www.edeka-koehne.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:48:45:f6:76:f0:e1:e0:8c:7b:6e:97:1f:c2:63:de:56:5d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.edeka-koehne.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:48:45:f6:76:f0:e1:e0:8c:7b:6e:97:1f:c2:63:de:56:5d
Serial Number (int): 285930184662733665896383824793368059074141
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:ca:91:25:d2:7f:11:0c:b0:b0:54:27:47:23:e9:55:3b:c5:9c:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a5:e0:e6:42:6e:21:e9:c1:26:7a:e3:0b:41:ab:87:f8:e8:02:4f:ab
Fingerprint (sha256): 25:21:45:60:83:10:71:ec:46:0c:f5:74:6f:31:99:4c:f1:7f:4e:98:10:80:88:40:e9:58:5b:4b:9c:53:6b:66

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.edeka-koehne.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.edeka-koehne.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.edeka-koehne.de

Other certificates including the domain name edeka-koehne.de

(limited to 100 certificates)
moebel-gruber.mediaflip.de
jobst-wohnwelt.mediaflip.de
jobst-wohnwelt.mediaflip.de
epaper.treffpunkt-bau.eu
moebel-mmz.mediaflip.de
jobst-wohnwelt.mediaflip.de
hoffmann-moebel.mediaflip.de
hoffmann-moebel.mediaflip.de
hummerich.mediaflip.de
moegro.mediaflip.de
ruesen.mediaflip.de
ruesen.mediaflip.de
moebel-zuck.mediaflip.de
hummerich.mediaflip.de
trop.mediaflip.de
angebote.dersteirerhof.at
jobst-wohnwelt.mediaflip.de
www.edeka-koehne.de
jobst-wohnwelt.mediaflip.de
hummerich.mediaflip.de
jobst-wohnwelt.mediaflip.de
trop.mediaflip.de
katalog.seglerbedarf.de
edeka-koehne.de
kataloge.triplex-fischer.de
edeka-koehne.de
moebel-mmz.mediaflip.de
moebel-mai.mediaflip.de
epaper.treffpunkt-bau.eu
sonavsofab.xp1.com
www.edeka-koehne.de
ruesen.mediaflip.de
jobst-wohnwelt.mediaflip.de
moebel-zuck.mediaflip.de
moebel-berta.mediaflip.de
epaper.sinntec.de
moebel-mmz.mediaflip.de
hummerich.mediaflip.de
trop.mediaflip.de
moebel-gruber.mediaflip.de
moebelundobjekt.mediaflip.de
katalog.unzerbrechbar.de
www.edeka-koehne.de
webkiosk.edeka-koehne.de
medien.koinno-bmwi.de
moebel-meyer.mediaflip.de
ruesen.mediaflip.de
kataloge.otto-pokale.de
ruesen.mediaflip.de
jobst-wohnwelt.mediaflip.de
ruesen.mediaflip.de
edeka-koehne.de
logo-moebel.mediaflip.de
katalog.unzerbrechbar.de
catalog.triebel-guntools.de
www.edeka-koehne.de
moebel-gruber.mediaflip.de
moebel-berta.mediaflip.de
moebel-gruber.mediaflip.de
epaper.treffpunkt-bau.eu
moebel-berta.mediaflip.de
moebel-meyer.mediaflip.de
mobila.mediaflip.de
kataloge.werbeartikel-laeser.ch
moebel-mai.mediaflip.de
moebel-mai.mediaflip.de
moebel-mai.mediaflip.de
webkiosk.werk5.ch
jobst-wohnwelt.mediaflip.de
jobst-wohnwelt.mediaflip.de
edeka-koehne.de
jobst-wohnwelt.mediaflip.de
edeka-koehne.de
medien.koinno-bmwi.de
jobst-wohnwelt.mediaflip.de
magazin.em-chiemgau.de
trop.mediaflip.de
moebel-mmz.mediaflip.de
magazine.grossglockner.at
hummerich.mediaflip.de
moebel-gruber.mediaflip.de
webkiosk.holz-speckmann.de
moebel-brameyer.mediaflip.de
moebel-seesen.mediaflip.de
www.edeka-koehne.de
www.edeka-koehne.de
kataloge.otto-pokale.de
ruesen.mediaflip.de
ruesen.mediaflip.de
jobst-wohnwelt.mediaflip.de
moebel-mai.mediaflip.de
medien.koinno-bmwi.de
moebel-mmz.mediaflip.de
epaper.transgourmet.ch
webkiosk.tkmparkett.de
webkiosk.mediabiz.at
moebelundobjekt.mediaflip.de
epaper.transgourmet.ch
jobst-wohnwelt.mediaflip.de
moebel-mmz.mediaflip.de

