capernaum-torg.org

- CloudFlare, Inc. -

Issued by CloudFlare Inc RSA CA-1

About this certificate

This digital certificate with serial number 0e:ec:e1:33:68:bd:51:07:50:db:5b:1c:44:a2:7e:60 was issued on by CloudFlare, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:ec:e1:33:68:bd:51:07:50:db:5b:1c:44:a2:7e:60
Serial Number (int): 19839141614815462042278825118430035552
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6f:27:38:1f:2f:b8:08:4a:70:1d:63:90:03:62:d6:19:21:fb:2d:47
AuthorityKeyId: 91:05:8a:df:4c:22:c6:6d:8b:94:4c:16:45:7e:ee:6f:02:fb:b7:c0

Fingerprint (sha1): 62:df:3b:99:05:d7:84:f1:ea:a3:91:61:94:ca:0d:14:3b:84:70:7a
Fingerprint (sha256): 00:00:f4:75:86:5d:83:53:24:ea:d0:3f:6e:81:61:a6:2b:ac:c7:ff:9e:4b:e0:cb:a6:6c:3e:30:57:50:0f:1f

Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/CloudFlareIncRSACA1.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncRSACA1.crl

Check the revocation status for certificate capernaum-torg.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for capernaum-torg.org


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

capernaum-torg.org

Other certificates including the domain name capernaum-torg.org

(limited to 100 certificates)

capernaum-torg.org
ssl753742.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753743.cloudflaressl.com
capernaum-torg.org
ssl753743.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753742.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753742.cloudflaressl.com
ssl753742.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
mail.capernaum-torg.org
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753744.cloudflaressl.com
sni.cloudflaressl.com
ssl753742.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
www.capernaum-torg.org
ssl753742.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
sni190362.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
sni190362.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753742.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753742.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753744.cloudflaressl.com
www.capernaum-torg.org
ssl753744.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753744.cloudflaressl.com
mail.capernaum-torg.org
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753742.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753742.cloudflaressl.com
ssl753742.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753742.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753742.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753743.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753743.cloudflaressl.com
capernaum-torg.org
ssl753744.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753743.cloudflaressl.com
www.capernaum-torg.org
ssl753742.cloudflaressl.com
ssl753742.cloudflaressl.com
ssl753744.cloudflaressl.com
ssl753742.cloudflaressl.com

Certificate

The complete raw certificate details for capernaum-torg.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu1mPmqWDHd87M/HFHDx
0J3QgRAvHk0iRSYYoTX67S0OpckNk8Tu71kXCAMbIbu5zo+XwIxVqjrPhz8+pbCm
Ue1ZLWSqkz5cc5PqVj38RmfEbUJVQJoR3hio56JA/64BpxrBI8caOHcwyy/wfDn2
JGrBjbEEduGf8d/hx+gjqlZv9/Nh3uInBsa+VaKDu7FKTB2J50PigY4/PQqKt/jN
xbzurNgKy7eU7sOojp/cmFrtJdmItkHFRiIRnWYIUrT2VwsYPVC9nmZFozK9ZT9t
+6FTJPkShjZ4eT4tq1wm1IP1OapayWR7mlVLFaL/3h93BdR2ZnzWp/k4Fk+hUcqO
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19839141614815462042278825118430035552
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc RSA CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'capernaum-torg.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24102343945819472951019607353314314081332465848609080077340717193465054386622872981239131071840646155934633116153742752878366836830475140148145542797529555390907549949678643847635940544518320557878517799927643978775899262284949800642452398832190490907300790735868421475795779146872372221388149331264549353201108705974298693263996759851793570208081123253415588178591033353821210584586464399081797260385313959549692319277276822430256353339363771293108654795622413631214105367136878268615540892879341995688153721569551496277584014859973326036164901444505837458228637155657899105310651098512683931425280630301569674022427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 91058adf4c22c66d8b944c16457eee6f02fbb7c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f27381f2fb8084a701d63900362d61921fb2d47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capernaum-torg.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncRSACA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncRSACA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0089d6412a05d391a4cff31ec948375950ef588bd49ca1715015381ecf01ae730afec70ba4ca2efc4da3edd7d9e58c82dca40a33a210d7962f1a9294d4ac20eb932779d78188545c82dea6e9a2f8a021035fc47559ae0b49a8a0a25fb1edaddefc81cac1d46545ba59cd9b608a223d993349062d1f55b34df7025176dee701f7db0bcea3aaac0817e2281d4e42f30cdac3b7ec6b1bb3d241e5f17903cbccaf3b72fde51a38fa81c8c75624bbf129633b3a85a5b0a52fc7062e0810ec16c70663754f11c20b92d6be5c381964fc127256cfcd7d78cb7a63f2afc6c57caff21ca4cff0e735a544618ccec40cb30fbb83842c2aa219e631d6dab83b63339411c15c62