neubertmarketing.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:36:36:0d:d6:5a:b1:90:fb:72:4d:2b:2f:8a:18:27:44:bd was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=neubertmarketing.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:36:36:0d:d6:5a:b1:90:fb:72:4d:2b:2f:8a:18:27:44:bdSerial Number (int): 279783955768264107304010044093635976709309
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 96:87:73:2b:12:9e:2b:45:9a:88:a4:e8:c2:39:04:07:fb:24:61:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): fb:72:28:f8:15:61:f9:6a:f4:d6:1b:b3:2d:8a:5f:ef:d7:7a:6a:1c
Fingerprint (sha256): ee:d8:57:61:a0:b9:46:30:b8:3a:d1:8e:ae:91:1f:d9:18:2e:c5:97:f5:c7:cc:c0:e8:5b:14:3d:3f:72:9a:02
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate neubertmarketing.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for neubertmarketing.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
neubertmarketing.cz
www.neubertmarketing.cz
www.neubertmarketing.cz
Other certificates including the domain name neubertmarketing.cz
(limited to 100 certificates)
partners.waveconnect.co
neubertmarketing.cz
assistenza.3di.it
desk.mm-ict.com
neubertmarketing.cz
support.partofthejob.nl
podpora.neubertmarketing.cz
support.goocean.io
neubertmarketing.cz
assistenza.3di.it
partners.waveconnect.co
helpdesk.bargainbiscuits.com
www.neubertmarketing.cz
partners.waveconnect.co
soportetresgriferia.piperlab.es
neubertmarketing.cz
stg-desk.amasty.net
helpdesk.bargainbiscuits.com
partners.waveconnect.co
podpora.neubertmarketing.cz
neubertmarketing.cz
neubertmarketing.cz
partners.waveconnect.co
neubertmarketing.cz
neubertmarketing.cz
support.zynctech.co.uk
helpdesk.bargainbiscuits.com
partners.waveconnect.co
support.felho.net
proactive.phygitalbcn.com
neubertmarketing.cz
soportetresgriferia.piperlab.es
partners.waveconnect.co
assistenza.3di.it
soportetresgriferia.piperlab.es
support.goocean.io
assistenza.mygovernance.it
neubertmarketing.cz
support.goocean.io
neubertmarketing.cz
neubertmarketing.cz
support.goocean.io
support.completelostpropertyservice.com
www.neubertmarketing.cz
neubertmarketing.cz
assistenza.3di.it
desk.mm-ict.com
neubertmarketing.cz
support.partofthejob.nl
podpora.neubertmarketing.cz
support.goocean.io
neubertmarketing.cz
assistenza.3di.it
partners.waveconnect.co
helpdesk.bargainbiscuits.com
www.neubertmarketing.cz
partners.waveconnect.co
soportetresgriferia.piperlab.es
neubertmarketing.cz
stg-desk.amasty.net
helpdesk.bargainbiscuits.com
partners.waveconnect.co
podpora.neubertmarketing.cz
neubertmarketing.cz
neubertmarketing.cz
partners.waveconnect.co
neubertmarketing.cz
neubertmarketing.cz
support.zynctech.co.uk
helpdesk.bargainbiscuits.com
partners.waveconnect.co
support.felho.net
proactive.phygitalbcn.com
neubertmarketing.cz
soportetresgriferia.piperlab.es
partners.waveconnect.co
assistenza.3di.it
soportetresgriferia.piperlab.es
support.goocean.io
assistenza.mygovernance.it
