www.telconinjas.org
Issued by R3
About this certificate
This digital certificate with serial number 04:92:dc:6f:d2:da:b9:c1:29:09:69:e6:73:85:d3:09:37:f3 was issued on by Let's Encrypt.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.telconinjas.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:92:dc:6f:d2:da:b9:c1:29:09:69:e6:73:85:d3:09:37:f3Serial Number (int): 398423380078157225548305121626939254716403
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2e:46:d1:56:8b:6a:68:93:aa:43:88:35:c5:76:ba:ae:20:b4:c1:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 0b:51:9c:20:1e:a0:ef:b1:b6:48:7f:1c:5d:01:29:5c:62:bf:7c:c4
Fingerprint (sha256): c9:91:be:f7:78:56:d9:95:92:30:b4:a7:17:bc:02:7b:b1:e1:dd:a6:2a:cf:ee:a7:5e:f0:67:52:55:af:2f:07
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.telconinjas.org
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.telconinjas.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
audioeng.co
coffeeblogs.com
electricbutchersaws.com
enchentes.com
georgiamortgageinc.com
healthysnacksreimagined.com
hemplegion.com
hvacportsaintlucie.com
imagenlatina.com
josephsautotoys.com
lgbtqmecca.com
louise.com
louisianaboudoirphotography.com
myquotechallenge.com
playlistmatrix.com
redbostonterrier.com
seaztheday30a.com
sidexsideloans.com
tuinl.com
www.telconinjas.org
coffeeblogs.com
electricbutchersaws.com
enchentes.com
georgiamortgageinc.com
healthysnacksreimagined.com
hemplegion.com
hvacportsaintlucie.com
imagenlatina.com
josephsautotoys.com
lgbtqmecca.com
louise.com
louisianaboudoirphotography.com
myquotechallenge.com
playlistmatrix.com
redbostonterrier.com
seaztheday30a.com
sidexsideloans.com
tuinl.com
www.telconinjas.org
Other certificates including the domain name telconinjas.org
(limited to 100 certificates)
www.telconinjas.org
crono.in.p-p.co.za
tunnel.vc
instantarticlewriter.com.domacon.org
blazingfast.hacker.rehab
membership.cdnsoilex.ca
bentheimchurch.org
canadianpropaganda.ca
telconinjas.org
telconinjas.org
nftabc.org
profoundseo.org
modalatmaintowns.ca
racefever.org
marketclub.asia
peoplesrights.ca
www.telconinjas.org
freedomprojectmedia.org
christianschoolsearch.org
www.telconinjas.org
www.telconinjas.org
sanbortolo.org
collection.vc
partnershipparenting.org
www.telconinjas.org
100halfmarathons.club
bmu.co.in.rplayer.co.za
crono.in.p-p.co.za
tunnel.vc
instantarticlewriter.com.domacon.org
blazingfast.hacker.rehab
membership.cdnsoilex.ca
bentheimchurch.org
canadianpropaganda.ca
telconinjas.org
telconinjas.org
nftabc.org
profoundseo.org
modalatmaintowns.ca
racefever.org
marketclub.asia
peoplesrights.ca
www.telconinjas.org
freedomprojectmedia.org
christianschoolsearch.org
www.telconinjas.org
www.telconinjas.org
sanbortolo.org
collection.vc
partnershipparenting.org
www.telconinjas.org
100halfmarathons.club
bmu.co.in.rplayer.co.za
Certificate
The complete raw certificate details for www.telconinjas.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGcjCCBVqgAwIBAgISBJLcb9LaucEpCWnmc4XTCTfzMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MjEwOTQ0NTNaFw0yNDA4MTkwOTQ0NTJaMB4xHDAaBgNVBAMT E3d3dy50ZWxjb25pbmphcy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCoaHF7ehx9GB4rY5gC9yWF2M4QCWUNsVHXvx0RFiU362JCFKU3/8rxQwCU gkjREZ9I6Xu84QED9YHg7B99YgNx/gbG1D1I1/lw/QLoHmucyFDgGZ4KXL5KZz00 6pugiiMybCZXUuTNljVNmhnD8VgwcPyfXwEutAKffk4K7B6dQQFN8UZYKeEoQqxu MiyDD5fA99HIeC4zlydfRTdx4u1xAfAEpsG7/I3/TYJBVFNBLFUL6JdhZkyfDs0d 8cFhXg1NIMQ4dMaseQDkPF0thN+Je53HGBd6WdpuhJSR5O+Wv3hmdcxCbGdCTtyg pi6OwAIYTT0NlfAt8m9ohyV6J5BZAgMBAAGjggOUMIIDkDAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFC5G0VaLamiTqkOINcV2uq4gtMH6MB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMIIBmwYDVR0RBIIBkjCCAY6CC2F1ZGlvZW5nLmNvgg9jb2ZmZWVibG9n cy5jb22CF2VsZWN0cmljYnV0Y2hlcnNhd3MuY29tgg1lbmNoZW50ZXMuY29tghZn ZW9yZ2lhbW9ydGdhZ2VpbmMuY29tghtoZWFsdGh5c25hY2tzcmVpbWFnaW5lZC5j b22CDmhlbXBsZWdpb24uY29tghZodmFjcG9ydHNhaW50bHVjaWUuY29tghBpbWFn ZW5sYXRpbmEuY29tghNqb3NlcGhzYXV0b3RveXMuY29tgg5sZ2J0cW1lY2NhLmNv bYIKbG91aXNlLmNvbYIfbG91aXNpYW5hYm91ZG9pcnBob3RvZ3JhcGh5LmNvbYIU bXlxdW90ZWNoYWxsZW5nZS5jb22CEnBsYXlsaXN0bWF0cml4LmNvbYIUcmVkYm9z dG9udGVycmllci5jb22CEXNlYXp0aGVkYXkzMGEuY29tghJzaWRleHNpZGVsb2Fu