fayette.ca.uky.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:b5:a1:eb:f1:8e:64:f8:a0:05:50:90:bf:47:eb:29:e1:23 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fayette.ca.uky.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b5:a1:eb:f1:8e:64:f8:a0:05:50:90:bf:47:eb:29:e1:23
Serial Number (int): 410255482936156338240736802932848874610979
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d1:22:72:f2:0a:d5:27:81:40:71:e6:cc:03:d7:cf:c3:df:0f:fc:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8f:7b:a7:f5:89:96:48:a9:0d:68:e1:80:69:e9:fb:5a:85:cb:6b:61
Fingerprint (sha256): 03:b6:10:4e:8b:1c:ab:0d:47:b8:71:c5:08:f1:48:6e:ee:53:b0:c7:ed:c4:81:6b:3b:e3:99:f4:50:d0:ce:b9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fayette.ca.uky.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fayette.ca.uky.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

central12.fayette.prod-web.ca.uky.edu
fayette.ca.uky.edu

Other certificates including the domain name uky.edu

(limited to 100 certificates)
lsv.uky.edu
remote.ca.uky.edu
www.hosp.uky.edu
download.uky.edu
imaps.netlab.uky.edu
5636470266134528-fe2.pantheonsite.io
bbtools.ad.uky.edu
landing.socialworkonline.uky.edu
5700866052980736-fe2.pantheonsite.io
5636470266134528-fe2.pantheonsite.io
scdp.uky.edu
adfs.uky.edu
alumniweb.uky.edu
ukam.uky.edu
lyncpool.ad.uky.edu
cpr.as.uky.edu
kers.ca.uky.edu
uconnectlabs.com
plyits2016svr01.mc.uky.edu
rhelp.ad.uky.edu
5636470266134528-fe2.pantheonsite.io
www.bae.uky.edu
pks2-cas2.net.uky.edu
5649684605435904-fe1.pantheonsite.io
securedns.planmygift.org
timeoffcalendar.uky.edu
ukhcsftpt.mc.uky.edu
tableaupublic.uky.edu
ww-a12.as.uky.edu
uk-pa7080-edge1-pri-mgmt.net.uky.edu
www.etrax.uky.edu
drive.uky.edu
prdukheiixdsrp04.mc.uky.edu
ctrp-dev.uky.edu
spencer.ca.uky.edu
exploreuk.uky.edu
www.hcii.cs.cmu.edu
sfbextweb.uky.edu
ibi-test.uky.edu
ukam.uky.edu
grackle.ecc.engr.uky.edu
its.net.uky.edu
horm.as.uky.edu
*.coe.uky.edu
tstukheiixdsrp02.mc.uky.edu
icmac.rch.uky.edu
mfp.uky.edu
5636470266134528-fe2.pantheonsite.io
pa7080-primary-mgmt.net.uky.edu
5700866052980736-fe2.pantheonsite.io
boonecenter.uky.edu
ra.uky.edu
5700866052980736-fe2.pantheonsite.io
prdltchvc01.mc.uky.edu
www2.ca.uky.edu
plannedgiving.zaytuna.edu
support.ccs.uky.edu
clarity.mc.uky.edu
castle.uky.edu
warehouse.ca.uky.edu
labrea.ecc.engr.uky.edu
fayette.ca.uky.edu
securedns.planmygift.org
*.law.uky.edu
ibi.uky.edu
uconnectlabs.com
sims.uky.edu
ukhcvendorreg.mc.uky.edu
5636470266134528-fe2.pantheonsite.io
athena.uky.edu
ehrci.mc.uky.edu
uconnectlabs.com
prdsprspctu01.mc.uky.edu
plyits2016svr01.mc.uky.edu
boonecenter.uky.edu
comm.uky.edu
*.mc.uky.edu
beckdt.engr.uky.edu
remote.ca.uky.edu
5636470266134528-fe2.pantheonsite.io
libraries.uky.edu
landing.socialworkonline.uky.edu
myukmpx.uky.edu
5700866052980736-fe2.pantheonsite.io
devedwcognapp01.mc.uky.edu
sudepresearch.uky.edu
i2b2ccts.uky.edu
finearts.uky.edu
sweb.uky.edu
prdcteweb01.mc.uky.edu
www.lgcr.com
www.nai.arizona.edu
prdltchvcpsc01.mc.uky.edu
pimser.coe.uky.edu
5636470266134528-fe2.pantheonsite.io
ukitspks2cmx01.net.uky.edu
scriptprorefills.mc.uky.edu
ukhr.uky.edu
5722903798611968-fe3.pantheonsite.io
ehs.uky.edu

