www.agkino.de
Issued by Starfield Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 58:13:ce:64:13:5c:ff:0f was issued on by Starfield Technologies, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.agkino.de,OU=Domain Control Validated
Starfield Technologies, Inc.
Organization:
Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
Organization unit: http://certs.starfieldtech.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 58:13:ce:64:13:5c:ff:0fSerial Number (int): 6346643229112073999
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: e0:88:a1:c9:57:55:bd:7b:38:64:a0:62:46:ba:f7:b4:4e:4f:93:bc
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63
Fingerprint (sha1): 3c:b4:9b:d6:42:e8:4b:1c:92:4a:16:2a:64:cb:aa:51:8e:8e:2f:0b
Fingerprint (sha256): e2:ba:9d:f1:85:14:fc:b5:00:06:a6:3e:27:b6:94:d6:ac:f3:60:64:10:c8:0d:6b:d0:bd:d4:b6:e1:8d:92:86
Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt
Revocation information
OCSP Server: http://ocsp.starfieldtech.com/CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-149.crl
Check the revocation status for certificate www.agkino.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.agkino.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.agkino.de
agkino.de
agkino.de
Other certificates including the domain name agkino.de
(limited to 100 certificates)
umfrage.agkino.de
umfrage.agkino.de
screenings.agkino.de
www.agkino.de
screenings.agkino.de
umfrage.agkino.de
umfrage.agkino.de
datenaustausch.agkino.de
screenings.agkino.de
datenaustausch.agkino.de
umfrage.agkino.de
datenaustausch.agkino.de
www.agkino.de
datenaustausch.agkino.de
datenaustausch.agkino.de
datenaustausch.agkino.de
umfrage.agkino.de
umfrage.agkino.de
screenings.agkino.de
umfrage.agkino.de
datenaustausch.agkino.de
datenaustausch.agkino.de
www.agkino.de
umfrage.agkino.de
umfrage.agkino.de
umfrage.agkino.de
umfrage.agkino.de
screenings.agkino.de
www.agkino.de
screenings.agkino.de
umfrage.agkino.de
umfrage.agkino.de
datenaustausch.agkino.de
screenings.agkino.de
datenaustausch.agkino.de
umfrage.agkino.de
datenaustausch.agkino.de
www.agkino.de
datenaustausch.agkino.de
datenaustausch.agkino.de
datenaustausch.agkino.de
umfrage.agkino.de
umfrage.agkino.de
screenings.agkino.de
umfrage.agkino.de
datenaustausch.agkino.de
datenaustausch.agkino.de
www.agkino.de
umfrage.agkino.de
umfrage.agkino.de
umfrage.agkino.de
Certificate
The complete raw certificate details for www.agkino.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIIWBPOZBNc/w8wDQYJKoZIhvcNAQELBQAwgcYxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUw IwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTMwMQYDVQQLEypo dHRwOi8vY2VydHMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8xNDAyBgNV BAMTK1N0YXJmaWVsZCBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIw HhcNMTkwNjI2MDgzODM2WhcNMjAwNjI2MDgzODM2WjA7MSEwHwYDVQQLExhEb21h aW4gQ29udHJvbCBWYWxpZGF0ZWQxFjAUBgNVBAMTDXd3dy5hZ2tpbm8uZGUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkHFJdQJsauqCYqUZkeexLaWP I+QEq9FNGTYI+uufHT4zuZ7jZCHsUxx7gQGtKgfUtYc2qL0StEwxexUtoWJU56yW I+XfW6GpSQxqiTtK1pwW1w0LnRIty0tyw06mBVz7/2vLZaZWssKziNOHjYqsjUFk GuXdz6x/66fLSx1da6ld+FHi5bzUoUFs/jJjXi8j/krHUvER6Th4o7oPjM5eZJ58 TkR8mp256K3R9Lu6RWkGjfoh0ch1WiYUFCRbPegPXeiLvXX2S13CYBEigzxM0zQ6 H4PjBI+PL5bOOXPWW1AW1NQJSagwhQlZgH1I2fKviEVuqwOFvqxcpjWC05B3AgMB AAGjggLXMIIC0zAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDov L2NybC5zdGFyZmllbGR0ZWNoLmNvbS9zZmlnMnMxLTE0OS5jcmwwYwYDVR0gBFww