fr.am
Issued by R3
About this certificate
This digital certificate with serial number 04:fb:86:87:47:97:27:1f:cf:d2:1c:26:db:28:72:0d:54:03 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fr.am
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:fb:86:87:47:97:27:1f:cf:d2:1c:26:db:28:72:0d:54:03Serial Number (int): 434038836787734264616913248585795641365507
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: a7:1a:ef:e6:d3:f7:56:33:b0:09:39:4f:5b:4a:f6:be:2d:b6:0b:c6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 3e:65:0f:f4:3f:51:8b:e7:3b:d2:54:5b:4e:fb:4f:e3:09:2c:b7:be
Fingerprint (sha256): b8:05:3c:ec:6a:46:ce:82:06:3f:a9:c1:39:83:55:ff:d8:b8:62:f2:68:77:8f:b3:37:31:13:14:08:6e:d2:16
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate fr.am
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fr.am
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fr.am
www.fr.am
www.fr.am
Other certificates including the domain name fr.am
(limited to 100 certificates)
tk17-shelter.fr.am
although.gw.to
us-resume.fr.am
driving.fr.am
tk17-shelter.fr.am
environment.fr.am
fr.am
month.fr.am
fr.am
teatime.fr.am
tk17-shelter.fr.am
aulaulau.fr.am
fr.am
tk17-shelter.fr.am
tk17-shelter.fr.am
tune.fr.am
loons.fr.am
edu2.fr.am
watches.fr.am
fr.am
lesjoiesduflug.fr.am
webmail.vadhe.net
aulaulau.fr.am
panel.e30royan.fr.am
aulaulau.fr.am
fr.am
amirhb79.fr.am
gear.fr.am
fr.am
classic.fr.am
aulaulau.fr.am
fr.am
messi.fr.am
fr.am
naming.fr.am
healthytopnews.fr.am
fr.am
fr.am
fr.am
fr.am
fr.am
wheel.fr.am
driving.fr.am
router.fr.am
discom.fr.am
edu3.fr.am
pans.fr.am
washer.fr.am
*.webagence.fr.am
fr.am
techesy1349.fr.am
flowers.fr.am
saji.fr.am
aulaulau.fr.am
tk17-shelter.fr.am
classic.fr.am
tune.fr.am
fr.am
aulaulau.fr.am
wheel.fr.am
gear.fr.am
lesjoiesduflug.fr.am
brown.fr.am
fr.am
fr.am
washer.fr.am
tk17-shelter.fr.am
test.aulaulau.fr.am
fr.am
fr.am
healthytopnews.fr.am
lesjoiesduflug.fr.am
edu3.fr.am
cvletter.fr.am
cartoons.fr.am
fr.am
sisters.fr.am
techesy2023.fr.am
aulaulau.fr.am
cartoons.fr.am
fr.am
fr.am
aulaulau.fr.am
watches.fr.am
healthytopnews.fr.am
elfugado.fr.am
snow.fr.am
fr.am
test.aulaulau.fr.am
fr.am
loons.fr.am
fr.am
aulaulau.fr.am
healthytopnews.fr.am
aulaulau.fr.am
flowers.fr.am
saidd.fr.am
router.fr.am
edu3.fr.am
fr.am
although.gw.to
us-resume.fr.am
driving.fr.am
tk17-shelter.fr.am
environment.fr.am
fr.am
month.fr.am
fr.am
teatime.fr.am
tk17-shelter.fr.am
aulaulau.fr.am
fr.am
tk17-shelter.fr.am
tk17-shelter.fr.am
tune.fr.am
loons.fr.am
edu2.fr.am
watches.fr.am
fr.am
lesjoiesduflug.fr.am
webmail.vadhe.net
aulaulau.fr.am
panel.e30royan.fr.am
aulaulau.fr.am
fr.am
amirhb79.fr.am
gear.fr.am
fr.am
classic.fr.am
aulaulau.fr.am
fr.am
messi.fr.am
fr.am
naming.fr.am
healthytopnews.fr.am
fr.am
fr.am
fr.am
fr.am
fr.am
wheel.fr.am
driving.fr.am
router.fr.am
discom.fr.am
edu3.fr.am
pans.fr.am
washer.fr.am
*.webagence.fr.am
fr.am
