diassu.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:06:94:34:0a:89:e2:86:19:c7:b5:0c:e2:9d:5a:3e:f4:cc was issued on by Let's Encrypt.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=diassu.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:06:94:34:0a:89:e2:86:19:c7:b5:0c:e2:9d:5a:3e:f4:ccSerial Number (int): 263575547953367642111871874212343819728076
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: bd:d3:ff:3d:24:1c:4d:db:c0:2d:33:7a:41:ab:fd:64:38:23:69:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 11:3a:da:56:ab:34:fc:30:d5:e0:6b:eb:34:32:c6:2f:2b:74:39:63
Fingerprint (sha256): f3:94:1b:2c:bc:5f:65:0f:b9:d0:95:98:1d:f2:c1:cf:aa:c4:30:68:2b:19:f9:04:ff:15:09:69:9c:6a:d3:e4
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate diassu.com
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for diassu.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
best2say.imumcr.com
diassu.com
diassu.imumcr.com
diassusoftware.com
diassusoftware.imumcr.com
first.imumcr.com
mail.diassu.com
mail.diassusoftware.com
pomodo.imumcr.com
sayusachina.imumcr.com
second.imumcr.com
www.best2say.imumcr.com
www.diassu.com
www.diassu.imumcr.com
www.diassusoftware.com
www.diassusoftware.imumcr.com
www.first.imumcr.com
www.pomodo.imumcr.com
www.sayusachina.imumcr.com
www.second.imumcr.com
diassu.com
diassu.imumcr.com
diassusoftware.com
diassusoftware.imumcr.com
first.imumcr.com
mail.diassu.com
mail.diassusoftware.com
pomodo.imumcr.com
sayusachina.imumcr.com
second.imumcr.com
www.best2say.imumcr.com
www.diassu.com
www.diassu.imumcr.com
www.diassusoftware.com
www.diassusoftware.imumcr.com
www.first.imumcr.com
www.pomodo.imumcr.com
www.sayusachina.imumcr.com
www.second.imumcr.com
Other certificates including the domain name diassu.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for diassu.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgISAwaUNAqJ4oYZx7UM4p1aPvTMMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMDExMDI0MjFaFw0x OTA1MzAxMDI0MjFaMBUxEzARBgNVBAMTCmRpYXNzdS5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQC9ssBu0PghdgGvoRGiiLhdVeYKZ1S/Nx2NZdYG ppPvDhw14IFFE+PG38ARTs36BfIB5bNdl+V3zTbC63kbr1qygd2s1d5eT95wwaZk w5O6IB16okWR+q3CNeKK4CuSUzmNLqU8AEpuQVkCQZU+0aewPqUmPFfFYzV+nwUi 2KvastGJCX7eyBBnxn9kTs7Zbc7I3fDo/nIlqhlpAlryjDU2pcLLar68xl5sjh4F 7GmFOvpz8rI2GoA7nzNuEmPnksXQ5MFw5LA6BtMKHEaWXOT8ipIxHt6ixS1J4YMs zG1BuXcY/Gt4mzgc3Naoh/wuoExXk/YY+MXY5SInHgYoWlN3AgMBAAGjggQOMIIE CjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFL3T/z0kHE3bwC0zekGr/WQ4I2mnMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w ggHBBgNVHREEggG4MIIBtIITYmVzdDJzYXkuaW11bWNyLmNvbYIKZGlhc3N1LmNv bYIRZGlhc3N1LmltdW1jci5jb22CEmRpYXNzdXNvZnR3YXJlLmNvbYIZZGlhc3N1 c29mdHdhcmUuaW11bWNyLmNvbYIQZmlyc3QuaW11bWNyLmNvbYIPbWFpbC5kaWFz c3UuY29tghdtYWlsLmRpYXNzdXNvZnR3YXJlLmNvbYIRcG9tb2RvLmltdW1jci5j b22CFnNheXVzYWNoaW5hLmltdW1jci5jb22CEXNlY29uZC5pbXVtY3IuY29tghd3 d3cuYmVzdDJzYXkuaW11bWNyLmNvbYIOd3d3LmRpYXNzdS5jb22CFXd3dy5kaWFz c3UuaW11bWNyLmNvbYIWd3d3LmRpYXNzdXNvZnR3YXJlLmNvbYIdd3d3LmRpYXNz dXNvZnR3YXJlLmltdW1jci5jb22CFHd3dy5maXJzdC5pbXVtY3IuY29tghV3d3cu cG9tb2RvLmltdW1jci5jb22CGnd3dy5zYXl1c2FjaGluYS5pbXVtY3IuY29tghV3 d3cuc2Vjb25kLmltdW1jci5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgDiaUuuJujpQAnohhu2O4PUPuf+ dIj7pI8okwGd3fHb/gAAAWk4/3zzAAAEAwBHMEUCIQDoNCitQ18AmJ84CEO1QQDe jvX4aBTvJ/2iv7slfddM0gIgb9Qs6MTiIsxryyjYsPMuinwCqYRdnxdF6WqP442+ WJQAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWk4/309AAAE AwBIMEYCIQDamnctp2XQcf6852F+RkDbjTh60mV00bt1RFCJOIaS5wIhAKAVqZdi LqThceN5TdBjcuxQr5Yr0gp9zNIOF79hp9AJMA0GCSqGSIb3DQEBCwUAA4IBAQB3 c24FAPmypXD0P9PXIH+v/uKsrVaV/P3Gy5oaa8lLXthLM9NNk5T4rY/g8COMctF3 