handballpost.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:2f:93:35:c8:d6:8f:43:35:10:12:16:53:5e:1f:46:27:f8 was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=handballpost.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:2f:93:35:c8:d6:8f:43:35:10:12:16:53:5e:1f:46:27:f8Serial Number (int): 364638090752920064461858270691117861578744
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: a8:b9:6d:58:4f:52:de:d2:bb:d1:b1:3e:74:71:de:d2:16:6b:6f:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 72:0d:f9:74:01:23:ad:0b:db:56:0d:1e:71:ce:61:b8:d6:89:fb:13
Fingerprint (sha256): ba:b2:2c:50:4b:c9:47:e1:91:e1:b1:0e:bc:5b:f1:6f:3f:95:2b:39:6e:fe:b8:a3:24:8d:8d:0b:9f:4e:c5:c6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate handballpost.de
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for handballpost.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
files.handballpost.de
handballpost.de
handballpost.isp-vhost04.domservice.de
hvs.handballpost.de
service.handballpost.de
www.handballpost.de
handballpost.de
handballpost.isp-vhost04.domservice.de
hvs.handballpost.de
service.handballpost.de
www.handballpost.de
Other certificates including the domain name handballpost.de
(limited to 100 certificates)
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
Certificate
The complete raw certificate details for handballpost.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG2jCCBcKgAwIBAgISBC+TNcjWj0M1EBIWU14fRif4MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjAwMTAyMDZaFw0x OTA2MTgwMTAyMDZaMBoxGDAWBgNVBAMTD2hhbmRiYWxscG9zdC5kZTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBANtUa6OYB63fPEcQ0DKqXN8CEUZdRk4d h6JRbBVJewdms+FKOZTMqYL92kQ5SWGavSpUe4dCNDureYTqz2jaFZ18RgJCS9D+ FP7zh8Eb8iYzQLSDaSYLAEnC69CpLYZuG7cG88SIf67qDWwMUO/iGRgqzSZXs1Zu 9Y91iUh5+WalSsWs5Vl72MckvxXWRPEe2SAQcMaoiz69jR2Kb6ylmdnNKCxY9HWb TBC+erZFhrqSyeDWQx/WFqKbnyDLvBibBdN+9w3RFfomW+DYgc2VdsbE95AntqXu IZapFv0NVj9UE0WUbC2WyTYeTrtzbRtVlccRqkYwixDKeWs4erthaxZ6esYNqKnu P8MSeXd4HZAl4VDwvC1cQf6kN8WDda5n61d+tw9/exlpX2HM2Y2LfSdv3Ml+WpNQ UGKKXYUppNWR35jxStZexSGRqaM4KfMtgQy07yp/Q3GqFetjw7NDqa+LoMwMWNF2 ghhl3zVxZmacMkf17fAdxrwewmHlKrsHGzyNsZP/0dMXZY18TevOHKRw6tXDFvTT es68l4G9tuDI70niYURCutmeN8whvIdhUcjxFn1fvP8yP6SYL+irSO4derCB2X70 UlLqLEuVoIvFlBGHF+VMCTv0Esbe6DciutU4jU5+1XY/vWQ6rCs39vtxuNvUzR5y r0kA4jpJrsynAgMBAAGjggLoMIIC5DAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKi5 bVhPUt7Su9GxPnRx3tIWa2+fMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wgZ4GA1UdEQSBljCBk4IVZmlsZXMuaGFuZGJh bGxwb3N0LmRlgg9oYW5kYmFsbHBvc3QuZGWCJmhhbmRiYWxscG9zdC5pc3Atdmhv c3QwNC5kb21zZXJ2aWNlLmRlghNodnMuaGFuZGJhbGxwb3N0LmRlghdzZXJ2aWNl LmhhbmRiYWxscG9zdC5kZYITd3d3LmhhbmRiYWxscG9zdC5kZTBMBgNVHSAERTBD MAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8v Y3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AOJp S64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABaZjVkO8AAAQDAEYwRAIg AbiTmwsoZPUEVz+dIo8WZ5mIOOL4d4URr2+CVEf5c4kCICI+etIJNEHjZJbkVl+N KzKcsXBisDGrEa6bcXM+qfIpAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz0 5UVH9HgAAAFpmNWSzQAABAMARzBFAiBqlVzFDGXa5elLz9iCDkkwnc6ae3BRvsNs GSbXQWCW5QIhAOyPGVjWgH+r8XqdK/XpeYuwhytQff109TDCAB0IuGEJMA0GCSqG SIb3DQEBCwUAA4IBAQBTwzS8pbN7R/WnHAl8lGAhSCeEU2nAtgRsqfC0ideNmyvQ Odm6rL9E/Y192OlcXVGwS8V9Cffzo8C1XoaG3yxU0h7JvrURZdaH1ohU8l2P1srv Yj+3+oUpCm8dbO0aYho04Ny6ESi0nYwduntsViUHroP15hhrtfwSHvCtvBq+tuLY Q91gtnNGv4wgzHVyRwdwdUpzAM0GACZ+eJfbMKCNisl5ZCwM6HUF1qCStIk2q7+Z 9BbzK/puXL8k/XXu9IrYDjZFWY5NKyvaJVO2LpxHq3Y7IPxOJaCFTWetcR/+257l qgW72Tx3to85RU1P6Ir+NaPiGvlGpzpBhSu9BiL8 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA21Rro5gHrd88RxDQMqpc 3wIRRl1GTh2HolFsFUl7B2az4Uo5lMypgv3aRDlJYZq9KlR7h0I0O6t5hOrPaNoV