXK3mZGcms Xm0IaPXsg0V7VMH1kbIIydGyVkKA+TtvXJ6ImO2oXFHPTDYkPN5R/joGXwC29CS+ uQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321372070058960271489216451891016073665431 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 03:01:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 03:01:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'puppet.privasphere.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28405355825884367788658421286398481317792273746340124349631454198026336534155411319586045400472846980093932191060140576023326767250503494953372353297487591237328214565488260691157008820889343825506456763122464054733341628862659024470389922519852261574087679839682190246296272778473429596534538618225086402267315267548176762803000732024968458116799535676487453663023637373397585877014205248977563659577420961693203444152613041910446011950279342616158705261259331803538400613775881985039202258829016552673735866563381749857073352096360440637419816043655525576958387395475072376781792131370226443078288003200299919785657 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7cb5b26fa8b8049aec3b446c550cbfe189a359a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puppet.privasphere.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017013827d8d0000040300463044022009f02e728e6cdc855cf3f41dd22db8512346cbad37f0c563bfa37f4fd0caa54c02205f6cedf5836d8af08876f8ba5b2ba0ed4b6438d6eb702adf50d6c0a218838258007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017013827d7c0000040300473045022100f2280210e1abfacc3e1bad5ce3c7b44793c181bcd3f900964234c1b2f131479002206ea0cfc2516d07944c923fd90114cd64b078a04571b873e3cea2dc01b7d6fb8b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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