native-web.bitkubnext.com
Issued by GTS CA 1D4
About this certificate
This digital certificate with serial number 62:2c:8f:01:ee:df:8f:a1:09:e1:ce:a4:19:64:54:bf was issued on by Google Trust Services LLC.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=native-web.bitkubnext.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 62:2c:8f:01:ee:df:8f:a1:09:e1:ce:a4:19:64:54:bfSerial Number (int): 130495705186426473727662508105695253695
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92
Fingerprint (sha1): 18:e5:5c:7b:5b:72:60:ce:a3:fc:fd:f0:8c:12:c0:30:52:ac:dc:0f
Fingerprint (sha256): ba:af:3e:aa:6f:c2:70:db:69:d1:84:5e:01:fb:1e:8b:73:ce:80:93:41:75:18:f7:42:b4:b7:25:d6:19:99:3f
Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1d4/u_pOnYyKC4sCRL Distribution Point: http://crls.pki.goog/gts1d4/7uxtbuQmu6E.crl
Check the revocation status for certificate native-web.bitkubnext.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for native-web.bitkubnext.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
native-web.bitkubnext.com
app-dev-v1.bitkubnext.net
app-sandbox.bitkubnext.net
native-web-dev.bitkubnext.net
native-web-uat.bitkubnext.net
app-dev-v1.bitkubnext.net
app-sandbox.bitkubnext.net
native-web-dev.bitkubnext.net
native-web-uat.bitkubnext.net
Other certificates including the domain name bitkubnext.com
(limited to 100 certificates)
gamersbucket.com
www.sportsgupshup.com
staging.medicare10.com
l.pb.vg
www.taka1156.site
daily-dinners.com
l.pb.vg
www.ivonakov.info
www.credimoveispocos.com.br
*.bitkubnext.com
stage.merchant.zipeli.com
goldhunt.kisselindustries.com
bitkubnext.com
www.raise.live
www.bim-app.at
planningpoker.brainping.com
app.mpaakofestival.com
plataforma.maisatheneu.com.br
davidgalph.com
cumin-coral-dev-1abca.harecord.com
scorefol.io
sepjt.com
bandcamp.viasacra.band
beta.toaster.co
www.sportsgupshup.com
feed.musicblobs.com
llama.sheepserver.ml
bitkubnext.com
admin.test.phnx.review
app.contatori.de
my.blocksignal.app
linguajam.com
xerox.savebook.xyz
daily-dinners.com
www.saudecomqualidade.com.br
client-web-test.aurapp.is
www.kniep-verheul.nl
bitkubnext.com
*.bitkubnext.com
native-web.bitkubnext.com
llama.sheepserver.ml
*.bitkubnext.com
www.jercom.ca
noitadaa.com
a.konarik.info
www.dlvrd.tech
wrcfan.com
cumin-coral-dev-1abca.harecord.com
ve.snipps.co
asknamer.com
dev.teacup.gg
beta.toaster.co
client-web-test.aurapp.is
development.dashboard.socio.events
noitadaa.com
beta.toaster.co
direct.livecart.ai
www.sportsgupshup.com
staging.medicare10.com
l.pb.vg
www.taka1156.site
daily-dinners.com
l.pb.vg
www.ivonakov.info
www.credimoveispocos.com.br
*.bitkubnext.com
stage.merchant.zipeli.com
goldhunt.kisselindustries.com
bitkubnext.com
www.raise.live
www.bim-app.at
planningpoker.brainping.com
app.mpaakofestival.com
plataforma.maisatheneu.com.br
davidgalph.com
cumin-coral-dev-1abca.harecord.com
scorefol.io
sepjt.com
bandcamp.viasacra.band
beta.toaster.co
www.sportsgupshup.com
feed.musicblobs.com
llama.sheepserver.ml
bitkubnext.com
admin.test.phnx.review
app.contatori.de
my.blocksignal.app
linguajam.com
xerox.savebook.xyz
daily-dinners.com
www.saudecomqualidade.com.br
client-web-test.aurapp.is
www.kniep-verheul.nl
bitkubnext.com
*.bitkubnext.com
native-web.bitkubnext.com
llama.sheepserver.ml
*.bitkubnext.com
www.jercom.ca
noitadaa.com
a.konarik.info
www.dlvrd.tech
wrcfan.com
cumin-coral-dev-1abca.harecord.com
ve.snipps.co
asknamer.com
dev.teacup.gg
beta.toaster.co
client-web-test.aurapp.is
development.dashboard.socio.events
noitadaa.com
beta.toaster.co
direct.livecart.ai
Certificate