Certificate

The complete raw certificate details for fayette.ca.uky.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgISBLWh6/GOZPigBVCQv0frKeEjMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA1MzAyMDM4MTBaFw0yMzA4MjgyMDM4MDlaMB0xGzAZBgNVBAMT
EmZheWV0dGUuY2EudWt5LmVkdTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBALf1Jh1qCxehVlEKGmU/krfqbZXIbKl1W6zyzxKBMjRT0Ell1Q6nx7llszMr
fL5krrs58fw3oV7U2J/9mCHElxCZIbbFHxdN18qzXcCUcrKcQKD0hxwmHxyUwCU/
d01rbcoLxEbaMnhqnlZVveHpVN1XGtHGGY4nO5fB2Axh0nZnHXkOg60Ej0QI3vrv
tWYIUbDN0zMzhJI2Ir9cD/25ERMcTxJlQUvdi8o9kjHGcjrRraz6j3EfUI1wOGHv
9YFnn/DcdVZfCq0U9k8xKvR2LSCDuOPJL14JWgzUJLu2kMsC64jlkbvl/o5wm3ub
6nmNc9QabXXX1Sd/+y3tS0RwUUkOT1PJc2ix2/CK//osPljxB2KMQJ8LQycpdfwb
83s3v1d5rzBYStd5siiIu8U8OQPnZkks6GPbBeAVIbjFZfe+aPqybHmWMhgKXfSh
qoTOkVlhfTxWuqMrpMEF+0e1CCXK5gLAGvW5fyLC4SiMDGBovdMoY0gX6M23iidD
blnAAVR2ynYOGY4WFyFWY3uxagFYBez78r9QVl7QLzQ4jTar5Bn9xeH8VgyTBfAv
81fosfr8IzrPxJf80FQ7kz8FV1uHY8fBD47K8FKLEORZGD5t9Y0iF4JyGqTxoFga
n4ZwIWhiR6Gzr3GHqUOIco4hOLLjw4hxfiF/aydTzKkwdpsrAgMBAAGjggJ0MIIC
cDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNEicvIK1SeBQHHmzAPXz8PfD/znMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMEQGA1UdEQQ9MDuCJWNlbnRyYWwxMi5mYXll
dHRlLnByb2Qtd2ViLmNhLnVreS5lZHWCEmZheWV0dGUuY2EudWt5LmVkdTBMBgNV
HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo
dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA
8AB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABiG6Y2X8AAAQD
AEcwRQIgNIiEWsNKBvLUWNzKMcGfHJ6Dksi804wf+w9WRajCIq0CIQChDOZR7K5p
cG5ck4zuo9m6jL8gPIFUz7qZKhpuqdNPLQB2AOg+0No+9QY1MudXKLyJa8kD08vR
EWvs62nhd31tBr1uAAABiG6Y2fAAAAQDAEcwRQIgQJBZRfPYJk4EBhJUxJNij7XI
ksiINdiZbrAWgA9rqrICIQD9h6EmMdyE0LW2GvuaBxe+TgfKgpxMH8pDAre6HbW6
2DANBgkqhkiG9w0BAQsFAAOCAQEAkYkXxkYz2c4swuAakSvguj4MCa1Kv0qWknVs
OK/y9jHQ86qPL8ufK58UyEbja652UDs7D9plWXeOhBxI/kwFf6dJMcH0m74aafw2
iJaL5AMKlb4i1Aat7j+8u0DaEs8ilpmSYbeTOgXHIAcYCTJh4MdkQh5kWMhpz34w
GFdS1zx2cPkCOVaYs6tz6fnLaq6nhV9oo2E84G7UZs33KexeDdWHBdPhzQ1XBy3C
24lqZUz/IcwXY5/ymSo0CpdGy5P6E2FCZgZ5ZHFb0U7GFfqAcbvl1+BPz4Irsqeg
2DLFA2L1EtEoNbL2TankBINA13Vm+nHBqPSVEu7k1XYnnimc6w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410255482936156338240736802932848874610979
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 20:38:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 20:38:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fayette.ca.uky.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750481583978463714746222946897961523171503960269450509891800520118741522153693340876586769835128503371510981514835003593951368936789905797171400733309827769039702915609515363365253219927905763660220946076959203414554042438498893775521977140999148889412452774841415183287484412680011996334995770982596452397128757459327815144078168987246336392011517859294648324782104891900923690807531600487037472952035105485160469293457219959430508351567571972839588710589233748754253535538702116411107588783587733443067401822847405092259478878805127647398171939095088021713611091041493506666481229385354254201151806942383886074646759005735602403442310673201991849774051342751551822338283680416671109783374318409296616703569283909594984349691073095268939107507713658240274838938925142313546664370314588015279018203865809323217720882671593430269205357450130627968195236266869783109945905630110295716276252619449251707840445050318751427256331716306019609923652406843172739806923066914923733328230438200319243168153319017992073589867646650480706225845637315232695347059498148046035432208345694107839258011745052454030822045801232481107176649155956994431474474579912744930080005837825682421897703273796188144047912093112513809064261916347629974066731819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d12272f20ad527814071e6cc03d7cfc3df0ffce7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central12.fayette.prod-web.ca.uky.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fayette.ca.uky.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001886e98d97f000004030047304502203488845ac34a06f2d458dcca31c19f1c9e8392c8bcd38c1ffb0f5645a8c222ad022100a10ce651ecae69706e5c938ceea3d9ba8cbf203c8154cfba992a1a6ea9d34f2d007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001886e98d9f00000040300473045022040905945f3d8264e04061254c493628fb5c892c88835d8996eb016800f6baab2022100fd87a12631dc84d0b5b61afb9a0717be4e07ca829c4c1fca4302b7ba1db5bad8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00918917c64633d9ce2cc2e01a912be0ba3e0c09ad4abf4a9692756c38aff2f631d0f3aa8f2fcb9f2b9f14c846e36bae76503b3b0fda6559778e841c48fe4c057fa74931c1f49bbe1a69fc3688968be4030a95be22d406adee3fbcbb40da12cf2296999261b7933a05c7200718093261e0c764421e6458c869cf7e30185752d73c7670f902395698b3ab73e9f9cb6aaea7855f68a3613ce06ed466cdf729ec5e0dd58705d3e1cd0d57072dc2db896a654cff21cc17639ff2992a340a9746cb93fa13614266067964715bd14ec615fa8071bbe5d7e04fcf822bb2a7a0d832c50362f512d12835b2f64da9e4048340d77566fa71c1a8f49512eee4d576279e299ceb