aamulehti.ap.richiefi.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1a:36:9a:b0:70:f7:76:39:c7:5e:fe:42:0c:72:80:41:80 was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aamulehti.ap.richiefi.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1a:36:9a:b0:70:f7:76:39:c7:5e:fe:42:0c:72:80:41:80
Serial Number (int): 357369066771128216624951760839800101290368
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:78:2b:9c:72:8d:0c:c8:0c:2b:bc:69:4f:b1:42:4e:f4:a9:ef:0c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:94:e5:62:16:a4:90:65:d9:ec:39:31:ba:30:13:9b:5a:d4:3a:56
Fingerprint (sha256): 1d:5f:0f:ea:e3:35:49:80:78:95:23:d6:ba:06:fa:ba:28:d8:e6:50:64:a8:c3:ea:ac:9e:08:b9:ff:b3:74:4d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aamulehti.ap.richiefi.net

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aamulehti.ap.richiefi.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aamulehti.ap.richiefi.net
iltalehti.ap.richiefi.net
jamsanseutu.ap.richiefi.net
janakkalansanomat.ap.richiefi.net
jokilaakso.ap.richiefi.net
kankaanpaanseutu.ap.richiefi.net
kauppalehti.ap.richiefi.net
kmv-lehti.ap.richiefi.net
lehdet.kauppalehti.fi
luoteisvayla.ap.richiefi.net
merikarvialehti.ap.richiefi.net
nakoislehti.il.fi
nokianuutiset.ap.richiefi.net
rannikkoseutu.ap.richiefi.net
satakunnankansa.ap.richiefi.net
suurkeuruu.ap.richiefi.net
sydansatakunta.ap.richiefi.net
tyrvaansanomat.ap.richiefi.net
vakkasuomensanomat.ap.richiefi.net
valkeakoskensanomat.ap.richiefi.net
vekkari.ap.richiefi.net

Other certificates including the domain name richiefi.net

(limited to 100 certificates)
kaleva.ap.richiefi.net
digi.paivamies.fi
digilehdet.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
digilehdet.ap.richiefi.net
digi.paivamies.fi
digilehdet.ap.richiefi.net
digilehdet.sanomapaino.fi
*.richie.fi
alasatakunta.ap.richiefi.net
digi.paivamies.fi
kaleva.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
digi.paivamies.fi
aamulehti.ap.richiefi.net
iijokiseutu.ap.richiefi.net
*.richie.fi
*.richiefi.net
alasatakunta.ap.richiefi.net
digilehdet-tutkimus.ap.richiefi.net
*.rad.richiefi.net
digi.paivamies.fi
aamulehti.ap.richiefi.net
digilehdet-tutkimus.ap.richiefi.net
aller.ap.richiefi.net
aamulehti.ap.richiefi.net
digilehdet.ap.richiefi.net
digilehdet.ap.richiefi.net
kaleva.ap.richiefi.net
aamulehti.ap.richiefi.net
kaleva.ap.richiefi.net
*.richiefi.net
aller.ap.richiefi.net
aller.ap.richiefi.net
aamulehti.ap.richiefi.net
almatalent.ap.richiefi.net
digilehdet.sanomapaino.fi
alasatakunta.ap.richiefi.net
iijokiseutu.ap.richiefi.net
aamulehti.ap.richiefi.net
iijokiseutu.ap.richiefi.net
digilehdet.sanomapaino.fi
*.rad.richiefi.net
digilehdet.ap.richiefi.net
*.richie.fi
alasatakunta.ap.richiefi.net
digi.paivamies.fi
alasatakunta.ap.richiefi.net
*.rad.richiefi.net
aamulehti.ap.richiefi.net
kaleva.ap.richiefi.net
digilehdet.ap.richiefi.net
digilehdet.ap.richiefi.net
aller.ap.richiefi.net
alasatakunta.ap.richiefi.net
aamulehti.ap.richiefi.net
almatalent.ap.richiefi.net
*.rad.richiefi.net
digi.paivamies.fi
kaleva.ap.richiefi.net
aamulehti.ap.richiefi.net
alasatakunta.ap.richiefi.net
digi.paivamies.fi
aller.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
digilehdet.ap.richiefi.net
almatalent.ap.richiefi.net
alasatakunta.ap.richiefi.net
aller.ap.richiefi.net
aller.ap.richiefi.net
aamulehti.ap.richiefi.net
aller.ap.richiefi.net
*.rad.richiefi.net
digi.paivamies.fi
digilehdet.ap.richiefi.net
digi.paivamies.fi
aamulehti.ap.richiefi.net
aller.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
*.richie.fi
aamulehti.ap.richiefi.net
digilehdet.ap.richiefi.net
aller.ap.richiefi.net
digilehdet.ap.richiefi.net
aller.ap.richiefi.net
aller.ap.richiefi.net
aamulehti.ap.richiefi.net
aamulehti.ap.richiefi.net
aamulehti.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
aller.ap.richiefi.net
alasatakunta.ap.richiefi.net
alasatakunta.ap.richiefi.net
kaleva.ap.richiefi.net
digilehdet.sanomapaino.fi

