www.xn----858am81dpvmcwginebooiivdsy.url.tw
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d8:f2:15:9c:48:07:a3:f9:89:e5:26:03:eb:f1:c2:13:f6 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.xn----858am81dpvmcwginebooiivdsy.url.tw
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d8:f2:15:9c:48:07:a3:f9:89:e5:26:03:eb:f1:c2:13:f6Serial Number (int): 335159634433180117419661469266449168208886
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 39:97:76:d4:83:4f:60:b0:a0:25:2f:2e:3f:7b:3a:4d:91:47:a2:3e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 37:93:15:cd:f6:60:f4:84:bf:e2:06:c1:a5:77:cb:b5:8e:0b:05:05
Fingerprint (sha256): b8:38:12:6f:ab:b9:39:77:f3:c3:28:83:b1:4c:85:b1:f3:60:3e:96:94:79:22:b2:3a:35:56:8e:85:54:f8:81
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.xn----858am81dpvmcwginebooiivdsy.url.tw
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.xn----858am81dpvmcwginebooiivdsy.url.tw
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.xn----858am81dpvmcwginebooiivdsy.url.tw
Other certificates including the domain name xn----858am81dpvmcwginebooiivdsy.url.tw
(limited to 100 certificates)
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
Certificate
The complete raw certificate details for www.xn----858am81dpvmcwginebooiivdsy.url.tw in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgISA9jyFZxIB6P5ieUmA+vxwhP2MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTEwNzUxMjNaFw0y MDA1MTEwNzUxMjNaMDYxNDAyBgNVBAMTK3d3dy54bi0tLS04NThhbTgxZHB2bWN3 Z2luZWJvb2lpdmRzeS51cmwudHcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQDEq4+GgAMJPY7P1zl2Zkwj6qYJVDOlppwIChfCPl89u/q+i/vwP24uXsPk H8B7V4lFtsGaLACbdOCKXhFfgsLRSHecusFE+np7D3mUjQ/q2kwZeWxHtswQpyip XJ5ez605Y4vNJBPclIS3bCawwj9nWGqZefhUmHFfTpaMzvLeEUUNWGHtOSbxu17l ROgc/CsDGBTdDCNsI/h1iT8SkpcyK0WuZ/e8kMdTNd8xZxrqzwLkN4YWDhbK5mSH T7hxpSAAVSa3eZObnOagHG9awfNKp7ms5hMb4GE0VDUosPuXLMtEI4b8XaeQTLww 96MEdg+LnHSd7UzqVcVG2GRpoK08zPXwK7nEObyxXs6Nap+XJ2iGdByHilLE9oVP urX83p8miSx36ijAPey+EUN6WgV2im4ar/XKBnccE54lJeMSAqZBfkfRBtwk9s/x cmNGuETSialgZ5jEONjlUPc1w+09qtoOpvOA14/aYrcpPdKKDhmseCg/KysD4uMv OCg1fX20sHwVIOZPu4v7FhpUldGF4q5C8Jgg6Y/nJJ9mELbJz2sk+snDDmi5tM8d LTDhkhpsCDlvJ6WuH/8CjHUnYASq2pgRJO+soD44h21ArjtXvsPfTE7pp7ZlbE0s olLfwbssaQjU4czKvTZQiKjYsuU2tU6Q9fMaCtIr7VImdVVk3wIDAQABo4ICgDCC AnwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ5l3bUg09gsKAlLy4/ezpNkUeiPjAf BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv MDYGA1UdEQQvMC2CK3d3dy54bi0tLS04NThhbTgxZHB2bWN3Z2luZWJvb2lpdmRz eS51cmwudHcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE AdZ5AgQCBIH1BIHyAPAAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZ EwAAAXAzciX0AAAEAwBHMEUCIQDFnJY47JcGH7e7fpFodSoaf9cKgtMx0PyOCRkG 3l6HTgIgBcmIg2fzLclpM7Y7LNdnqCUf+DmtQK4wfu03HFybpPkAdgAHt1wb5X1o //Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAXAzciX4AAAEAwBHMEUCIBCWzFJc jr5MrFpoxvcxT+T8wvh26o5n3ZSq7m3cwnLgAiEAwKUzbSMlnxmCJCHfRclkyWQl VOApG6hbfIPclcdowr0wDQYJKoZIhvcNAQELBQADggEBAI4y/bqLbf58WfNLJWBS mKmSTWPEfRcMUlzuGTMvRJgZx8yL43BUW9xAPrHR8r7BKq6KGJkJpT9KvtESO1RR lkGKRQkfPOsswVQM5okRjdX0ZFD7z8WhrcnOF5CQ/rHyhY0NJzuAJXJgkdISRU68 FWl/6rsk3RU9DYhAqjluFirUatjAb9A+s7u1JmIOwwL3c8JA72xPa1XK7GIEnU8r +kPxMhMJoyjWkdErcDlbujSHtigFeWP2BdnMyuGPxymFthlKVWPhDcYeAQ4Xbl01 CCNU/k1I6uYwMIpdPHheV9Rvk0Wb0oXPNoWLVasgv6JHRJOurHiQF9TQepzFTwwb L6Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxKuPhoADCT2Oz9c5dmZM I+qmCVQzpaacCAoXwj5fPbv6vov78D9uLl7D5B/Ae1eJRbbBmiwAm3Tgil4RX4LC 