049633.tc-connect.elior.com
Issued by R3
About this certificate
This digital certificate with serial number 03:25:61:80:03:27:e0:1b:d3:81:58:32:3e:9b:ec:c6:d6:a4 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=049633.tc-connect.elior.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:25:61:80:03:27:e0:1b:d3:81:58:32:3e:9b:ec:c6:d6:a4Serial Number (int): 274056905164950977816638424581190038509220
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 90:29:12:ca:78:cf:48:4d:41:c9:19:47:b2:93:1b:cc:a7:f3:77:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): f3:8b:c2:92:02:18:e1:43:c0:67:88:ac:50:03:7e:ee:fd:96:3a:2e
Fingerprint (sha256): 13:6e:19:c5:95:14:d4:6e:64:1f:9f:94:2a:ef:ae:68:66:6b:c0:8b:81:65:12:67:17:99:c9:38:4b:5b:cf:33
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate 049633.tc-connect.elior.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 049633.tc-connect.elior.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
049633.tc-connect.elior.com
Other certificates including the domain name elior.com
(limited to 100 certificates)
*.dashboard-rec.elior.com
toptrack.elior.com
049633.tc-connect.elior.com
bonapp-api.elior.com
*.elior.com
mobilite.elior.com
*.elior.com
mkt.minasdepresentes.com.br
achats.elior.com
webmail.elior.com
webmail.elior.com
timechef-v2.elior.com
portailrestaurant-dev.elior.com
kanji.elior.com
005653.tc-connect.elior.com
webmail.elior.com
applis-elior.elior.com
roomservice.elior.com
060001.tc-connect.elior.com
imperva.com
049629.tc-connect.elior.com
webmail.elior.com
*.elior.com
dashboard-rec.elior.com
048839.tc-connect.elior.com
portailrestaurant-rec.elior.com
toptrack.elior.com
toptrack.elior.com
timechef-v1.elior.com
bonapp-facturation-api.elior.com
apptable.elior.com
servichezvous.elior.com
toptrack.elior.com
bonapp-facturation-api-rec.elior.com
monparcours.elior.com
servichezvous.elior.com
webmail.elior.com
*.elior.com
bonapp.elior.com
webmail.elior.com
monparcours.elior.com
kanji-auth.elior.com
recrut.elior.com
applis-elior.elior.com
timechef.elior.com
smartordering.elior.com
webmail.elior.com
*.elior.com
achats.elior.com
060892.tc-connect.elior.com
047463.tc-connect.elior.com
*.elior.com
chefsandgo.elior.com
roomservice-v1.elior.com
monparcours.elior.com
003368.tc-connect.elior.com
remotectrl.elior.com
*.elior.com
si-pro-tre.elior.com
toptrack.elior.com
049633.tc-connect.elior.com
bonapp-api.elior.com
*.elior.com
mobilite.elior.com
*.elior.com
mkt.minasdepresentes.com.br
achats.elior.com
webmail.elior.com
webmail.elior.com
timechef-v2.elior.com
portailrestaurant-dev.elior.com
kanji.elior.com
005653.tc-connect.elior.com
webmail.elior.com
applis-elior.elior.com
roomservice.elior.com
060001.tc-connect.elior.com
imperva.com
049629.tc-connect.elior.com
webmail.elior.com
*.elior.com
dashboard-rec.elior.com
048839.tc-connect.elior.com
portailrestaurant-rec.elior.com
toptrack.elior.com
toptrack.elior.com
timechef-v1.elior.com
bonapp-facturation-api.elior.com
apptable.elior.com
servichezvous.elior.com
toptrack.elior.com
bonapp-facturation-api-rec.elior.com
