digital2019.tu.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:af:c0:a1:1c:ce:2a:26:55:4e:5d:b9:da:29:f2:91:58:49 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=digital2019.tu.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:c0:a1:1c:ce:2a:26:55:4e:5d:b9:da:29:f2:91:58:49
Serial Number (int): 408254606257431660740057496690420190632009
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0f:ea:76:12:2d:27:08:43:fb:da:56:6b:b7:01:ca:47:c0:14:b5:a5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:6c:3a:f6:bb:55:07:5b:69:d1:9a:bd:d9:33:f0:07:0f:43:33:43
Fingerprint (sha256): 17:5d:56:f6:70:45:2e:06:da:4c:57:8c:d8:31:02:6e:eb:bb:e5:56:13:33:ab:22:d3:95:c7:08:0f:d5:0d:4b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate digital2019.tu.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digital2019.tu.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digital2019.tu.no

Other certificates including the domain name tu.no

(limited to 100 certificates)
cdn.eblad.tu.no
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
digital2019.tu.no
dns-vetting1j.map.fastly.net
cdn.eblad.tu.no
twentythree.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
twentythree.net
tu.no
web.tu.no
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
jobb.tu.no
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
cdn.eblad.tu.no
dns-vetting1j.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
images.jobb.tu.no
twentythree.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
tu.no
twentythree.net
abonnere.tu.no
sentry.tu.no
images.jobb.tu.no
secure0139.hubspot.com
twentythree.net
digital2019.tu.no
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1j.map.fastly.net
jobb.tu.no
dns-vetting1j.map.fastly.net
rekruttering.tu.no
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
web.tu.no
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1.map.fastly.net
web.tu.no
dns-vetting1d.map.fastly.net
twentythree.net
images.jobb.tu.no
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
twentythree.net
digital2019.tu.no
dns-vetting1d.map.fastly.net
m.tu.no
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
twentythree.net
www.energilink.tu.no
images.single.no
dns-vetting1j.map.fastly.net
twentythree.net
dev.club.scorelit.com
www.aftenposten.no
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
web.tu.no
twentythree.net
dns-vetting1d.map.fastly.net
digital2019.tu.no
secure0139.hubspot.com
twentythree.net
dns-vetting1d.map.fastly.net
energilink.tu.no
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
*.tu.no
whitepaper.digi.no
dns-vetting1j.map.fastly.net
swarm.jobb.tu.no

