ingress.center
Issued by StartCom Class 1 DV Server CA
About this certificate
This digital certificate with serial number 6c:32:b4:1e:15:7a:24:7f:30:b7:b4:cc:1a:20:31:12 was issued on by StartCom Ltd..
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ingress.center,C=RU
StartCom Ltd.
Organization:
StartCom Ltd.
Organization unit: StartCom Certification Authority
Organization unit: StartCom Certification Authority
Country:
IL
This certificate has expire since
Certificate Details
Serial Number (hex): 6c:32:b4:1e:15:7a:24:7f:30:b7:b4:cc:1a:20:31:12Serial Number (int): 143819891604918034891325710732426752274
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: c9:6e:b4:13:11:8d:79:75:b5:fa:92:9d:fc:45:a7:58:24:14:ba:0e
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af
Fingerprint (sha1): 3e:ca:11:1f:cb:ce:b9:23:21:08:9f:84:36:03:bf:d2:e5:c0:af:bb
Fingerprint (sha256): f9:66:42:50:88:74:bf:44:e2:cf:ba:0a:bd:c0:43:fb:37:2c:27:2c:b8:33:c9:b0:a6:12:4a:95:fd:da:39:d2
Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt
Revocation information
OCSP Server: http://ocsp.startssl.comCRL Distribution Point: http://crl.startssl.com/sca-server1.crl
Check the revocation status for certificate ingress.center
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ingress.center
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ingress.center
donate.ingress.center
shop.ingress.center
donate.ingress.center
shop.ingress.center
Other certificates including the domain name ingress.center
(limited to 100 certificates)
donate.ingress.center
ingress.center
donate.ingress.center
ingress.center
donate.ingress.center
donate.ingress.center
www.ingress.center
donate.ingress.center
donate.ingress.center
ingress.center
pokemon.ingress.center
ingress.center
donate.ingress.center
donate.ingress.center
bot.ingress.center
ingress.center
pokemon.ingress.center
donate.ingress.center
ingress.center
donate.ingress.center
donate.ingress.center
donate.ingress.center
ingress.center
ingress.center
ingress.center
donate.ingress.center
donate.ingress.center
ingress.center
ingress.center
ingress.center
ingress.center
ingress.center
ingress.center
ingress.center
ingress.center
ingress.center
donate.ingress.center
ingress.center
donate.ingress.center
donate.ingress.center
www.ingress.center
donate.ingress.center
donate.ingress.center
ingress.center
pokemon.ingress.center
ingress.center
donate.ingress.center
donate.ingress.center
bot.ingress.center
ingress.center
pokemon.ingress.center
donate.ingress.center
ingress.center
donate.ingress.center
donate.ingress.center
donate.ingress.center
ingress.center
ingress.center
ingress.center
donate.ingress.center
donate.ingress.center
ingress.center
ingress.center
ingress.center
ingress.center
ingress.center
ingress.center
ingress.center
ingress.center
Certificate
The complete raw certificate details for ingress.center in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgIQbDK0HhV6JH8wt7TMGiAxEjANBgkqhkiG9w0BAQsFADB4 MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMg U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMTHVN0YXJ0 Q29tIENsYXNzIDEgRFYgU2VydmVyIENBMB4XDTE2MDYwOTExMDc0OFoXDTE3MDYw OTExMDc0OFowJjELMAkGA1UEBhMCUlUxFzAVBgNVBAMMDmluZ3Jlc3MuY2VudGVy MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXW+pxOZBcGOVQ8P502L 7OAKXqVqqSdimTq3ZBIfd7lDwf+90aTYM8FV36JUB9Dtb8CnCVWnkCbKfs1mcOg0 D1HNezHjqbqc5c382ZZD6lb7zJQXd5Jnmda6h4NL4REKmv1/9WDt8LgvS0WCOerP Io7j/jjDRlcrNf9ER1SRnYgfCk5AhmW1QIvxYKcm0h1JZ6HNV2m9UjEJOebgpFXf b3wNrNV6L0SyuWSuNKk1IwFXD52MC0fiHrB4YTWNqmvyEwDAf2zH6COWU9L6+br+ zjigfMDgIkbnPSnYMpHtX1x7rp3RGpbYH0RhwUmcdaxAmgOMjq70lYuOnGj+rejU