hommage-leipzig.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:6e:bd:e4:e6:49:01:ab:ec:05:c7:ad:cd:0b:69:a8:03:57 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=hommage-leipzig.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:6e:bd:e4:e6:49:01:ab:ec:05:c7:ad:cd:0b:69:a8:03:57Serial Number (int): 386132616693969694637480510973473540539223
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ce:77:e0:a6:08:b5:8e:63:08:c7:4f:38:40:14:28:38:4c:a6:4e:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 85:7e:ff:f4:6f:df:5b:94:36:7b:1f:4c:75:7a:8d:b4:95:f7:87:12
Fingerprint (sha256): b3:5e:3d:43:ad:81:13:d1:a8:66:4f:6b:f4:17:26:0a:1a:eb:e2:37:99:46:e6:49:fb:bd:a0:88:d1:83:91:2a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate hommage-leipzig.de
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hommage-leipzig.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hommage-leipzig.de
hommage.isp-vhost04.domservice.de
www.hommage-leipzig.de
hommage.isp-vhost04.domservice.de
www.hommage-leipzig.de
Other certificates including the domain name hommage-leipzig.de
(limited to 100 certificates)
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
Certificate
The complete raw certificate details for hommage-leipzig.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGmDCCBYCgAwIBAgISBG695OZJAavsBcetzQtpqANXMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMTcwMTAxNDZaFw0x OTA2MTUwMTAxNDZaMB0xGzAZBgNVBAMTEmhvbW1hZ2UtbGVpcHppZy5kZTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKxt5QGp7IIy+uGMKohvlOT+R54V 6WnzKw2U58w+mKKy6ZjjNjE9FmYVHYn28glWzbh3kcnL/hB4LudNLcEJ+xrB2LYj Yyz07PXAQJEyhjXQKThhZhCEvx6JtvDRa3JIMuH5/FeIeWD65FP/3OZhTJtz0PeV 279v5Gl5kOhEWejg8qPI5MCow2SRgOzJ9Rts9cTg96ye7LD1m6pDG+iRCpw9yxYp 9voTxvEG96kutC/vhxSB/mCmDSRiMOT3hV+cXacYdODNl7ZmOEOiMVoGyJMD9LN0 K4rPdP9M62SJjiA9PJNqY8HZ60LidvECNu/IeamvEJGmDDfz+6G+xa7Uq6NL6WXn 0VIFqfL/My2jyirlumoogAg6V/bBaVsyKrtnbDoKsGarf3aS61MlDZ+kORhRZccl T16fBhOBVq/eGnMwDUyPglhYKmtVCO5zsfhuPaQBvHqOU+Ybr/iphjEx0COUcqyy AJxNRc3fQKhV2DxMa+SQ7ZHvk8MjmlaNReJcu9TiFE2pJar9OTuUbjRCkrje+HA+ JWWxKAeryRxHvoeBvanjwx+URHzUj4fhqrSZZ3/6qLeLnNNpAR3FAEtr7skBruU+ mYxCBtNEpPzZYTryf9/Lc62I3HdmabFfoIyCO15iQLA/Aa3RtI/foYdckQyJJWes zOGs7Gd6R+hd2gfFAgMBAAGjggKjMIICnzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FM534KYItY5jCMdPOEAUKDhMpk64MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wWAYDVR0RBFEwT4ISaG9tbWFnZS1sZWlw emlnLmRlgiFob21tYWdlLmlzcC12aG9zdDA0LmRvbXNlcnZpY2UuZGWCFnd3dy5o b21tYWdlLWxlaXB6aWcuZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIg CMY3NXnmEHvMVgAAAWmJYi2BAAAEAwBIMEYCIQCtw/mkFCyy4JH3IW/piYeDMkJ4 8Xsp5TTONl6Ur5djYAIhAIHr6JPlCm3FFULKEoF2DGr0NYsTmMMNtp5lGYN7Qo/z AHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFpiWItoAAABAMA RzBFAiBzKptfhSiijVE6NStB1nSQlD7JDie3Dxa9JotomS4xWgIhAI3raOVwIWOg xjdE2RI73X6ducN0sqinfD6oyCIPp3jVMA0GCSqGSIb3DQEBCwUAA4IBAQA6bzwg dnDYGY7E/+nS0cTdL7En581GtL5ALpWxcmQIpS6f9UE6eKQ1254zDYk1aekBXBRw NNbaeOKzIpmhNi2hRg0RIPgmGa08g7N+K4jqIqNuXH05oVn0qHhI7moozm8ItEJL Aw867R5WMexob4GxyjJpZsNrvXSjTCJTeDubtjmklUFTCvLhqVSulG7Sq4Wu4fik YV3Jg4g/EjPWh8lnXVGaVKnxd78i+JSX4Zo99U2CMU7PXeGsAdzA83UMAH9LClon uaaAmUXrdH4CGfTiY1TR8C/L8QmSo4dhgO8ZFfUwifruh3TxvD6TO/I4xCUY3h23 