www.xn----858am81dpvmcwginebooiivdsy.url.tw
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:b1:83:16:d2:ed:36:3e:d1:d5:99:a1:7e:9b:10:58:57:46 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.xn----858am81dpvmcwginebooiivdsy.url.tw
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b1:83:16:d2:ed:36:3e:d1:d5:99:a1:7e:9b:10:58:57:46Serial Number (int): 408853370048125685782648557376701742995270
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 65:24:fe:5d:3a:06:3b:df:d7:33:ba:7e:e2:73:aa:a9:09:4e:77:92
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e1:21:e8:a4:60:97:14:9e:50:58:57:a3:d3:75:ea:a0:67:98:53:5d
Fingerprint (sha256): fc:8c:f9:18:74:4e:6f:4f:52:da:83:ae:99:84:2b:91:21:8e:d0:eb:fa:83:71:a8:09:88:dd:cf:3e:a8:40:b4
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.xn----858am81dpvmcwginebooiivdsy.url.tw
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.xn----858am81dpvmcwginebooiivdsy.url.tw
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.xn----858am81dpvmcwginebooiivdsy.url.tw
Other certificates including the domain name xn----858am81dpvmcwginebooiivdsy.url.tw
(limited to 100 certificates)
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
Certificate
The complete raw certificate details for www.xn----858am81dpvmcwginebooiivdsy.url.tw in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGjzCCBXegAwIBAgISBLGDFtLtNj7R1ZmhfpsQWFdGMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMTExMTIwMTdaFw0x OTA0MTExMTIwMTdaMDYxNDAyBgNVBAMTK3d3dy54bi0tLS04NThhbTgxZHB2bWN3 Z2luZWJvb2lpdmRzeS51cmwudHcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQCgQ4Rs4YtLBpLgzVd5m07QQjB2UD9jcHmG5aeI3SGIcf++YdVj+/MUSGoR RL9uV28ugMXvKUaR8Pf19uREcF2flZek4vzuZLaweG09UO5gwpr/d7w4EjIIECai ZJh7IL6ER+YgOTOzhJhktcQrkQpOT7LeNTr/QGaBakzUl9r1I4Iz5KlnsrTKSSW6 jlGoeFfGAGnSAewVgfCbGmd2/f4TrKG0aVoDoGc2cLkSvWek/ThJVBZ4Y3nCwGg7 8IS8LSMC12A+1xZFQwdm10EPCQcB7XRl62NHKPD8RdymnO4fmwio3lvZxTEQomFq c3rxCUecyvTvb088w5nF31RhZj4FK0mJTM4hgVzFVUJpRDbSptMlXySTDaChu50U U485q4fLxTrfNFnDunSAjvl9/AuX+zrF7fSOOpItD8nNbJk2c4Z8pa9X4HjPQvWs AOjJzFA8iQGdatE8cFbvP/AYcMhlcHNJfwyv2UW6HHF0VMHng1M4QBgI/TVwfm6/ eVdIGUdXj3nNqfZ9y9iSsms+Uy9p0QEN9wnGdvz4qcvdaiQC+7O05J/hfKRZvctH SIP5sFjIlBJv/hhsggpOUeHmb8lHbpRu8sW+XvCnFGdZh9RM+zCMdiWgS/ZukYys YHEO8/rbT3wLQhUhxhe2/Ju/en7derudhaAxejnjBUVGbN7HPwIDAQABo4ICgTCC An0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRlJP5dOgY739czun7ic6qpCU53kjAf BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv MDYGA1UdEQQvMC2CK3d3dy54bi0tLS04NThhbTgxZHB2bWN3Z2luZWJvb2lpdmRz eS51cmwudHcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEE AdZ5AgQCBIH2BIHzAPEAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb /gAAAWg82xRQAAAEAwBHMEUCIATDZnvnln3rsAD9M7IWujZ+okLTUbLXzpnmUyq1 FLKQAiEAu+Qi5n8bVZRLnHxOvhDNYoVjeLgJO6Pj5fC0JKD7bpkAdwApPFGWVMg5 ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWg82xZKAAAEAwBIMEYCIQCtQFSf qQW5GJ5UWIa2XxHYDjel/LFVwA36YbdCgxVdKwIhAJUeWe/Zshwh15pjSdr1l88m GoegvKw2fkBV2E+10gCfMA0GCSqGSIb3DQEBCwUAA4IBAQAIFWGgMDyfZFmv2gsm jDQIFLiRcwe2rDfLhsoZoFnzcHbVriIPQqPlQ9JD26cvVfqZi+/Sa2Sfkmu2gVUA V2RpaKRY2YZ34gIARFAX+9RppDlgVv/xvSnXYQqFj74z78wXiDFlkBh+rDvHqBpz t7A/ldUO2Hw6Lw7YJxxVrC944bnjipsDtHY4dSxagUjrlJLGpmcGDOVfaXG9HFzJ 