sap-splunk-us-east1-c-1.shopifycloud.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a8:31:ed:e2:c6:c1:88:1e:55:b1:84:ff:5a:b1:4e:37:00 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sap-splunk-us-east1-c-1.shopifycloud.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:31:ed:e2:c6:c1:88:1e:55:b1:84:ff:5a:b1:4e:37:00
Serial Number (int): 318570662783718977200799482035112237741824
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a5:3e:a5:a5:16:21:32:cf:f3:21:f7:b7:fe:fc:47:91:aa:bb:3a:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d8:ec:1c:91:00:42:75:ce:c3:b2:07:84:ec:2c:78:a1:ae:47:50:c8
Fingerprint (sha256): 01:38:8c:53:2b:49:26:db:e6:9b:d4:e8:26:dd:4c:e6:07:30:4d:57:3d:34:52:4d:b1:58:6a:b4:15:df:29:5d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sap-splunk-us-east1-c-1.shopifycloud.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sap-splunk-us-east1-c-1.shopifycloud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sap-splunk-us-east1-c-1.shopifycloud.com

Other certificates including the domain name shopifycloud.com

(limited to 100 certificates)
mason-staging.shopifycloud.com
delivery-app.shopifycloud.com
org-admin-web-staging-5.shopifycloud.com
ingress-imagery-us-central1-2.shopifycloud.com
notary.shopifycloud.com
overseer-kibana.shopifycloud.com
app-store-staging-sonic-es6.es-mk7os.shopifycloud.com
shopify-app-store.shopifycloud.com
allergy-bot.shopifycloud.com
alertmanager-observe-prom-npm-as-se1-dt5.shopifycloud.com
panama-canada.shopifycloud.com
diffy-server.shopifycloud.com
flow-connectors.shopifycloud.com
brochure2-staging12.shopifycloud.com
shopify-comet-dev.shopifycloud.com
d1egoaz-test.shopifycloud.com
plus-website-staging8.shopifycloud.com
duties-taxes-service.shopifycloud.com
org-admin-web-staging-d9f2.shopifycloud.com
sap-splunk-us-east1-b-1.shopifycloud.com
linkpop.shopifycloud.com
shopify-bids.shopifycloud.com
cloud-portal-merlin-oi-us-ce1-ms6.shopifycloud.com
cdc-controller-staging.shopifycloud.com
stock-photos-es6.es-pt27u.shopifycloud.com
savage-sign-on.shopifycloud.com
local-deliveries.shopifycloud.com
mailbox.shopifycloud.com
brochure2.shopifycloud.com
pexkf.kibana.shopifycloud.com
doug-test.shopifycloud.com
ping-api.shopifycloud.com
cinder.shopifycloud.com
data-observatory.shopifycloud.com
cross-sell-app.shopifycloud.com
shopify-classifieds.shopifycloud.com
sap-splunk-us-east1-c-1.shopifycloud.com
fluffy-rails-adrian.shopifycloud.com
cloud-portal-apps-a-us-central1-24-3.shopifycloud.com
org-admin-web-staging-8rot.shopifycloud.com
org-admin-web-staging-q4oi.shopifycloud.com
airtable-updater.shopifycloud.com
threed-warehouse.shopifycloud.com
brochure2-staging4.shopifycloud.com
verdict-rails-example.shopifycloud.com
wedge-viewer.shopifycloud.com
online-store-web-staging-2.shopifycloud.com
delivery-promise.shopifycloud.com
instagram-commerce.shopifycloud.com
querier-canary-grpc-prometheus-us-ce1-rt5.shopifycloud.com
asc.shopifycloud.com
tasker-merchant-auth.shopifycloud.com
magellan-readonly-east.shopifycloud.com
