korkortnu.se
Issued by Sectigo RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number 98:9a:28:42:19:aa:f9:64:2b:27:16:81:68:c1:85:7b was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=korkortnu.se,OU=Domain Control Validated+OU=PositiveSSL
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 98:9a:28:42:19:aa:f9:64:2b:27:16:81:68:c1:85:7bSerial Number (int): 202843085608908268496341843064484103547
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: ab:66:b4:e4:ca:7d:04:8b:c3:55:5e:41:7d:1a:f4:21:4f:b7:17:77
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1
Fingerprint (sha1): b2:d1:76:e8:38:d5:de:4a:c1:f5:61:7e:4f:26:b8:34:de:37:fd:09
Fingerprint (sha256): b1:3a:49:76:24:7d:20:53:32:85:bc:55:13:a2:bf:0e:21:81:f2:75:1d:95:4a:8f:3d:f7:f5:db:7d:77:27:b3
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCheck the revocation status for certificate korkortnu.se
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for korkortnu.se
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
korkortnu.se
www.korkortnu.se
www.korkortnu.se
Other certificates including the domain name korkortnu.se
(limited to 100 certificates)
Certificate
The complete raw certificate details for korkortnu.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIRAJiaKEIZqvlkKycWgWjBhXswDQYJKoZIhvcNAQELBQAw gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD QTAeFw0xOTEyMDYwMDAwMDBaFw0yMDEyMDUyMzU5NTlaMFAxITAfBgNVBAsTGERv bWFpbiBDb250cm9sIFZhbGlkYXRlZDEUMBIGA1UECxMLUG9zaXRpdmVTU0wxFTAT BgNVBAMTDGtvcmtvcnRudS5zZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC ggIBAK8ce7J0zK2buwE+ONaeBpLza7u1ZhnywZyU9otxA+rtMQhrANylAhI7dnxf jGqTYcRoAR76ahUmxjPUhuHthjnMPfeNqQKGvqiGuz24smTUdiqgO8YsDg03v3e3 halyot3D02hPh5WfNhdV5/ynU/gjzEYb5r+SoPo++olSSQrldQaVWdJsDT4KS8q8 3oHbgslpF7SNSB9LjTc5d5Pc6dX0yPtPZ0SoEnvTatFs0X7cRAfj5ugAmo+faOhO I/iDQpk1Wi9oE9DeYy4xIwm5d1T5k2/E7IJlki1QTWBFdv5jSmG0ngaqbCfi/Jdx 8TGO2Odkudo9GtQSnEwpHY/kK/wrfcG6nAb9aHdG2POrM6R63RDRHeAiWhiqB5dT iOpXq6VZNaaJfZBXz5hFaBJ0zgQJr3UKvFPwGE/k6c3soVFL8bdHzyVuGvLPGocK N/1vbwQ20+B294YzuHJGXdSRHFExF6OuuVgwjGvqOlwL3mfh09v8xLKKZXZjLgbc ySdjlRY4gM2/MJygrjSMtfwqXoxwifBmr4wTjI0IgAbdW06lJM0IxmhHma/0fqCF Fbf5mQl7vZHB04TYMuqraGzRfm4zbcnkKzZrV3vf+3zOEgY+AAfQ0f2t4Qm5MK5P RMt99L200/v7iyq5L4HfhIYNijXc4tziKaxmkuOX2itL9nCbAgMBAAGjggKGMIIC gjAfBgNVHSMEGDAWgBSNjF7EVK2K4Xfpm/mbBeG4AY1h4TAdBgNVHQ4EFgQUq2a0 5Mp9BIvDVV5BfRr0IU+3F3cwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYB BAGyMQECAgcwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMw CAYGZ4EMAQIBMIGEBggrBgEFBQcBAQR4MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9j cnQuc2VjdGlnby5jb20vU2VjdGlnb1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVT ZXJ2ZXJDQS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29t MCkGA1UdEQQiMCCCDGtvcmtvcnRudS5zZYIQd3d3LmtvcmtvcnRudS5zZTCCAQQG CisGAQQB1nkCBAIEgfUEgfIA8AB3AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxh Ohpp06IcAAABbtsN0EgAAAQDAEgwRgIhAN+0CWj/M3Qu5Ld500VQ8fwosxcihZrH I3sVwRQtCIInAiEAm2aigROmeq/FXOgY6JsvzL0a5WHdVGhEzECaPwDicg8AdQBe p3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW7bDdA0AAAEAwBGMEQC IAU+FYqNll1EGEEjkY8iTLewGHeQqoMeqWtSHuMY1tFUAiA2CV5W0oPCou0BEKed 6ecVhrgqjvGktEtmH73K+Eam+TANBgkqhkiG9w0BAQsFAAOCAQEAtuX7ztJQ+si3 