nXxGAkJL0P4U/vOHwRvyJjNAtINpJgsAScLr0Kkthm4btwbzxIh/ruoNbAxQ7+IZ GCrNJlezVm71j3WJSHn5ZqVKxazlWXvYxyS/FdZE8R7ZIBBwxqiLPr2NHYpvrKWZ 2c0oLFj0dZtMEL56tkWGupLJ4NZDH9YWopufIMu8GJsF0373DdEV+iZb4NiBzZV2 xsT3kCe2pe4hlqkW/Q1WP1QTRZRsLZbJNh5Ou3NtG1WVxxGqRjCLEMp5azh6u2Fr Fnp6xg2oqe4/wxJ5d3gdkCXhUPC8LVxB/qQ3xYN1rmfrV363D397GWlfYczZjYt9 J2/cyX5ak1BQYopdhSmk1ZHfmPFK1l7FIZGpozgp8y2BDLTvKn9DcaoV62PDs0Op r4ugzAxY0XaCGGXfNXFmZpwyR/Xt8B3GvB7CYeUquwcbPI2xk//R0xdljXxN684c pHDq1cMW9NN6zryXgb224MjvSeJhREK62Z43zCG8h2FRyPEWfV+8/zI/pJgv6KtI 7h16sIHZfvRSUuosS5Wgi8WUEYcX5UwJO/QSxt7oNyK61TiNTn7Vdj+9ZDqsKzf2 +3G429TNHnKvSQDiOkmuzKcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 364638090752920064461858270691117861578744 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 01:02:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 01:02:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'handballpost.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 894787384682476332831764345847233131396518808967331371506668741491024617776616251313765690490219927177509762693714176986681202515544205404671648106494721339850984529423037205727332005527824277632624838596308391023355905876518771666884004654333625750627049648459277331240394958186511765140198538589106263131831046636837979856010584674127101746190074340266842173565492478490964084904933975772545745304261361923629553688537978991079190117092709648985504132079107974735542802377885430711846356310863283139652232193302103001751944235311188597526683843580981392622922210139037890838000461696363581568297881285780015677886030299841946482658324309350429961074644809263074968966213465575463157470571088027901987484681872357613382724108434249431967244001589946932240164309101213086448339057994261782324027767011005104999438194262620990714452959518386476428616723993950023302599405023109291858748403992364997271104384592714252590585303387740003734606233267752546369709205017763396307738966857585969239116557850032497571542022185357888489164303442114483556616164048620320636751840849911572743274286516704471891991352524770919296025754081642554295368488760797980928124785828247591862317092905174234727535181218739921504504644599022830936369581223 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a8b96d584f52ded2bbd1b13e7471ded2166b6f9f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (150 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.handballpost.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handballpost.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handballpost.isp-vhost04.domservice.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvs.handballpost.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.handballpost.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handballpost.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016998d590ef0000040300463044022001b8939b0b2864f504573f9d228f1667998838e2f8778511af6f825447f973890220223e7ad2093441e36496e4565f8d2b329cb17062b031ab11ae9b71733ea9f229007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016998d592cd000004030047304502206a955cc50c65dae5e94bcfd8820e49309dce9a7b7051bec36c1926d7416096e5022100ec8f1958d6807fabf17a9d2bf5e9798bb0872b507dfd74f530c2001d08b86109 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0053c334bca5b37b47f5a71c097c9460214827845369c0b6046ca9f0b489d78d9b2bd039d9baacbf44fd8d7dd8e95c5d51b04bc57d09f7f3a3c0b55e8686df2c54d21ec9beb51165d687d68854f25d8fd6caef623fb7fa85290a6f1d6ced1a621a34e0dcba1128b49d8c1dba7b6c562507ae83f5e6186bb5fc121ef0adbc1abeb6e2d843dd60b67346bf8c20cc7572470770754a7300cd0600267e7897db30a08d8ac979642c0ce87505d6a092b48936abbf99f416f32bfa6e5cbf24fd75eef48ad80e3645598e4d2b2bda2553b62e9c47ab763b20fc4e25a0854d67ad711ffedb9ee5aa05bbd93c77b68f39454d4fe88afe35a3e21af946a73a41852bbd0622fc