xQIDAQABo4IC7zCCAuswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMCBggrBgEFBQcDATAJBgNVHRMEAjAAMB0GA1UdDgQWBBTJbrQTEY15dbX6kp38 RadYJBS6DjAfBgNVHSMEGDAWgBTXkU4BxLC/+Mhnk0Sc5zP6rZMMrzBvBggrBgEF BQcBAQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbTA5 BggrBgEFBQcwAoYtaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc2NhLnNl cnZlcjEuY3J0MDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuc3RhcnRzc2wu Y29tL3NjYS1zZXJ2ZXIxLmNybDBFBgNVHREEPjA8gg5pbmdyZXNzLmNlbnRlcoIV ZG9uYXRlLmluZ3Jlc3MuY2VudGVyghNzaG9wLmluZ3Jlc3MuY2VudGVyMCMGA1Ud EgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBRBgNVHSAESjBIMAgGBmeB DAECATA8BgsrBgEEAYG1NwECBTAtMCsGCCsGAQUFBwIBFh9odHRwczovL3d3dy5z dGFydHNzbC5jb20vcG9saWN5MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAaPaY +B9kgr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QAAAFVNQZpWAAABAMARzBFAiBe G4e4A9+HnOgKLqpD+hhLWY31MxxZWBnW3ut+8kWYggIhANsm1NmwU0El0K/CNxen gNwutUtAi9Ubx73rzIwEEDQdAHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fN DsgN3BAAAAFVNQZn/wAABAMARjBEAiAJP1uyDIyhx3notrCtsMoZPZwsJ+JGxo0A m2RTERn4AAIgRfegfxaipav7zyPunIvStNsW31/e8gCYiqTritYDteowDQYJKoZI hvcNAQELBQADggEBAIKY35H/gz3tdi5bLDaOAhIkKIyQ7QiMS0/nb1mvFGx5Ixl0 lQGt957a1PDXjvQUHCLyOhAqe7MmLI+8p/rYqfiPby4tz1ifOM/CUH1Ty1AeCFKC FjSQlF0yODr9UDOC+K8S7gVDX8/cCdrbuLgKu2kIVpGxF4tWMDvbQNNUqypl2OqP OV2iCVqlaBu+fWijavZAvP9Nbl52wLl1nf8VViu5XhZ4Qjc3wmGv+HSy6ZIU9m3J ym8flc6G/pSvq6ydwGQlWSWs/VmXgXYYuHv6CDiDod+FYH3dRcAXY66QAh88S2ZO GEwndEvrOqp1+HhcjvhJO045D2mCJe6dpiIC6Ek= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXW+pxOZBcGOVQ8P502L 7OAKXqVqqSdimTq3ZBIfd7lDwf+90aTYM8FV36JUB9Dtb8CnCVWnkCbKfs1mcOg0 D1HNezHjqbqc5c382ZZD6lb7zJQXd5Jnmda6h4NL4REKmv1/9WDt8LgvS0WCOerP Io7j/jjDRlcrNf9ER1SRnYgfCk5AhmW1QIvxYKcm0h1JZ6HNV2m9UjEJOebgpFXf b3wNrNV6L0SyuWSuNKk1IwFXD52MC0fiHrB4YTWNqmvyEwDAf2zH6COWU9L6+br+ zjigfMDgIkbnPSnYMpHtX1x7rp3RGpbYH0RhwUmcdaxAmgOMjq70lYuOnGj+rejU xQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 143819891604918034891325710732426752274 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-09 11:07:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-09 11:07:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ingress.center' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21897288852890443663841695923822413709182400845939316175899293735797122770298852818347720222805415965136065176755908190751728823905791415677337200056007309754657289542038329470641453510939785740657034658677197705169733011715885663141293124813304513041987635615893584375247844876325105219641166313713544897331377417414321265124574233818570218413054272446936449539570271645504196574038374656530310095882209858308588003983011225903012850733715947797728769592105097852943732574232189847825961222100013053602653130648242352127227930513582047274082642442456445413241623921298310854665123297460899589931247754845228473308357 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c96eb413118d7975b5fa929dfc45a7582414ba0e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingress.center' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ingress.center' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ingress.center' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000015535066958000004030047304502205e1b87b803df879ce80a2eaa43fa184b598df5331c595819d6deeb7ef2459882022100db26d4d9b0534125d0afc23717a780dc2eb54b408bd51bc7bdebcc8c0410341d007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000155350667ff00000403004630440220093f5bb20c8ca1c779e8b6b0adb0ca193d9c2c27e246c68d009b64531119f800022045f7a07f16a2a5abfbcf23ee9c8bd2b4db16df5fdef200988aa4eb8ad603b5ea . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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