admin-canada.shopifycloud.com
bourgeois.shopifycloud.com
5ntgy.kibana.shopifycloud.com
pricing.shopifycloud.com
thehive-staging.shopifycloud.com
godog.shopifycloud.com
routing-foundations-misc-alt.shopifycloud.com
buy-button.shopifycloud.com
sentinel.shopifycloud.com
rwlnk.kibana.shopifycloud.com
querier-canary-prometheus-as-se1-af1.shopifycloud.com
elasticsearch.es-ndzos.shopifycloud.com
cloud-portal-tier1-us-central1-6.shopifycloud.com
email.shopifycloud.com
shopify-dev.es-7cslb.shopifycloud.com
shopify-app-store-staging.shopifysvc.com
4rbjc.kibana.shopifycloud.com
traffic-misc.shopifycloud.com
observe.shopifycloud.com
logs-edge-us-e4.shopifycloud.com
e2e-app-migrator-test-h4rrq.shopifycloud.com
production-deploys-demo-app-2.shopifycloud.com
data-portal.shopifycloud.com
patdown-staging.shopifycloud.com
inventory-api.shopifycloud.com
parca-prom-staging-us-ce1-za7.shopifycloud.com
elasticsearch.es-qhwb5.shopifycloud.com
local-deliveries.shopifycloud.com
cloud-portal-tier1-us-east1-6.shopifycloud.com
bcldb-integration-sit.shopifycloud.com
delaygateway.shopifycloud.com
shopify-dev-staging6.shopifycloud.com
minerva.shopifycloud.com
es-na-ne1-es7-kibana.shopifycloud.com
vulcan.shopifycloud.com
org-admin-web-staging-3.shopifycloud.com
remember-me.shopifycloud.com
shopify-dev-staging5.shopifycloud.com
binauth-validate.shopifycloud.com
streamlit-service.shopifycloud.com
flow-staging-data.shopifycloud.com
org-admin-web-staging-7won.shopifycloud.com
shopify-app-store.shopifycloud.com
shopify.dev
wedge-viewer.shopifycloud.com
online-store-web-canada.shopifyapps.com
plus-website-staging7.shopifycloud.com

Certificate

The complete raw certificate details for sap-splunk-us-east1-c-1.shopifycloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISA6gx7eLGwYgeVbGE/1qxTjcAMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MTUyMjAxMDFaFw0yMzExMTMyMjAxMDBaMDMxMTAvBgNVBAMT
KHNhcC1zcGx1bmstdXMtZWFzdDEtYy0xLnNob3BpZnljbG91ZC5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8SmOB+rqq4xQomqcduEhvaTDxyQnp
O1LovW8aJ2GFDNx9k5cYVyi55ilNQCeXO8MeJCmpsRUyd+TXo63zrEPpppZuEatc
kwsSfIKFRc7lEH+xIA2GJED+6av9Ch3wUigNKftloC8rKu/7vqma9q4pBgLDe//j
4jkeC0m7eG4A0hTGK06yPplxOma3MvBxmr6IzbT8KJ/+bkS/MfJ4uVzoKfB5VEFJ
8KcV2Nt0v9Mid1qgaFwnY7G/KwfJvhi2zIqH7wr8vAgju4Ti75z94XhxZO8btSW1
M78kJiTYBSpo/yGQd8Vyg3erUpxdq0pJ1MoUL3QJFsrsrSRouTWdvjZvAgMBAAGj
ggIqMIICJjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKU+paUWITLP8yH3t/78R5Gq
uzo9MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEB
BEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUF
BzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMDMGA1UdEQQsMCqCKHNhcC1zcGx1
bmstdXMtZWFzdDEtYy0xLnNob3BpZnljbG91ZC5jb20wEwYDVR0gBAwwCjAIBgZn
gQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwC3Pvsk35xNunXyOcW6WPRs
XfxCz3qfNcSeHQmBJe20mQAAAYn7blz5AAAEAwBIMEYCIQC4zrIV/VG/9H7nFGyw
oWxkYDbDadrEpnZ+uyre9wknXAIhAKkKK2mRnx1QPPyJ9TqD25GcX4BJvFIZhSly
I5GZ93s4AHUA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGJ+25c
