*.heidenreich.no
Issued by Sectigo RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number 8d:9b:f1:4f:ac:09:d5:6f:ac:1b:d6:a2:39:b3:e2:cc was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.heidenreich.no,OU=Domain Control Validated+OU=EssentialSSL Wildcard
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 8d:9b:f1:4f:ac:09:d5:6f:ac:1b:d6:a2:39:b3:e2:ccSerial Number (int): 188230847791728664987012932498651079372
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 47:22:90:33:70:e8:d4:48:85:62:29:18:71:63:99:a7:5f:4d:c8:dc
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1
Fingerprint (sha1): 86:6b:9f:45:2f:1b:8f:84:42:16:6f:0e:f4:48:23:6d:d4:68:a8:4c
Fingerprint (sha256): ea:ea:21:90:90:5e:d2:58:f8:ad:b0:5c:1e:41:c4:d8:85:5d:ef:b8:51:86:c1:da:0b:31:2f:25:19:00:97:54
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCheck the revocation status for certificate *.heidenreich.no
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.heidenreich.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.heidenreich.no
heidenreich.no
heidenreich.no
Other certificates including the domain name heidenreich.no
(limited to 100 certificates)
www.heidenreich.no
app.klaytn.domains
ava.staging.awellhealth.com
www.heidenreich.no
www.heidenreich.no
www.heidenreich.no
ava.staging.awellhealth.com
www.heidenreich.no
www.heidenreich.no
mail.heidenreich.no
mail.heidenreich.no
www.heidenreich.no
lascandelassf.com
forthrightaccess.com
eventstogo.app
heiintra.heidenreich.no
hei25.heidenreich.no
www.heidenreich.no
www.heidenreich.no
www.willyelton.dev
www.heidenreich.no
app.seniorengemeinschaft-bgl.de
ww24.jp
hei28.heidenreich.no
www.cno-global.com
*.heidenreich.no
frakt.heidenreich.no
www.heidenreich.no
www.cno-global.com
netthandel.heidenreich.no
*.heidenreich.no
heidenreich.no
hei28.heidenreich.no
*.heidenreich.no
www.heidenreich.no
*.heidenreich.no
*.heidenreich.no
app.klaytn.domains
ava.staging.awellhealth.com
www.heidenreich.no
www.heidenreich.no
www.heidenreich.no
ava.staging.awellhealth.com
www.heidenreich.no
www.heidenreich.no
mail.heidenreich.no
mail.heidenreich.no
www.heidenreich.no
lascandelassf.com
forthrightaccess.com
eventstogo.app
heiintra.heidenreich.no
hei25.heidenreich.no
www.heidenreich.no
www.heidenreich.no
www.willyelton.dev
www.heidenreich.no
app.seniorengemeinschaft-bgl.de
ww24.jp
hei28.heidenreich.no
www.cno-global.com
*.heidenreich.no
frakt.heidenreich.no
www.heidenreich.no
www.cno-global.com
netthandel.heidenreich.no
*.heidenreich.no
heidenreich.no
hei28.heidenreich.no
*.heidenreich.no
www.heidenreich.no
*.heidenreich.no
*.heidenreich.no
Certificate
The complete raw certificate details for *.heidenreich.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGgDCCBWigAwIBAgIRAI2b8U+sCdVvrBvWojmz4swwDQYJKoZIhvcNAQELBQAw gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD QTAeFw0xOTAyMjAwMDAwMDBaFw0yMTAyMTkyMzU5NTlaMF4xITAfBgNVBAsTGERv bWFpbiBDb250cm9sIFZhbGlkYXRlZDEeMBwGA1UECxMVRXNzZW50aWFsU1NMIFdp bGRjYXJkMRkwFwYDVQQDDBAqLmhlaWRlbnJlaWNoLm5vMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAvjUsPT/v7mi7x3wAdkIEPsTFii88vUoUIwvSpVKA iPnmlDhmLSiw6ALNi9Bw3EV49HmZZPoOusxbudm/VUIzMtGKIyFcVKOSc/q9eA4c LhwELwSfIO8cTDwovDM7sEkkaXukFY1UvCwWULW1KnUyjG37iTgFBxoirVHTSELi yiVRupjXXps3zEuHt7RaJKBV+rKJhemojrJQhJoDqyzhIS60V5u07xWqLnkj8n6r 1RP2+2tDNuoL2oN/kbGDBE7BFSZadgzb5HMLyG4mjvVE+M9qeOrUlvoIn4n8icIE uSybvEEpNZYf3VOsP+/YmNja3/PzC6Fre9zOJfLcoDM55QIDAQABo4IDBTCCAwEw HwYDVR0jBBgwFoAUjYxexFStiuF36Zv5mwXhuAGNYeEwHQYDVR0OBBYEFEcikDNw 6NRIhWIpGHFjmadfTcjcMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQB sjEBAgIHMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgG BmeBDAECATCBhAYIKwYBBQUHAQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0 LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2Vy dmVyQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAr BgNVHREEJDAighAqLmhlaWRlbnJlaWNoLm5vgg5oZWlkZW5yZWljaC5ubzCCAYEG CisGAQQB1nkCBAIEggFxBIIBbQFrAHcAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUuga kJZkNo4e0YUAAAFpC7RCJAAABAMASDBGAiEAi2DQpnh104j1tGgNUeBrXidirn7O /CJ+ycopAaTKZWkCIQDnSZRLkD7r0f7nYvxMUcwl1tD+ILi4YACZOIu8wzNqyAB3 AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/TM5a1toGoAAABaQu0Qm8AAAQDAEgw RgIhAJy1zmVOrbsJltjDxEkPNiLX1i1aVG9ivRcOFDwkwkY9AiEAnifwB7JXM81J 4pT33gGg5xL8z7qUXMvFErIJg5a5WUAAdwBc3EOS/uarRUSxXprUVuYQN/vV+kfc oXOUsl7m9scOygAAAWkLtELvAAAEAwBIMEYCIQDn0U+urfwLI3812M0XXP0FfECy 79Lheuj/QJtQ8qCh+QIhAOd+228+B/RaXrF1SjfLzM1+afhhvvfLY0Sz4kgp52Vf MA0GCSqGSIb3DQEBCwUAA4IBAQC7fTqagN8otck73zxiY1ErDAh+1EOQBW6vjp0b JwOklhA/QAWkj0yXvyq4ZU7tR7ZP3xYZ1v5K08hp1FFXHRLB8U2jEuTkUvst2Gxz JZB2v56degSdKo2V/X6b/lPA346RVMnpN2nkwUjB8brJIfZLGjAR10miwBGl1VxQ Sba3qyaGC+sFtv4xf9H4ua0eIhaNUMv3N0Mt0VOhE8HhHGzx0zwEn28cgBeJk6LB Krv8xk7l2JmKIeLzUfL+p0MNarTExqK3yD2cifxw4dXpyy2cDK8IsHgRnJY1rxXP fakhB0037WVUe4qxpSFO1bz+csJ+Z8GjiEF0eAaWCc4ezV7w -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjUsPT/v7mi7x3wAdkIE PsTFii88vUoUIwvSpVKAiPnmlDhmLSiw6ALNi9Bw3EV49HmZZPoOusxbudm/VUIz MtGKIyFcVKOSc/q9eA4cLhwELwSfIO8cTDwovDM7sEkkaXukFY1UvCwWULW1KnUy jG37iTgFBxoirVHTSELiyiVRupjXXps3zEuHt7RaJKBV+rKJhemojrJQhJoDqyzh IS60V5u07xWqLnkj8n6r1RP2+2tDNuoL2oN/kbGDBE7BFSZadgzb5HMLyG4mjvVE +M9qeOrUlvoIn4n8icIEuSybvEEpNZYf3VOsP+/YmNja3/PzC6Fre9zOJfLcoDM5 5QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 188230847791728664987012932498651079372 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EssentialSSL Wildcard' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.heidenreich.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24011498433214495509294447452218608796145522189979331046138578715965904718559058971909427238151315508107677793129274948718997726905287432682878704125353860648192463629203296114226594964078832443554255594815108660005021082787345775124065683232947376668092327552636519205911224145206696427328891561021278837567279550582443870646143305799895686308935350408233038312097830398574666055858696789344628715823297901003656906840387299448287420079246084683612652740574018087402503190988061904772945497285797990478338191338767174283132625107682934090130739773777649211034874753928090261484091885624330470930826159651670170221029 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4722903370e8d44885622918716399a75f4dc8dc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heidenreich.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heidenreich.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00bb7d3a9a80df28b5c93bdf3c6263512b0c087ed44390056eaf8e9d1b2703a496103f4005a48f4c97bf2ab8654eed47b64fdf1619d6fe4ad3c869d451571d12c1f14da312e4e452fb2dd86c73259076bf9e9d7a049d2a8d95fd7e9bfe53c0df8e9154c9e93769e4c148c1f1bac921f64b1a3011d749a2c011a5d55c5049b6b7ab26860beb05b6fe317fd1f8b9ad1e22168d50cbf737432dd153a113c1e11c6cf1d33c049f6f1c80178993a2c12abbfcc64ee5d8998a21e2f351f2fea7430d6ab4c4c6a2b7c83d9c89fc70e1d5e9cb2d9c0caf08b078119c9635af15cf7da921074d37ed65547b8ab1a5214ed5bcfe72c27e67c1a388417478069609ce1ecd5ef0