cy5jb22CCXR1aW5sLmNvbYITd3d3LnRlbGNvbmluamFzLm9yZzATBgNVHSAEDDAK MAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AD8XS0/XIkdYlB1l HIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABj5rBCeEAAAQDAEcwRQIhAJjwsuGLcQMH cbn+YOtO+2mRH9mdRcdiglKA9ZistvX7AiBhfvjCP0AH2TC8lQYAHoY9zw5ZKv3f WPBBqCsQWAlt/AB2ABmYEHEJ8NZSLjCA0p4/ZLuDbijM+Q9Sju7fzko/FrTKAAAB j5rBCocAAAQDAEcwRQIgSmPIWbCxQ/3+vr6aYM3r8Zyvtlc3IkJcbGOZYw/n9WkC IQDXjR7CE1jWAf32VxwaoN6ZwAkJW13lGBevNrd24BflejANBgkqhkiG9w0BAQsF AAOCAQEAMyUyBTw2BOFv8mykQDwhuHKtO3I0vwdHqAgXU/jbMPgHuJObvXMc4W22 1iFgPImXiJsthzDh8rIHrpkyDwTk+5KOkCLALnIqSEbYwy6vRCgypF670BQg+Fy6 2yQWy3sn2TPubi8ZlzoDsiXr/SkNRfqI/mqtke4VINM8nDmU3zKSFgAJB2QD9+8j uMxXzvwenSFMSC4jaIf7JxEBOeUVW8uSsEi3mASMEhHUHG1YU/7kGmpxjE9kRw1P sHdCiCtAvzz8kb9i9Qvl0fFjo+xTTD326w+zAw7CqTbhR/TVIoKN7+Si+TF/seMW JV7X96Xiw4/9ZLUSlAMG9Aw0N1bKqQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGhxe3ocfRgeK2OYAvcl hdjOEAllDbFR178dERYlN+tiQhSlN//K8UMAlIJI0RGfSOl7vOEBA/WB4OwffWID cf4GxtQ9SNf5cP0C6B5rnMhQ4BmeCly+Smc9NOqboIojMmwmV1LkzZY1TZoZw/FY MHD8n18BLrQCn35OCuwenUEBTfFGWCnhKEKsbjIsgw+XwPfRyHguM5cnX0U3ceLt cQHwBKbBu/yN/02CQVRTQSxVC+iXYWZMnw7NHfHBYV4NTSDEOHTGrHkA5DxdLYTf iXudxxgXelnaboSUkeTvlr94ZnXMQmxnQk7coKYujsACGE09DZXwLfJvaIcleieQ WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 398423380078157225548305121626939254716403 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 09:44:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-19 09:44:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.telconinjas.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21259538140313689996435498040665037331827684746022164075535777632748576112022872222294735873308763213343363890948268559574032994740443865521375292090863993545084440223335825573162918205814507180835995541221065277424732768191897118762945129393948821664756738992458399474592313311396521743494420776927571030045729254777971168589639699481677191317520134908935683953995028588581771313457358818203873344110637232258350350652437752143800715688332300547321693903915950836944122913528914771733940420868211388893381231264949457211580496258226814812999693608925144019652063690147385366824609367144674673875265276785165383209049 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2e46d1568b6a6893aa438835c576baae20b4c1fa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (402 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audioeng.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeeblogs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electricbutchersaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enchentes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiamortgageinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthysnacksreimagined.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemplegion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacportsaintlucie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagenlatina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josephsautotoys.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqmecca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louise.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianaboudoirphotography.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myquotechallenge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playlistmatrix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbostonterrier.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaztheday30a.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidexsideloans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuinl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telconinjas.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f9ac109e1000004030047304502210098f0b2e18b71030771b9fe60eb4efb69911fd99d45c762825280f598acb6f5fb0220617ef8c23f4007d930bc9506001e863dcf0e592afddf58f041a82b1058096dfc0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f9ac10a87000004030047304502204a63c859b0b143fdfebebe9a60cdebf19cafb6573722425c6c6399630fe7f569022100d78d1ec21358d601fdf6571c1aa0de99c009095b5de51817af36b776e017e57a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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