usc.college
Issued by R3
About this certificate
This digital certificate with serial number 04:d7:4d:ca:ba:41:b4:33:64:87:81:ea:e2:98:de:3b:dd:83 was issued on by Let's Encrypt.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=usc.college
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:d7:4d:ca:ba:41:b4:33:64:87:81:ea:e2:98:de:3b:dd:83Serial Number (int): 421713255792417405062874538448925314768259
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ef:f6:bd:04:7f:8d:45:4d:25:3b:76:ca:99:f3:81:b7:0c:28:c1:99
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b1:81:df:a5:06:e4:3c:a7:41:0e:45:04:41:ee:9f:9d:17:0e:a7:7d
Fingerprint (sha256): d1:cb:27:21:f2:71:95:54:42:8c:7d:86:8b:a5:88:f0:d1:33:29:a0:99:ac:de:c5:6f:60:75:5f:5e:05:f4:f0
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate usc.college
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for usc.college
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
50statessocialclub.com.retrominifridge.com
bankish.io.hoodieszodiac.com
blockchainkenya.com
georgiausedchillers.com.dnfdao.com
globalalliancefellowship.com
helicopterstories.com
lgbtqcafes.com
mikesmowing.us
rfidservices.com
scholarly.bible
usc.college
victoriouschristianliving.org
writefortos.org
bankish.io.hoodieszodiac.com
blockchainkenya.com
georgiausedchillers.com.dnfdao.com
globalalliancefellowship.com
helicopterstories.com
lgbtqcafes.com
mikesmowing.us
rfidservices.com
scholarly.bible
usc.college
victoriouschristianliving.org
writefortos.org
Other certificates including the domain name usc.college
(limited to 100 certificates)
sanr.co.za
usc.college
dumptruck.ca
sculpit.cloud
dumptruck.ca
dumptruck.ca
dumptruck.ca
usc.college
portland.world
usc.college
usc.college
usc.college
grocer.cc
grocer.cc
usc.college
5272653.ca
grocer.cc
usc.college
norway.biz.fat.vc
usc.college
reptile.vc
morethanapatch.life
usc.college
marsexpress.ca
usc.college
emotionsandmore.limited
dumptruck.ca
proassislife.com.ec.proassislife.com.ec
usc.college
usc.college
birthdoula.la
usc.college
winecountry.realty.usc.college
usc.college
usc.college
usc.college
laughing.pizza
usc.college
usc.college
usc.college
usc.college
apify.de
marsexpress.ca
marsexpress.ca
usc.college
usc.college
marsexpress.ca
usc.college
usc.college
marsexpress.ca
usc.college
usc.college
white-pages.co.za
proassislife.com.ec.proassislife.com.ec
beachblanket.club
usc.college
grocer.cc
marsexpress.ca
usc.college
usc.college
usc.college
usc.college
dumptruck.ca
sculpit.cloud
dumptruck.ca
dumptruck.ca
dumptruck.ca
usc.college
portland.world
usc.college
usc.college
usc.college
grocer.cc
grocer.cc
usc.college
5272653.ca
grocer.cc
usc.college
norway.biz.fat.vc
usc.college
reptile.vc
morethanapatch.life
usc.college
marsexpress.ca
usc.college
emotionsandmore.limited
dumptruck.ca
proassislife.com.ec.proassislife.com.ec
usc.college
usc.college
birthdoula.la
usc.college
winecountry.realty.usc.college
usc.college
usc.college
usc.college
laughing.pizza
usc.college
usc.college
usc.college
usc.college
apify.de
marsexpress.ca
marsexpress.ca
usc.college
usc.college
marsexpress.ca
usc.college
usc.college
marsexpress.ca
usc.college
usc.college
white-pages.co.za
proassislife.com.ec.proassislife.com.ec
beachblanket.club
usc.college
grocer.cc
marsexpress.ca
usc.college
usc.college
usc.college
Certificate
The complete raw certificate details for usc.college in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgISBNdNyrpBtDNkh4Hq4pjeO92DMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA2MTIxMzExMzNaFw0yMzA5MTAxMzExMzJaMBYxFDASBgNVBAMT C3VzYy5jb2xsZWdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunsl CsEjaCI23hHPj5BSKSB+TVyDM/Su9yQjva4KIfifjhl5JjjvJV1z4tU5CRyACcgF DGkGtKHaycmiaDo6K1C/PgoOtbBzCkLefC29fByx2YuS3yRvBRo2jVfvSx/ZJO2F 2nzGrUI2qFAYrrv6wgSxSQ6PQS833bZpcyYdMgyAEe3n9dSAGl8eBW65NyA6MKEA Tutek9x0Ru8rVSjJnstWPVvglneg1pg9JOWO0ROUuu/CVftjNhrRUuGbS1k+4lA/ F7oCkVfyocp237SKrkslp1I3qCLfq89ooLLhxB4FXtBOekpuBB24OmmZ3WcG0oAO 43ZoaG3xeRgRDZNpgQIDAQABo4IDeDCCA3QwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBTv9r0Ef41FTSU7dsqZ84G3DCjBmTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCC AUUGA1UdEQSCATwwggE4gio1MHN0YXRlc3NvY2lhbGNsdWIuY29tLnJldHJvbWlu aWZyaWRnZS5jb22CHGJhbmtpc2guaW8uaG9vZGllc3pvZGlhYy5jb22CE2Jsb2Nr Y2hhaW5rZW55YS5jb22CImdlb3JnaWF1c2VkY2hpbGxlcnMuY29tLmRuZmRhby5j b22CHGdsb2JhbGFsbGlhbmNlZmVsbG93c2hpcC5jb22CFWhlbGljb3B0ZXJzdG9y aWVzLmNvbYIObGdidHFjYWZlcy5jb22CDm1pa2VzbW93aW5nLnVzghByZmlkc2Vy dmljZXMuY29tgg9zY2hvbGFybHkuYmlibGWCC3VzYy5jb2xsZWdlgh12aWN0b3Jp b3VzY2hyaXN0aWFubGl2aW5nLm9yZ4IPd3JpdGVmb3J0b3Mub3JnMEwGA1UdIARF MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA ejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGIr/KhJQAABAMARzBF AiAD9oAo4XrejnA6xCGkSKZKAnHqrv53bDFiQqPghobulgIhANPIBEn7VuPhI/KT U9hF2c/qvav+JUrYuMZ8iZIUm4gNAHcArfe++nz/EMiLnT2cHj4YarRnKV3PsQwk yoWGNOvcgooAAAGIr/KhSgAABAMASDBGAiEAjKZ348Lji1ljXZiTTPUd3/SZ0CM9 1Ewt3pz4yqoSl1ACIQCWC21icG91sqFd0lLgvmqBDXaip+9bS3v7FJUbWOjkTDAN BgkqhkiG9w0BAQsFAAOCAQEAsP+XZ2JWMWUdNBBKv6/wIJq6mze7xN8Gms0R8Q4D oJxJOBIR9MCPkFZkf/OHXgYWsq4DJwlL5HSRKwWqtLlXhaa06cMabyXjhU/fmMbf OVb2XDR14D0sDw7Y2qQ9u/m3piBxFJ97dha3gFJWNl0XCOGfMoGynWb3AnlVZcMb t1wxjjtpcvS6m8PE/g8zZ9yLVqY5TYZIk9P8FlN8NN59r8fMCF1PotmvUdqI1Ata D4tAOv/vxc1FJp43GldMBz6ms7MO/RBlmIyXVdFlwjeDQz4s+iDaNnQ4rFDfwrED PPnRUjfXEAhGhg0bxYi4dbS1IKuk5z6Upks7yeNqJpSC0w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunslCsEjaCI23hHPj5BS KSB+TVyDM/Su9yQjva4KIfifjhl5JjjvJV1z4tU5CRyACcgFDGkGtKHaycmiaDo6 K1C/PgoOtbBzCkLefC29fByx2YuS3yRvBRo2jVfvSx/ZJO2F2nzGrUI2qFAYrrv6 wgSxSQ6PQS833bZpcyYdMgyAEe3n9dSAGl8eBW65NyA6MKEATutek9x0Ru8rVSjJ nstWPVvglneg1pg9JOWO0ROUuu/CVftjNhrRUuGbS1k+4lA/F7oCkVfyocp237SK rkslp1I3qCLfq89ooLLhxB4FXtBOekpuBB24OmmZ3WcG0oAO43ZoaG3xeRgRDZNp gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 421713255792417405062874538448925314768259 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-12 13:11:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-10 13:11:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'usc.college' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23541049636212389396966933954371715057015234600552582379221656699809675294348902996949687503767757801696475495414255170123466764568577285807951074562593239407511284630258514232334642254147908997474388901431199569025818377737614552165576818308762116237512004019112611803525273610939458643183354696021878004048774093123578978372344438349651061043907602787609557270614990158587748070870043494185161052428072144604413403190891169256674814321802420311348869577018370040819657308042413471635954676942077706345405689284894608708816997827877307978717351009062240057605521600748428805075851778917762347716741326034969654684033 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) eff6bd047f8d454d253b76ca99f381b70c28c199 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (316 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50statessocialclub.com.retrominifridge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankish.io.hoodieszodiac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainkenya.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiausedchillers.com.dnfdao.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalalliancefellowship.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helicopterstories.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqcafes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikesmowing.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfidservices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarly.bible' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usc.college' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriouschristianliving.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writefortos.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188aff2a1250000040300473045022003f68028e17ade8e703ac421a448a64a0271eaaefe776c316242a3e08686ee96022100d3c80449fb56e3e123f29353d845d9cfeabdabfe254ad8b8c67c8992149b880d007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000188aff2a14a00000403004830460221008ca677e3c2e38b59635d98934cf51ddff499d0233dd44c2dde9cf8caaa129750022100960b6d62706f75b2a15dd252e0be6a810d76a2a7ef5b4b7bfb14951b58e8e44c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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