0Uh3nLrBRPp6ew95lI0P6tpMGXlsR7bMEKcoqVyeXs+tOWOLzSQT3JSEt2wmsMI/ Z1hqmXn4VJhxX06WjM7y3hFFDVhh7Tkm8bte5UToHPwrAxgU3QwjbCP4dYk/EpKX MitFrmf3vJDHUzXfMWca6s8C5DeGFg4WyuZkh0+4caUgAFUmt3mTm5zmoBxvWsHz Sqe5rOYTG+BhNFQ1KLD7lyzLRCOG/F2nkEy8MPejBHYPi5x0ne1M6lXFRthkaaCt PMz18Cu5xDm8sV7OjWqflydohnQch4pSxPaFT7q1/N6fJoksd+oowD3svhFDeloF dopuGq/1ygZ3HBOeJSXjEgKmQX5H0QbcJPbP8XJjRrhE0ompYGeYxDjY5VD3NcPt ParaDqbzgNeP2mK3KT3Sig4ZrHgoPysrA+LjLzgoNX19tLB8FSDmT7uL+xYaVJXR heKuQvCYIOmP5ySfZhC2yc9rJPrJww5oubTPHS0w4ZIabAg5byelrh//Aox1J2AE qtqYESTvrKA+OIdtQK47V77D30xO6ae2ZWxNLKJS38G7LGkI1OHMyr02UIio2LLl NrVOkPXzGgrSK+1SJnVVZN8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 335159634433180117419661469266449168208886 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 07:51:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-11 07:51:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.xn----858am81dpvmcwginebooiivdsy.url.tw' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802344246597552506738460669204559139114971620453564120140427376046606189195422878235034832381218170690815832363465989955032137609324845352122942889832100238798747680460098305883490419624771336965200474192943754156166616814971245582283186987342257546767864061435999910781861625984841704730263954745323442779374548709856618834283888647379443299645754213181829098588141500067448463599152344487665804031667944601797897558558737907624875519760359977635958362868008903746341110225458982662783273960304349112375544585035858711650360830353222162426785022999840962129023547858052654420366367572500915489231835317658227867898000036473630679862180262406089418427577432090101706082806481967261446681025086363413159088964723031795099912739922385840568388622153952978776526896307975491809843988292168984910469899853256993442955343909757499373512080789787568124263661138636689007783194417524149900959166568740370187589964836060407349239518330387313719435218429757346170194974918132373922721879910393481840241552668816188413362093935569287704473842542259201390228350668779363008195258656617609571275039186568218020962656374169932249615189910127648785748497433009399189839435209015824885935042313694657412634184513200159728634144240672198915144377567 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 399776d4834f60b0a0252f2e3f7b3a4d9147a23e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn----858am81dpvmcwginebooiivdsy.url.tw' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170337225f40000040300473045022100c59c9638ec97061fb7bb7e9168752a1a7fd70a82d331d0fc8e091906de5e874e022005c9888367f32dc96933b63b2cd767a8251ff839ad40ae307eed371c5c9ba4f900760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170337225f8000004030047304502201096cc525c8ebe4cac5a68c6f7314fe4fcc2f876ea8e67dd94aaee6ddcc272e0022100c0a5336d23259f19822421df45c964c9642554e0291ba85b7c83dc95c768c2bd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008e32fdba8b6dfe7c59f34b25605298a9924d63c47d170c525cee19332f449819c7cc8be370545bdc403eb1d1f2bec12aae8a189909a53f4abed1123b545196418a45091f3ceb2cc1540ce689118dd5f46450fbcfc5a1adc9ce179090feb1f2858d0d273b8025726091d212454ebc15697feabb24dd153d0d8840aa396e162ad46ad8c06fd03eb3bbb526620ec302f773c240ef6c4f6b55caec62049d4f2bfa43f1321309a328d691d12b70395bba3487b628057963f605d9cccae18fc72985b6194a5563e10dc61e010e176e5d35082354fe4d48eae630308a5d3c785e57d46f93459bd285cf36858b55ab20bfa2474493aeac789017d4d07a9cc54f0c1b2fa6