lAZt7wdS7ofM+rU5d/E040gu99cZf5CpWJQCRoQFWF5Pf5DdZ8R7cJSD4HNFXht6 /ls94WGxkyScznejhwJp7Qq6AqYMvQzw5l1quMXFZ30l6/zND5y1NiRc/FUxULXe Mx2tjNmlyC6JbtFS33IoLDAnFR5kn28ogbK48g4pHmFVbhOS85stjeDsLwzqSq3v jDuUdhbR734lWeEdFYiNb2bOZnhCKXnyTNjnfq3dYjuh5NvBo/gSh47RiZxjNjE9 O3M8IVMryTn+EtHa/1Lw -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbLAbtD4IXYBr6ERooi4 XVXmCmdUvzcdjWXWBqaT7w4cNeCBRRPjxt/AEU7N+gXyAeWzXZfld802wut5G69a soHdrNXeXk/ecMGmZMOTuiAdeqJFkfqtwjXiiuArklM5jS6lPABKbkFZAkGVPtGn sD6lJjxXxWM1fp8FItir2rLRiQl+3sgQZ8Z/ZE7O2W3OyN3w6P5yJaoZaQJa8ow1 NqXCy2q+vMZebI4eBexphTr6c/KyNhqAO58zbhJj55LF0OTBcOSwOgbTChxGllzk /IqSMR7eosUtSeGDLMxtQbl3GPxreJs4HNzWqIf8LqBMV5P2GPjF2OUiJx4GKFpT dwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 263575547953367642111871874212343819728076 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-01 10:24:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 10:24:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diassu.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23947185382615753169123957004390010467290515347823226384773704443362496751964892267313803476250077479357283726838352404466340054494621841324127697929058528480136033252075995853869729143865948430849589940528403046567819079936684287859117278398756827118633363567173851240361135977475489107608366858484677469049921114458463471904989666311096435071643667238753561686577416234923013715377994673547942218314101805712460951726259017636413911406944231949755961311784921505225958976857250408540337548385965780255342378283675862315480617737647808337483643574478004415134963421588711027071414299380950502163823975662322879976311 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bdd3ff3d241c4ddbc02d337a41abfd64382369a7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (440 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'best2say.imumcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diassu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diassu.imumcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diassusoftware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diassusoftware.imumcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'first.imumcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.diassu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.diassusoftware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pomodo.imumcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sayusachina.imumcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'second.imumcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.best2say.imumcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diassu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diassu.imumcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diassusoftware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diassusoftware.imumcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.first.imumcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pomodo.imumcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sayusachina.imumcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.second.imumcr.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016938ff7cf30000040300473045022100e83428ad435f00989f380843b54100de8ef5f86814ef27fda2bfbb257dd74cd202206fd42ce8c4e222cc6bcb28d8b0f32e8a7c02a9845d9f1745e96a8fe38dbe5894007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016938ff7d3d0000040300483046022100da9a772da765d071febce7617e4640db8d387ad26574d1bb75445089388692e7022100a015a997622ea4e171e3794dd06372ec50af962bd20a7dccd20e17bf61a7d009 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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