*.fix-it.app
Issued by Actalis Domain Validation Server CA G1
About this certificate
This digital certificate with serial number 03:90:cf:6c:78:8d:ef:8b was issued on by Actalis S.p.A./03358520967.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.fix-it.app,OU=Domain Control Validated by Actalis S.p.A.
Actalis S.p.A./03358520967
Organization:
Actalis S.p.A./03358520967
State / Province:
Bergamo
Locality: Ponte San Pietro
Country: IT
Locality: Ponte San Pietro
Country: IT
This certificate has expire since
Certificate Details
Serial Number (hex): 03:90:cf:6c:78:8d:ef:8bSerial Number (int): 256933243546103691
Serial Number lenght: 58 bits, 8 octets
SubjectKeyId: 44:af:29:59:81:18:25:61:71:d8:52:ab:41:40:2c:61:58:78:7f:50
AuthorityKeyId: 1b:42:7f:5c:45:7e:ff:7e:1e:1e:41:9c:f3:ad:ae:35:c6:65:eb:c5
Fingerprint (sha1): 4f:77:d3:63:75:42:1b:d4:d4:ed:73:6a:b7:c1:3c:a0:dd:66:2f:7a
Fingerprint (sha256): ed:a7:25:cc:b8:62:a9:45:1c:a6:c7:53:e0:33:57:5c:9e:4b:f8:d6:a7:cf:10:4f:8b:a0:7a:02:1f:70:af:bd
Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg1
Revocation information
OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G1CRL Distribution Point: ldap://ldap06.actalis.it/cn%3dActalis%20Domain%20Validation%20Server%20CA%20G1,o%3dActalis%20S.p.A./03358520967,c%3dIT?certificateRevocationList;binary
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G1/getLastCRL
Check the revocation status for certificate *.fix-it.app
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.fix-it.app
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.fix-it.app
fix-it.app
fix-it.app
Other certificates including the domain name fix-it.app
(limited to 100 certificates)
Certificate
The complete raw certificate details for *.fix-it.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG0jCCBbqgAwIBAgIIA5DPbHiN74swDQYJKoZIhvcNAQELBQAwgZAxCzAJBgNV BAYTAklUMRAwDgYDVQQIDAdCZXJnYW1vMRkwFwYDVQQHDBBQb250ZSBTYW4gUGll dHJvMSMwIQYDVQQKDBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzEvMC0GA1UE AwwmQWN0YWxpcyBEb21haW4gVmFsaWRhdGlvbiBTZXJ2ZXIgQ0EgRzEwHhcNMTgx MjI4MTQ1NjMxWhcNMTkxMjI4MTQ1NjMxWjBMMTMwMQYDVQQLDCpEb21haW4gQ29u dHJvbCBWYWxpZGF0ZWQgYnkgQWN0YWxpcyBTLnAuQS4xFTATBgNVBAMMDCouZml4 LWl0LmFwcDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALYtJRT5o9q4 69lsakroveJ66WWB+FZizjs6aQVzYkFius/5ZTQ2OT6Yr5kkPNxQomFVISOOyqFH aAyBrkROp8Zs2qGAGXz1eiQrf++1kSMiJ8eovN4RS30cNhkyCymauw7veD4jYbU9 71CXExckYBhHCuSYHxQLCZOfPZVOCT3sGuw43p+LHpBkU2LOOra2ouIGH4J9hJpI PALWqTUU5gW/ZbM/HC1WF98xWew1eFAV/RuX8FWfHKfY0wiRw2ICKhP3xa8Koy2b IeEoeaJyawEfpYOq94WBy5V00VqXAicoYlnW0eNORgma4w6zTXxUlyCVLD0KZoQf U69PAtuE7h0CAwEAAaOCA3EwggNtMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAU G0J/XEV+/34eHkGc862uNcZl68UwfQYIKwYBBQUHAQEEcTBvMDoGCCsGAQUFBzAC hi5odHRwOi8vY2FjZXJ0LmFjdGFsaXMuaXQvY2VydHMvYWN0YWxpcy1hdXRkdmcx MDEGCCsGAQUFBzABhiVodHRwOi8vb2NzcDA2LmFjdGFsaXMuaXQvVkEvQVVUSERW LUcxMCMGA1UdEQQcMBqCDCouZml4LWl0LmFwcIIKZml4LWl0LmFwcDBRBgNVHSAE SjBIMDwGBiuBHwEXATAyMDAGCCsGAQUFBwIBFiRodHRwczovL3d3dy5hY3RhbGlz Lml0L2FyZWEtZG93bmxvYWQwCAYGZ4EMAQIBMB0GA1UdJQQWMBQGCCsGAQUFBwMC BggrBgEFBQcDATCB7QYDVR0fBIHlMIHiMIGgoIGdoIGahoGXbGRhcDovL2xkYXAw Ni5hY3RhbGlzLml0L2NuJTNkQWN0YWxpcyUyMERvbWFpbiUyMFZhbGlkYXRpb24l MjBTZXJ2ZXIlMjBDQSUyMEcxLG8lM2RBY3RhbGlzJTIwUy5wLkEuLzAzMzU4NTIw OTY3LGMlM2RJVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0O2JpbmFyeTA9oDug OYY3aHR0cDovL2NybDA2LmFjdGFsaXMuaXQvUmVwb3NpdG9yeS9BVVRIRFYtRzEv Z2V0TGFzdENSTDAdBgNVHQ4EFgQURK8pWYEYJWFx2FKrQUAsYVh4f1AwDgYDVR0P AQH/BAQDAgWgMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA4mlLribo6UAJ6IYb tjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFn9VpAxwAABAMARzBFAiEA/ld2rk3ZquFz UMcwdviXKnUF+G+WttUnoMG29zAOpVMCIADeSX2fwaavNMReOlXRf7qq4IvcSuyI