herenciaguerrera.com.ar
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:6a:d4:94:9d:1c:1b:f0:17:6f:99:ec:13:2b:a2:2e:cd:2a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=herenciaguerrera.com.ar
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6a:d4:94:9d:1c:1b:f0:17:6f:99:ec:13:2b:a2:2e:cd:2aSerial Number (int): 297689356670507025058380687305040787852586
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6f:7e:a1:23:d0:3b:74:1a:48:c1:8e:fa:32:24:a2:eb:be:9a:90:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 98:64:6c:c2:5e:e0:6b:b5:2e:1a:57:5a:64:89:33:e9:de:4a:84:0d
Fingerprint (sha256): b3:dc:14:85:68:cf:e3:2d:f8:29:84:bb:99:c9:b2:ac:98:da:6b:c9:2b:79:08:17:65:85:7d:26:ea:fb:dc:3c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate herenciaguerrera.com.ar
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for herenciaguerrera.com.ar
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
herenciaguerrera.com.ar
Other certificates including the domain name herenciaguerrera.com.ar
(limited to 100 certificates)
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
Certificate
The complete raw certificate details for herenciaguerrera.com.ar in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZjCCBU6gAwIBAgISA2rUlJ0cG/AXb5nsEyuiLs0qMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjMwNzA4MzdaFw0x OTEwMjEwNzA4MzdaMCIxIDAeBgNVBAMTF2hlcmVuY2lhZ3VlcnJlcmEuY29tLmFy MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1kIvDsSLAyuqI8xrNy3T 9PlwiGRk/BVN8ZYaahaeF1z5ziAK3CLGAoV/EjYII4IJp0k6xOIFKbUaeGFLRrx2 1Yn4mohC2Iiciwc/DOSIKgsyV/4w7RfUMJaYKNqfKvg/TRJOuxeZRKdU52IvyCYX r0C2/kJG1OKGWDUrV+eOJ2lV01XQUPVfQ7o9KdniTmxOBNun1G7D/VHgLEFD+DHT EIsSayHv1S8t9nts6EiEvZnDSe+Cqhn0jzx9GBLxzNQn27Y6VWimUQsxPMt7trCT KRUGMvMzOuaxQwbWkmsH/NEC/dQmnexJTCGUoRWIWydpLObGsBaD8EUeJ5SDLpjz KoXKeV6a5MqFE7I5Qvc+0Fd90kFc3+4ZMUD2tE6plAoNgd9cJFREdRa0Yz/FxG9F +WjodyKjOIFV/CHCF0MwrryJDKRCIkOHe5WwR//ts8oca2YM00C5SoMEVqrt5t7R cZDXrz3eSlqblyNT4g7TU5dYEekceAIO3owsruP4Gq9SZvY3d/sNRbZcPdAPrtaI 8ggbiJgujeeAi6NmkdEMWaGufBAz/k2lVv6Mf4W7uRj2bT1I7Pc9v9qjJ0M+BBGA +8csbVNSJpl3i7Yo9KZ1KFMmmmW+KYs2J/rD6unxsdzSIfUE+nCBK2Du3u3PaRwC /lh+2ABXdci5kNz21sc5PdkCAwEAAaOCAmwwggJoMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUb36hI9A7dBpIwY76MiSi676akEYwHwYDVR0jBBgwFoAUqEpqYwR93brm 0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8v b2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8v Y2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAiBgNVHREEGzAZghdoZXJlbmNp YWd1ZXJyZXJhLmNvbS5hcjBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC AQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3AOJpS64m6OlACeiGG7Y7g9Q+5/50iPuk jyiTAZ3d8dv+AAABbB3gC28AAAQDAEgwRgIhAJkH2qb/Tn3qhuZ6vfUgL65INsIq n9EdYmHnsVcdMD25AiEA56Dfwd1o0nh1g0LWYKPjJlvvdCrW3CAeNAl0p21mOYEA dQBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWwd4A1WAAAEAwBG MEQCIGW9h+KmglQ07LSUzmGzh2cKMFs7q+vdT0Bd4WxjPYmJAiAg1JOYVBkgKlc4 xay2m1AxGbNZ5Rx0b2/86vrt50lzfjANBgkqhkiG9w0BAQsFAAOCAQEAMfUyn0v1 Hu9MJ+d8lFyhqjOs+7qADIekFae5RTu9g8+TxKgM4RkwGD2pjZj5kvXMQvxSLXbr lto+lvr1n2E5ccIYmx1hN8cdp1rJZoVX37H/49LLyVZqrqlqDXEZeFVczF0UELdW ha9qbaahGoILddUBO9945WE0DhB+pht1G3NL5MPiVTFTXFxf4uwX07LLtvBTj21m