Certificate

The complete raw certificate details for digital2019.tu.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISBK/AoRzOKiZVTl252inykVhJMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDUwNzU1NTdaFw0x
OTA3MDQwNzU1NTdaMBwxGjAYBgNVBAMTEWRpZ2l0YWwyMDE5LnR1Lm5vMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv5qOzKg2FwzkzQ7LW1p7LVAC4I6t
epoHzt5WKZli4fttWkFfOx2AquGwEBOp6GV76bpzFboRS4FkiP0GpNGuLpYAkA4V
UD0ARC3LeO1nIvc7h07j0bQIUi7fqCMkS0VZSaiqbQ3FopwSrey39WS027UNZG53
YFFtQ6t7GokoVPgM8Xdp5qsc9FGBHv9d7+sa5AaJzwmdfGPLis3czibiuQ9hP2b4
+5xNsBfQl3oChXK4dX054XNnWe8eq5whj0Y4HV5dXAkXhMhNKR2H2k39+xMx81uF
3lVnlJK0TaKC2l/zItYXw3QnVfSgCOvAh/IfmIZxyE3CYfH4WMovxvlIHlfDc1UY
6jufc/FLov/qNGoKKA0xky1Gsbr6UiJ0pNSji7JHmAb6Z7mZbTOltxapP2jm1CRg
NWKPXFkQE0mG+GHfDNRlJ2J1uYllLw5tAf+muU+WythNb3fq93m6S12GD8oHM5i8
1NeG/qhFib8RFzQ411tgK9QoUYr3U0lQs4VleviquENAaepriSIN1l/5YtzvsgIC
mmFHU6zMplKirSfBfTeqMM5bGFUiuNNsqgv+mNAKybOkSWFLSHJ1C78Z5uopPlkk
Ob3iyTFmz4wbqKvoN7w1F2L8u7MSGxXBwb9kD5pKe/GJgyUAOLCId66T4wUSFB3p
/edlfGPoe3hg92ECAwEAAaOCAmUwggJhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
D+p2Ei0nCEP72lZrtwHKR8AUtaUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghFkaWdpdGFsMjAxOS50
dS5ubzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkC
BAIEgfQEgfEA7wB2AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAAB
aey2MjsAAAQDAEcwRQIhALXYqGc9PG4XnMcyviBHygmLFl1ikq4J9EzZiQJ6GP6I
AiAEyn/3qt7vZyXMySJo4tMZUu96lwtdxQhtn3XUl5cRcAB1AGPy283oO8wszwty
hCdXazOkjWF3j711pjixx2hUS9iNAAABaey2MiIAAAQDAEYwRAIgPVm3dyMWtk0S
GuAJIdzw8x/4XnWMD5urJRbhoyoVaUoCIHr12RgfNXmOOFBoEOEmZREneWwWezs0
oSH/2YLYbamuMA0GCSqGSIb3DQEBCwUAA4IBAQA/BpaegahdsZC6vVdqGTKXcIgo
aQ9c7ZYTniTY0wPa6RKRzyPCz+NfeJAwG3l6ulUTwR4as2hZMfZOULuiDGBFuFxQ
LMpKPJWg+hsNiG6/6U2AN2JsVY0gi0fBpElQ1UlC2oECWg3YmlD2UtqXa/PcL74i
rv1TEbSHDArhHd0m3aa2JQOlR26z6KhBo0CxnOmI2qcs4lxw7yZ5zXtPqh9+1xW/
tpTaWZD2TQeGKUtu8waOonLCKTSkDjM333AmC+Jxus6Our5SgIgTPxcHHV4ILFeW
JlEHkXNj9/YEQOMGsfibuRn23JzZphAPtAz8PSyrCl6V6lTh2uqcqRC5z8QH
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408254606257431660740057496690420190632009
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-05 07:55:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-04 07:55:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digital2019.tu.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781675067202917187667706924083070214717453399098015933663955416153824636616620979672134773093990688204636163934210802901311837649703271390275225573264602089893979804016788216114363371965365611775153042707170658293337191151825009612245748807893844029904115562526834830237034315767932254681504390882502263908936482848346684358160324790919649548511606350188829986047550910016400494986039035634312683431915944246840855178878970392067982729256380615725871737273318754213871147533521618897509088027618650455532050889545160096978385004090397164159587934393465138761276847750498667046645680265197195177959442294125344887013645239883096758312095968316595899451316233015585168225801712473410744402073462302547333649534504161293526451607923052298255595348364781369534759216269444731604952675350525973559989466420881203556090775595647896685619241214377731670751271349652011556271980931158576414153805627128172607242402672252809893703942727372506297329674285385545983358929101961632443274438273255336199285287672057043731766509724873481935199165057715916954862093946617085568671640109935824292137861173917241628300208740336208224727705324718013515031743489291041444136996816775051433238914808127604378227185574637463936281595848632364368050321249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0fea76122d270843fbda566bb701ca47c014b5a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital2019.tu.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169ecb6323b0000040300473045022100b5d8a8673d3c6e179cc732be2047ca098b165d6292ae09f44cd989027a18fe88022004ca7ff7aadeef6725ccc92268e2d31952ef7a970b5dc5086d9f75d49797117000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169ecb63222000004030046304402203d59b7772316b64d121ae00921dcf0f31ff85e758c0f9bab2516e1a32a15694a02207af5d9181f35798e38506810e126651127796c167b3b34a121ffd982d86da9ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003f06969e81a85db190babd576a193297708828690f5ced96139e24d8d303dae91291cf23c2cfe35f7890301b797aba5513c11e1ab3685931f64e50bba20c6045b85c502cca4a3c95a0fa1b0d886ebfe94d8037626c558d208b47c1a44950d54942da81025a0dd89a50f652da976bf3dc2fbe22aefd5311b4870c0ae11ddd26dda6b62503a5476eb3e8a841a340b19ce988daa72ce25c70ef2679cd7b4faa1f7ed715bfb694da5990f64d0786294b6ef3068ea272c22934a40e3337df70260be271bace8ebabe528088133f17071d5e082c5796265107917363f7f60440e306b1f89bb919f6dc9cd9a6100fb40cfc3d2cab0a5e95ea54e1daea9ca910b9cfc407