zalman-it.de
Issued by R3
About this certificate
This digital certificate with serial number 03:bd:12:1c:5e:27:62:5b:a0:73:07:d7:55:b2:e3:45:d0:3e was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=zalman-it.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:bd:12:1c:5e:27:62:5b:a0:73:07:d7:55:b2:e3:45:d0:3eSerial Number (int): 325674298541241118377561350300489100939326
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 3b:f4:2a:49:f3:7b:41:b8:cb:28:29:27:77:6d:c3:39:ee:65:7b:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b4:ed:de:55:93:cf:e8:bc:d7:ca:cb:17:74:84:73:b9:08:4b:52:4b
Fingerprint (sha256): fb:ac:26:a6:cb:74:50:72:13:d5:42:0a:fb:30:d6:94:b1:cb:0f:1e:51:68:ea:e6:c1:fd:7e:f6:c8:f0:9f:0d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate zalman-it.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zalman-it.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.zalman-it.de
zalman-it.de
zalman-it.de
Other certificates including the domain name zalman-it.de
(limited to 100 certificates)
support.zalman-it.de
web.zalman-it.de
service.acctopus.com
vr.zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
helpdesk.fsis.dk
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.kolekto.io
support.zalman-it.de
web.zalman-it.de
it.zalman-it.de
support.zalman-it.de
service.farmlyplace.com
service.acctopus.com
web.zalman-it.de
zalman-it.de
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.eurocommand.com
cmnsoon.zalman-it.de
help.paymentsolutionandservice.com
ticket.swiss-prime.ch
support.yasido.com
zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.itqmetis.com
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.medlive.pt
support.zalman-it.de
cmnsoon.zalman-it.de
service.acctopus.com
support.zalman-it.de
support.forexyestrading.com
vr.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
help.paymentsolutionandservice.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.vitisevents.com
help.paymentsolutionandservice.com
support.genialcompliance.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.yasido.com
support.zalman-it.de
zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
cmnsoon.zalman-it.de
support.zalman-it.de
service.acctopus.com
zalman-it.de
vr.zalman-it.de
web.zalman-it.de
service.acctopus.com
vr.zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
helpdesk.fsis.dk
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.kolekto.io
support.zalman-it.de
web.zalman-it.de
it.zalman-it.de
support.zalman-it.de
service.farmlyplace.com
service.acctopus.com
web.zalman-it.de
zalman-it.de
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.eurocommand.com
cmnsoon.zalman-it.de
help.paymentsolutionandservice.com
ticket.swiss-prime.ch
support.yasido.com
zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.itqmetis.com
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.medlive.pt
support.zalman-it.de
cmnsoon.zalman-it.de
service.acctopus.com
support.zalman-it.de
support.forexyestrading.com
vr.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
help.paymentsolutionandservice.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.vitisevents.com
help.paymentsolutionandservice.com
support.genialcompliance.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.yasido.com
support.zalman-it.de
zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
cmnsoon.zalman-it.de
support.zalman-it.de
service.acctopus.com
zalman-it.de
vr.zalman-it.de
Certificate
The complete raw certificate details for zalman-it.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgISA70SHF4nYlugcwfXVbLjRdA+MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTQxODI3MzFaFw0yNDA3MTMxODI3MzBaMBcxFTATBgNVBAMT DHphbG1hbi1pdC5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKz4 u1XT7y5K84+hS0Mg+MkuUfcAypoDwE0KooRKcbc4aEnzqsPNOrqkdzfPl15z5JvF Nej4cGZC2HTn3CUtM/E34Nqne+W+SGXBHsb8QW23Ekd3IngpV27Bw4Z+HTPBSdQH JZmZbX9tNQZqJq4J/mGiiVuySlsumiP+tYh4sx06IYbve3y7UksG8blktrrhIFPQ thZrYiR8tN3dIukTUFqfBcJq/z/mrwC/OUsBmdLBlIwYFuqj7XbT04n3B2mp0cof sqke3xDvYRjcF32lYnEK3YI9D14bORH2wfoFZGgRrxZlOiVXGYhe6bhHPw7+FF5h 8ZuR58KYy/BQHhGObdAmaz9y5miEAzJ7n0tpIuIY3+S47lxz0rqFGQ/00uRd68h9 N2J/aSTts8DZJMsdR0AUFDygBJnuUBy/rkK0gA5H9/YaWPxtwsrSMPUOmpA226Of 8rKBzs3nzAlFSIkuEiuy8HBv+wV/phAVzpJGgGDMf3OfmH6qN8TuyzCgg8ScKz8p mzmpjeHVsCxEqYo3NCLuTziZuX2O+01rn8wh1lPn09nfZWMis9/GlvexLSn1QjjP ZHc02MgIiAFMDcGI4ce0wtN+QmZ3ChmItYm4M8ubbN6yueb8IspFF2i8C8EI+gN+ benllhQYpZakmonoEeg/ydXedRk1E3RKcBgi344JAgMBAAGjggIfMIICGzAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFDv0Kknze0G4yygpJ3dtwznuZXv/MB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMCcGA1UdEQQgMB6CDiouemFsbWFuLWl0LmRlggx6YWxt YW4taXQuZGUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2 BIHzAPEAdwA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAY7eFDqa AAAEAwBIMEYCIQDlXg9hvKwmvt5MRprn69L2K0fkMo7/SmGgGYjsYmTzwAIhAIbF HvXhToLFIegQkweqWCVNXhSPrlr4gnK7FeCJj7knAHYAdv+IPwq2+5VRwmHM9Ye6 NLSkzbsp3GhCCp/mZ0xaOnQAAAGO3hQ68gAABAMARzBFAiBhzN7uPVzkQ4VMO4DX awccTveJdsMJPoQMkM3mgyjOewIhAN4NhNs23iwHEmbFkB5OKVtV8zSjPVaQ2fie pOmDOviBMA0GCSqGSIb3DQEBCwUAA4IBAQC1Ilpj459P44epj49qYESnc3i6Bs2Y R3Sw5a5q3IH2jWdqz+595Ua1LMwU6YJ/dZsq5NZFd44IMSDCMgSefUr4XtfLPjEE RzPmmgNfJMKLwl9mnBC8Z8wukVr+1xgdLomPDDmz7kErpU6EApiPF1gb5c70GTyE 5bOOR/28lEfS8A2YWMPE5PFWOfGkXxzg1TYW4qeEk8VFoOoD0nxjhGfOpoeDj5cF 9KG8W2YFmsqPeCh4pWZ+5SFzoDKsb+hyGv4rYQcY9KlvN7pbdi8B226mFs/nCr9U kwly3qflf3XB5wOk6I/PUtlBtnkqHiZsyGTd9C6q9HpWhz6sh9LLH9IL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArPi7VdPvLkrzj6FLQyD4 yS5R9wDKmgPATQqihEpxtzhoSfOqw806uqR3N8+XXnPkm8U16PhwZkLYdOfcJS0z 8Tfg2qd75b5IZcEexvxBbbcSR3cieClXbsHDhn4dM8FJ1AclmZltf201Bmomrgn+ YaKJW7JKWy6aI/61iHizHTohhu97fLtSSwbxuWS2uuEgU9C2FmtiJHy03d0i6RNQ Wp8Fwmr/P+avAL85SwGZ0sGUjBgW6qPtdtPTifcHaanRyh+yqR7fEO9hGNwXfaVi cQrdgj0PXhs5EfbB+gVkaBGvFmU6JVcZiF7puEc/Dv4UXmHxm5HnwpjL8FAeEY5t 0CZrP3LmaIQDMnufS2ki4hjf5LjuXHPSuoUZD/TS5F3ryH03Yn9pJO2zwNkkyx1H QBQUPKAEme5QHL+uQrSADkf39hpY/G3CytIw9Q6akDbbo5/ysoHOzefMCUVIiS4S K7LwcG/7BX+mEBXOkkaAYMx/c5+Yfqo3xO7LMKCDxJwrPymbOamN4dWwLESpijc0 Iu5POJm5fY77TWufzCHWU+fT2d9lYyKz38aW97EtKfVCOM9kdzTYyAiIAUwNwYjh x7TC035CZncKGYi1ibgzy5ts3rK55vwiykUXaLwLwQj6A35t6eWWFBillqSaiegR 6D/J1d51GTUTdEpwGCLfjgkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 325674298541241118377561350300489100939326 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 18:27:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 18:27:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zalman-it.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 705662596590842180946534386116141196528028800109897805198529391673736053650099364883574433055717646709283621638555458910221903931464553310034169924485337643546858708788566742935350040132865806372233690396373895968313531898837091712439742980276978498517137612220838994608419826645386826579287421672598396689466603060101100931538077661215411674709737890935873792071217404799330395125318509944776428069647761632869606111006435545302624746368862949155001757777569436353272218142878437158568916502760682370309257833364606540676763771098871558383786292646716130772524998472665881818172347023448965038332192244584486622799197316888571206364090091978164423502441194707271063770332865743800020292991964225042003515643710157462246740676183966572665819207096440374285044543266642923203463520177971646043163601306776967685372138099257277338139256231463270075860291098462765439310553536931536844075344636239949584446588651733081945280058295049006217012113161296618914029215269711944708909611009625143595010771579447008777836852911028420976609542065913837722748660633192567588435291126112310705254303478011527937250231763393395856563840260756325650854397155437691129413779394440714569799671132955825003587494192429348790728738963566847683024883209 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3bf42a49f37b41b8cb282927776dc339ee657bff . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalman-it.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalman-it.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ede143a9a0000040300483046022100e55e0f61bcac26bede4c469ae7ebd2f62b47e4328eff4a61a01988ec6264f3c002210086c51ef5e14e82c521e8109307aa58254d5e148fae5af88272bb15e0898fb92700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ede143af20000040300473045022061ccdeee3d5ce443854c3b80d76b071c4ef78976c3093e840c90cde68328ce7b022100de0d84db36de2c071266c5901e4e295b55f334a33d5690d9f89ea4e9833af881 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b5225a63e39f4fe387a98f8f6a6044a77378ba06cd984774b0e5ae6adc81f68d676acfee7de546b52ccc14e9827f759b2ae4d645778e083120c232049e7d4af85ed7cb3e31044733e69a035f24c28bc25f669c10bc67cc2e915afed7181d2e898f0c39b3ee412ba54e8402988f17581be5cef4193c84e5b38e47fdbc9447d2f00d9858c3c4e4f15639f1a45f1ce0d53616e2a78493c545a0ea03d27c638467cea687838f9705f4a1bc5b66059aca8f782878a5667ee52173a032ac6fe8721afe2b610718f4a96f37ba5b762f01db6ea616cfe70abf54930972dea7e57f75c1e703a4e88fcf52d941b6792a1e266cc864ddf42eaaf47a56873eac87d2cb1fd20b