neubertmarketing.cz
support.goocean.io
neubertmarketing.cz
neubertmarketing.cz
support.goocean.io
support.completelostpropertyservice.com
www.neubertmarketing.cz
Certificate
The complete raw certificate details for neubertmarketing.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdjCCBV6gAwIBAgISAzY2DdZasZD7ck0rL4oYJ0S9MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MTcyMzMwNDhaFw0x OTExMTUyMzMwNDhaMB4xHDAaBgNVBAMTE25ldWJlcnRtYXJrZXRpbmcuY3owggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDXGK5FpbqHnUtsTR8NP7Psg8K7 bXAM8FjfSYjxCOFy/qWApJkibeySoWyoRGiQTzBuXcmeJC7whcAK1oBb6Zw+5Zvl AGBKaR43J4E8mpScDZkrH+gGFMOKFaKNohUMCg8nNYhhIRFKAuHcCDsWYqRPRCeO 7J405LbfNWocubOfhfoQu/MZ6jptJMV6hH9DDAxPooFS6kSMN9kqbX7vrcjFHTQO jSPdY4Ii4/v3Tv59pdcTigoSAYDT4d16oLRoHvjPQlpycGZHZR+dgF5J+z0MRCGH S6DlJa4h8eJ8IWiMEpiumt8H6YLs1ysz0ifylAKNBgoQVWoGM7IS1nqqbDJDTVo1 VRBKXrRPHy1deGf370jiBLaf5PfrYFq6OdWd/N8S8iFltMl9xbcq5Y0xsY0+oRNj q6s8qOVphaF1uGGhDlQxFelv3B7pf0dvS9VLniw89hmkY4YHqpESi5fuu+LPIEer cBtFdP7XVL31KxbOmebvAJijiyRP95iYDNsyM+UDBIhEDx9SAiCYXkQgpuEHh7ut oX/6OuO/3XldhSEnIlURt8dYCylElZbtRWtzspLP1AMBRL9F1uSYqVc+uBneq1SL nnKRKlBLmw9QmxboW91kjPBqTlN1R4Hwz97PUsRmOfF9uEANhCkhol4tfA4L6OBG hP3rZNnm4/97eCon0wIDAQABo4ICgDCCAnwwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBSWh3MrEp4rRZqIpOjCOQQH+yRhZjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMDcGA1UdEQQwMC6CE25ldWJlcnRtYXJr ZXRpbmcuY3qCF3d3dy5uZXViZXJ0bWFya2V0aW5nLmN6MEwGA1UdIARFMEMwCAYG Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu bGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA4mlLribo 6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFsoiI/6QAABAMARzBFAiEAiRXC TgYVYark87KNkuD29eqxRZrD+6U3jvmzJ+WaJ7MCICQrLBQ6soik0wsn+8Bo3nbV 1skXJFrM6flE6Xk8LXRxAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL 2I0AAAFsoiJACwAABAMARjBEAiAewW4jH9exuz+3b9Cy7VsLiSat+1C41UT/ytda b3xrewIgECudAkMvN8ACx242fkG4i5RqHsSqWV5vc+vdW1XDMCkwDQYJKoZIhvcN AQELBQADggEBAAtUoxMci/jXUz3LDxqtvcmNAoZVcyRGj6bUT0dHSEA/XL73MJTw /lSBJsfKNE9NGtowVK/RVo0aET5oLwr0Bde8MODFSh6FUWEEndmbGBbor4J3fZZO RWiRP5gck0IvIYPuFZVhJt4ImyWzdiKyMvjsT4kBNcO4dUPUb9tCMdfdVs6WZqnQ bL2OzLQPK6B5RM6UV3almlN2aR+omI/prMOCBv6E8RGPBNVg7tVhGIlsSrnYzBSg AfHqAMTuOngLHb2nb4Kj1Mnyv675cu9GCaSTJ68M7vPD/T9b2OgIF1tggykkjG0W 32HmMx5mcWAQsxqd6QHu8oN+XfcC7Vgyx+M= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1xiuRaW6h51LbE0fDT+z 7IPCu21wDPBY30mI8Qjhcv6lgKSZIm3skqFsqERokE8wbl3JniQu8IXACtaAW+mc PuWb5QBgSmkeNyeBPJqUnA2ZKx/oBhTDihWijaIVDAoPJzWIYSERSgLh3Ag7FmKk T0QnjuyeNOS23zVqHLmzn4X6ELvzGeo6bSTFeoR/QwwMT6KBUupEjDfZKm1+763I xR00Do0j3WOCIuP7907+faXXE4oKEgGA0+HdeqC0aB74z0JacnBmR2UfnYBeSfs9 DEQhh0ug5SWuIfHifCFojBKYrprfB+mC7NcrM9In8pQCjQYKEFVqBjOyEtZ6qmwy Q01aNVUQSl60Tx8tXXhn9+9I4gS2n+T362BaujnVnfzfEvIhZbTJfcW3KuWNMbGN PqETY6urPKjlaYWhdbhhoQ5UMRXpb9we6X9Hb0vVS54sPPYZpGOGB6qREouX7rvi zyBHq3AbRXT+11S99SsWzpnm7wCYo4skT/eYmAzbMjPlAwSIRA8fUgIgmF5EIKbh B4e7raF/+jrjv915XYUhJyJVEbfHWAspRJWW7UVrc7KSz9QDAUS/RdbkmKlXPrgZ 3qtUi55ykSpQS5sPUJsW6FvdZIzwak5TdUeB8M/ez1LEZjnxfbhADYQpIaJeLXwO C+jgRoT962TZ5uP/e3gqJ9MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279783955768264107304010044093635976709309 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-17 23:30:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 23:30:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'neubertmarketing.