www.chute-saint-philippe.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:20:85:89:17:4d:1d:8f:da:62:dd:f3:68:18:b5:c8:ea:5d was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.chute-saint-philippe.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:20:85:89:17:4d:1d:8f:da:62:dd:f3:68:18:b5:c8:ea:5dSerial Number (int): 272403392677464922223744466032846877289053
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 19:49:fe:f5:93:10:89:30:14:1c:a5:e2:97:de:ba:4d:eb:55:fc:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6f:23:83:78:c6:bd:4d:d8:63:33:c0:7c:b9:76:d4:74:e8:7a:97:8a
Fingerprint (sha256): d2:07:04:56:50:27:25:14:b8:83:ce:85:c0:6e:53:4d:f9:61:e8:99:6a:9b:42:e2:86:91:19:3a:17:2d:12:1c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.chute-saint-philippe.ca
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.chute-saint-philippe.ca
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
chute-saint-philippe.ca
munchute.aegir3.koumbit.net
www-chute-saint-philippe-ca.aegir3.koumbit.net
www.chute-saint-philippe.ca
munchute.aegir3.koumbit.net
www-chute-saint-philippe-ca.aegir3.koumbit.net
www.chute-saint-philippe.ca
Other certificates including the domain name chute-saint-philippe.ca
(limited to 100 certificates)
www.chute-saint-philippe.ca
*.chute-saint-philippe.ca
www.chute-saint-philippe.ca
chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
*.chute-saint-philippe.ca
www.chute-saint-philippe.ca
chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
Certificate
The complete raw certificate details for www.chute-saint-philippe.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG1zCCBb+gAwIBAgISAyCFiRdNHY/aYt3zaBi1yOpdMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMzAxNzA0NDZaFw0y MDA0MjkxNzA0NDZaMCYxJDAiBgNVBAMTG3d3dy5jaHV0ZS1zYWludC1waGlsaXBw ZS5jYTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALIff2uOHDZMAh+A tPV2vxsv6ldiJf3ZsJUSM+5XmA9bzf0HhMtRKv0vTO24yPV272JtqxDj6HK63TCX eJXnMooKSE6vfkBs+WbWQLhRGWIcahJQaNrwZEvlzw/88arhkayYgLS/uwCFxfJk 36KdgjUYHULwo0TgS26CgAggHHlCpdKfl9VAkdhevS7swVXkBxPmXPgFhkDwA1Ma bZLji6s8ZicOpgjxC+oi7UTIi1aKs+u1NJvkvQv9e7gQTnAI3rlfkt+7UAF2HIVm Y6SRcz3pPceYnCX5XjY/QUG12JuHLcxTwqhs5wKLUYSKQBgGtHeiYjaUfrPtk7rO sH+iEfOyz77WAIhGDwud06StKRbICoep7rWVxMvYQUktePNsZQnOPR/M2wnsqcX+ rGV4NebjvbHMheZxCmdB7B9SFOpjd27BylArP/65omV2poa1ZW7OfdjHx2YbZ2AU u3SjsXShiIksryUnusPAGor4UTbuY0Ey7hNjOeUsSZxP3YJx4YbsUvKbAdVyPC3l eLeO1YIQ5AhHHppLj2iCBAraDEqfxBPY/1eAjdBPc1+Xi9ZUtT3AdRvk1dxXrzA3 2TzMVf1T7FlY9oxwwG/liuPnA9wVyKG+7/hmRde1EqI3f6yIXaZuruqsJdA+5bex 1Ul1LsCNtOkZPe0CZglwfLXSD1y9AgMBAAGjggLZMIIC1TAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFBlJ/vWTEIkwFByl4pfeuk3rVfwGMB8GA1UdIwQYMBaAFKhKamME fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0 cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0 cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wgY4GA1UdEQSBhjCBg4IX Y2h1dGUtc2FpbnQtcGhpbGlwcGUuY2GCG211bmNodXRlLmFlZ2lyMy5rb3VtYml0 Lm5ldIIud3d3LWNodXRlLXNhaW50LXBoaWxpcHBlLWNhLmFlZ2lyMy5rb3VtYml0 Lm5ldIIbd3d3LmNodXRlLXNhaW50LXBoaWxpcHBlLmNhMEwGA1UdIARFMEMwCAYG Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu bGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAXqdz+d9W wOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFv96B2nwAABAMARzBFAiBfxN4F 7Fls8q39b9YtF2YQGg/x/xPVBYPDrUuHDAdp8gIhAMsJIE/57YDQQREQDcAwlHu2 +26ov1IFE9AHcRytlT+MAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnT ohwAAAFv96B2wgAABAMARzBFAiBwaF0MKqFp3caJcUNnY6qQ1d8YAKrE3aNmJLNT QBjycgIhAKP/f1NsYMLQ/nCdCDql5meP5YjOn228lDUWG4t8x8xiMA0GCSqGSIb3 DQEBCwUAA4IBAQB7LGJ29Nq0F5QYIbNtQxS984LUG6u5nRNlyplVnr3Vs4ENcCQh