www.checkout.jaffari.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:45:23:98:d9:db:9a:a2:00:7f:89:91:0b:fd:0f:9b:0a:09 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.checkout.jaffari.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:23:98:d9:db:9a:a2:00:7f:89:91:0b:fd:0f:9b:0a:09
Serial Number (int): 284863657740482171391080002157788868053513
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9e:73:15:0d:cc:b3:fb:67:28:b5:05:ee:08:ba:6c:f9:4d:67:9e:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 67:86:58:40:59:eb:9f:ab:f3:0c:da:c2:30:b8:99:3b:21:9a:de:4b
Fingerprint (sha256): 14:09:1a:08:94:65:64:de:f4:91:c3:28:b1:66:ce:9a:7e:c8:18:7f:51:e3:de:6f:33:02:b9:84:01:62:d9:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.checkout.jaffari.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.checkout.jaffari.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

checkout.jaffari.org
www.checkout.jaffari.org

Other certificates including the domain name jaffari.org

(limited to 100 certificates)
ssl391609.cloudflaressl.com
jtb.jaffari.org
ssl391609.cloudflaressl.com
ssl391610.cloudflaressl.com
jaffari.org
receipts.jaffari.org
lbd.jaffari.org
ssl391610.cloudflaressl.com
ssl391608.cloudflaressl.com
ssl391610.cloudflaressl.com
jaffari.org
ssl391609.cloudflaressl.com
sni.cloudflaressl.com
primemx.lernit.app
ssl391608.cloudflaressl.com
portal.jaffari.org
www.checkout.jaffari.org
jtc.jaffari.org
www.checkout.jaffari.org
jaffari.org
ssl391608.cloudflaressl.com
jaffari.org
portal.jaffari.org
jaffari.org
jtb.jaffari.org
members.jaffari.org
ssl391610.cloudflaressl.com
jaffari.org
ssl391610.cloudflaressl.com
portal.jaffari.org
ssl391610.cloudflaressl.com
staging.jaffari.org
www.maintenance.jaffari.org
ssl391610.cloudflaressl.com
portal.jaffari.org
ssl391609.cloudflaressl.com
jaffari.org
ssl391608.cloudflaressl.com
ssl391609.cloudflaressl.com
ssl391610.cloudflaressl.com
ssl391610.cloudflaressl.com
jaffari.org
ssl391610.cloudflaressl.com
ssl391609.cloudflaressl.com
ssl391610.cloudflaressl.com
jaffari.org
zoning.jaffari.org
ssl391609.cloudflaressl.com
sni.cloudflaressl.com
jtb.jaffari.org
ssl391610.cloudflaressl.com
ssl391610.cloudflaressl.com
portal.jaffari.org
ssl391610.cloudflaressl.com
drivers.jaffari.org
jaffari.org
jtb.jaffari.org
ssl391608.cloudflaressl.com
jtb.jaffari.org
ssl391608.cloudflaressl.com
ssl391608.cloudflaressl.com
ssl391608.cloudflaressl.com
portal.jaffari.org
ssl391610.cloudflaressl.com
lbd.jaffari.org
ssl391608.cloudflaressl.com
ssl391609.cloudflaressl.com
ssl391610.cloudflaressl.com
ssl391610.cloudflaressl.com
ssl391610.cloudflaressl.com
ssl391609.cloudflaressl.com
ssl391610.cloudflaressl.com
ssl391610.cloudflaressl.com
ssl391609.cloudflaressl.com
ssl391610.cloudflaressl.com
portal.jaffari.org
jtb.jaffari.org
jtb.jaffari.org
ssl391610.cloudflaressl.com
duas.jaffari.org
jtb.jaffari.org
jaffari.org
ssl391608.cloudflaressl.com
www.maintenance.jaffari.org
jaffari.org
lbd.jaffari.org
ssl391610.cloudflaressl.com
checkout.jaffari.org
ssl391610.cloudflaressl.com
ssl391610.cloudflaressl.com
lbd.jaffari.org
www.jaffari.org
jtb.jaffari.org
ssl391608.cloudflaressl.com
ssl391609.cloudflaressl.com
www.maintenance.jaffari.org
ssl391609.cloudflaressl.com
ssl391609.cloudflaressl.com
jtb.jaffari.org
jaffari.org

