gaccwest.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:95:4f:e2:50:8f:a0:96:d3:52:6f:ac:b5:39:3b:88:60:db was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gaccwest.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:95:4f:e2:50:8f:a0:96:d3:52:6f:ac:b5:39:3b:88:60:dbSerial Number (int): 312145114571229703690975763167324003655899
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f5:1c:79:0e:08:17:a5:e0:29:14:52:36:cc:21:29:f1:4b:f1:35:d1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 28:06:2d:52:e9:ef:19:96:8d:ef:c2:d9:68:0d:a6:c0:02:91:1f:01
Fingerprint (sha256): c2:43:99:9b:58:dc:63:d5:0a:c5:0e:ec:f7:ad:f2:9d:53:58:83:4f:32:65:ec:77:2d:a2:01:65:84:70:dd:a8
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate gaccwest.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gaccwest.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gaccsanfrancisco.com
gaccwest.com
usa.sanfrancisco.ahk.de
www.gaccsanfrancisco.com
www.gaccwest.com
gaccwest.com
usa.sanfrancisco.ahk.de
www.gaccsanfrancisco.com
www.gaccwest.com
Other certificates including the domain name gaccwest.com
(limited to 100 certificates)
www.gaccny.us
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
www.gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
gaccwest.com
www.gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
ahksanfrancisco.v11.live.typo3.ahk.web-hauptstadt.de
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
vpn.gaccny.us
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
www.gaccny.us
gaccwest.com
www.gaccny.us
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
www.gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
gaccwest.com
www.gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
ahksanfrancisco.v11.live.typo3.ahk.web-hauptstadt.de
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
vpn.gaccny.us
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
www.gaccny.us
gaccwest.com
www.gaccny.us
gaccwest.com
Certificate
The complete raw certificate details for gaccwest.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgISA5VP4lCPoJbTUm+stTk7iGDbMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMTMyMTA3MDRaFw0x OTA2MTEyMTA3MDRaMBcxFTATBgNVBAMTDGdhY2N3ZXN0LmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBANEYgDTpIknhcfAWbTn2DRNN5gos7a0EO50q CaQhAmSLzoeYA8GOS2XqN5w14c0lJ0lQUZ1NozjRrxRqt1w62kldYQKBxXs3Db2T m62ONv7tnR5rxARslWcGt4MmdK57VAWbfE423EA2MwGQcllsK6f8YCZxpMIukToT 1bJijDkMHBDzJsYGshFMBl51wz7RkSwi6Mkdg5T68AWd2rhUl8UW2Z40eCNZVJw5 dhFAnZ9zIdqoPYweCEHJ7wFFtdk+yB0Yl26HJq0saWzKrDQ89sJ5GdNtfw7MH9si l7KIOMCziY1NaTa0kZIifBlj/dCllXEo0C6jPVFzzSvNIZPAkFjPOCHyDMir/KA3 w1YMK0m29t2pxAyzh0dLpieUzJDY3xAqtoiJ76QweCnUCFk9RITwaIUgTvepYZeO PggHUO9QVJziPFix6GoqeDSpxiclqt7AnXnwo4ZmK1mNIjLcKtuxuHz4vONjC3Qw X9Kv2qkZdEYWsY7TrAoeqnd3uyNMIL4O4kHs537sOkFvtXufRdw5YyYWrTFi8qxo gwqd9eNegxKp0DH6BDBCvu2VoVED7gm8DpyRrVYh7ZfBhqauQG9n1S4oWtU1MUN4 jvitKn1XwVdWvTmRA6RkKfXoPXWuPnjh29/wko9kTzZykYjo2xvdGJrhE9JctT2n knfYtU+DAgMBAAGjggK7MIICtzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPUceQ4I F6XgKRRSNswhKfFL8TXRMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wcgYDVR0RBGswaYIUZ2FjY3NhbmZyYW5jaXNjby5j b22CDGdhY2N3ZXN0LmNvbYIXdXNhLnNhbmZyYW5jaXNjby5haGsuZGWCGHd3dy5n YWNjc2FuZnJhbmNpc2NvLmNvbYIQd3d3LmdhY2N3ZXN0LmNvbTBMBgNVHSAERTBD MAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8v Y3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AHR+ 2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABaXkYOBIAAAQDAEcwRQIh ALLDvS7RVm5X4u5zARNrR1TupyEHXCEOPoi9lQLk/kN+AiBP7OR43RcUaMDV41LI IuFOwFm6uJ2tg7Lw2DShq1Y41AB1AGPy283oO8wszwtyhCdXazOkjWF3j711pjix x2hUS9iNAAABaXkYOCIAAAQDAEYwRAIgOfzs/LHk2MmBShSv17qJygkXQsLYWWYN A8maxmWeXdMCIF620oGrlFefEywCJM7vg8SFgWmyFm1dvaCYf2C+YJ6TMA0GCSqG SIb3DQEBCwUAA4IBAQApgQ2BZ+ILfKSFQZj5P0uzZRHVrElDr3p1EoiU7KxdpJmX CLtQ9ronFJdHkk1EwA5Yb56gRLrkzYsX3WrE4xZsx0fbA2IHGn8Aoj4g/0s+qkLp Vc30y+jntYXmNBK1bap2pRArAi6Rt4OEmlHbo0c5eVp12sz4orZoGfp2vAFYHx1D uvmn9dt+Lj+BZV3PBJI53UJDtR0C4gi2QwqlQlGC+a7xtMy3q3mJgyEZ2hxYdUP6 HmvtAkIlSWzpFTuHpzHnnaDuVGH1XNoAdHchNnY0vloz89PBGfNJJuuTCSNSFA57 nDPKTzIoJKYYbqZXfbk9jZ3sr4LEKPQsBjOH1s8r -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0RiANOkiSeFx8BZtOfYN E03mCiztrQQ7nSoJpCECZIvOh5gDwY5LZeo3nDXhzSUnSVBRnU2jONGvFGq3XDra SV1hAoHFezcNvZObrY42/u2dHmvEBGyVZwa3gyZ0rntUBZt8TjbcQDYzAZByWWwr p/xgJnGkwi6ROhPVsmKMOQwcEPMmxgayEUwGXnXDPtGRLCLoyR2DlPrwBZ3auFSX xRbZnjR4I1lUnDl2EUCdn3Mh2qg9jB4IQcnvAUW12T7IHRiXbocmrSxpbMqsNDz2 wnkZ021/Dswf2yKXsog4wLOJjU1pNrSRkiJ8GWP90KWVcSjQLqM9UXPNK80hk8CQ WM84IfIMyKv8oDfDVgwrSbb23anEDLOHR0umJ5TMkNjfECq2iInvpDB4KdQIWT1E hPBohSBO96lhl44+CAdQ71BUnOI8WLHoaip4NKnGJyWq3sCdefCjhmYrWY0iMtwq 27G4fPi842MLdDBf0q/aqRl0RhaxjtOsCh6qd3e7I0wgvg7iQeznfuw6QW+1e59F 3DljJhatMWLyrGiDCp31416DEqnQMfoEMEK+7ZWhUQPuCbwOnJGtViHtl8GGpq5A b2fVLiha1TUxQ3iO+K0qfVfBV1a9OZEDpGQp9eg9da4+eOHb3/CSj2RPNnKRiOjb G90YmuET0ly1PaeSd9i1T4MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 312145114571229703690975763167324003655899 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-13 21:07:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 21:07:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gaccwest.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853036057768468061415708209501076415391283245727146336704187425055686806841919745618667196686781831135686648630223138328350855282840220668761741330051706115648024893850656383100740904082405405411186722517374857590388776055162474951709990625873001762434171098071491967585925647428723309247686616537834832713602969817589793998540686145466167275329343227265728925129802362865737501537097685540989232938629842489248757433814265447356044018530677062495662961109875252642910926226798720035686930599770185837668514196413801428289402085830180338101560986137116882331270006409828134959229545792873818476062298742884821488610944240723479382008366927643027143122446764415588850328103504735603157099941100884545602830887295308015800049698183281276665779028456032995367780673571284405293572318239046693294593940672422437013766574226988951271250391895593582779693836959241018645914600728155831331545920935665254392093497813885297621553097865402813922560622253987978958384586726977628477726262599349408116805033424554503115889164860134038796897541427955048969799791740983901131364197153751867445577210488563602210570453585132838838724250639531704268126533127296848845846443771713997762871303223084518535222680750535691275363779046808766265087577987 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f51c790e0817a5e029145236cc2129f14bf135d1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaccsanfrancisco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaccwest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.sanfrancisco.ahk.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaccsanfrancisco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaccwest.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169791838120000040300473045022100b2c3bd2ed1566e57e2ee7301136b4754eea721075c210e3e88bd9502e4fe437e02204fece478dd171468c0d5e352c822e14ec059bab89dad83b2f0d834a1ab5638d400750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169791838220000040300463044022039fcecfcb1e4d8c9814a14afd7ba89ca091742c2d859660d03c99ac6659e5dd302205eb6d281ab94579f132c0224ceef83c4858169b2166d5dbda0987f60be609e93 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0029810d8167e20b7ca4854198f93f4bb36511d5ac4943af7a75128894ecac5da4999708bb50f6ba27149747924d44c00e586f9ea044bae4cd8b17dd6ac4e3166cc747db0362071a7f00a23e20ff4b3eaa42e955cdf4cbe8e7b585e63412b56daa76a5102b022e91b783849a51dba34739795a75daccf8a2b66819fa76bc01581f1d43baf9a7f5db7e2e3f81655dcf049239dd4243b51d02e208b6430aa5425182f9aef1b4ccb7ab7989832119da1c587543fa1e6bed024225496ce9153b87a731e79da0ee5461f55cda00747721367634be5a33f3d3c119f34926eb93092352140e7b9c33ca4f322824a6186ea6577db93d8d9decaf82c428f42c063387d6cf2b