itmagix.nl
Issued by R3
About this certificate
This digital certificate with serial number 03:f6:2f:b9:50:b1:fa:d8:be:ba:3b:3a:a3:21:a8:af:4f:98 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=itmagix.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:f6:2f:b9:50:b1:fa:d8:be:ba:3b:3a:a3:21:a8:af:4f:98Serial Number (int): 345109755985246108279275397752291775696792
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e0:39:39:de:54:bd:35:83:87:ea:ab:21:89:e9:4e:b8:5a:6a:50:e0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ba:c4:a1:bf:df:57:b3:e4:93:a6:ad:de:57:46:e8:4b:91:d0:ec:eb
Fingerprint (sha256): 1f:85:4f:83:6f:3a:9d:1f:ea:f5:ab:34:ef:2b:56:cd:ed:12:1d:4f:ca:ea:92:dd:c1:b9:83:01:ad:15:2a:56
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate itmagix.nl
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for itmagix.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
itmagix.nl
webmail.itmagix.nl
www.itmagix.nl
webmail.itmagix.nl
www.itmagix.nl
Other certificates including the domain name itmagix.nl
(limited to 100 certificates)
supporto.teameis.it
www.itmagix.nl
support.itmagix.nl
support.robethood.net
support.itmagix.nl
support.itmagix.nl
support.glastechnology.com
support.axondevelopment.co.uk
supporto.teameis.it
support.itmagix.nl
support.robethood.net
support.teletechnics.com
support.itmagix.nl
itmagix.nl
petbase.mobile-xl.eu
itmagix.nl
support.bitexen.com
support.sirrahsoft.co.uk
support.sirrahsoft.co.uk
customerservice.herful.com
support.robethood.net
help.markus.support
help.someday.com
itmagix.nl
support.itmagix.nl
supporto.noau.it
support.bitexen.com
help.adozi.com
supporto.teameis.it
support.itmagix.nl
support.itmagix.nl
supporto.noau.it
support.glastechnology.com
support.teletechnics.com
itmagix.nl
support.astrad-austrokommunal.at
customerservice.herful.com
support.hayaperegrinaciones.com
services.espats.ch
supporto.noau.it
soporte.error304.com
kennisbank.nobelinstallaties.nl
support.glastechnology.com
support.robethood.net
services.espats.ch
help.adozi.com
*.itmagix.nl
support.itmagix.nl
support.itmagix.nl
kennisbank.nobelinstallaties.nl
assistenza.amotive.it
myportalsupport.thingco.com
petbase.mobile-xl.eu
support.axondevelopment.co.uk
*.itmagix.nl
plesk.itmagix.nl
support.inexdu.com
help.markus.support
support.itmagix.nl
help.adozi.com
help.wau73.com
supporto.noau.it
support.inexdu.com
support.glastechnology.com
customerservice.herful.com
support.barion.nl
support.itmagix.nl
help.markus.support
help.wau73.com
support.itmagix.nl
services.espats.ch
tickets.geostruct.com
soporte.error304.com
tickets.geostruct.com
support.hayaperegrinaciones.com
soporte.error304.com
petbase.mobile-xl.eu
support.sirrahsoft.co.uk
support.itmagix.nl
petbase.mobile-xl.eu
itmagix.nl
support.itmagix.nl
kennisbank.nobelinstallaties.nl
support.itmagix.nl
supporto.teameis.it
tickets.geostruct.com
support.itmagix.nl
myportalsupport.thingco.com
plesk.itmagix.nl
support.astrad-austrokommunal.at
help.someday.com
kennisbank.nobelinstallaties.nl
support.axondevelopment.co.uk
itmagix.nl
support.barion.nl
support.sirrahsoft.co.uk
myportalsupport.thingco.com
support.barion.nl
help.someday.com
support.bitexen.com