8Lw7yeILTNuMiJ0+ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArG3lAansgjL64YwqiG+U 5P5HnhXpafMrDZTnzD6YorLpmOM2MT0WZhUdifbyCVbNuHeRycv+EHgu500twQn7 GsHYtiNjLPTs9cBAkTKGNdApOGFmEIS/Hom28NFrckgy4fn8V4h5YPrkU//c5mFM m3PQ95Xbv2/kaXmQ6ERZ6ODyo8jkwKjDZJGA7Mn1G2z1xOD3rJ7ssPWbqkMb6JEK nD3LFin2+hPG8Qb3qS60L++HFIH+YKYNJGIw5PeFX5xdpxh04M2XtmY4Q6IxWgbI kwP0s3Qris90/0zrZImOID08k2pjwdnrQuJ28QI278h5qa8QkaYMN/P7ob7FrtSr o0vpZefRUgWp8v8zLaPKKuW6aiiACDpX9sFpWzIqu2dsOgqwZqt/dpLrUyUNn6Q5 GFFlxyVPXp8GE4FWr94aczANTI+CWFgqa1UI7nOx+G49pAG8eo5T5huv+KmGMTHQ I5RyrLIAnE1Fzd9AqFXYPExr5JDtke+TwyOaVo1F4ly71OIUTaklqv05O5RuNEKS uN74cD4lZbEoB6vJHEe+h4G9qePDH5REfNSPh+GqtJlnf/qot4uc02kBHcUAS2vu yQGu5T6ZjEIG00Sk/NlhOvJ/38tzrYjcd2ZpsV+gjII7XmJAsD8BrdG0j9+hh1yR DIklZ6zM4azsZ3pH6F3aB8UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 386132616693969694637480510973473540539223 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-17 01:01:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-15 01:01:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hommage-leipzig.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 703450071402946231277307058581788653730924663609007022139045526933416128547436570188065253053001756398673350466383757176840083839498202879703856807064149858210859061551596221667336655573171290214195914957240741676207830468887371248196771517724317145119126758786538889192068795936181344603837214497857093355713741043798067932012252665159873449512464687656848028169431541822386170453409114356521277735303201599401896728432554357532825819055661621974375748433488495900178627917378548850301556632517588940903220424446969652726586452162299069987440003756759496558024138029811660120633139041633243942372170144393274056315740988457046752052042065620867834530575149306141065683324661422670499405314446585690288268118195550349104913634296286155404061173269519504462444979676892259088522723936671697840223114218247698233409706051446761947023068858874971974212604269724901946867745003347625861044532472852996427116102526235888936201888517581596868521136876139854163847508415521551145992833198806845572336749902819814019839099655161753554915389301417862303173877528966346086623417012469739813902643422271073432435070132777728681720102857529092829192999426611117800563883033164538361498402231707258684325531031777707777381652852798946718665803717 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ce77e0a608b58e6308c74f38401428384ca64eb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hommage-leipzig.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hommage.isp-vhost04.domservice.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hommage-leipzig.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016989622d810000040300483046022100adc3f9a4142cb2e091f7216fe9898783324278f17b29e534ce365e94af97636002210081ebe893e50a6dc51542ca1281760c6af4358b1398c30db69e6519837b428ff300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016989622da000000403004730450220732a9b5f8528a28d513a352b41d67490943ec90e27b70f16bd268b68992e315a0221008deb68e5702163a0c63744d9123bdd7e9db9c374b2a8a77c3ea8c8220fa778d5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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