www.finpack.umn.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0a:99:71:94:42:a4:15:0e:62:04:f3:b7:96:fa:50:56:74 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.finpack.umn.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0a:99:71:94:42:a4:15:0e:62:04:f3:b7:96:fa:50:56:74
Serial Number (int): 264943643084466692201944601042127521076852
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:eb:b6:12:a3:ad:b1:e1:5d:24:b7:42:9d:fe:20:6c:a4:99:72:51
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:ee:ca:c4:58:f9:d1:a1:94:4a:c3:b5:46:5c:a0:ed:57:f4:52:6c
Fingerprint (sha256): 00:66:9f:eb:9b:02:34:66:62:bf:ac:50:99:32:84:90:2f:30:e4:4e:09:68:6e:5c:79:a0:4f:bc:8d:77:c6:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.finpack.umn.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.finpack.umn.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.finpack.umn.edu

Other certificates including the domain name umn.edu

(limited to 100 certificates)
sni.cloudflaressl.com
sni.cloudflaressl.com
axiumssl-prod.ahc.umn.edu
ggg.umn.edu
rhrc.umn.edu
scholarship.law.umn.edu
stg-webfilesdev.ad.umn.edu
sni.cloudflaressl.com
p.acm.umn.edu
futureservicesinstitute.umn.edu
www.ncfpd.umn.edu
ceed.umn.edu
sni.cloudflaressl.com
www-test.hhh.umn.edu
ur.umn.edu
sni.cloudflaressl.com
www.finpack.umn.edu
test.statefair.umn.edu
bema.dash.umn.edu
research.cs.umn.edu
fmp.cla.umn.edu
sni.cloudflaressl.com
*.psepbizplan.umn.edu
msa.umn.edu
sni.cloudflaressl.com
www.claoit.umn.edu
nutnet.umn.edu
givingday.umn.edu
sni.cloudflaressl.com
incapsula.com
lawandinequality.org
sni.cloudflaressl.com
umartauth.umn.edu
umconnect-v9-test.oit.umn.edu
1819subfield.dash.umn.edu
itg-dev.oit.umn.edu
dairyknow.umn.edu
oreapps.d.umn.edu
sni.cloudflaressl.com
sl2-dev.d.umn.edu
cla-comm-copy-lw.d.umn.edu
sni.cloudflaressl.com
www.bellmuseum.umn.edu
provost.umn.edu
sni.cloudflaressl.com
controller.umn.edu
www.psych.umn.edu
usvcs-pvve022l.uservices.umn.edu
sni.cloudflaressl.com
umnd801.umn.edu
www.plantinfo.umn.edu
ds.umn.edu
fmresident-database.umn.edu
*.charfac.umn.edu
5659822271758336-fe3.pantheonsite.io
www.ahcs.umn.edu
camp.dash.umn.edu
clagency.umn.edu
requests.cseit.umn.edu
cpheo2.sph.umn.edu
p.acm.umn.edu
prodtest.extension.umn.edu
cf-test1.crk.umn.edu
printing.umn.edu
viviendasite.mbc.dash.umn.edu
cascw.umn.edu
sichl.dash.umn.edu
pias02-r.uservices.umn.edu
drivenvolunteers.umn.edu
madyun.dash.umn.edu
umnstandard.umn.edu
ecrt.oit.umn.edu
acm.umn.edu
sni.cloudflaressl.com
ici-risp-dev-api-01.oit.umn.edu
rt.msi.umn.edu
sunfish.biostat.umn.edu
pilot.cap.oit.umn.edu
emis-hub.ahc.umn.edu
aux400.auxs.umn.edu
sni.cloudflaressl.com
cpheo1.sph.umn.edu
sni.cloudflaressl.com
mnlink.org
drupalmigrate.umn.edu
incapsula.com
ihrca.dash.umn.edu
*.elevator.umn.edu
sni.cloudflaressl.com
*.law.umn.edu
www.msi.umn.edu
ahcauth.ahc.umn.edu
research-innovation.umn.edu
grouper.umn.edu
chan-lab.umn.edu
www.ofyp.umn.edu
www.afrotc.umn.edu
careers.cvm.umn.edu
lcms.ahc.umn.edu
sni.cloudflaressl.com