Certificate

The complete raw certificate details for aamulehti.ap.richiefi.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P3R7OeA4RsPYgi3CO9i
BjljyZpsGQWc0dCJPLPasc0q79oErOZijjwhQc2yXxawoyLsr2xQHdx259ugBmW/
J26cvc1UKsw064BN+5lq6XeKx74XdGI92jSce+V2PC3G/9hQJfzmpjS7vnn4aqd4
SBSNFq+CaiPaz4KYzXGqi6REe8ZY5zyEicuDfa1ixzwhYUwEhbpgoWTqrlGeAHsh
UuVx7xAaSEVx3HeLaEkvYAaDYbe6dMruOLzvQz3PoX0U5b0cSjp2od2To+griqxN
RF/XMzb0+f5vS0VfFEjcSNT+AyrBXNboTY8Zvm9n+al81jGeBpdJmVlJYtPa9R/2
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357369066771128216624951760839800101290368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 04:33:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-19 04:33:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aamulehti.ap.richiefi.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26887683970120849535805890326397038524519466800175573089106605992983490456122334218018592931869961716313533565477761300147911257747116558747341296012297551371666002660899184518609921117843633691253218720698290218055250283754561819873566580610421058441771475071928891062858120989634698663798445369991566028850809953985666661787258408264510627192462951242758593972929549907689236322568910574747597340465436038648679777824469559263460207002751508311902310230840484973232083823579448473640827927810280150950321973031365144398279273530622016416564535011084599320815314679606481664172092573166482047370619304136068462278329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5782b9c728d0cc80c2bbc694fb1424ef4a9ef0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (630 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aamulehti.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iltalehti.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamsanseutu.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janakkalansanomat.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokilaakso.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kankaanpaanseutu.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauppalehti.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmv-lehti.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lehdet.kauppalehti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luoteisvayla.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merikarvialehti.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakoislehti.il.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nokianuutiset.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rannikkoseutu.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satakunnankansa.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suurkeuruu.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydansatakunta.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyrvaansanomat.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vakkasuomensanomat.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valkeakoskensanomat.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vekkari.ap.richiefi.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001705bf041890000040300473045022066c7c7a6432c97108f36af7bf506d3194f249e74fafccbbbdfbb95d6155afb73022100b3ff2cd8b362931d6a73307d57170fa56222f46e3a467adf3f6b960a913f761700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001705bf041b50000040300473045022100c198ec91eb64feb97518b7a77a602eb328745aca7afd754afe25f984cef5c35c02200fa578f0efdf6b02f34721001bda7fe2599f411c8d8ea5246ba23e7e346485f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00302f61ecbbf4d8ecab016100e68f0f84242f70bd556b6305cc2c8f70528388aa135391c3d57929a006d46dbe27422dcfd98df5d406eeedcc9353393609295fa65b93e7f789bdf993dca81e33127620723dcaafdfcc76a27283cc3ae05428a390fc405a110614c627ebccce79bb3891554436770a5f6067ecefc5c390021f8557f82ad4ee3817952aefcb01ed9fb7a8782bd62e6e3cbe6f1c3c1589d26963d7e6d3146b7e60047afaf7274118dbf3a3956bd6c1b58a26a4c53cb17efddc61faf20e6a277027cf2c4571fb78bd2992a472f2ed25c41c7d049773a8c24bde3ea9b6695896dc37cd7d0eeef23dd2771a13da728334ea7ea68ff6fbf875238c18dab8