ask.warwickshire.gov.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:b0:60:9c:e3:34:32:08:35:df:aa:26:3d:6e:79:3e:33:e1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ask.warwickshire.gov.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:60:9c:e3:34:32:08:35:df:aa:26:3d:6e:79:3e:33:e1
Serial Number (int): 321354974867513521522314309687272105980897
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:f1:55:a7:55:3a:57:b7:19:af:35:ba:48:9d:5b:89:8d:cd:2e:4a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 20:f2:fb:15:e2:2f:d6:ec:e6:d8:c6:3c:47:30:3b:8b:d4:41:80:6b
Fingerprint (sha256): 10:3b:2c:10:cd:ce:d1:07:26:b2:6a:c2:b7:2f:85:87:eb:51:69:d8:67:d7:d5:f4:ab:c5:47:55:2f:4e:6c:15

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ask.warwickshire.gov.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ask.warwickshire.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ask.warwickshire.gov.uk

Other certificates including the domain name warwickshire.gov.uk

(limited to 100 certificates)
planning.warwickshire.gov.uk
maps.warwickshire.gov.uk
ask.warwickshire.gov.uk
quit4good.warwickshire.gov.uk
rowreporting.warwickshire.gov.uk
i.warwickshire.gov.uk
planning.warwickshire.gov.uk
directory.warwickshire.gov.uk
ucc.warwickshire.gov.uk
sni.cloudflaressl.com
ask.warwickshire.gov.uk
uat.warwickshire.gov.uk
ask.warwickshire.gov.uk
admissions.warwickshire.gov.uk
lms.warwickshire.gov.uk
apps.warwickshire.gov.uk
customer.warwickshire.gov.uk
sls.warwickshire.gov.uk
ask.warwickshire.gov.uk
ask.warwickshire.gov.uk
timetrail.warwickshire.gov.uk
cbsdc101.warwickshire.gov.uk
ipeople.warwickshire.gov.uk
meeting.warwickshire.gov.uk
timetrail.warwickshire.gov.uk
uat.warwickshire.gov.uk
api-test.warwickshire.gov.uk
mplus.warwickshire.gov.uk
discuss.warwickshire.gov.uk
careraware.warwickshire.gov.uk
i.warwickshire.gov.uk
vpn.warwickshire.gov.uk
guestwifi.warwickshire.gov.uk
news.warwickshire.gov.uk
timetrail.warwickshire.gov.uk
democratic.warwickshire.gov.uk
directory.warwickshire.gov.uk
www.warwickshire.gov.uk
onething.warwickshire.gov.uk
ask.warwickshire.gov.uk
admissions.warwickshire.gov.uk
limtest.warwickshire.gov.uk
dementia.warwickshire.gov.uk
www.warwickshire.gov.uk
forms.warwickshire.gov.uk
onething.warwickshire.gov.uk
timetrail.warwickshire.gov.uk
mplus.warwickshire.gov.uk
static.warwickshire.gov.uk
ask.warwickshire.gov.uk
onething.warwickshire.gov.uk
wcfp.warwickshire.gov.uk
mplus.warwickshire.gov.uk
tww.warwickshire.gov.uk
timetrail.warwickshire.gov.uk
tls.automattic.com
maps.warwickshire.gov.uk
api.warwickshire.gov.uk
timetrail.warwickshire.gov.uk
atlasweb.warwickshire.gov.uk
dementia.warwickshire.gov.uk
quit4good.warwickshire.gov.uk
testeis.warwickshire.gov.uk
tmatest.warwickshire.gov.uk
tls.automattic.com
roadsafetycourse.warwickshire.gov.uk
warwickshire.gov.uk
connect.warwickshire.gov.uk
learningcatalogue.warwickshire.gov.uk
lms.warwickshire.gov.uk
news.warwickshire.gov.uk
tls.automattic.com
api.warwickshire.gov.uk
customer.warwickshire.gov.uk
admissions.warwickshire.gov.uk
business.warwickshire.gov.uk
democratic.warwickshire.gov.uk
tls.automattic.com
notice-attachments.warwickshire.gov.uk
dementia.warwickshire.gov.uk
wccag.warwickshire.gov.uk
roadsafetycourse.warwickshire.gov.uk
sni.cloudflaressl.com
library3.warwickshire.gov.uk
admissions.warwickshire.gov.uk
ask.warwickshire.gov.uk
sni.cloudflaressl.com
intranet.warwickshire.gov.uk
library.warwickshire.gov.uk
w4w.warwickshire.gov.uk
ask.warwickshire.gov.uk
sls.warwickshire.gov.uk
quit4good.warwickshire.gov.uk
rgt.warwickshire.gov.uk
registrations.warwickshire.gov.uk
sls.warwickshire.gov.uk
snaponline.warwickshire.gov.uk
apps.warwickshire.gov.uk
directory.warwickshire.gov.uk
rowreporting.warwickshire.gov.uk