QbGYMo5kC0HiAHcA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFn 9Vo+UgAABAMASDBGAiEAwwW9HQtYYIDyysj2tzVoBS0RvcimPAX3v3z3nlreZDQC IQDTFkibpanhqq1Mr++8seGz4lrWLUHN1bqYDTybx6vP2jANBgkqhkiG9w0BAQsF AAOCAQEA5UMwt1iK7VGSnttp6F3dbBu6anXnmVxDhpe5DtPthyjUJHSRedmnQ5Jc qRrgN0ZyY00Z8rTlKCyKLnktTGEA45a/oC/5gs2Z6lOcieCB2OF5JxBzzcY5iASf mBj5sUBNpaUE8qT+eMmAm5XV+m4Z9gesR69g1d+0oUadnzdZ71BO1K/GE9wEf2LL Nt6vDIH0BOmPJzEcngZc207/Z3uSyWn6vxfYuhV9Xw2iZR4x5d6OG4b8pYRyIho3 4zmISbx6Lf6I4rYvoSdEXeRl9ISZck0bpXhg8WcuZcKGDX99c3Q/zD4IUSmopMyX qJXGGaKf9o0Tvx1qTpLSMv/K9zwOPg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti0lFPmj2rjr2WxqSui9 4nrpZYH4VmLOOzppBXNiQWK6z/llNDY5PpivmSQ83FCiYVUhI47KoUdoDIGuRE6n xmzaoYAZfPV6JCt/77WRIyInx6i83hFLfRw2GTILKZq7Du94PiNhtT3vUJcTFyRg GEcK5JgfFAsJk589lU4JPewa7Djen4sekGRTYs46trai4gYfgn2Emkg8AtapNRTm Bb9lsz8cLVYX3zFZ7DV4UBX9G5fwVZ8cp9jTCJHDYgIqE/fFrwqjLZsh4Sh5onJr AR+lg6r3hYHLlXTRWpcCJyhiWdbR405GCZrjDrNNfFSXIJUsPQpmhB9Tr08C24Tu HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 256933243546103691 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-28 14:56:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 14:56:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domain Control Validated by Actalis S.p.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fix-it.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22997633259708409796278896952970945904586576677847805644775892995844232346721762885479599122783944511887477080620210702937342604328210910140236266064196190271528405655524438535112712601362871632299568117745807681118369620525099376598998999602676236869613632735995928446526556550989945842109762364704555608299349156039401489012917891356743983722177156728485534411699836383989270012383546090005756053650163095074963714189863050034363830382634793266248230812004216087870390682981036433677241238350283832333794165093398619702549708950029244423123838503249264346452711066774587728626830536870337249318090089353852383194653 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1b427f5c457eff7e1e1e419cf3adae35c665ebc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg1' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G1' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fix-it.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fix-it.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (229 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap06.actalis.it/cn%3dActalis%20Domain%20Validation%20Server%20CA%20G1,o%3dActalis%20S.p.A./03358520967,c%3dIT?certificateRevocationList;binary' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G1/getLastCRL' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 44af29598118256171d852ab41402c6158787f50 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167f55a40c70000040300473045022100fe5776ae4dd9aae17350c73076f8972a7505f86f96b6d527a0c1b6f7300ea553022000de497d9fc1a6af34c45e3a55d17fbaaae08bdc4aec8841b198328e640b41e2007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000167f55a3e520000040300483046022100c305bd1d0b586080f2cac8f6b73568052d11bdc8a63c05f7bf7cf79e5ade6434022100d316489ba5a9e1aaad4cafefbcb1e1b3e25ad62d41cdd5ba980d3c9bc7abcfda . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00e54330b7588aed51929edb69e85ddd6c1bba6a75e7995c438697b90ed3ed8728d424749179d9a743925ca91ae0374672634d19f2b4e5282c8a2e792d4c6100e396bfa02ff982cd99ea539c89e081d8e179271073cdc63988049f9818f9b1404da5a504f2a4fe78c9809b95d5fa6e19f607ac47af60d5dfb4a1469d9f3759ef504ed4afc613dc047f62cb36deaf0c81f404e98f27311c9e065cdb4eff677b92c969fabf17d8ba157d5f0da2651e31e5de8e1b86fca58472221a37e3398849bc7a2dfe88e2b62fa127445de465f48499724d1ba57860f1672e65c2860d7f7d73743fcc3e085129a8a4cc97a895c619a29ff68d13bf1d6a4e92d232ffcaf73c0e3e