www.orveka.com

Issued by SignSec Certification Authority

About this certificate

This digital certificate with serial number 02:85:28:92:8e:36:19:d5:f8:54:77:81:a5:7e:30:5c was issued on by FBS Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.orveka.com,OU=Domain Control Validated+OU=Provided by ISIMTESCIL BILISIM ANONIM SIRKETI+OU=TrustSafe PRO - DV

FBS Inc

Organization: FBS Inc
Organization unit: SSL Department
State / Province: CA
Locality: Irvine
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:85:28:92:8e:36:19:d5:f8:54:77:81:a5:7e:30:5c
Serial Number (int): 3349854381463112364915224473593851996
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ae:6a:0f:34:97:13:14:2e:53:aa:02:c0:48:3a:c7:13:ec:bf:c2:c6
AuthorityKeyId: 82:8f:09:24:3e:2b:e1:f6:24:0b:2d:75:b0:34:e3:30:40:39:41:6f

Fingerprint (sha1): 9d:64:7a:f2:dd:73:6e:28:85:1c:89:d5:c2:5c:5f:4d:ba:fc:a8:0a
Fingerprint (sha256): 00:0b:d5:89:e8:cd:48:e0:38:12:ad:f3:43:b5:64:c3:af:3b:cf:bf:20:13:92:76:17:57:ed:f4:8c:a1:42:84

Issuing Certificate URL: http://crt.usertrust.com/SignSecCertificationAuthority.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/SignSecCertificationAuthority.crl

Check the revocation status for certificate www.orveka.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.orveka.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.orveka.com
orveka.com