Certificate

The complete raw certificate details for www.edeka-koehne.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISA0hF9nbw4eCMe26XH8Jj3lZdMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTQyMzE2NTdaFw0y
MDAzMTMyMzE2NTdaMB4xHDAaBgNVBAMTE3d3dy5lZGVrYS1rb2VobmUuZGUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUJuuIHA0Om0ndWNPMjy+fav+x
8x/5VZVpqPSKMRarb31H9X5Ip0GUqNnh7WRM8fSWTTlJTVMhHI1N/dTasrggz6It
xibsy3QxbNXtexPPCXlcuWa29R5CQhY7tF+2ITSR1sy4CV6LKICAlfBvl5zpdxv9
5MflaeQky1EUyeXIVUHvmca9j8POESz8oWNG74YqqyIbyHCdGuohlw5SVZBnjJCH
v2ULsOwOD60m2TNg/WM/uffDPOG2TvxXGYv2Le5lbgz3TbIt1s6zHejlG67upNVz
db0307cA8MkBt8GkCI1WHw/fiPC2CFA6FU+7J8afOSdUiaHKvjorkGiJpcVvAgMB
AAGjggJnMIICYzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEbKkSXSfxEMsLBUJ0cj
6VU7xZw0MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF
BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wHgYDVR0RBBcwFYITd3d3LmVkZWthLWtvZWhuZS5kZTBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1
AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbwbqUyYAAAQDAEYw
RAIgNDHFInPdus5rv2lYSJB/+ZGUNwsK++++X5QQ+Tkboe4CID9ia8e31XhEL4C8
Di0CYy6u4Vbtec+r/uXOE+0pHbIYAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDn
sklTLe+LkF4AAAFvBupTEwAABAMARzBFAiBp4f1/r/KqHAtxoKNUQIB99ztTPqQH
D2dNZfc37ofDWwIhAIDG9xjKPzRuGOB0KUBdcKmlkFxb4AjURvFWW/s0CNYzMA0G
CSqGSIb3DQEBCwUAA4IBAQBC/4LBbdpkdpGfJlCZ0eAjP+2TQvqj680ukrmsEmpJ
EIn99+WUgXAwipPbTcPfBD0TI1nu2cPERULqS+S5Ye6Hx6FPAqnDvX715kJa3MGd
rsqKeQ/IDwtyr/b/1dYpHCCb96HeI4MIccLx2qDP4vqFOPbyt33a6uNzacjAoKk2
Y2Fe5qM0eb/2CWFRrDv4YBVKnbQxMj2mIlCun3TZObBXZsATjC+AW6ohAsC0sPO+
8mewkl+fPOFaNqVmrLntQLOQS0vdUiSNtRaWBcRHeVDLx48dAsh26OZfxoU1Enip
YfPA5QkGzwqUQB3lVJxLE9sMO3ArcxUcRlgAo3JF/SBq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CbriBwNDptJ3VjTzI8v
n2r/sfMf+VWVaaj0ijEWq299R/V+SKdBlKjZ4e1kTPH0lk05SU1TIRyNTf3U2rK4
IM+iLcYm7Mt0MWzV7XsTzwl5XLlmtvUeQkIWO7RftiE0kdbMuAleiyiAgJXwb5ec
6Xcb/eTH5WnkJMtRFMnlyFVB75nGvY/DzhEs/KFjRu+GKqsiG8hwnRrqIZcOUlWQ
Z4yQh79lC7DsDg+tJtkzYP1jP7n3wzzhtk78VxmL9i3uZW4M902yLdbOsx3o5Ruu
7qTVc3W9N9O3APDJAbfBpAiNVh8P34jwtghQOhVPuyfGnzknVImhyr46K5BoiaXF
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285930184662733665896383824793368059074141
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-14 23:16:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 23:16:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.edeka-koehne.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26781712842601019478690863533225804977629726044593794532685861954711521925755408487448066433958743312607217094607122501931065980212968905159169322984803832671977416570164814405077712622255302645506484073237151970636607018708223312832435261122779168140822929866758878598403743669539913064703351585358898588193804451791328477915590935534329000962366418691318051062023349843142982848059297021310686203779731261566919893917768093492651646413325698204743640969523441980926458951271846835356787268528221011290071386528381634263993135206862507255055392993492587909596828280723489295558523416348992397991319411874502300517743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46ca9125d27f110cb0b054274723e9553bc59c34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edeka-koehne.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f06ea5326000004030046304402203431c52273ddbace6bbf695848907ff99194370b0afbefbe5f9410f9391ba1ee02203f626bc7b7d578442f80bc0e2d02632eaee156ed79cfabfee5ce13ed291db218007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f06ea53130000040300473045022069e1fd7faff2aa1c0b71a0a35440807df73b533ea4070f674d65f737ee87c35b02210080c6f718ca3f346e18e07429405d70a9a5905c5be008d446f1565bfb3408d633
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0042ff82c16dda6476919f265099d1e0233fed9342faa3ebcd2e92b9ac126a491089fdf7e5948170308a93db4dc3df043d132359eed9c3c44542ea4be4b961ee87c7a14f02a9c3bd7ef5e6425adcc19daeca8a790fc80f0b72aff6ffd5d6291c209bf7a1de23830871c2f1daa0cfe2fa8538f6f2b77ddaeae37369c8c0a0a93663615ee6a33479bff6096151ac3bf860154a9db431323da62250ae9f74d939b05766c0138c2f805baa2102c0b4b0f3bef267b0925f9f3ce15a36a566acb9ed40b3904b4bdd52248db5169605c4477950cbc78f1d02c876e8e65fc685351278a961f3c0e50906cf0a94401de5549c4b13db0c3b702b73151c465800a37245fd206a