M8aMJfcRgpCyOSB+FY/G7jUnIcII3/zWNOXAW9s9DVwMxCzsTHt7/dPaV1gJ2wAX 1NY36aYVk9y+6gVpGW0GURdpEWgIlQPj2uMbODIfqsdUPLfiSPrqzutzm/AzhI7I uJV2NPkIhD6XuQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1kIvDsSLAyuqI8xrNy3T 9PlwiGRk/BVN8ZYaahaeF1z5ziAK3CLGAoV/EjYII4IJp0k6xOIFKbUaeGFLRrx2 1Yn4mohC2Iiciwc/DOSIKgsyV/4w7RfUMJaYKNqfKvg/TRJOuxeZRKdU52IvyCYX r0C2/kJG1OKGWDUrV+eOJ2lV01XQUPVfQ7o9KdniTmxOBNun1G7D/VHgLEFD+DHT EIsSayHv1S8t9nts6EiEvZnDSe+Cqhn0jzx9GBLxzNQn27Y6VWimUQsxPMt7trCT KRUGMvMzOuaxQwbWkmsH/NEC/dQmnexJTCGUoRWIWydpLObGsBaD8EUeJ5SDLpjz KoXKeV6a5MqFE7I5Qvc+0Fd90kFc3+4ZMUD2tE6plAoNgd9cJFREdRa0Yz/FxG9F +WjodyKjOIFV/CHCF0MwrryJDKRCIkOHe5WwR//ts8oca2YM00C5SoMEVqrt5t7R cZDXrz3eSlqblyNT4g7TU5dYEekceAIO3owsruP4Gq9SZvY3d/sNRbZcPdAPrtaI 8ggbiJgujeeAi6NmkdEMWaGufBAz/k2lVv6Mf4W7uRj2bT1I7Pc9v9qjJ0M+BBGA +8csbVNSJpl3i7Yo9KZ1KFMmmmW+KYs2J/rD6unxsdzSIfUE+nCBK2Du3u3PaRwC /lh+2ABXdci5kNz21sc5PdkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 297689356670507025058380687305040787852586 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 07:08:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 07:08:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'herenciaguerrera.com.ar' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874098543153732817083277287043136314130076112497840477896399614408011122420614658326799593488799862902546680623712285008127843975683396446510961233581522896724356635910175663621219518939106929863659381483829532562905261144255736080578842418393710160439391472837695629669998755219345608562726309103461337978126420332116054638377734794846911307828199029337832237359123550186304349674626206309557694858632203434808578351640154166974034375629629555411971866005801637877090310929757453971624517508586669403457519330738723684946524335054592381924498931812497397748529228079999666927082946488804274079919153303929176300145904887417332882264541124101578229481764670389873980917307283912691001273176641339423632430628664626715474786100505711080002530669500874036549849196345964537583479402498091256468079456655303548678416863978805542885026258345484415143465780865539905445513830905299282777004680806582410578102658964910855055865593711366706672842671232862242079280587964668657180096569101136613284363864098687509557495389239817228217542294884198338653737521161638888659545133021275095096399599080624425741362448614894795394437714435764548928218959326546909043711513432046330496859430956081994179890173848111268621030000484883839697504779737 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6f7ea123d03b741a48c18efa3224a2ebbe9a9046 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herenciaguerrera.com.ar' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c1de00b6f00000403004830460221009907daa6ff4e7dea86e67abdf5202fae4836c22a9fd11d6261e7b1571d303db9022100e7a0dfc1dd68d278758342d660a3e3265bef742ad6dc201e340974a76d66398100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c1de00d560000040300463044022065bd87e2a6825434ecb494ce61b387670a305b3babebdd4f405de16c633d8989022020d493985419202a5738c5acb69b503119b359e51c746f6ffceafaede749737e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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