shipafrika.com
Issued by R3
About this certificate
This digital certificate with serial number 04:de:6b:fd:c4:f0:73:83:09:4d:07:9b:67:1a:d0:98:52:11 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=shipafrika.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:de:6b:fd:c4:f0:73:83:09:4d:07:9b:67:1a:d0:98:52:11Serial Number (int): 424135374224546311293640400531088481997329
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 96:b6:05:52:b6:ce:7b:46:86:73:b9:2e:6d:14:07:70:9a:83:da:c0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 85:2e:b3:4e:ba:fb:66:ca:54:8a:fd:f1:54:1a:a3:c7:26:ba:fd:9e
Fingerprint (sha256): f3:a7:0c:4b:a7:c4:ee:fb:e2:09:d8:45:0b:e5:d3:fb:dc:ba:3e:84:e0:db:f3:0d:f8:63:2b:1d:4e:72:eb:58
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate shipafrika.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for shipafrika.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
shipafrika.com
www.shipafrika.com
www.shipafrika.com
Other certificates including the domain name shipafrika.com
(limited to 100 certificates)
account.flyachtcharters.com
invoice.shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
shipafrika.com
shipafrika.com
account.flyachtcharters.com
shipafrika.com
account.flyachtcharters.com
invoice.shipafrika.com
pro.itekagency.com
invoice.shipafrika.com
invoice.shipafrika.com
account.flyachtcharters.com
account.flyachtcharters.com
shipafrika.com
billing.linkalone.ca
invoice.shipafrika.com
account.flyachtcharters.com
invoices.youfirst.biz
account.flyachtcharters.com
payments.42ndstreettours.com
account.flyachtcharters.com
shipafrika.com
invoice.instantcard.net
account.flyachtcharters.com
shipafrika.com
shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
invoice.clahvay.com
shipafrika.com
account.flyachtcharters.com
invoice.shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
account.flyachtcharters.com
invoice.shipafrika.com
invoice.instantsecur.com
billing.aiudapp.com
account.flyachtcharters.com
account.flyachtcharters.com
invoice.shipafrika.com
shipafrika.com
shipafrika.com
account.flyachtcharters.com
shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
account.flyachtcharters.com
shipafrika.com
invoice.shipafrika.com
shipafrika.com
shipafrika.com
account.flyachtcharters.com
account.flyachtcharters.com
invoice.shipafrika.com
account.flyachtcharters.com
account.flyachtcharters.com
invoice.magentahive.com
account.flyachtcharters.com
shipafrika.com
shipafrika.com
invoice.shipafrika.com
shipafrika.com
invoice.shipafrika.com
account.flyachtcharters.com
account.flyachtcharters.com
account.flyachtcharters.com
shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
shipafrika.com
shipafrika.com
account.flyachtcharters.com
shipafrika.com
account.flyachtcharters.com
invoice.shipafrika.com
pro.itekagency.com
invoice.shipafrika.com
invoice.shipafrika.com
account.flyachtcharters.com
account.flyachtcharters.com
shipafrika.com
billing.linkalone.ca
invoice.shipafrika.com
account.flyachtcharters.com
invoices.youfirst.biz
account.flyachtcharters.com
payments.42ndstreettours.com
account.flyachtcharters.com
shipafrika.com
invoice.instantcard.net
account.flyachtcharters.com
shipafrika.com
shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
invoice.clahvay.com
