prealpha.zkevm.consensys.net

Issued by R3

About this certificate

This digital certificate with serial number 03:f0:d4:84:e6:a4:e8:26:a6:99:de:42:8e:43:e4:5a:7f:12 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prealpha.zkevm.consensys.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:d4:84:e6:a4:e8:26:a6:99:de:42:8e:43:e4:5a:7f:12
Serial Number (int): 343287112252617174673818627217864833793810
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:a3:37:28:35:46:3c:2a:2a:f9:1a:d0:60:5f:26:47:7e:9a:a9:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d4:7b:23:f8:4d:e4:a8:4b:79:6d:97:d6:60:e1:93:99:b5:46:3a:b5
Fingerprint (sha256): 0c:76:61:9a:39:f9:bb:55:8b:0b:a2:d3:ac:5b:d2:ad:65:ad:e6:8c:7a:41:26:3a:9f:fc:02:44:63:bf:2b:03

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prealpha.zkevm.consensys.net

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prealpha.zkevm.consensys.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.goerli.linea.build
*.goerli.zkevm.consensys.net
*.prealpha.zkevm.consensys.net
goerli.linea.build
goerli.zkevm.consensys.net
prealpha.zkevm.consensys.net

Other certificates including the domain name consensys.net

(limited to 100 certificates)
consensys.net
o11y.cd.web3factory.consensys.net
content-mythx.consensys.net
cd.web3factory.consensys.net
consensys.net
pushgateway-o11y-dev.o11y.web3factory.consensys.net
5640082467848192-fe3.pantheonsite.io
thebrooklynproject.consensys.net
sports.consensys.net
artifacts.consensys.net
docs.orion.consensys.net
grants.consensys.net
ethon.consensys.net
supplychain.consensys.net
consensys.net
docs.eth2signer.consensys.net
*.orchestrate.ops.consensys.net
scim.consensys.net
calendar.consensys.net
report.soc.consensys.net
develop.supplychain.consensys.net
pushgateway-o11y-dev.o11y.web3factory.consensys.net
docs.ethsigner.consensys.net
*.bvp.consensys.net
staging.consensys.net
5754903989321728-fe2.pantheonsite.io
doc.gnark.consensys.net
docs.web3signer.consensys.net
module.library.consensys.net
quorum-staging.consensys.net
admin-eu-dev.villagedao.web3factory.consensys.net
content-staging.consensys.net
pages.consensys.net
expert-test-eu-dev.villagedao.web3factory.consensys.net
pages.consensys.net
explorer-dapps-dev.linea.web3factory.consensys.net
soc.consensys.net
consensys.net
consensys.net
app-us-demo.web3factory.web3factory.consensys.net
forum.academy.consensys.net
sni.cloudflaressl.com
zkevm.consensys.net
thebrooklynproject.consensys.net
swag.consensys.net
doc.orion.consensys.net
test-us-demo.web3factory.web3factory.consensys.net
dev.observability.consensys.net
o11y-pushgateway-dev.o11y.web3factory.consensys.net
hello-world.web3factory.consensys.net
mmsap.cd.web3factory.consensys.net
discourse.courses.consensys.net
ethereum.consensys.net
webapp-main-dev.mmsap.web3factory.consensys.net
5697982787747840-fe2.pantheonsite.io
scim.consensys.net
web3factory.web3factory.consensys.net
admin-eu-dev.villagedao.web3factory.consensys.net
ethsigner.consensys.net
trufflesuite-staging.consensys.net
*.rollup.consensys.net
learn.consensys.net
goquorum.consensys.net
diligence.consensys.net
5697982787747840-fe2.pantheonsite.io
soc.consensys.net
consensys.net
ethense.stage.consensys.net
api-eu-dev.backstage.web3factory.consensys.net
calendar.consensys.net
ns2.monday.vc
canada.consensys.net
argocd.prealpha.zkevm.consensys.net
swag.consensys.net
thebrooklynproject.consensys.net
docs.metamask-onramp.consensys.net
develop.supplychain.consensys.net
ethense.stage.consensys.net
operator-1-l2-sandbox-1.rollup.consensys.net
consumer-ui-eu-dev.villagedao.web3factory.consensys.net
staging-eu-dev.metamedic.web3factory.consensys.net
5640082467848192-fe3.pantheonsite.io
prealpha.zkevm.consensys.net
learn.consensys.net
consensys.net
static.app-us-demo.hello-world-dev.web3factory.consensys.net
5678807906254848-fe3.pantheonsite.io
docs.ethsigner.consensys.net
codefi.consensys.net
community.consensys.net
artifacts.consensys.net
careers.labs.consensys.net
operator-1-l1-sandbox-1.rollup.consensys.net
www.grants.consensys.net
grants.consensys.net
palm.cd.web3factory.consensys.net
5654831519760384-fe2.pantheonsite.io
consensys.net
metabase-eu-dev.villagedao.web3factory.consensys.net
thebrooklynproject.consensys.net

