www.herenciaguerrera.com.ar
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:22:61:f8:c8:c3:46:d3:8b:b6:58:9f:28:8d:45:ec:82:44 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.herenciaguerrera.com.ar
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:22:61:f8:c8:c3:46:d3:8b:b6:58:9f:28:8d:45:ec:82:44Serial Number (int): 273036685147758033288973677877652557169220
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e4:14:a6:1e:b1:0f:47:f6:bf:30:95:7b:90:8f:56:5a:23:6a:6f:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b8:ec:81:af:0b:a3:ed:47:28:f6:85:f3:12:6f:2a:85:33:0a:a4:8c
Fingerprint (sha256): b9:aa:33:dc:4d:7c:dd:28:65:28:ea:bb:48:d9:56:b8:24:c4:63:9b:bf:2a:33:d6:8a:7a:97:b1:50:c1:bd:9f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.herenciaguerrera.com.ar
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.herenciaguerrera.com.ar
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.herenciaguerrera.com.ar
Other certificates including the domain name herenciaguerrera.com.ar
(limited to 100 certificates)
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
Certificate
The complete raw certificate details for www.herenciaguerrera.com.ar in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgISAyJh+MjDRtOLtlifKI1F7IJEMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDUwNzEwMDBaFw0x OTExMDMwNzEwMDBaMCYxJDAiBgNVBAMTG3d3dy5oZXJlbmNpYWd1ZXJyZXJhLmNv bS5hcjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANEA+gU+BQQtw3II KbKn2a986VVE+SWxQJCwzxhT9qXH1PL9HT2US0djCq5x4Uh9+gUByj9et0MN5uxI nupIzgFw1WzIF+4cslAYd8WWrUv5tAnqStWfH7ySYjZB0YSj6Jw9wRW4FDSK6vPm 5sX5LgQwwNYegCFKrMuzfZCD9rv3iJ6EiinVBujNdJu8bzuUIvFIkZ3azp+pJANt VXWIeAUP3vn2mAzz2wB73N+5FSBVk+mA7eNgSBj2jrr6rd1um5O71wUp8WMWEsyB YDnBX7l/XZgtk0HYLygb8WkT9IvE8F6pa/T0Ih5IxWYhm70T7e6xCcFUIOYIIBF/ 7fRWwKdbnP+f4WjtUNw61sumR6iPYbgu6ZcS9tYvRSNbhl3MhHXSwVAM7d3LFA9k ekRhUCdQAfftoIAy9LlUpPpHpUWb3Df9Jsxrx4UQpFuQkIm5/cjIR7GorAfMLNbo FORfhC5cZ/H8wYZPsOxp5Z5LP0TP30A53fQ2g+UmBIq4xh9LZO9qNuC+wl2qr+xh bj3TII7EaTd0WT1jJELgeWfxpB41mpXPAkIVjfIHYVCnAqxRxlwjJZc/qJ7QDL3N nRnbdsESeer2lPgd9JR4/YMJp3fpFHy4VLh7+jnAFEF/lMbbiT0u0byJSIkmEK8G 7otuC0aWL9C4kNJ9Fvdn8ovvV4+LAgMBAAGjggJvMIICazAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFOQUph6xD0f2vzCVe5CPVlojam+aMB8GA1UdIwQYMBaAFKhKamME fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0 cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0 cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wJgYDVR0RBB8wHYIbd3d3 LmhlcmVuY2lhZ3VlcnJlcmEuY29tLmFyMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA4mlLribo6UAJ6IYbtjuD 1D7n/nSI+6SPKJMBnd3x2/4AAAFsYNP67wAABAMARjBEAiAtsYAy2/juKhks0P9P uq0hFOy+ZPYF7nM0u6JhRbe2UAIgH+bmJkuIWGD/6c3qwa/6/oesvp34Q2//WdEL f6LMga4AdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWxg0/rg AAAEAwBHMEUCIHjtjSaFawgBTyON8Vqe9sZO2RZbzOOTZn5g283f9JoiAiEAqTFf mOv2huM6eEJV1swRWYcMvqgU6iifwt/l9Eud5SkwDQYJKoZIhvcNAQELBQADggEB AHMFUbC9TYtklwAW5wMhRaHlhBSrHkgXsnOu5o4T/hapjVc5MBHUlIN5TBJZyi/c VTchTTI6fgMAp2DTR1ezZ60rgQDl+pFKOiCthEHKEQE05e0wqE/Xxijhn3GTgE5p LgKjrG79oyTVbp4SYldv9guGuLK+TdMGsjiTsIB4356CMKtl1nOZ0VJnTk0nYoMY PptacNdu64LXO+rdk/YYtrYhLNdPpUFfuJhQdbD2AzCHxyOKs1USB/NsGHZIbJJW