9QAABAMARjBEAiBNtF8G+1aS/+HtG3rwOJ+wHmFi9NC5Qm4KS5SYQQT9zwIgGG30
6SGmkZb7IQdUF0TvY0FOEuxKOw33eupRS6S+wK4wDQYJKoZIhvcNAQELBQADggEB
AIYlp9d68A7+m27If+8mxHaWWAikJSv+lKgiN43TpJHtLpDuUdUpg5bhzcuSIJ3C
jJ8ltiwScAXr6loZhKM1O6Uniu+7vUX6SklOoFjoeVtY35ajxIKpbvIIjqSS6XFw
Sm5RExRzeZkvoWLRIopsB156Z7y7nkNFG/6Tax3GAQ5VTgWBmXPk7J1gjzxrBGxY
B7uLfphqNOpk5GOQKj+QkD0mBra9FzPSQQ1yvdCRs3J2QKmFXf3LpVszXpoGsC2+
V0f/WXw0AqB8SgH39scT7TU5CgidyUcJ3aRRCMDb+yUTN11hueXDds8/Cez+l+0Q
BQQElBNuzhuQiZQA7ZO3zFg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEpjgfq6quMUKJqnHbhI
b2kw8ckJ6TtS6L1vGidhhQzcfZOXGFcoueYpTUAnlzvDHiQpqbEVMnfk16Ot86xD
6aaWbhGrXJMLEnyChUXO5RB/sSANhiRA/umr/Qod8FIoDSn7ZaAvKyrv+76pmvau
KQYCw3v/4+I5HgtJu3huANIUxitOsj6ZcTpmtzLwcZq+iM20/Cif/m5EvzHyeLlc
6CnweVRBSfCnFdjbdL/TIndaoGhcJ2OxvysHyb4YtsyKh+8K/LwII7uE4u+c/eF4
cWTvG7UltTO/JCYk2AUqaP8hkHfFcoN3q1KcXatKSdTKFC90CRbK7K0kaLk1nb42
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318570662783718977200799482035112237741824
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-15 22:01:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 22:01:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sap-splunk-us-east1-c-1.shopifycloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23769483769787004874230332545104308229123898855455632985371756498328391303691903327692304011022626842101804728797568408699084126664963371091403100223877207585353057773120002067210206938153782289450605867433982705926111050126319836951861315737490938898847309088278250611198103162100758341182021042596179761865572707785963098079531613398727569615078003388585867174596046388137568782291547994115909849103024018067002684614932088082610882985549798493331086665439910697817652737304867734694600495456190594325143306376662253588589129593788170559461994534277225855862559915762925063889623158298359237185141395223382973101679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a53ea5a5162132cff321f7b7fefc4791aabb3a3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sap-splunk-us-east1-c-1.shopifycloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189fb6e5cf90000040300483046022100b8ceb215fd51bff47ee7146cb0a16c646036c369dac4a6767ebb2adef709275c022100a90a2b69919f1d503cfc89f53a83db919c5f8049bc5219852972239199f77b38007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189fb6e5cf5000004030046304402204db45f06fb5692ffe1ed1b7af0389fb01e6162f4d0b9426e0a4b94984104fdcf0220186df4e921a69196fb2107541744ef63414e12ec4a3b0df77aea514ba4bec0ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008625a7d77af00efe9b6ec87fef26c476965808a4252bfe94a822378dd3a491ed2e90ee51d5298396e1cdcb92209dc28c9f25b62c127005ebea5a1984a3353ba5278aefbbbd45fa4a494ea058e8795b58df96a3c482a96ef2088ea492e971704a6e5113147379992fa162d1228a6c075e7a67bcbb9e43451bfe936b1dc6010e554e05819973e4ec9d608f3c6b046c5807bb8b7e986a34ea64e463902a3f90903d2606b6bd1733d2410d72bdd091b3727640a9855dfdcba55b335e9a06b02dbe5747ff597c3402a07c4a01f7f6c713ed35390a089dc94709dda45108c0dbfb2513375d61b9e5c376cf3f09ecfe97ed1005040494136ece1b90899400ed93b7cc58