ssl.smugmug.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0b:e9:68:83:01:9c:76:26:f2:f8:76:12:c5:41:15:90:08 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssl.smugmug.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:e9:68:83:01:9c:76:26:f2:f8:76:12:c5:41:15:90:08
Serial Number (int): 265390216610425544798022649570549436878856
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 42:77:2b:e9:e1:4f:b1:66:8c:ea:9e:58:e1:09:81:1c:7a:0c:f2:37
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:da:79:a3:48:38:d3:7a:b3:09:b9:7c:e4:de:c2:74:bb:30:49:b5
Fingerprint (sha256): 00:0e:95:cf:11:15:56:e0:51:d1:d8:63:e1:91:c2:a9:4c:ef:41:9e:56:c3:cc:a9:9b:6f:e9:5f:25:2e:fa:f8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ssl.smugmug.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.smugmug.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl.smugmug.com
www.portermediahouse.com

Other certificates including the domain name smugmug.com

(limited to 100 certificates)
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
statuspage.io
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com
ssl.smugmug.com

Certificate

The complete raw certificate details for ssl.smugmug.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGcTCCBVmgAwIBAgISAwvpaIMBnHYm8vh2EsVBFZAIMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjIxNjI2MzBaFw0x
OTA5MjAxNjI2MzBaMBoxGDAWBgNVBAMTD3NzbC5zbXVnbXVnLmNvbTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBANUgu4USG75+4Edh1AhSs7JeapQAmOsX
mwyhI8Kh8xIBlEzsZT6CJoKdcdlomrvLtWLW5ghcvzcugmQ2DwWFNtKt3SqW4csl
638bECjOFTWVCDcgNjSPi9yOAH9KVCRMxFcI8dgTMIUadUYXyBCHL87H9ylwDSkJ
CtGnerd4f0iU2l0SxDgjWlGFkdx/ainksNvNDCwwuJ5n4BfJu/zejq5gxMpT5nsu
0Wxdw/yFCWMJqIM3EfZ5rURfIguN5NycVP6NnP1+cyaqRh5Tum9yBVu+NSETyRev
Y/TCyatQiBbFTyn78TN/w0zwdi0nWOx8Q1l8ttIEwjBLPoePo/tzqi2awMOjhH8V
EiWOq09ux+gTPf4iZfUSrvbqLplywLEblE8S+mOtRXJFe/ccQ6NnDtXiMkyATR0x
NhC1VdULWBkWExtjYMjpDoGbGMOVjlpJiFM/huhlAGjnhwZPhDrx7oExdFYXv89M
qrRjdlAxRT3pcMV+Ndqq1AcvFr3Ep+/spIRREa0zPR7usAn8a1m9yLCimYpZlE0u
LFS5Moi7uzFfO8Bw1WWe5dk7gJE5m02vPvU0lDzw87shQx4p9smYTHg6CLb7vILE
3WTaW3EHG5HyyrqdWi6Lw0hh+6Pyv55ps1n/Io9WSD+Ofv6p4Ec9pCYCrxRWTcoE
Sf46Q9fxZoztAgMBAAGjggJ/MIICezAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEJ3
K+nhT7FmjOqeWOEJgRx6DPI3MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wNAYDVR0RBC0wK4IPc3NsLnNtdWdtdWcuY29t
ghh3d3cucG9ydGVybWVkaWFob3VzZS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDiaUuuJujpQAnohhu2
O4PUPuf+dIj7pI8okwGd3fHb/gAAAWuAOamfAAAEAwBIMEYCIQCR+MjqZY+uZJD3
IeTuHWGVf/nMOVbfGBC6guu+H4ziqQIhALpkusCeGXl7YogiHd9uLtY+Bxf/1/z5
mdhQpxioF1y+AHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFr
gDmnogAABAMARzBFAiBu/8NyLOPmeczHRqGxk4q/yBFJ1u7Y8nCYbshxKPpktAIh
AKAxzQltssfN5yphci2VuHPGFnJtK7lDMyvh1d8oTHQzMA0GCSqGSIb3DQEBCwUA
A4IBAQBzzI7VkVNekga5ubPFdfj6HFRX5FPPdnoTB+KQTTwYgmqQ9zzyjfLMx3zF
5OLYpNK6f1jAWEwwxV98kTyR7TTvVBMzZ8mzkK77n7pjgb+ehoc66aAQt980aad+
5OFm3TYYA1gzun0iAmf5q8uWJruCYhZ0DKAQUfjOICkUEhlkhEYV4jn9+ifbgHVz
e15nG6Cr8rbnfD2J7sncKW3GmjAS2U898xRt/joEXWEdyJdGJUDTxLMpPpZWlvwz
/8EiI00QTgzda6fHSqHSNiJ26i5A1N4Ry7Nhm6LLyiSCtSyNTFKS5A6vwZK2njCI
aG0Hvpt9tDhklWQnSdyH4Z839Wm6
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265390216610425544798022649570549436878856
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-22 16:26:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-20 16:26:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.smugmug.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 869485815185122022578903247570657103117111499581491946567892775058066713128786668771542092273681966163298256742465858419673158253485050732063869275694544951100726825494029170144933141268128256971801580879924704419979461187037810789193965453861207650900363370877085298640658621902667259340490003471270559002254925435554723907742089852604546693028824789720511069184562424529109579187024225653748869311815025443718525543098303400673796348667259307160783228851033735322763603656095507178994068745953710177034973017728074682145076422985279000229953783772611303643649075635755039697713754548657697095943304981846136001369816882524174886877146271979553484867122051954347627880279104065964878486831015461544252392876133278648664282363448216125064716644165429229022850381203952713075362097655894807229840793192237816009410913425879561701906706579514427065453036241236385024117727879596890250343390742440839896234152221913053573851003511119653082200276738299191246410083329719861694324332327896550852512349870100561200556783083134149830086142286876276988844369682130056989489986194782485326309619196411527256468179527772377044099972198280905625903620586706797540877058088971504242990921195139920251544748048205207772678021413270943132180450541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							42772be9e14fb1668cea9e58e109811c7a0cf237
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.smugmug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portermediahouse.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b8039a99f000004030048304602210091f8c8ea658fae6490f721e4ee1d61957ff9cc3956df1810ba82ebbe1f8ce2a9022100ba64bac09e19797b6288221ddf6e2ed63e0717ffd7fcf999d850a718a8175cbe007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b8039a7a2000004030047304502206effc3722ce3e679ccc746a1b1938abfc81149d6eed8f270986ec87128fa64b4022100a031cd096db2c7cde72a61722d95b873c616726d2bb943332be1d5df284c7433
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0073cc8ed591535e9206b9b9b3c575f8fa1c5457e453cf767a1307e2904d3c18826a90f73cf28df2ccc77cc5e4e2d8a4d2ba7f58c0584c30c55f7c913c91ed34ef54133367c9b390aefb9fba6381bf9e86873ae9a010b7df3469a77ee4e166dd3618035833ba7d220267f9abcb9626bb826216740ca01051f8ce202914121964844615e239fdfa27db8075737b5e671ba0abf2b6e77c3d89eec9dc296dc69a3012d94f3df3146dfe3a045d611dc897462540d3c4b3293e965696fc33ffc122234d104e0cdd6ba7c74aa1d2362276ea2e40d4de11cbb3619ba2cbca2482b52c8d4c5292e40eafc192b69e3088686d07be9b7db4386495642749dc87e19f37f569ba