techesy1349.fr.am
flowers.fr.am
saji.fr.am
aulaulau.fr.am
tk17-shelter.fr.am
classic.fr.am
tune.fr.am
fr.am
aulaulau.fr.am
wheel.fr.am
gear.fr.am
lesjoiesduflug.fr.am
brown.fr.am
fr.am
fr.am
washer.fr.am
tk17-shelter.fr.am
test.aulaulau.fr.am
fr.am
fr.am
healthytopnews.fr.am
lesjoiesduflug.fr.am
edu3.fr.am
cvletter.fr.am
cartoons.fr.am
fr.am
sisters.fr.am
techesy2023.fr.am
aulaulau.fr.am
cartoons.fr.am
fr.am
fr.am
aulaulau.fr.am
watches.fr.am
healthytopnews.fr.am
elfugado.fr.am
snow.fr.am
fr.am
test.aulaulau.fr.am
fr.am
loons.fr.am
fr.am
aulaulau.fr.am
healthytopnews.fr.am
aulaulau.fr.am
flowers.fr.am
saidd.fr.am
router.fr.am
edu3.fr.am
fr.am
Certificate
The complete raw certificate details for fr.am in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgISBPuGh0eXJx/P0hwm2yhyDVQDMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA3MDEyMTE2NTRaFw0yMzA5MjkyMTE2NTNaMBAxDjAMBgNVBAMT BWZyLmFtMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4arOdPT1cVDJ eF4/JJ6PpeOYdj7tYbBJYgmdIZ8CSJAit/zXdK7hoOIFxdc4N1EB4FU+c7gjZ9F3 xLtBiFY0baZxvqLVqBjZf1IgMu1hLJhf9Qzi70cJ1qBIRBpOL8SuTq8z6AJkyEyk FYX/goWZfJF3Z6sFYx3pLReAAtOZa+l5hbbjeFNfHx9C/WP3ecNYFMc1lIlJP2GK G5cpUxuvR6fGjoFN5z5kTu/Jynvnkts1Mn2w54msLU5EWy/tGhDDkbc6/CdwG5K4 WWYp1CLrBOc46MjMFJ1fLIV7Q5cZsyvBYAhIReDY/jbpFAMbhyfaD4RLe6frGnYJ zv0OOjn1uCAs6Z443A4kRndxwCdLhR7GjUAzxx1tO0DrupFaNkNEd/9aZahmd1TT 4lIl1sVb2fyrY+XCqi0cCdf+KWVqXBO8z9vgQrjUP6xOO/EfJaVLUFtD8nfEIJY3 suC+qhXtPtkMSNKF/I4yYOd1yre6SaP5La17dBi6ILnATjstzInYuPPL/IT2CU5W aYG1HAj/uJ+6MjirdNQ+e+bAOewPiOFeFca4dRtBbMLpSe/6e4eAT3fdKglcRbl5 iTpXlQCnlmzJQjF5kkzgtV3MPjb6S6sLZ5HDqXBV21G4S9uuSXSvPkPErgg6X+jB Or28OHW4HoK75y4XjjBJ50qFK6rzUeUCAwEAAaOCAhMwggIPMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQUpxrv5tP3VjOwCTlPW0r2vi22C8YwHwYDVR0jBBgwFoAUFC6z F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl bmNyLm9yZy8wGwYDVR0RBBQwEoIFZnIuYW2CCXd3dy5mci5hbTATBgNVHSAEDDAK MAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2ALc++yTfnE26dfI5 xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABiROHzPgAAAQDAEcwRQIgG9eER8z8OSmV GVEd85D9hFAyU8ZPQCXfnNu3AcKNbCoCIQCgZIUNpQAfw2hSS+kHtpdZmHxLo3BC 9aPC3h4xZBfdZwB3AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAAB iROHzWMAAAQDAEgwRgIhANfllzBOldiDUx/LHfLP51MN5Mbo1oCOv1ofRWBW98cV AiEA01T5+reEkH3/TNtAJP6JBiEhqUenRJ3mqmYkuqMwgcgwDQYJKoZIhvcNAQEL BQADggEBAJfsunjRjSMgS2hajje+kSnTzqOEYRjiXHnFwjo/IXIVZdwWGHcEZoFi 7KH8C2DseauGuUZC2txYMuL6TviPwN7GTdzYDumD13WNSiysIg/pGneXNqqhOQZO t0rKVN6rVZK9y/8zOkOhagWlPOBh0H2yolu+pN7o50iKl/jeNkO1qMTVt9EyqlBh uo75bpQMooPsjg5uTLom9m9vD7R9MOjmxjkhSFXP7sgxfrKg6FNaM1PObBKzohp0 iwfthxfAUbkWvp9/8Tk31niEksJZZyHYQMtaVbnl++WM9VHh0CVgt1/7kZWdVHG1 hl0l8hYF/NSs8IWpI1TB4PXElNrXcog= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4arOdPT1cVDJeF4/JJ6P peOYdj7tYbBJYgmdIZ8CSJAit/zXdK7hoOIFxdc4N1EB4FU+c7gjZ9F3xLtBiFY0 baZxvqLVqBjZf1IgMu1hLJhf9Qzi70cJ1qBIRBpOL8SuTq8z6AJkyEykFYX/goWZ fJF3Z6sFYx3pLReAAtOZa+l5hbbjeFNfHx9C/WP3ecNYFMc1lIlJP2GKG5cpUxuv R6fGjoFN5z5kTu/Jynvnkts1Mn2w54msLU5EWy/tGhDDkbc6/CdwG5K4WWYp1CLr BOc46MjMFJ1fLIV7Q5cZsyvBYAhIReDY/jbpFAMbhyfaD4RLe6frGnYJzv0OOjn1 uCAs6Z443A4kRndxwCdLhR7GjUAzxx1tO0DrupFaNkNEd/9aZahmd1TT4lIl1sVb 2fyrY+XCqi0cCdf+KWVqXBO8z9vgQrjUP6xOO/EfJaVLUFtD8nfEIJY3suC+qhXt PtkMSNKF/I4yYOd1yre6SaP5La17dBi6ILnATjstzInYuPPL/IT2CU5WaYG1HAj/ uJ+6MjirdNQ+e+bAOewPiOFeFca4dRtBbMLpSe/6e4eAT3fdKglcRbl5iTpXlQCn lmzJQjF5kkzgtV3MPjb6S6sLZ5HDqXBV21G4S9uuSXSvPkPErgg6X+jBOr28OHW4 HoK75y4XjjBJ50qFK6rzUeUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 434038836787734264616913248585795641365507 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-01 21:16:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 21:16:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fr.am' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 920641905971578041389134235519980040430681477935370988711400747152629896636266185756863667184408987940041327926258350221501141060728203011844214352006200351581459837953951276765683420417770801781945655943536912942955619350010240101283192205392658426013380205891847751422787492715167567787246653461042879056703200554970707073344484832997847884853460465345202419483769437188039327747145662655378020797548775836842880210794057101429120393741882835982402938917532613826827695639404143827045466088369275588273341781073378170910313762922531461744302452083146479840860897520386482097800528422598748713485905152188815517894547253306364046389375969698137385476687640403453045029267078320514871550560187924080921960643272108893752241726054823610216817903543668900270941748258318498769839676315739526429716554510857635213155038446363389731015993506822891218469822205114254038798946112869005785772000397472901259041354629343432840734902431845431527211738559965630422312238988704557288315199488873068623678783596855637289956506513376948591154043083655764707463767900458752343652921239238522760961605965059312234110176897122246691499519805599769351060802445968942913657436588362960357252536582220988936657106992494971483883259150702691690376024549 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a71aefe6d3f75633b009394f5b4af6be2db60bc6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.am' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fr.am' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001891387ccf8000004030047304502201bd78447ccfc39299519511df390fd84503253c64f4025df9cdbb701c28d6c2a022100a064850da5001fc368524be907b69759987c4ba37042f5a3c2de1e316417dd67007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001891387cd630000040300483046022100d7e597304e95d883531fcb1df2cfe7530de4c6e8d6808ebf5a1f456056f7c715022100d354f9fab784907dff4cdb4024fe89062121a947a7449de6aa6624baa33081c8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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