5wwUj0h1nnoqlBUNhCDF+QycmXsGP9oZfm02qz0UBZrehJkdGNADpA9i5iyG1sfl V5qGW0Yd36BlyxIemzJyLVqIMAQpDIQbQRx8cANEBnQgY/fIeoGsA9Odl4jlD/UT //ge -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoEOEbOGLSwaS4M1XeZtO 0EIwdlA/Y3B5huWniN0hiHH/vmHVY/vzFEhqEUS/bldvLoDF7ylGkfD39fbkRHBd n5WXpOL87mS2sHhtPVDuYMKa/3e8OBIyCBAmomSYeyC+hEfmIDkzs4SYZLXEK5EK Tk+y3jU6/0BmgWpM1Jfa9SOCM+SpZ7K0ykkluo5RqHhXxgBp0gHsFYHwmxpndv3+ E6yhtGlaA6BnNnC5Er1npP04SVQWeGN5wsBoO/CEvC0jAtdgPtcWRUMHZtdBDwkH Ae10ZetjRyjw/EXcppzuH5sIqN5b2cUxEKJhanN68QlHnMr0729PPMOZxd9UYWY+ BStJiUzOIYFcxVVCaUQ20qbTJV8kkw2gobudFFOPOauHy8U63zRZw7p0gI75ffwL l/s6xe30jjqSLQ/JzWyZNnOGfKWvV+B4z0L1rADoycxQPIkBnWrRPHBW7z/wGHDI ZXBzSX8Mr9lFuhxxdFTB54NTOEAYCP01cH5uv3lXSBlHV495zan2fcvYkrJrPlMv adEBDfcJxnb8+KnL3WokAvuztOSf4XykWb3LR0iD+bBYyJQSb/4YbIIKTlHh5m/J R26UbvLFvl7wpxRnWYfUTPswjHYloEv2bpGMrGBxDvP62098C0IVIcYXtvybv3p+ 3Xq7nYWgMXo54wVFRmzexz8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 408853370048125685782648557376701742995270 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 11:20:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 11:20:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.xn----858am81dpvmcwginebooiivdsy.url.tw' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 653819013761817099155879883360315801868005924308372022090724899521957367599148635725314211056237621408197666821086358334818299058694137968959811783856438831107528255460027775889607239836227912073467219995859119423917647212592534842208400552977555769926679937967118641603682093965384418121957623221331650631975439223064989971765761042606923646848369555766557501963462763639895439606497482624752835509900248414782660369891037383803261671102594896139461840592026680712193745352705156213004210874886676180616483841419467609731433343222462516018171918856591833565807740045803510696979958128588413328100365606790945424263710446787401327405537487599259020475900525011257331621926014607467263715102256838375845832579628443512282934372191407112078213608027449597835300763936204384863708230545196703274914546570450098099325528615189667744662321733792241910141376390174013064848622696834531833655163947937730040187588035237046413409660825132193867837423567227174485367187045609077178308476757123654462705620279800173822709964533642384121435308423572662808623075387465147349236009832046896467548807893416982688068432282240751290178105645650472778678337585595917376411519440496584431035955216065476413349610516595738662583416359719797867671373631 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6524fe5d3a063bdfd733ba7ee273aaa9094e7792 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn----858am81dpvmcwginebooiivdsy.url.tw' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001683cdb14500000040300473045022004c3667be7967debb000fd33b216ba367ea242d351b2d7ce99e6532ab514b290022100bbe422e67f1b55944b9c7c4ebe10cd62856378b8093ba3e3e5f0b424a0fb6e99007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001683cdb164a0000040300483046022100ad40549fa905b9189e545886b65f11d80e37a5fcb155c00dfa61b74283155d2b022100951e59efd9b21c21d79a6349daf597cf261a87a0bcac367e4055d84fb5d2009f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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