Certificate

The complete raw certificate details for www.finpack.umn.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgISAwqZcZRCpBUOYgTzt5b6UFZ0MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTAxMTIzNTdaFw0y
MDA2MDgxMTIzNTdaMB4xHDAaBgNVBAMTE3d3dy5maW5wYWNrLnVtbi5lZHUwggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCu7sDL3ml6PWhml1LnqCQYDqLs
drfQOgV6yAPQdGyHTKxWZ85qKzh5lRlqvhrW0ymKyj6//dbzpOe8Dx9+4/yNuIIq
fGcTe1L07tB9uFo/uoGsG0RVKZAsUeYsPGcg/JLaJObS0wSGi9etGRRZZHjAV67l
w+sFySaEDHFie3ZZjXCHdgpN8RUV+slYZey4jUcfAODo+czayyxx1ucAjvVXHrdZ
VZfzTlw34Qjb+McvJqktpPWNks0lPd/KSoACzdMmm73ghTAGwhWiXOHIatP2z7+l
K1eP7PQtIhejrSn/eCh+IcPmgRwT4xPaJGKQeeSxMNzVhAjg5QOwpFqYkWU1zJJb
aErZ2XFPEu5VfkoZdvo9q31KdXK3hRsbJgqSNsu16Dd0edRgc5ncyU1bpLHuOmeX
HMh609xB0FEdaTTE7IPhzSllzY23BA4lpwDlafiS1+w2g+4JV4O1/LxQ5dpSNOC8
qqi6jgtq0EJiN21m5R6yF2ADClBicWQMcB1PAxYG6c8lx3M5XMewFqhIOa8v/qOR
uphNB6EAlXKuknLY6ITOmGxV5NrW6Ul3rM9eQymcvNURH/D8WPlLFYrB5Yi/Oeer
tAwlECE5SMmdgaazfv5boZJC9V5S9uMrrExiYOTtGOv+v9BmalaTqn2U55Rjse4p
9Ax2XY9ERPE8Fbz6IQIDAQABo4ICaDCCAmQwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBTE67YSo62x4V0kt0Kd/iBspJlyUTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE3d3dy5maW5wYWNr
LnVtbi5lZHUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE
AdZ5AgQCBIH1BIHyAPAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQ
XgAAAXDEZs9GAAAEAwBHMEUCIHyzay3iHzPJqEdBmco8YQBLlJsnqGih1TFIZ/Lp
pT8qAiEA29A3rax9EuyT9cjCzfAYoC63tpYYsOej3Wo9blC1Vv4AdgBvU3asMfAx
GdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAXDEZs/8AAAEAwBHMEUCIQCDbkG4
HoVSM27bv6gkdenNiHv/6hiNagEFZBOZ2kThjQIgag7PDB1NBXmvFuSNtHQKfEXa
wqdMFPhBjbCk7D5x2sswDQYJKoZIhvcNAQELBQADggEBAASl8Qwk4rcORVl+Mru/
+ZGA3MEKvRf1ocS9BHc0RFHAwSrb6XYXyAqec/ompombYVMiL52OlA+aqAQqD/rp
z7Z1rhM/bqz7+taMf18Pv2p4S7+iTw42HNOFIRHuCgakcCSvcoBw1Nq1suoo+xcL
U/5umXC8XhRhVOKrDopgV8vBRHLv4JKJud2LGcgTFb1Xe9HhcOqWiD7Ec4sMVI7O
InhIkrd5Kymg8QNznZ/h91Q94LY3DXI1YWjoyS2XZ4vWPAx08BXkVb1MvsJuTLsY
Oe//N06NPR/F1dH045Xuh9iGfHfrAcPonBffCg4yGp7fMwLzEMAvrkOBKwR1N2KW
auM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264943643084466692201944601042127521076852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 11:23:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-08 11:23:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.finpack.umn.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713662863586126038737151489922797902962224584210580634221760366957038424974034637022980502420564403218555411065873150239618609806918125134667936504396308010061759125770259284376376424658817722197551687367777547770711700364545610844172995039568869583621104794820002959341303542903522310073810454839466362238806154263777778566708363682427484290846130424904463189085698747527775961501254195215730488954018178274393710647513006353378557107377268070225479826271517752509866638907108907394501006838802860200293445294913492386041830631630511471521776936190421110164733667846983901397413971554948064461726623505301985172292781574718447156160178098223614198878401954635145474199393090160097411752793014088400984499339462945379447265109342923584066116962852278930795829999585971119684655651170146255920132696193403050002400096922359457321171395819174514168188068303800408982371647576750990036846443284616476135763135443949777335199008508414409907903894377912391667244017176329539630172097505629603067553263370111801581412326786316433814543681679765880089800157363225712969958561950150476020760485068758002417732353886661697461372889649352592515417332043382825232721018482345277777454018678352360778646986730847761236082324631680335648917355041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4ebb612a3adb1e15d24b7429dfe206ca4997251
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finpack.umn.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170c466cf46000004030047304502207cb36b2de21f33c9a8474199ca3c61004b949b27a868a1d5314867f2e9a53f2a022100dbd037adac7d12ec93f5c8c2cdf018a02eb7b69618b0e7a3dd6a3d6e50b556fe0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170c466cffc0000040300473045022100836e41b81e8552336edbbfa82475e9cd887bffea188d6a0105641399da44e18d02206a0ecf0c1d4d0579af16e48db4740a7c45dac2a74c14f8418db0a4ec3e71dacb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0004a5f10c24e2b70e45597e32bbbff99180dcc10abd17f5a1c4bd0477344451c0c12adbe97617c80a9e73fa26a6899b6153222f9d8e940f9aa8042a0ffae9cfb675ae133f6eacfbfad68c7f5f0fbf6a784bbfa24f0e361cd3852111ee0a06a47024af728070d4dab5b2ea28fb170b53fe6e9970bc5e146154e2ab0e8a6057cbc14472efe09289b9dd8b19c81315bd577bd1e170ea96883ec4738b0c548ece22784892b7792b29a0f103739d9fe1f7543de0b6370d72356168e8c92d97678bd63c0c74f015e455bd4cbec26e4cbb1839efff374e8d3d1fc5d5d1f4e395ee87d8867c77eb01c3e89c17df0a0e321a9edf3302f310c02fae43812b04753762966ae3