www.itmagix.nl
support.itmagix.nl
support.robethood.net
support.itmagix.nl
support.itmagix.nl
support.glastechnology.com
support.axondevelopment.co.uk
supporto.teameis.it
support.itmagix.nl
support.robethood.net
support.teletechnics.com
support.itmagix.nl
itmagix.nl
petbase.mobile-xl.eu
itmagix.nl
support.bitexen.com
support.sirrahsoft.co.uk
support.sirrahsoft.co.uk
customerservice.herful.com
support.robethood.net
help.markus.support
help.someday.com
itmagix.nl
support.itmagix.nl
supporto.noau.it
support.bitexen.com
help.adozi.com
supporto.teameis.it
support.itmagix.nl
support.itmagix.nl
supporto.noau.it
support.glastechnology.com
support.teletechnics.com
itmagix.nl
support.astrad-austrokommunal.at
customerservice.herful.com
support.hayaperegrinaciones.com
services.espats.ch
supporto.noau.it
soporte.error304.com
kennisbank.nobelinstallaties.nl
support.glastechnology.com
support.robethood.net
services.espats.ch
help.adozi.com
*.itmagix.nl
support.itmagix.nl
support.itmagix.nl
kennisbank.nobelinstallaties.nl
assistenza.amotive.it
myportalsupport.thingco.com
petbase.mobile-xl.eu
support.axondevelopment.co.uk
*.itmagix.nl
plesk.itmagix.nl
support.inexdu.com
help.markus.support
support.itmagix.nl
help.adozi.com
help.wau73.com
supporto.noau.it
support.inexdu.com
support.glastechnology.com
customerservice.herful.com
support.barion.nl
support.itmagix.nl
help.markus.support
help.wau73.com
support.itmagix.nl
services.espats.ch
tickets.geostruct.com
soporte.error304.com
tickets.geostruct.com
support.hayaperegrinaciones.com
soporte.error304.com
petbase.mobile-xl.eu
support.sirrahsoft.co.uk
support.itmagix.nl
petbase.mobile-xl.eu
itmagix.nl
support.itmagix.nl
kennisbank.nobelinstallaties.nl
support.itmagix.nl
supporto.teameis.it
tickets.geostruct.com
support.itmagix.nl
myportalsupport.thingco.com
plesk.itmagix.nl
support.astrad-austrokommunal.at
help.someday.com
kennisbank.nobelinstallaties.nl
support.axondevelopment.co.uk
itmagix.nl
support.barion.nl
support.sirrahsoft.co.uk
myportalsupport.thingco.com
support.barion.nl
help.someday.com
support.bitexen.com
Certificate
The complete raw certificate details for itmagix.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISA/YvuVCx+ti+ujs6oyGor0+YMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjcwNjA4MThaFw0yNDA3MjYwNjA4MTdaMBUxEzARBgNVBAMT Cml0bWFnaXgubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+q9OX Qu/ZFNPQ3bhid3MR1Jic2ZeXSf7ay7uE444hH1uXq7X3+50C1q+a/jBvBy5Qrkjv LC9jvfZqBN+JIk6AJu41JlpewLJKLST1rRoawMDmy5J2bfRykkRywWgoIcZ14rcd PFSa302+D7/6UmPJsic2rA6R7ImV0IeixoIByGz7MqfF87zCnEqxKT9+CpVuVhsE DfoVer3Ob20ZTa7F/rRCbUAZx5f79KPrI9zADg3zLbPdM66xHhpqBZPZ7xFW5GUn sjWe+NRaeZ5DR43+CQlM3P6bnoy7Du2nrV4HgPezx/Vl1KyhYOTyr7sz56z0ysK8 D5bSw3fAs7UxO6YFAgMBAAGjggIwMIICLDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FOA5Od5UvTWDh+qrIYnpTrhaalDgMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMDkG A1UdEQQyMDCCCml0bWFnaXgubmyCEndlYm1haWwuaXRtYWdpeC5ubIIOd3d3Lml0 bWFnaXgubmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1 BIHyAPAAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY8eYiJJ AAAEAwBHMEUCIBmluc1OrcVU1aPlOX0WU4K6LfkD7mxFTkpCHvNqbLUOAiEAomb/ mYA51wtRZSRHH/Hyg97R5wejEuSSoxBD/8fLw6MAdgB2/4g/Crb7lVHCYcz1h7o0 tKTNuyncaEIKn+ZnTFo6dAAAAY8eYiKUAAAEAwBHMEUCIQCXFZOKZ8OyeKhZRFGs 9PpTuMbPT+dWD9P5ufBpAA9gyQIgA9i0OWcgWqM+g5F20/bMtbCL6+dIr3L5p6nQ 4rv9MgQwDQYJKoZIhvcNAQELBQADggEBAK4xdGtzxX4HPNBNs72IQJorNKaYasKo cuY1sjo3g8jMLf+dxJLoH+mVP3jJ+anQjsC9zkm2YLK0BJLSU4i+HU2DQmwWymTT ESp2OarmWgyRBnuZ5S0L9cO//swd0Tmtq51J9rmM1RjJ6oT8aT1jieGsz/XyLXgL CITULXF7M/6oaWjU0wyu46SA3Kl+PvU3AKWU1h2v4mZkrp8yNsIjSkMvUNW662V5 hFrim6rupbmsuqu+1BPEkTAbZxnEQ3Ujrbj320vMZcs2sKKDCSEDsnMWRNKpbRpX GN3ZXmflIRH529qT0geB6BhhXYoEG2WM/NVQPQmlHkx0KvCxiAtFaRo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqvTl0Lv2RTT0N24Yndz EdSYnNmXl0n+2su7hOOOIR9bl6u19/udAtavmv4wbwcuUK5I7ywvY732agTfiSJO gCbuNSZaXsCySi0k9a0aGsDA5suSdm30cpJEcsFoKCHGdeK3HTxUmt9Nvg+/+lJj ybInNqwOkeyJldCHosaCAchs+zKnxfO8wpxKsSk/fgqVblYbBA36FXq9zm9tGU2u xf60Qm1AGceX+/Sj6yPcwA4N8y2z3TOusR4aagWT2e8RVuRlJ7I1nvjUWnmeQ0eN /gkJTNz+m56Muw7tp61eB4D3s8f1ZdSsoWDk8q+7M+es9MrCvA+W0sN3wLO1MTum BQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 345109755985246108279275397752291775696792 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 06:08:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 06:08:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itmagix.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24070008761885397371081282444502456266562640163771127770623506684793587756539527329219691506280251089401827394015367299038088958118213921758297144215647776648392393513792225945322887632927344926202903249474696022424509603441037061822544280600791330959673455712619612466595492618765956363712531362208282452675132845060547965584898542888996099248797572663965233705451599784457854661493695469962802549022286680671445745736123629233900432849023942182186080426209067622035066045761157847252925728776017283757459814934767764359110014093363625107170499869320071298264399444763563684833970285956174254345844276026397840614917 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e03939de54bd358387eaab2189e94eb85a6a50e0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itmagix.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.itmagix.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itmagix.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f1e6222490000040300473045022019a5b9cd4eadc554d5a3e5397d165382ba2df903ee6c454e4a421ef36a6cb50e022100a266ff998039d70b516524471ff1f283ded1e707a312e492a31043ffc7cbc3a300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f1e62229400000403004730450221009715938a67c3b278a8594451acf4fa53b8c6cf4fe7560fd3f9b9f069000f60c9022003d8b43967205aa33e839176d3f6ccb5b08bebe748af72f9a7a9d0e2bbfd3204 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00ae31746b73c57e073cd04db3bd88409a2b34a6986ac2a872e635b23a3783c8cc2dff9dc492e81fe9953f78c9f9a9d08ec0bdce49b660b2b40492d25388be1d4d83426c16ca64d3112a7639aae65a0c91067b99e52d0bf5c3bffecc1dd139adab9d49f6b98cd518c9ea84fc693d6389e1accff5f22d780b0884d42d717b33fea86968d4d30caee3a480dca97e3ef53700a594d61dafe26664ae9f3236c2234a432f50d5baeb6579845ae29baaeea5b9acbaabbed413c491301b6719c4437523adb8f7db4bcc65cb36b0a283092103b2731644d2a96d1a5718ddd95e67e52111f9dbda93d20781e818615d8a041b658cfcd5503d09a51e4c742af0b1880b45691a