iSpOQbuqHDsH9WGLtp/HBxpz0tJCE0vcietF5G+weAdeBW/8kU7SC6D18YWRi3SV hV2ts4azRLtZgrXF26mYdNRDhP2CJcbf3HNhGg/R7qDupvHXRol9t1B23p4wB90+ ciMgHoEx6kqrSONisDkcyxHpwzH01h9unLhL71L7PYJZfUKIk+beTIze5Po/qe2s HfgkAsPGTmmOQdLFz+pi4gIc3ZHtWiZpuml70At194M0w3K1oEWB+M04yxWQ1GoH ACjBJcVYPaMgS6McfxX7Y3N2r9Vz3r+QuQNe+fR9f443zTMu9wOR8+xI885IlsCM OHDyvyCVOQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArxx7snTMrZu7AT441p4G kvNru7VmGfLBnJT2i3ED6u0xCGsA3KUCEjt2fF+MapNhxGgBHvpqFSbGM9SG4e2G Ocw9942pAoa+qIa7PbiyZNR2KqA7xiwODTe/d7eFqXKi3cPTaE+HlZ82F1Xn/KdT +CPMRhvmv5Kg+j76iVJJCuV1BpVZ0mwNPgpLyrzegduCyWkXtI1IH0uNNzl3k9zp 1fTI+09nRKgSe9Nq0WzRftxEB+Pm6ACaj59o6E4j+INCmTVaL2gT0N5jLjEjCbl3 VPmTb8TsgmWSLVBNYEV2/mNKYbSeBqpsJ+L8l3HxMY7Y52S52j0a1BKcTCkdj+Qr /Ct9wbqcBv1od0bY86szpHrdENEd4CJaGKoHl1OI6lerpVk1pol9kFfPmEVoEnTO BAmvdQq8U/AYT+TpzeyhUUvxt0fPJW4a8s8ahwo3/W9vBDbT4Hb3hjO4ckZd1JEc UTEXo665WDCMa+o6XAveZ+HT2/zEsopldmMuBtzJJ2OVFjiAzb8wnKCuNIy1/Cpe jHCJ8GavjBOMjQiABt1bTqUkzQjGaEeZr/R+oIUVt/mZCXu9kcHThNgy6qtobNF+ bjNtyeQrNmtXe9/7fM4SBj4AB9DR/a3hCbkwrk9Ey330vbTT+/uLKrkvgd+Ehg2K Ndzi3OIprGaS45faK0v2cJsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 202843085608908268496341843064484103547 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'korkortnu.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714391623170585685523878298022655747299078623408156539902544515281069615004105018517543334911404830437798573201968190237656904600708344775490141792404900717672767847376609702465501256129644764635210601576609240924432039576771237370651796043559962380772955093896163923434063156722988038752765311257967119246825894774193999324303465673225778114926948102390767040383697501524156608490710357217667437034461835983239577515198419757689785924220012881482171719384517011724575137759345938052124706301266290625278535314949334880760350531912100258133036933413641494396177929076064569856043965102609610584552918864064084900085432216670948385985967616670250254056524955819865607791969959657931406467714787866478589626078877117645830290702762840215977901136244045734050592869713325336598813807013262736498086608964669119232260130723242861707448005367085516227031167381392868338891319632699338297521940895699060715301565322954672382219099862461584794202076879161722912578011007733334901351925948063537030243504682229006997669657289033513954566072620402700150334896695356007649504711453684598678213315075481995812020088227049504358251648167408389291327462859967946808359989204272395118909245730041186355692420071473061118857979028729039450296184987 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ab66b4e4ca7d048bc3555e417d1af4214fb71777 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korkortnu.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.korkortnu.se' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016edb0dd0480000040300483046022100dfb40968ff33742ee4b779d34550f1fc28b31722859ac7237b15c1142d0882270221009b66a28113a67aafc55ce818e89b2fccbd1ae561dd546844cc409a3f00e2720f0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016edb0dd03400000403004630440220053e158a8d965d44184123918f224cb7b0187790aa831ea96b521ee318d6d154022036095e56d283c2a2ed0110a79de9e71586b82a8ef1a4b44b661fbdcaf846a6f9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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