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877516789766081369756131790372302599281438977507520448167466123499556653678625667086119833645346309167035004091789827394949256673169485557904694152676726290467998940519788966303644730965955246811832427960991017288791135002713375175388206316038205247523450378398675072383617666789382876305144069165985470724562626389618690588171585049306213678471444630929709423030665556093656938243180225444754476360472399285611764451654852323573482822359987886160168563362090909377228729602005837146936344308748579430868415844360030008742620173058056130914211309758682816109295963876547835721305788584888389702278237555520516258305745499694411867649303716191817240981589003245713210096146827739566009791505498437487162098769084386138019449999690337501910719358556512501339664776935705066430965412927162130997121321488819011815950851759101393763988876767383683260832128139063344311981840080863453072640283629854216363260317947335099685182951695603630651289400094557005949489516392709431169754188532074061909594061079889672872129793427825729885482120346385799621324781946132587191316180232550330482031559768182501711407447287708910567336743128077724915501650515629426054209328264008894748990935877752903472664844561630793637110002823169163625828591571 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9687732b129e2b459a88a4e8c2390407fb246166 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neubertmarketing.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neubertmarketing.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ca2223fe900000403004730450221008915c24e061561aae4f3b28d92e0f6f5eab1459ac3fba5378ef9b327e59a27b30220242b2c143ab288a4d30b27fbc068de76d5d6c917245acce9f944e9793c2d747100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ca222400b000004030046304402201ec16e231fd7b1bb3fb76fd0b2ed5b0b8926adfb50b8d544ffcad75a6f7c6b7b0220102b9d02432f37c002c76e367e41b88b946a1ec4aa595e6f73ebdd5b55c33029 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000b54a3131c8bf8d7533dcb0f1aadbdc98d0286557324468fa6d44f474748403f5cbef73094f0fe548126c7ca344f4d1ada3054afd1568d1a113e682f0af405d7bc30e0c54a1e855161049dd99b1816e8af82777d964e4568913f981c93422f2183ee15956126de089b25b37622b232f8ec4f890135c3b87543d46fdb4231d7dd56ce9666a9d06cbd8eccb40f2ba07944ce945776a59a5376691fa8988fe9acc38206fe84f1118f04d560eed56118896c4ab9d8cc14a001f1ea00c4ee3a780b1dbda76f82a3d4c9f2bfaef972ef4609a49327af0ceef3c3fd3f5bd8e808175b608329248c6d16df61e6331e66716010b31a9de901eef2837e5df702ed5832c7e3