sUrJ6WezC2iSoPOhW1vX05wdVcTwddfwSRQtoP2eB+vQCIdm3iScax1gGdDU2dj4 KSMoNovSZL1cvmorlNGtMrA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0QD6BT4FBC3DcggpsqfZ r3zpVUT5JbFAkLDPGFP2pcfU8v0dPZRLR2MKrnHhSH36BQHKP163Qw3m7Eie6kjO AXDVbMgX7hyyUBh3xZatS/m0CepK1Z8fvJJiNkHRhKPonD3BFbgUNIrq8+bmxfku BDDA1h6AIUqsy7N9kIP2u/eInoSKKdUG6M10m7xvO5Qi8UiRndrOn6kkA21VdYh4 BQ/e+faYDPPbAHvc37kVIFWT6YDt42BIGPaOuvqt3W6bk7vXBSnxYxYSzIFgOcFf uX9dmC2TQdgvKBvxaRP0i8TwXqlr9PQiHkjFZiGbvRPt7rEJwVQg5gggEX/t9FbA p1uc/5/haO1Q3DrWy6ZHqI9huC7plxL21i9FI1uGXcyEddLBUAzt3csUD2R6RGFQ J1AB9+2ggDL0uVSk+kelRZvcN/0mzGvHhRCkW5CQibn9yMhHsaisB8ws1ugU5F+E Llxn8fzBhk+w7Gnlnks/RM/fQDnd9DaD5SYEirjGH0tk72o24L7CXaqv7GFuPdMg jsRpN3RZPWMkQuB5Z/GkHjWalc8CQhWN8gdhUKcCrFHGXCMllz+ontAMvc2dGdt2 wRJ56vaU+B30lHj9gwmnd+kUfLhUuHv6OcAUQX+UxtuJPS7RvIlIiSYQrwbui24L RpYv0LiQ0n0W92fyi+9Xj4sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 273036685147758033288973677877652557169220 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-05 07:10:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-03 07:10:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.herenciaguerrera.com.ar' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852661174098016529920193690334823953566424394996845778425851398262270097894655797436830562147011289388819403878777400804190894481041562222189362691948435597668176754531460707636690424344125832572182581819701165485671773538944836839499245513022838271022336406952188720391807956690725085343989848933520667338661593315515921908224100635641873537947589160910729660695465661396044236494871523042492245554981088938753560849982469819046963162571343078191738801580811200834668928141960341388204907662267721816662762828361769410774037070318922469793283496156295246160618034838433751935181343815583029341571646421801159770549192004971925663323255973407805935297848636376219548599027964545432511122365893583975694479632994167178767489135355625000393658868019901781008683381642747681470525734627295099169046298052186521366253867275651493661963780500338949679786068810682626097761903434806909926610748641917503166325965596135393782089271613346861972571155209172308361118028065278147398708736184096713694133927393826836434807953364929870303036526151184006220561659460261026995760595093564553742283895538537869870561651346240872481988372873904767464933067362606999761885370161169643261260808075297662254491834441198900783921242813007677812697960331 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e414a61eb10f47f6bf30957b908f565a236a6f9a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herenciaguerrera.com.ar' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c60d3faef000004030046304402202db18032dbf8ee2a192cd0ff4fbaad2114ecbe64f605ee7334bba26145b7b65002201fe6e6264b885860ffe9cdeac1affafe87acbe9df8436fff59d10b7fa2cc81ae007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c60d3fae00000040300473045022078ed8d26856b08014f238df15a9ef6c64ed9165bcce393667e60dbcddff49a22022100a9315f98ebf686e33a784255d6cc1159870cbea814ea289fc2dfe5f44b9de529 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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