Certificate

The complete raw certificate details for ask.warwickshire.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISA7BgnOM0Mgg136omPW55PjPhMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAyMDIwMTEwMTNaFw0yMjA1MDMwMTEwMTJaMCIxIDAeBgNVBAMT
F2Fzay53YXJ3aWNrc2hpcmUuZ292LnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1/qS1YkSRie47TnFuYqu1S08LLRH11IfaWM8r1m69Jx4iXT92MeL
fw9/kZ8STQuI7be1eJyulmzc9W9bhHHjR1RjVLrai2VP4erlfNMn92wXl/J+H8Es
EaMuk8OBVMMNoBSwhSqCVV/qsR9xHXC0IDNJF67L6KWfyRnf7qBgecViWCp54eAy
pxY1na8wV06m+T3QNANNM8fM/HjFgSsrFhAmn1ntS+e0plxjGjre90lTxOrdyLLm
uIYSgprbHtmP/pmkp0o86wUJD6BaAEAEE/1tPozAT8o9LCHO3M9vnzZUO/lh5pni
K9uS4Y5AZXRyrTw9ZIyvJ+41tCHHpNudwQIDAQABo4ICVDCCAlAwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBRI8VWnVTpXtxmvNbpInVuJjc0uSjAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzAiBgNVHREEGzAZghdhc2sud2Fyd2lja3NoaXJlLmdvdi51azBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQYGCisGAQQB1nkCBAIEgfcE
gfQA8gB3ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceEAAABfrgyVuYA
AAQDAEgwRgIhALzDXYYZPMWctHQtQzeobm2cpHIkAs9gCoT8SceTvZdpAiEA7l4O
qjzb5swEtPa51coMcO8DjRAze+6dIHEeFbeFpA4AdwDfpV6raIJPH2yt7rhfTj5a
6s2iEqRqXo47EsAgRFwqcwAAAX64MljmAAAEAwBIMEYCIQCo8sa74ZRKKV5G6FES
G8tfYzbRlYXtVEhKZ4R5+6mz1gIhALfcyCgRfWKwD/pabmOEpUzPV1NtICc5Nptz
oAMnLlYXMA0GCSqGSIb3DQEBCwUAA4IBAQCIvdN7r0ZY7PCCopCB71ygmiJ+WVCu
+S6lYeidYxE27/Q+m0y5rFGyj5z8Wjg3LQwmhEZACaW5Ntim6ExFx3h3sYGc1V17
0pwGfHsM/Iwh8v8hFpX++A7J3NYr2kTTfZpE+fB2/aExKigAui9Lou3zVlF3ZnT1
xf7irddjq56JyCjnQpcCkhSt6N/GdggAODLtYa06bsQWLcKleuzjxhpqYoLmufCs
ntyXt0efT9oJcL/Jld5zJ0dc93cecii4Tl0gI345HVqeQaRO0JcEztqsx+ABoW8H
sHE9s2LSz8uCk2HhSZ/1a0PJ1h1EtwYPAoKiUeZOBBkRd7UWhsMYaY+O
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/qS1YkSRie47TnFuYqu
1S08LLRH11IfaWM8r1m69Jx4iXT92MeLfw9/kZ8STQuI7be1eJyulmzc9W9bhHHj
R1RjVLrai2VP4erlfNMn92wXl/J+H8EsEaMuk8OBVMMNoBSwhSqCVV/qsR9xHXC0
IDNJF67L6KWfyRnf7qBgecViWCp54eAypxY1na8wV06m+T3QNANNM8fM/HjFgSsr
FhAmn1ntS+e0plxjGjre90lTxOrdyLLmuIYSgprbHtmP/pmkp0o86wUJD6BaAEAE
E/1tPozAT8o9LCHO3M9vnzZUO/lh5pniK9uS4Y5AZXRyrTw9ZIyvJ+41tCHHpNud
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321354974867513521522314309687272105980897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-02 01:10:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-03 01:10:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ask.warwickshire.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27264798000695162970209194372533796758894333185133366028982585673648632904940150791125765995636115656108832624512889006306765123225496347764750790887035269038698834628175002660154373448328537963797222556159295508951562144717156831564698836380069404395677473934847424579626741132870755039469000132812244987996944038073119061037520231268800477705920364149334140098044818683585370281315021927987036798270988171299093258189072797060716828817135201277535171610127304096120209477384433528494448084696769414748458242866402700721269604712583437852533561537353036287261022050543751057419424839381560751515951420954176642588097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48f155a7553a57b719af35ba489d5b898dcd2e4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.warwickshire.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017eb83256e60000040300483046022100bcc35d86193cc59cb4742d4337a86e6d9ca4722402cf600a84fc49c793bd9769022100ee5e0eaa3cdbe6cc04b4f6b9d5ca0c70ef038d10337bee9d20711e15b785a40e007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017eb83258e60000040300483046022100a8f2c6bbe1944a295e46e851121bcb5f6336d19585ed54484a678479fba9b3d6022100b7dcc828117d62b00ffa5a6e6384a54ccf57536d202739369b73a003272e5617
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0088bdd37baf4658ecf082a29081ef5ca09a227e5950aef92ea561e89d631136eff43e9b4cb9ac51b28f9cfc5a38372d0c2684464009a5b936d8a6e84c45c77877b1819cd55d7bd29c067c7b0cfc8c21f2ff211695fef80ec9dcd62bda44d37d9a44f9f076fda1312a2800ba2f4ba2edf35651776674f5c5fee2add763ab9e89c828e74297029214ade8dfc67608003832ed61ad3a6ec4162dc2a57aece3c61a6a6282e6b9f0ac9edc97b7479f4fda0970bfc995de7327475cf7771e7228b84e5d20237e391d5a9e41a44ed09704cedaacc7e001a16f07b0713db362d2cfcb829361e1499ff56b43c9d61d44b7060f0282a251e64e04191177b51686c318698f8e