WjBOBgtghkgBhv1uAQcXATA/MD0GCCsGAQUFBwIBFjFodHRwOi8vY2VydGlmaWNh dGVzLnN0YXJmaWVsZHRlY2guY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATCBggYI KwYBBQUHAQEEdjB0MCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5zdGFyZmllbGR0 ZWNoLmNvbS8wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jZXJ0aWZpY2F0ZXMuc3RhcmZp ZWxkdGVjaC5jb20vcmVwb3NpdG9yeS9zZmlnMi5jcnQwHwYDVR0jBBgwFoAUJUWB aFAmOD07LSy+zWrZtj2zZmMwIwYDVR0RBBwwGoINd3d3LmFna2luby5kZYIJYWdr aW5vLmRlMB0GA1UdDgQWBBTgiKHJV1W9ezhkoGJGuve0Tk+TvDCCAQQGCisGAQQB 1nkCBAIEgfUEgfIA8AB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQ AAABa5LvzWoAAAQDAEcwRQIgbmSwx318k/e0f26W7P3ViI1eSLIlWWABES0SjBYw df8CIQC0jY9I0FzIKcZa8GDUDUXx4JAwANJA+hGmhfNX1OxhiAB2AF6nc/nfVsDn tTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABa5Lv0wEAAAQDAEcwRQIhALLmbuwi 9ALSlxH0Trdm89vPk+tEZog/RAfvY67UwgM3AiAWJAxAYLvGVDXCvo6/jdhwnW8E 5fl2XebaR0tz1QBPHTANBgkqhkiG9w0BAQsFAAOCAQEAZGcIG/DHdoLXp8KMiTV6 MWH6ZaiTy/GxNq4QoeQmUNtlZhW7gNYEL28nG9+OjvUPHUI0w1nGhQq0FixYPn9m EbbrSYUm2EYtb1635q5VFqn7lvkohO3ShcbKWad6EZqlfIL5TTAnzkzyiQ2wDltG 0wcGFt2fUpfmibp2hO8CjOPU0cptmwwLXHi7OjNb9ik1r1Ml9gnyJpAbVsmLFcny Dpj/GlTCoSpHHpml/INzrcFbPd/bTsPX9P8BpxxEYNbzCzZ3rMOw48FsttZ31Xy5 73CVVU0MfaBRm4yY0htHN194GQNPUkWk6NB6yCkl8P5BXa1mSBY0/OryGHXlANIv kA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5BxSXUCbGrqgmKlGZHn sS2ljyPkBKvRTRk2CPrrnx0+M7me42Qh7FMce4EBrSoH1LWHNqi9ErRMMXsVLaFi VOesliPl31uhqUkMaok7StacFtcNC50SLctLcsNOpgVc+/9ry2WmVrLCs4jTh42K rI1BZBrl3c+sf+uny0sdXWupXfhR4uW81KFBbP4yY14vI/5Kx1LxEek4eKO6D4zO XmSefE5EfJqdueit0fS7ukVpBo36IdHIdVomFBQkWz3oD13oi7119ktdwmARIoM8 TNM0Oh+D4wSPjy+Wzjlz1ltQFtTUCUmoMIUJWYB9SNnyr4hFbqsDhb6sXKY1gtOQ dwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6346643229112073999 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 08:38:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-26 08:38:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.agkino.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25192649953043034370964809105849428664280730378624516980075914203749863763700212945200332451658080211669676027964833246909945076756626742482292041479985922625139187822617704108856196780257663878900314136206748285340232411698627052770294459927426420258379152891322844717223481447569911970599064323424120618143572987947620798876515164658856940062253552208000496875802337716965520008589103537951614370895037291581641592323738158382890079708423029497394595526850578261557198454707771549858019006050051899672031541503659882564950624846749080597181041580506059985539278274748118177475018039387851128028968229808597816807543 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-149.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agkino.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agkino.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e088a1c95755bd7b3864a06246baf7b44e4f93bc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016b92efcd6a000004030047304502206e64b0c77d7c93f7b47f6e96ecfdd5888d5e48b225596001112d128c163075ff022100b48d8f48d05cc829c65af060d40d45f1e0903000d240fa11a685f357d4ec61880076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016b92efd3010000040300473045022100b2e66eec22f402d29711f44eb766f3dbcf93eb4466883f4407ef63aed4c20337022016240c4060bbc65435c2be8ebf8dd8709d6f04e5f9765de6da474b73d5004f1d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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