Other certificates including the domain name orveka.com

(limited to 100 certificates)
www.orveka.com
www.orveka.com

Certificate

The complete raw certificate details for www.orveka.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIQAoUoko42GdX4VHeBpX4wXDANBgkqhkiG9w0BAQsFADCB
gDELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMQ8wDQYDVQQHEwZJcnZpbmUxEDAO
BgNVBAoTB0ZCUyBJbmMxFzAVBgNVBAsTDlNTTCBEZXBhcnRtZW50MSgwJgYDVQQD
Ex9TaWduU2VjIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE3MDIwOTAwMDAw
MFoXDTE4MDIwOTIzNTk1OVowgZExITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZh
bGlkYXRlZDE2MDQGA1UECxMtUHJvdmlkZWQgYnkgSVNJTVRFU0NJTCBCSUxJU0lN
IEFOT05JTSBTSVJLRVRJMRswGQYDVQQLExJUcnVzdFNhZmUgUFJPIC0gRFYxFzAV
BgNVBAMTDnd3dy5vcnZla2EuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEAoj7Jw7Px38X2LrGZATCR/Fk0Xd/R+QkXj8gKHpZ25WMCYaC24Z5zWI3W
Bq397Mz2WU5Xwdsr23+xFbiJu2e0R8V4LDzdAZfHWkeJsWVPeGqKXptVhPGcxrKD
OCQDjKN3eNbZ3AR8x5OtYcMnOozd43f2LbQRrOPhZqkYPveT9mE9bxRBLHRhil25
ui1fNV15RTR2e4xsSW4sULqMgffPxP2KUlzLm2TDUgt17y0UVnrKMxoysLfk7gUo
WapkbwDS7hEjGNlP2o91gpTM4LkMnhMfdmYw9Gp4Ve1VYrY6R8QhvbEb8gphE0G5
15M23HuWJlkrGU1cIso3794708L2mvb4hrpsmYds5BQuk+m6MjcLxt/HyUTd0GzT
y86Dl3isr3mZkKibWqjv9OVeDPwOn7beD/uLztoX03Ky56ifq2f74PJiNizIn7ok
HJNXYNbyrqtVLgvkmh4aK7oZ3MQKzDXaFj0SkSzlVoMqHOYVUKlSARw2kFLo+u9l
9pUyoE4UpbfsQ+k5qK6YP7a/sAUgiwQzeibbUB0Ie2nmXsEcBK9cMIpPRzW6fxV4
yDV8LPx5/bDrieY0Dk3i694jBmOzzWgujOf6M2Qfv7kTpy/UrLq6D3lVh/xMn79Z
ZPQlPznApoO1PVQ7rp1/pH+xIYu836QFEW3gplL0zQyj14jhPpsCAwEAAaOCAcEw
ggG9MB8GA1UdIwQYMBaAFIKPCSQ+K+H2JAstdbA04zBAOUFvMB0GA1UdDgQWBBSu
ag80lxMULlOqAsBIOscT7L/CxjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIw
ADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSwYDVR0gBEQwQjA2Bgsr
BgEEAbIxAQICLDAnMCUGCCsGAQUFBwIBFhlodHRwczovL2Nwcy51c2VydHJ1c3Qu
Y29tMAgGBmeBDAECATBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnVzZXJ0
cnVzdC5jb20vU2lnblNlY0NlcnRpZmljYXRpb25BdXRob3JpdHkuY3JsMH0GCCsG
AQUFBwEBBHEwbzBGBggrBgEFBQcwAoY6aHR0cDovL2NydC51c2VydHJ1c3QuY29t
L1NpZ25TZWNDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNydDAlBggrBgEFBQcwAYYZ
aHR0cDovL29jc3AudXNlcnRydXN0LmNvbTAlBgNVHREEHjAcgg53d3cub3J2ZWth
LmNvbYIKb3J2ZWthLmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAWdC3HKdZqeFvqC7L
SPi3RQvKW9UJXZhP2T3mw+zXLkMLZBFtKsUgdf9O71WUyXty8ieLy1LE1wt6K8C1
Xf4nNFIlQdwTou3voapqgfjga4r2TJIeiJpiMOJgy7YQ53u2puyUSmFPP5RluSS0
kNYzxoomRofV77SA1YVvb2VixTROQo/I+SMwDhbpXnp803WKGR2h0YZKt5aVWxuq
mdCDJMtcIe9mcDScPB8n64pO38iqHJR7GTRiJqP2tQEDixX17Jr/kJx4SJTKPn0t
Y1Plk0fQ8vsIFDz9p2EC4tDOmDFD5D8Yn9Z72VDaB+cosKFeHVfFz7ohn3EdvZtd
a0p49A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3349854381463112364915224473593851996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irvine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FBS Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SignSec Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by ISIMTESCIL BILISIM ANONIM SIRKETI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustSafe PRO - DV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.orveka.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 661902937741311193167478310710922115478246200831694891635661796337941448871091894328729434697118305521804630482144503054948755122028119644995419334956855939316650304185888021042056820228537663758871765609419758521228233040243610034224736041118718873088056503462022150896556297216141064257098351591027146705704399929125101049013365139521713647525586577770849919169726982198758485791634300009075003715927102392246332181187375614008585230189854916255545440765997260431934292386774503289577063109571876632360688183625495256946814150947654070558654543878341914471729355069851803985996224849924013161818664720335849491959350417277620961321092860524819368749451345233889447241183069883743335187804242829418789768436628491283320903621027528655520634116314012834498828868746537103378123049633875351758642240348453020950594787521533282329736921846919107341547275398594183245959322045556862585507253670430480713082195481357308581542998894543102322889068718586162295227536830773570284423184821329519748691433719366420111999405632336351517100935694106621082840737536414026906039209803670762554326660823834334306296012913478104262544401065861690132857829242714370932731606361041647874697158190098051648039094263191807642034881588046257128365702811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 828f09243e2be1f6240b2d75b034e3304039416f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae6a0f349713142e53aa02c0483ac713ecbfc2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.44
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/SignSecCertificationAuthority.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/SignSecCertificationAuthority.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orveka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orveka.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0059d0b71ca759a9e16fa82ecb48f8b7450bca5bd5095d984fd93de6c3ecd72e430b64116d2ac52075ff4eef5594c97b72f2278bcb52c4d70b7a2bc0b55dfe2734522541dc13a2edefa1aa6a81f8e06b8af64c921e889a6230e260cbb610e77bb6a6ec944a614f3f9465b924b490d633c68a264687d5efb480d5856f6f6562c5344e428fc8f923300e16e95e7a7cd3758a191da1d1864ab796955b1baa99d08324cb5c21ef6670349c3c1f27eb8a4edfc8aa1c947b19346226a3f6b501038b15f5ec9aff909c784894ca3e7d2d6353e59347d0f2fb08143cfda76102e2d0ce983143e43f189fd67bd950da07e728b0a15e1d57c5cfba219f711dbd9b5d6b4a78f4