Certificate

The complete raw certificate details for www.checkout.jaffari.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgISA0UjmNnbmqIAf4mRC/0PmwoJMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjYwNTA1MzVaFw0y
MDAyMjQwNTA1MzVaMCMxITAfBgNVBAMTGHd3dy5jaGVja291dC5qYWZmYXJpLm9y
ZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALy/ltEDH6NxLEy6jV/C
ub3ojFhEKnPU4zwkfqDXJd1wVMcqyTsEmFatW4vwBOzH+Ndq9bwlIdFwiHqhtx9P
oiqByuaePAXsMMHxefSDhdZ42L6HcM7QLE45XwH1Fnw49hhBQiytt02aV6y428NZ
JBsGihdahoDWQb1R6Rr7Ckub0241z63ewa/aB7w9W5MGHmwVANHRVjj5bDg24Zvq
hvs7F/j7VOD+pEzE1Kr9BSzuUtqBjAvV2CC21bqEDHpf/+SSMAALAr9MwpONaAd4
dd+S6+i8cXClhgApXHB3iyIhTZf+Fo4FGzh3wC0Dod7O2+zt7P5WBQJbrnb1l4ia
ffcCAwEAAaOCAoQwggKAMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUnnMVDcyz+2co
tQXuCLps+U1nnjAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzA5BgNVHREEMjAwghRjaGVja291dC5qYWZmYXJpLm9yZ4IY
d3d3LmNoZWNrb3V0LmphZmZhcmkub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAsh4FzIuizYogTodm+Su5
iiUgZ2va+nDnsklTLe+LkF4AAAFuplCusgAABAMASDBGAiEAxdgXutie29iV8jSl
bSZwFpMkMmgr/RxILB8Z4EOtCSgCIQDT6fG2QAVbuPPtp4JAQgSuNe/ZHH3eZ6E2
NGvP05sZxAB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbqZQ
sKQAAAQDAEcwRQIhAJuyLgWrUSJyWR+eIzO+7afDDMw/iKfFvL5jqtoKpor5AiAS
QoV65tPCm4OVjIE0todEvL0wbNTxEWbBpxV1MgJIIjANBgkqhkiG9w0BAQsFAAOC
AQEAEkKveQAw70cJZyoko8/T7aw4bSdCHhVge33DLx4zXB3MwSkrEUhj/T45bn2t
EYuRYLsoBrNmkeygoove8aumPb8gCXAGvpUplT3u3Z5fRpe2IT10y57/8rS5l20/
wnc5bzDuy3OoVhBX9BgPtUoTXUA8K9aWb2zFCzpw3NZ4WW7vF+7tOsbhc4bw2kk0
wgBvmccKkgG8+afYDuW6NQ51MFRgW3BC5P+HisG2d0Crq0e+eaIs/RGocNaT9Oh0
bOWCVzHb4V+Gs+9B/eeGcRI3+IlodtwZMbSbmuPi94oSPnIBNZKs65ncmHnuttAk
EJUOk3SlOvoBbF3bxIrDzQ8Qaw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL+W0QMfo3EsTLqNX8K5
veiMWEQqc9TjPCR+oNcl3XBUxyrJOwSYVq1bi/AE7Mf412r1vCUh0XCIeqG3H0+i
KoHK5p48BewwwfF59IOF1njYvodwztAsTjlfAfUWfDj2GEFCLK23TZpXrLjbw1kk
GwaKF1qGgNZBvVHpGvsKS5vTbjXPrd7Br9oHvD1bkwYebBUA0dFWOPlsODbhm+qG
+zsX+PtU4P6kTMTUqv0FLO5S2oGMC9XYILbVuoQMel//5JIwAAsCv0zCk41oB3h1
35Lr6LxxcKWGAClccHeLIiFNl/4WjgUbOHfALQOh3s7b7O3s/lYFAluudvWXiJp9
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284863657740482171391080002157788868053513
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-26 05:05:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-24 05:05:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.checkout.jaffari.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23827277453204031757151861952153753643343508798529073516814566859389745341218519073274013777949079658901195907749247167388464284931518929084305983479702615352815476726126533009541972705569486479514338559867218579671292313897934236627343590698877773151252373045729569684001543428341324415970532900495890681213313172678240112249139084005193897517461089485922378639072446512717839088196820572142703388453628835250245356421859126188699706120320763957196308339065217115849579773049451338912849306339319602115804855334886815421253654897847387044966843578185611232782131462430611224528735565712672118324985358002074783743479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e73150dccb3fb6728b505ee08ba6cf94d679e30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.jaffari.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.checkout.jaffari.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ea650aeb20000040300483046022100c5d817bad89edbd895f234a56d267016932432682bfd1c482c1f19e043ad0928022100d3e9f1b640055bb8f3eda782404204ae35efd91c7dde67a136346bcfd39b19c40076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ea650b0a400000403004730450221009bb22e05ab512272591f9e2333beeda7c30ccc3f88a7c5bcbe63aada0aa68af902201242857ae6d3c29b83958c8134b68744bcbd306cd4f11166c1a7157532024822
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001242af790030ef4709672a24a3cfd3edac386d27421e15607b7dc32f1e335c1dccc1292b114863fd3e396e7dad118b9160bb2806b36691eca0a28bdef1aba63dbf20097006be9529953deedd9e5f4697b6213d74cb9efff2b4b9976d3fc277396f30eecb73a8561057f4180fb54a135d403c2bd6966f6cc50b3a70dcd678596eef17eeed3ac6e17386f0da4934c2006f99c70a9201bcf9a7d80ee5ba350e753054605b7042e4ff878ac1b67740abab47be79a22cfd11a870d693f4e8746ce5825731dbe15f86b3ef41fde786711237f8896876dc1931b49b9ae3e2f78a123e72013592aceb99dc9879eeb6d02410950e9374a53afa016c5ddbc48ac3cd0f106b