aksel.co.id
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number f6:b4:ff:c6:b4:9f:31:02:11:55:72:d5:a2:2b:b2:e6 was issued on by Google Trust Services LLC.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=aksel.co.id
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): f6:b4:ff:c6:b4:9f:31:02:11:55:72:d5:a2:2b:b2:e6Serial Number (int): 327929888155150435115029994141817484006
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 8c:5a:df:f7:05:b4:2a:e1:66:88:26:37:1c:2b:f1:41:fb:ea:ec:c2
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 02:c4:83:1d:ef:20:9b:41:76:1a:87:af:29:bc:05:05:0e:91:66:cc
Fingerprint (sha256): db:68:3e:8c:00:58:c6:77:a2:eb:22:e7:b4:ad:dc:3b:0c:10:fd:4d:cc:58:4d:78:14:1b:71:00:fe:3a:1f:10
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/JJScklR8_rUCRL Distribution Point: http://crls.pki.goog/gts1p5/MQqSks_wLFY.crl
Check the revocation status for certificate aksel.co.id
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aksel.co.id
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aksel.co.id
*.aksel.co.id
*.aksel.co.id
Other certificates including the domain name aksel.co.id
(limited to 100 certificates)
supplychain.averydennison.com
www.jlc-hub.com
tls.automattic.com
unimed-manaus.telemedicina.drtis.com.br
aksel.co.id
aksel.co.id
www.jlc-hub.com
iammoriz.net
app.kidddo.com
secrets.alyne.app
pixoditor.com
320.roox.tk
nft9ja.com
automate.goeoeck.net
pasella.africa
l.inkblottherapy.com
www.shanepa.me
www.kickingcultures.com
aditrologistics.lograf.se
www.cirklar.org
thesaurum.thetislive.com
market.enteroffer.com
mydesk.chat
sksoftware.app
lume.ssaavedra.eu
www.bookazor.com
aksel.co.id
sazava.infopanel.plus
www.funteractive.app
masterylogistics.vn
dyckster.com
www.fayda.net
www.funteractive.app
dev.app.peptales.com
vendorbay.com
images.thichcay.com
apis.wilders.dev
staging.hangfruit.com
link.aksel.co.id
www.acenotes.poker
teach.amy.app
pedromalo.dev
aksel.co.id
admin.waivr.app
aksel.co.id
www.thehealthyserve.com
app.cobot-i.com
convene-now-dev.cpptl.co
www.lounastaja.app
aksel.co.id
heatmap.wifilookup.com
*.aksel.co.id
aksel.co.id
onrecord.online
admin.sprntd.com
aksel.co.id
links.aksel.co.id
aksel.co.id
www.jummp.io
donkeyswelove.com
secrets.alyne.app
biz2travel.com
www.staging.modeledge.pwc.com
a.tipple.com.au
aksel.co.id
app.clever.ps
*.aksel.co.id
www.senwellsys.com
snackcar.plan2win.be
www.thirdeyeinvestment.co
iot.dasos.io
www.verification.teembly.com
app.medconnect.io
web.feature2.digiqc.com
kurigi.com
cpas.ai
tls.automattic.com
invportdemo.bangkokbankinnohub.com
sazava.infopanel.plus
qainter.biibiic.com
mljobs.ai
www.jlc-hub.com
tls.automattic.com
unimed-manaus.telemedicina.drtis.com.br
aksel.co.id
aksel.co.id
www.jlc-hub.com
iammoriz.net
app.kidddo.com
secrets.alyne.app
pixoditor.com
320.roox.tk
nft9ja.com
automate.goeoeck.net
pasella.africa
l.inkblottherapy.com
www.shanepa.me
www.kickingcultures.com
aditrologistics.lograf.se
www.cirklar.org
thesaurum.thetislive.com
market.enteroffer.com
mydesk.chat
sksoftware.app
lume.ssaavedra.eu
www.bookazor.com
aksel.co.id
sazava.infopanel.plus
www.funteractive.app
masterylogistics.vn
dyckster.com
www.fayda.net
www.funteractive.app
dev.app.peptales.com
vendorbay.com
images.thichcay.com
apis.wilders.dev
staging.hangfruit.com
link.aksel.co.id
www.acenotes.poker
teach.amy.app
pedromalo.dev
aksel.co.id
admin.waivr.app
aksel.co.id
www.thehealthyserve.com
app.cobot-i.com
convene-now-dev.cpptl.co
www.lounastaja.app
aksel.co.id
heatmap.wifilookup.com
*.aksel.co.id
aksel.co.id
onrecord.online
admin.sprntd.com
aksel.co.id
links.aksel.co.id
aksel.co.id
www.jummp.io
donkeyswelove.com
secrets.alyne.app
biz2travel.com
www.staging.modeledge.pwc.com
a.tipple.com.au
aksel.co.id
app.clever.ps
*.aksel.co.id
www.senwellsys.com
snackcar.plan2win.be
www.thirdeyeinvestment.co
iot.dasos.io
www.verification.teembly.com
app.medconnect.io
web.feature2.digiqc.com
kurigi.com
cpas.ai
tls.automattic.com
invportdemo.bangkokbankinnohub.com
sazava.infopanel.plus
qainter.biibiic.com
mljobs.ai
Certificate