monparcours.elior.com
servichezvous.elior.com
webmail.elior.com
*.elior.com
bonapp.elior.com
webmail.elior.com
monparcours.elior.com
kanji-auth.elior.com
recrut.elior.com
applis-elior.elior.com
timechef.elior.com
smartordering.elior.com
webmail.elior.com
*.elior.com
achats.elior.com
060892.tc-connect.elior.com
047463.tc-connect.elior.com
*.elior.com
chefsandgo.elior.com
roomservice-v1.elior.com
monparcours.elior.com
003368.tc-connect.elior.com
remotectrl.elior.com
*.elior.com
si-pro-tre.elior.com
Certificate
The complete raw certificate details for 049633.tc-connect.elior.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGBTCCBO2gAwIBAgISAyVhgAMn4BvTgVgyPpvsxtakMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMTYyMjAzMjdaFw0yNDA2MTQyMjAzMjZaMCYxJDAiBgNVBAMT GzA0OTYzMy50Yy1jb25uZWN0LmVsaW9yLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD ggIPADCCAgoCggIBAMfRDkzlG/LIOtmXB726y2jJ/00UL0PCawSlGrwxjn2RGRtn 2TYFEzvGZ9xZlJ2r6j2mBAQkXHUERCJ/AAmQ0EM7dEUz0WpNTv8UaZ2QP1RhTrKV GRIspbJvp1ZrzrGPEAOxroRHGpjeVcU4Jha83674UayZ/KU1kxnXPFxTxuJX8I44 p8kGlzs6mDRmhuyh2H4BnET5F/+Y9FO5/jRE65hWgPBRcbeEh+y5Jl9U9J2ca1OH LnO07n9lGXd8aJXQaNqbUrsD35uUd0o/gp8CWC9V84XKD4Y/FsQnhzCh81b8XhQg aNbry6ydrs0UTEHAA5KUiLxJflduIimOAVOXoEGuZnXFBuGDKxmc6+7s4q8AzkaV EL9iJUVEQAbFkbQijTjeGIYS6CiICzlxxL70M+K0waFdWxjmhnc2rOIjbQSX2tc4 IcJ1DTtoRcSZ+BXABsXTA68z7LeqFqBmGmFTcrpwrL14p6EPhmKOvWveJPf6Cnct OwcrwSOZpzVPjRgqmgo2lXQ8uoy51QeJ1dKZjWNL6byacUzoqIDC2Y+jka/5JKYZ 1RMdX29cwtxOD++etY9nVvGweau4pBfQeyls0TQDiHK8kfLXYDsCWRUWu52umPRb LdXT+zchpZVP46LE7Zv4UMiOfnbwBmCPSvD4O8SB5p0+AzLoKWWfcFQesO9RAgMB AAGjggIfMIICGzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJApEsp4z0hNQckZR7KT G8yn83dVMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCYGA1UdEQQfMB2CGzA0OTYz My50Yy1jb25uZWN0LmVsaW9yLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYG CisGAQQB1nkCBAIEgfcEgfQA8gB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI WUZxH7WbAAABjkmBgNMAAAQDAEgwRgIhAKGz8iqM3+d9gizaeuL/ooeLKddYJZsk zgcBp6t187tXAiEA0hlcEiSFc0NpoA69kgn8x+ZH9s/CDnlJE+SReTwIp28AdwCi 4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAY5JgYDXAAAEAwBIMEYC IQDFEtDAHSUZf/rIovl1QZ7crcPO9kyexo4aVCDVrfpw5QIhANyj+OrC7tGEIs4i tNiS+e+FR8QlCKFjs5FdvDbsfVNFMA0GCSqGSIb3DQEBCwUAA4IBAQArhXdAqxlX tPn1nsP2aT0rIOWGgDp+tcRjXGVk0BpFFSe/z4PeU7W3NUUcNln7zOQNoRKcKhUj ayM6sPGWKHa+BzUO36+gmBFnYk2KTij/mTx0cLUoauJCBysp9btyFwTClw4IHjvd M8NHQR21SkNtSw9X9oGlbJXVeqQKufObyDw5z2eLXhzRcd0ZbYIF2t++A8w7IKMi QC2cFIZ0h9dxideOrpeLDOQwA0rtk3s76q/fqaPL1LrAvqfPUTEKdsxGeU9v4v6a rTgRdf/kfNNnNVtD9CRXq96nxw5ZrFpuLuVoxIyNMgMFn7qn5etIU2BcpDKc477p 5Ux0GpeMdEpt -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx9EOTOUb8sg62ZcHvbrL aMn/TRQvQ8JrBKUavDGOfZEZG2fZNgUTO8Zn3FmUnavqPaYEBCRcdQREIn8ACZDQ Qzt0RTPRak1O/xRpnZA/VGFOspUZEiylsm+nVmvOsY8QA7GuhEcamN5VxTgmFrzf rvhRrJn8pTWTGdc8XFPG4lfwjjinyQaXOzqYNGaG7KHYfgGcRPkX/5j0U7n+NETr mFaA8FFxt4SH7LkmX1T0nZxrU4cuc7Tuf2UZd3xoldBo2ptSuwPfm5R3Sj+CnwJY L1XzhcoPhj8WxCeHMKHzVvxeFCBo1uvLrJ2uzRRMQcADkpSIvEl+V24iKY4BU5eg Qa5mdcUG4YMrGZzr7uzirwDORpUQv2IlRURABsWRtCKNON4YhhLoKIgLOXHEvvQz 