shipafrika.com
account.flyachtcharters.com
invoice.shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
account.flyachtcharters.com
invoice.shipafrika.com
invoice.instantsecur.com
billing.aiudapp.com
account.flyachtcharters.com
account.flyachtcharters.com
invoice.shipafrika.com
shipafrika.com
shipafrika.com
account.flyachtcharters.com
shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
account.flyachtcharters.com
shipafrika.com
invoice.shipafrika.com
shipafrika.com
shipafrika.com
account.flyachtcharters.com
account.flyachtcharters.com
invoice.shipafrika.com
account.flyachtcharters.com
account.flyachtcharters.com
invoice.magentahive.com
account.flyachtcharters.com
shipafrika.com
shipafrika.com
invoice.shipafrika.com
shipafrika.com
invoice.shipafrika.com
account.flyachtcharters.com
account.flyachtcharters.com
account.flyachtcharters.com
shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
invoice.shipafrika.com
Certificate
The complete raw certificate details for shipafrika.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgISBN5r/cTwc4MJTQebZxrQmFIRMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMDcyMDA3MzJaFw0yNDAyMDUyMDA3MzFaMBkxFzAVBgNVBAMT DnNoaXBhZnJpa2EuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA uZl3cOKMiaDSYBDl6zixWeJjfs0jP3t6CDcTWFaXubP8Jzk6vz5VJfMPPJyMI9YF TuqmvC0Re+WAnpQZjagv+VF7IYokJ9pI0xU5Ko5wpzTkBqhX9afuWFjrTk7yjLUC 67LJ6XWwzLNjCB2zwTk/TUneWXq2sXYyILFe0AIGoT4Osu1WZmlDGiWV3Rhs+oHu 7ouwmiBTdquiJECK87hmD6DOzDQ0gyNZfKg3x/gqjlYTvEbeiuDcn36zdY45sZoc /pRojbMjw48F8njaYcpGXUwkc/6kKGLVWZveaVwmnPFn8VGd+TCkc8axkwaLRQoC rZ0S1hZapjWwWjw+9uDHWenkl546NgV072dAwbHyxn+rlLJm8qc390f6DeZYH4tz mRV7gweYhd0qReX9ZUVIttFlzVey70hZQvDmtpTuWfAT4E5RkwYcV78ySNO3pyBW LPBgKMRDBdaQUfjDSTn6cA1PHtVtu5I0FwxpoSgGL4rba34WynZi3pSSqw1V5HwT rcxx5GAOZN1rBtP/Wu3FFOb2U5bt3OwLgjQ0S9yBwXB/wRxZd5lsnGGYZVu8QWWm LOpjSXzOSlxnOnRJcyVFbul5eO7XH3/7SK0bPAU40aApseRnWAZbaz+NFSc5yNEy BF0RBFUq2l86hDU3DpTuqyGQp4qMzyad6MzWhArdPGMCAwEAAaOCAiUwggIhMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUlrYFUrbOe0aGc7kubRQHcJqD2sAwHwYDVR0j BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6 Ly9yMy5pLmxlbmNyLm9yZy8wLQYDVR0RBCYwJIIOc2hpcGFmcmlrYS5jb22CEnd3 dy5zaGlwYWZyaWthLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB 1nkCBAIEgfYEgfMA8QB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQX AAABi6ucqNYAAAQDAEgwRgIhALxF+Jn1p2IbFI53xlNfzUHLWUEU82ioSM1Dn73z SvewAiEAlqImH1aw5Wa+gmEnpTLSIhN2Y1w/xvQdI1MrX0RAK5oAdgDuzdBk1dsa zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYurnKjfAAAEAwBHMEUCICjm2KOa iDA5whS3cZUiqYiZoHZOloBgnmnSdPJzbzl3AiEArgq5UZNu4n/AruQxJzDJ468C 6BiIKEmMhZ+LG61ba+AwDQYJKoZIhvcNAQELBQADggEBAETEI1K/O73UmADrkyJW yULCTw6VLjs1ahZouazLgWfgeBsNvFCmP/QvRVN6PHD02s6vdiy3uR9pI+BEJMti XoLu+p43iGh7zEi2ndxIGP9sALWjObly1SJd8txV0hF/+b2kwdpqjo8RQI2WUQY7 jo+J8uoM9pJ3/v4Ulv546LQKB6fSdghmJ7KjPbI/Zq2R/2Ai5U6PcQYg8q5oE1+z lWxXoXgYzKhQQa/3muh4BRqAmHnjT0ez1NcVExME1XsVKlLdj5wkDS6YcTzZy8je DBCX3jGtgvuQHSJya9QSrH3G7AfJkGuzVlS1bD0YSwvLlmM0UZT/mmHXCV0CDSrN 9ao= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuZl3cOKMiaDSYBDl6zix WeJjfs0jP3t6CDcTWFaXubP8Jzk6vz5VJfMPPJyMI9YFTuqmvC0Re+WAnpQZjagv +VF7IYokJ9pI0xU5Ko5wpzTkBqhX9afuWFjrTk7yjLUC67LJ6XWwzLNjCB2zwTk/ TUneWXq2sXYyILFe0AIGoT4Osu1WZmlDGiWV3Rhs+oHu7ouwmiBTdquiJECK87hm