The complete raw certificate details for aksel.co.id in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIRAPa0/8a0nzECEVVy1aIrsuYwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjQwNTEyMjA1ODEyWhcNMjQwODEw MjA1ODExWjAWMRQwEgYDVQQDEwtha3NlbC5jby5pZDCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAKJwtNfn9WSnzQS51T4DF3rwxMTbnr75Nrf1wylugbjJ YAy3TPt8SU5ytish+E+vLebmHqoZmueoGf9jOlsLbmR55PmOmjVCE0Ivnp7Z2xiL PuULVzgSuEOqpk2+S+G4gBtfK0+CZm6rFusuyB7hf0eFi/fUjp8cAp8VRJPjMtqO aePzKsQEpVNi9ggJHNPcyqpaRBU6fp52R+w9RcpLLzyejYRX+yrvc91txBu5bHIS IcBGx8rRJbGUFvmDo85Ro7rGSxoEHkBf+SDtTpjYJt3o6riX+BP4q+WHBnR06zLu FmRGhgh47026utID6JLLHzKiMT9azuMpveKO78A8hZUCAwEAAaOCAoAwggJ8MA4G A1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBSMWt/3BbQq4WaIJjccK/FB++rswjAfBgNVHSMEGDAWgBTV/J4N 3x7K3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUHMAGGKWh0 dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1L0pKU2NrbFI4X3JVMDEGCCsGAQUF BzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUuZGVyMCUGA1Ud EQQeMByCC2Frc2VsLmNvLmlkgg0qLmFrc2VsLmNvLmlkMCEGA1UdIAQaMBgwCAYG Z4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2Ny bHMucGtpLmdvb2cvZ3RzMXA1L01RcVNrc193TEZZLmNybDCCAQMGCisGAQQB1nkC BAIEgfQEgfEA7wB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAAB j27QQRIAAAQDAEYwRAIgCtchKAb59HttQ2AmqGbz5VxDNEzmw+CBVezu5oELyp0C IESBqhcYkEiTyIXF9/noBS/H163zpG3WoBu0nGcfyLiIAHYA2ra/az+1tiKfm8K7 XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGPbtBBZgAABAMARzBFAiEAjcttCknXLusU HUid+7NHWom8BdXzPBgM1aRrP0BDpiICIFq+WS9OuuF9hWvB5wP2aY9WFUVuW4sU A5PkmPeLEDteMA0GCSqGSIb3DQEBCwUAA4IBAQCH/Jz1NzNcUdILCgmhMyDhNJSz B/LIUxkhgn4W+Yd/0UMaBaokNG1DVuU+jq4ykIRBbzUuXCnWmx/fLyFQElZJHoHP OdhZK/VrcJVwiqsioRZCMmbj51+Mq02WIMKbQlBDPapXZWiyX296DTRSr16ToDBm s1D5+tqTvzuygl0Ds/ggwr5Wpe1eZli+cjRDWxCj+7nLpflqiDkPZWom3VHAP+kj 008+C7NPDEG3iyME7aW2BwoRa22q9KYi10zjOn5Si2aIWJtIZ0nz4CzAI1JZR4zw sScMOWl7aohlgVlzWpF/iGONBFZw+ionHsVFx5JN/mEJyGIN7WArI5Br8d6f -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonC01+f1ZKfNBLnVPgMX evDExNuevvk2t/XDKW6BuMlgDLdM+3xJTnK2KyH4T68t5uYeqhma56gZ/2M6Wwtu ZHnk+Y6aNUITQi+entnbGIs+5QtXOBK4Q6qmTb5L4biAG18rT4JmbqsW6y7IHuF/ R4WL99SOnxwCnxVEk+My2o5p4/MqxASlU2L2CAkc09zKqlpEFTp+nnZH7D1Fyksv PJ6NhFf7Ku9z3W3EG7lschIhwEbHytElsZQW+YOjzlGjusZLGgQeQF/5IO1OmNgm 3ejquJf4E/ir5YcGdHTrMu4WZEaGCHjvTbq60gPokssfMqIxP1rO4ym94o7vwDyF lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 327929888155150435115029994141817484006 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 20:58:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-10 20:58:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aksel.co.id' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20506183011345687491525389947089914264277432302537986358258357402895155715087214512025481541265670258095544305285004802327047110896196420451114445718229654972710078199525482996206469767115275361908485276832860743374356151037826373888522285264999510915089510094132156642137927464424366580661932261969927906275533264193183820740629660724559344164542879392557178051389351286503089682136306133298449750553926413030284254851528971378080417950375237682280749767953216051471613989801945856573043762883778239767834439216586128826816989363354893431457159747737225661108233653686757193485489984170862484094215136914479320434069 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8c5adff705b42ae1668826371c2bf141fbeaecc2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/JJScklR8_rU' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aksel.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aksel.co.id' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/MQqSks_wLFY.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f6ed04112000004030046304402200ad7212806f9f47b6d436026a866f3e55c43344ce6c3e08155eceee6810bca9d02204481aa1718904893c885c5f7f9e8052fc7d7adf3a46dd6a01bb49c671fc8b888007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018f6ed0416600000403004730450221008dcb6d0a49d72eeb141d489dfbb3475a89bc05d5f33c180cd5a46b3f4043a62202205abe592f4ebae17d856bc1e703f6698f5615456e5b8b140393e498f78b103b5e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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