4rTBoV1bGOaGdzas4iNtBJfa1zghwnUNO2hFxJn4FcAGxdMDrzPst6oWoGYaYVNy unCsvXinoQ+GYo69a94k9/oKdy07ByvBI5mnNU+NGCqaCjaVdDy6jLnVB4nV0pmN Y0vpvJpxTOiogMLZj6ORr/kkphnVEx1fb1zC3E4P7561j2dW8bB5q7ikF9B7KWzR NAOIcryR8tdgOwJZFRa7na6Y9Fst1dP7NyGllU/josTtm/hQyI5+dvAGYI9K8Pg7 xIHmnT4DMugpZZ9wVB6w71ECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 274056905164950977816638424581190038509220 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 22:03:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-14 22:03:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '049633.tc-connect.elior.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815180706655127247810288850304378527528681352807758399996917894605452478073699166478199434043560762709553953088855287009940120238603871731846172260749062502730259269812102911027810478491841723530659891092964775213640986105611504145165348258614948694069138306362168251782412209366407231709920191723356337836900546898911074341234536785882410451170022096744173280136032555791938029647476597387776823826017509400699041747078571631069467541026990791180139017174915119992553387563013681060057004221914275605710047574194439748749658257061664599312253427063215865956403740093366391049008146405214303315188305439717360131814645696986836431186847372086727345767030062518187431875985535404404185946851267795875783811150827660083926583625828385359959011099937334004035499243135067702929772605860738686595809585158608092245869345948069547740826461535977194576970071859344343120700653929846247391819904453289382250744061583300102596964652421780010673249501562466266982294539631412754219124918303939522131051695538728494370427650385971164547945205887514966410445907122625694684894613558796218899693258486591106194273727987416665294583592501876903228250877213166346722829762505146286565058970122780717626551892245296640485535612828436062718865239889 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 902912ca78cf484d41c91947b2931bcca7f37755 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '049633.tc-connect.elior.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e498180d30000040300483046022100a1b3f22a8cdfe77d822cda7ae2ffa2878b29d758259b24ce0701a7ab75f3bb57022100d2195c122485734369a00ebd9209fcc7e647f6cfc20e794913e491793c08a76f007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e498180d70000040300483046022100c512d0c01d25197ffac8a2f975419edcadc3cef64c9ec68e1a5420d5adfa70e5022100dca3f8eac2eed18422ce22b4d892f9ef8547c42508a163b3915dbc36ec7d5345 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 002b857740ab1957b4f9f59ec3f6693d2b20e586803a7eb5c4635c6564d01a451527bfcf83de53b5b735451c3659fbcce40da1129c2a15236b233ab0f1962876be07350edfafa0981167624d8a4e28ff993c7470b5286ae242072b29f5bb721704c2970e081e3bdd33c347411db54a436d4b0f57f681a56c95d57aa40ab9f39bc83c39cf678b5e1cd171dd196d8205dadfbe03cc3b20a322402d9c14867487d77189d78eae978b0ce430034aed937b3beaafdfa9a3cbd4bac0bea7cf51310a76cc46794f6fe2fe9aad381175ffe47cd367355b43f42457abdea7c70e59ac5a6e2ee568c48c8d3203059fbaa7e5eb4853605ca4329ce3bee9e54c741a978c744a6d