F99DjVOyml6HeD2wSAxvoEID1ixTMU0X6I7f+lQqRnr/UYgqEY+sNLdVcxPs/fcv kM+Ak5o/HWS8dpy/oShg+Y4WU8vwMdqaSS7KoWOyCGUrPFOE3f+BY8QqNVzNd0Tu nnwBH+BNJWM9Ygul1zI3Vl4/qB9m1ilx2UyVsrPcCILa94y4PpXQE1rFKOcVc51k Amqsc7vsNUzSYGYkYrnRS0iikRQOP0yW9h9W7UcQMLrjVY+fYIefIvyT4wwmBTa0 8P9PPe0sTk9RLMoq+R7nmKa5lGrZ1vzYhbgW -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsh9/a44cNkwCH4C09Xa/ Gy/qV2Il/dmwlRIz7leYD1vN/QeEy1Eq/S9M7bjI9XbvYm2rEOPocrrdMJd4lecy igpITq9+QGz5ZtZAuFEZYhxqElBo2vBkS+XPD/zxquGRrJiAtL+7AIXF8mTfop2C NRgdQvCjROBLboKACCAceUKl0p+X1UCR2F69LuzBVeQHE+Zc+AWGQPADUxptkuOL qzxmJw6mCPEL6iLtRMiLVoqz67U0m+S9C/17uBBOcAjeuV+S37tQAXYchWZjpJFz Pek9x5icJfleNj9BQbXYm4ctzFPCqGznAotRhIpAGAa0d6JiNpR+s+2Tus6wf6IR 87LPvtYAiEYPC53TpK0pFsgKh6nutZXEy9hBSS1482xlCc49H8zbCeypxf6sZXg1 5uO9scyF5nEKZ0HsH1IU6mN3bsHKUCs//rmiZXamhrVlbs592MfHZhtnYBS7dKOx dKGIiSyvJSe6w8AaivhRNu5jQTLuE2M55SxJnE/dgnHhhuxS8psB1XI8LeV4t47V ghDkCEcemkuPaIIECtoMSp/EE9j/V4CN0E9zX5eL1lS1PcB1G+TV3FevMDfZPMxV /VPsWVj2jHDAb+WK4+cD3BXIob7v+GZF17USojd/rIhdpm6u6qwl0D7lt7HVSXUu wI206Rk97QJmCXB8tdIPXL0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 272403392677464922223744466032846877289053 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 17:04:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 17:04:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.chute-saint-philippe.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726678595464555851681015219303329274669773790140442547552137825965382217786668845574680953372873170350660749031003566455762354920958925499907092028873230845083708832146880401178994503594577609608532669111705743645237999612787005206022570327920079896279987343177838098408340397991064507527127124652132966627180403710058754867136176160239451431749340868562505295472514750421887479850365859395670806133520125897971613984183752664270821770149766162479144793948767735677711277400451724940865448236066587129779713003295864136370152584990735857964949010465023854075942076562651753943188894802493421051791974048139824069966425714854187824242455329861353474109077089687103891286725784237446907136273740463088551117743721219257308506300163918960152581596183073734313759742207936271866048881670330576715822106450071158563410186698822667893254060212846310217288545323142293941364234594390987603652363056545870465135824581534480266170711793512773052359792784962348684559154367808989491632536012373016915445618697830068955918507720606028737991986474958562574668071363661785542250462619324563022589341029621275815266592334874542808912237857098911684315035731190255070589973693701327439698791788601802301407630031653901364985501842849589082761157821 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1949fef593108930141ca5e297deba4deb55fc06 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chute-saint-philippe.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munchute.aegir3.koumbit.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-chute-saint-philippe-ca.aegir3.koumbit.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chute-saint-philippe.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ff7a0769f000004030047304502205fc4de05ec596cf2adfd6fd62d1766101a0ff1ff13d50583c3ad4b870c0769f2022100cb09204ff9ed80d04111100dc030947bb6fb6ea8bf520513d007711cad953f8c00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ff7a076c20000040300473045022070685d0c2aa169ddc68971436763aa90d5df1800aac4dda36624b3534018f272022100a3ff7f536c60c2d0fe709d083aa5e6678fe588ce9f6dbc9435161b8b7cc7cc62 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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