D6DOzDQ0gyNZfKg3x/gqjlYTvEbeiuDcn36zdY45sZoc/pRojbMjw48F8njaYcpG XUwkc/6kKGLVWZveaVwmnPFn8VGd+TCkc8axkwaLRQoCrZ0S1hZapjWwWjw+9uDH Wenkl546NgV072dAwbHyxn+rlLJm8qc390f6DeZYH4tzmRV7gweYhd0qReX9ZUVI ttFlzVey70hZQvDmtpTuWfAT4E5RkwYcV78ySNO3pyBWLPBgKMRDBdaQUfjDSTn6 cA1PHtVtu5I0FwxpoSgGL4rba34WynZi3pSSqw1V5HwTrcxx5GAOZN1rBtP/Wu3F FOb2U5bt3OwLgjQ0S9yBwXB/wRxZd5lsnGGYZVu8QWWmLOpjSXzOSlxnOnRJcyVF bul5eO7XH3/7SK0bPAU40aApseRnWAZbaz+NFSc5yNEyBF0RBFUq2l86hDU3DpTu qyGQp4qMzyad6MzWhArdPGMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 424135374224546311293640400531088481997329 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 20:07:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 20:07:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shipafrika.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757179812609470518919241710385323184043857964327738075929773066744003393478864334729081487331650079369833941795721277986035727293172120615768079255159684935088579407915490581463561076767650624039190013060082928954272407095551195716411851405400111395629248165433469118918358396152262569697544100097438611354391110981488908262704124586961481748777996054970110906392343788564377060684304872317688629595878301523118672979957776306196544896306531295599842406538264630110268020912116668174886619093780818185630375885342664293102062360122012221536615491604155272394002589723709818100258024427904976905057170356095288792535694578522045399162088116389764976854900076759664993982414799491539433839176431187924635991620897192931792962262127234789663379516328820797790255984863270870746198051925396218353600898905147511344567866222397855584071453236154269623100096679229250195967686495837600059896754076711735428386205806293501409999753395288199549688127592485304514657991501715586492487760310111042980724575257778787259752775957958075973788186189423574164199172489889696834441412374484087775096243592898452242002157526184072237653433531502776224610999094045509414925956805224038355181053997217057767477701180842953712741369348369338265503612003 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 96b60552b6ce7b468673b92e6d1407709a83dac0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipafrika.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shipafrika.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bab9ca8d60000040300483046022100bc45f899f5a7621b148e77c6535fcd41cb594114f368a848cd439fbdf34af7b002210096a2261f56b0e566be826127a532d2221376635c3fc6f41d23532b5f44402b9a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bab9ca8df0000040300473045022028e6d8a39a883039c214b7719522a98899a0764e9680609e69d274f2736f3977022100ae0ab951936ee27fc0aee4312730c9e3af02e8188828498c859f8b1bad5b6be0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0044c42352bf3bbdd49800eb932256c942c24f0e952e3b356a1668b9accb8167e0781b0dbc50a63ff42f45537a3c70f4daceaf762cb7b91f6923e04424cb625e82eefa9e3788687bcc48b69ddc4818ff6c00b5a339b972d5225df2dc55d2117ff9bda4c1da6a8e8f11408d9651063b8e8f89f2ea0cf69277fefe1496fe78e8b40a07a7d276086627b2a33db23f66ad91ff6022e54e8f710620f2ae68135fb3956c57a17818cca85041aff79ae878051a809879e34f47b3d4d715131304d57b152a52dd8f9c240d2e98713cd9cbc8de0c1097de31ad82fb901d22726bd412ac7dc6ec07c9906bb35654b56c3d184b0bcb9663345194ff9a61d7095d020d2acdf5aa