Certificate

The complete raw certificate details for prealpha.zkevm.consensys.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgISA/DUhOak6Cammd5CjkPkWn8SMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MDkxMTE2MTRaFw0yMzEyMDgxMTE2MTNaMCcxJTAjBgNVBAMT
HHByZWFscGhhLnprZXZtLmNvbnNlbnN5cy5uZXQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDdcD6ZYeD4A4BM19N6uLIqxvDTpKtWZyigrlAS2EbetQL0
B511zmg8r9Gqjm+jfyVS6RNzp0SlFgMMwSP8068fdkoG0MSuIwm0S2BqKqp3B7C+
3b6o3jFAireE711j709RXvjbrrUy6gRwPlFUWT+XELkk5QVmqYK4DyvPH4FOkEq2
+P7MUJtSjJ1zlVHZycQQTp3SE3ebms0Ewfg3RPERhn5FFGJqlxlT3yg7UeCNyfPu
ifCR5m62FHMK70u/EDSr7QNASM3zo8AU/uaGQoVt0ao1JY2VhxbI5A5yaAIpvnTF
sZPeliidqpWVbMNQbLNMuo9gM/OLhHHLpMMY3YD7AgMBAAGjggKkMIICoDAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFOWjNyg1RjwqKvka0GBfJkd+mqkKMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIGtBgNVHREEgaUwgaKCFCouZ29lcmxpLmxpbmVhLmJ1
aWxkghwqLmdvZXJsaS56a2V2bS5jb25zZW5zeXMubmV0gh4qLnByZWFscGhhLnpr
ZXZtLmNvbnNlbnN5cy5uZXSCEmdvZXJsaS5saW5lYS5idWlsZIIaZ29lcmxpLnpr
ZXZtLmNvbnNlbnN5cy5uZXSCHHByZWFscGhhLnprZXZtLmNvbnNlbnN5cy5uZXQw
EwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgB6
MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYp53wqeAAAEAwBHMEUC
IQDay4j2nCqCsDJNiB8xR2+0rJNSJZgufjpiRiaOiCmfEgIgB64Y0OsaWJGCjijp
ogLaaOusnHw05Tny/OpzSyasflEAdQDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp
4Xd9bQa9bgAAAYp53wtCAAAEAwBGMEQCIFq4+Jk3A92W/tyBSzIsH7InDX30CITi
Hfv0h4s5vQ9TAiB2WglFJEIxwy7YjETfJ5gNKjcJlFICUP0eWNab2c0RVjANBgkq
hkiG9w0BAQsFAAOCAQEAR9fU8unG2oA0H4G95dOPFfR2aQ5GnVZN2N8N8VA+vLlL
o+n3erA6VuyvmvOSKKg+dTJbQfIDIzfKBGt5HVv/bBuyG4Ohn8Df3w7oX90abr4I
CPGfPdZXnWPGMheJ1NQozSuhuZPt5MsctNAwN7FudDoEnNW/Q1r7zqA/SwKVSWoI
fuK+pEkB4+lOsNaol4SKNNnRJriTgTkWKlRRCPzXKwdrhbFSspJgaSsjdy4HH48X
4694Jx0YZE97n8KjuDSQdQDyQS1C2LJOLm8gIhV1BRDI03F4oi2sF90z+7yh/ff/
BZr88lAZIV1ycGl0rQiDcAcn7mD0Q/0sdSGLB0/88Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XA+mWHg+AOATNfTeriy
Ksbw06SrVmcooK5QEthG3rUC9Aeddc5oPK/Rqo5vo38lUukTc6dEpRYDDMEj/NOv
H3ZKBtDEriMJtEtgaiqqdwewvt2+qN4xQIq3hO9dY+9PUV742661MuoEcD5RVFk/
lxC5JOUFZqmCuA8rzx+BTpBKtvj+zFCbUoydc5VR2cnEEE6d0hN3m5rNBMH4N0Tx
EYZ+RRRiapcZU98oO1Hgjcnz7onwkeZuthRzCu9LvxA0q+0DQEjN86PAFP7mhkKF
bdGqNSWNlYcWyOQOcmgCKb50xbGT3pYonaqVlWzDUGyzTLqPYDPzi4Rxy6TDGN2A
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343287112252617174673818627217864833793810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-09 11:16:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 11:16:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prealpha.zkevm.consensys.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27954015237137399573341769170757290292365721778039764492937984187368434831775891629097318622543643720526688827866998314298711529156150350742609686540487072487374542600024584310664987164340457678026630050571945248758540093321537100770299212369692767106866952428599067578537119137314010158142146357857798869473963008079377323976430443571003166342904516877049739405387409855482935199201253404869229019271374490440726051166483749281050130307969200133513571981988004928571560629493075262416319435325844216031277675293088823184097983946356500859894249838033908578389971661604065431796421342663575381298386197607245227589883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5a3372835463c2a2af91ad0605f26477e9aa90a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goerli.linea.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goerli.zkevm.consensys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prealpha.zkevm.consensys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goerli.linea.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goerli.zkevm.consensys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prealpha.zkevm.consensys.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a79df0a9e0000040300473045022100dacb88f69c2a82b0324d881f31476fb4ac935225982e7e3a6246268e88299f12022007ae18d0eb1a5891828e28e9a202da68ebac9c7c34e539f2fcea734b26ac7e51007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a79df0b42000004030046304402205ab8f8993703dd96fedc814b322c1fb2270d7df40884e21dfbf4878b39bd0f530220765a0945244231c32ed88c44df27980d2a370994520250fd1e58d69bd9cd1156
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0047d7d4f2e9c6da80341f81bde5d38f15f476690e469d564dd8df0df1503ebcb94ba3e9f77ab03a56ecaf9af39228a83e75325b41f2032337ca046b791d5bff6c1bb21b83a19fc0dfdf0ee85fdd1a6ebe0808f19f3dd6579d63c6321789d4d428cd2ba1b993ede4cb1cb4d03037b16e743a049cd5bf435afbcea03f4b0295496a087ee2bea44901e3e94eb0d6a897848a34d9d126b8938139162a545108fcd72b076b85b152b29260692b23772e071f8f17e3af78271d18644f7b9fc2a3b834907500f2412d42d8b24e2e6f202215750510c8d37178a22dac17dd33fbbca1fdf7ff059afcf25019215d72706974ad0883700727ee60f443fd2c75218b074ffcf1