The complete raw certificate details for native-web.bitkubnext.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgIQYiyPAe7fj6EJ4c6kGWRUvzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yNDAyMTkxNjU3MDlaFw0yNDA1MTkx NzU2MzBaMCQxIjAgBgNVBAMTGW5hdGl2ZS13ZWIuYml0a3VibmV4dC5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfMluTWj22EIM+fwQHA8PFGBt g7bvK1lpmvjxipEFdcUrMGHvGiTW4Z+s4+Ivhb1kBKwx95yhbwFwpEvrs0W+pGbF Z5BxqYcf5KQs+6L+UqmfbYAmAAVj+usVoyMj0XXhbsrbiwXEbHf17BzBSivUR2jv TVOpS4ZwVevDzkgqwMifPdcRpsqR9Ek9kbKstCIiR6PpJVjBDwH0zUE684Tebtxj uA0I4nAmbHBbZvttT/jdasnYNG5tJAvK2QbvX16wfingCNWJr45mISDClhGwRCKe jG/c2IWFjWir4NTYFMmNJ4zpplhC9W8hf/lP211qum1gM1uJBSjJOtPbbCGvAgMB AAGjggL4MIIC9DAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUbHAkQcQZ/UpvGpvVj6IUTiYhEMgwHwYD VR0jBBgwFoAUJeIYDrJXkZQq5dRdhpCD3lOzuJIweAYIKwYBBQUHAQEEbDBqMDUG CCsGAQUFBzABhilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFkNC91X3BPbll5 S0M0czAxBggrBgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3Rz MWQ0LmRlcjCBmwYDVR0RBIGTMIGQghluYXRpdmUtd2ViLmJpdGt1Ym5leHQuY29t ghlhcHAtZGV2LXYxLmJpdGt1Ym5leHQubmV0ghphcHAtc2FuZGJveC5iaXRrdWJu ZXh0Lm5ldIIdbmF0aXZlLXdlYi1kZXYuYml0a3VibmV4dC5uZXSCHW5hdGl2ZS13 ZWItdWF0LmJpdGt1Ym5leHQubmV0MCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisG AQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cv Z3RzMWQ0Lzd1eHRidVFtdTZFLmNybDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2 AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjcKDvEcAAAQDAEcw RQIhALMX+H3DBDnjufUmiiSbLZMX3gSfdLNtLjLDHGnKjTbSAiAKGh7zHOUOSRyg Hd5elr0st5esthTIFLqY1reK6bIuEwB2AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i 2reK+Jpt9RfYAAABjcKDvDAAAAQDAEcwRQIhAJ8JtWkOnK0ZUvLcsyrAuTYiIxnI 5RVENzy1azCZ7kmIAiAHzdLZbiusaPbLksnaymu+qNkT+pNcm1uIg6sVj/ITrzAN BgkqhkiG9w0BAQsFAAOCAQEAlt+sN8cVXMbbi7yaqWOpZ6PgbFU3+XWTLa3eVZ1G X9yRYcs2EbNxL/uA0kdsRrKMInB78ISyleqQzbknSU9zD9b67fcHv1E6MmRxwLux +Bm7kNyTPCNnCZvweL/9H9C5w0ItuBabWCKafOS0o1YtkhYa5tF9RCmoHaSHDAyK +tfTu12vlTlxr3ZzMDCeACjOjAtVJ+yBGZ1kUnYIpeI85yw6MJO1WDrG/det3dV0 4X2E/JJhYn4nS25FjBdUe8bHyXoUwRKF4VP/1I1AxMcxZZYXmBIdo+EPqLsXJKGd 92tzd3i0XDFh+AttUHLQQJYd7qTOFF3B5tnLEapsbzmIdQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor 1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE 3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh rwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 130495705186426473727662508105695253695 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 16:57:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 17:56:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'native-web.bitkubnext.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6c702441c419fd4a6f1a9bd58fa2144e262110c8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/u_pOnYyKC4s' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'native-web.bitkubnext.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-dev-v1.bitkubnext.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-sandbox.bitkubnext.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'native-web-dev.bitkubnext.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'native-web-uat.bitkubnext.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/7uxtbuQmu6E.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dc283bc470000040300473045022100b317f87dc30439e3b9f5268a249b2d9317de049f74b36d2e32c31c69ca8d36d202200a1a1ef31ce50e491ca01dde5e96bd2cb797acb614c814ba98d6b78ae9b22e13007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dc283bc3000000403004730450221009f09b5690e9cad1952f2dcb32ac0b936222319c8e51544373cb56b3099ee4988022007cdd2d96e2bac68f6cb92c9daca6bbea8d913fa935c9b5b8883ab158ff213af . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0096dfac37c7155cc6db8bbc9aa963a967a3e06c5537f975932dadde559d465fdc9161cb3611b3712ffb80d2476c46b28c22707bf084b295ea90cdb927494f730fd6faedf707bf513a326471c0bbb1f819bb90dc933c2367099bf078bffd1fd0b9c3422db8169b58229a7ce4b4a3562d92161ae6d17d4429a81da4870c0c8afad7d3bb5daf953971af767330309e0028ce8c0b5527ec81199d64527608a5e23ce72c3a3093b5583ac6fdd7adddd574e17d84fc9261627e274b6e458c17547bc6c7c97a14c11285e153ffd48d40c4c73165961798121da3e10fa8bb1724a19df76b737778b45c3161f80b6d5072d040961deea4ce145dc1e6d9cb11aa6c6f398875