ticketak.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:c4:5e:bb:09:40:2e:ca:56:77:e6:96:84:ae:18:3e:e6:09 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ticketak.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c4:5e:bb:09:40:2e:ca:56:77:e6:96:84:ae:18:3e:e6:09Serial Number (int): 328158120290527776639093205765790598358537
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b8:7f:3c:74:cc:aa:d7:23:d5:a2:56:79:16:8f:85:5b:ac:5e:74:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 9f:a9:ff:7c:fe:5b:79:82:d7:a8:97:f8:60:0d:87:60:ba:ef:b5:0d
Fingerprint (sha256): 27:bd:89:26:fb:4e:ea:1e:d6:ac:a6:d3:9e:2b:ab:6c:72:6c:3a:8c:a5:ad:cd:88:59:13:4d:b0:b1:ff:ea:4f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ticketak.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ticketak.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ticketak.com
www.ticketak.com
www.ticketak.com
Other certificates including the domain name ticketak.com
(limited to 100 certificates)
www.ticketak.com
api2.ticketak.com
url.ticketak.com
ticketak.com
cinemaakil.ticketak.com
prod.ticketak.com
cinemaakil.ticketak.com
ticketak.com
ticketak.com
cinema.ticketak.com
prod.ticketak.com
prod.ticketak.com
thegscapp.com
img.ticketak.com
admin.ticketak.com
ticketak.com
*.ticketak.com
cinemaakil.ticketak.com
ticketak.com
ticketak.com
admin.ticketak.com
ticketak.com
url.ticketak.com
devapi.ticketak.com
cinemaakil.ticketak.com
prod.ticketak.com
brandon-marshall.com
cinemaakil.ticketak.com
prod.ticketak.com
ticketak.com
*.ticketak.com
prod.ticketak.com
cinemaakil.ticketak.com
kw.ticketak.com
cinemaakil.ticketak.com
ticketak.com
dev.ticketak.com
api2.ticketak.com
ticketak.com
img.ticketak.com
*.ticketak.com
*.ticketak.com
uae.ticketak.com
api.ticketak.com
cinemaakil.ticketak.com
shikaku.myjobstep.jp
cinemaakil.ticketak.com
ticketak.com
admin.ticketak.com
api2.ticketak.com
url.ticketak.com
ticketak.com
cinemaakil.ticketak.com
prod.ticketak.com
cinemaakil.ticketak.com
ticketak.com
ticketak.com
cinema.ticketak.com
prod.ticketak.com
prod.ticketak.com
thegscapp.com
img.ticketak.com
admin.ticketak.com
ticketak.com
*.ticketak.com
cinemaakil.ticketak.com
ticketak.com
ticketak.com
admin.ticketak.com
ticketak.com
url.ticketak.com
devapi.ticketak.com
cinemaakil.ticketak.com
prod.ticketak.com
brandon-marshall.com
cinemaakil.ticketak.com
prod.ticketak.com
ticketak.com
*.ticketak.com
prod.ticketak.com
cinemaakil.ticketak.com
kw.ticketak.com
cinemaakil.ticketak.com
ticketak.com
dev.ticketak.com
api2.ticketak.com
ticketak.com
img.ticketak.com
*.ticketak.com
*.ticketak.com
uae.ticketak.com
api.ticketak.com
cinemaakil.ticketak.com
shikaku.myjobstep.jp
cinemaakil.ticketak.com
ticketak.com
admin.ticketak.com
Certificate
The complete raw certificate details for ticketak.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgISA8ReuwlALspWd+aWhK4YPuYJMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMjcxMTQzMTJaFw0x OTAyMjUxMTQzMTJaMBcxFTATBgNVBAMTDHRpY2tldGFrLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAOUK5u9mBpBTn+FGEFUdP0tpunm+xU1CRNH4 1jA/02R7LbEv54itUKOn7jFt4DS51mqvWtARKWleaXzR/36jkQ7LbcnK6JkIDL6N SvO9GdV5YOxkOBnovsBMTpI8D5WHIq5v3d+HnFDafIaKAsnpoAouoDgv0vyt7XoW 65Smtdp9UP2leBT3vf/5/aH4uiCBFMI+FTZ0DdiFmGUoUm01B3n9J4J30EDHmwCd H6KxuBYBJCD44DNlF1b2MQ/RUE0tkaHluu8Fw5ZyrtpR33lAvvxYIldKMuDDJXl9 AtGPZprl657ESvMuTwe5Dy/GHSN5wNBQV4tFUedv9ZLYSh29beAoYXPKlT435M/b tVQLqXklm2fTo7RhTJd8I1TRCU9gyVn6fSDTWNHf6+sroeCAvQanL23MkO+wAGdT eFsIujY4R2G8T9yxYsoa6UXcMsJsiDB9mcB6h7SuqoZNis819zBKB6j26wr7Kv/0 5TyDSP57Sys3HeZpFVOLBfWvbASzJJShHdzwQaeSJRweNAIpcCWvldgW939fT78e 6b6GJN+uPIvQGz9Wa3X1mHUm3X8QQnkPOiErLx1mIxYIweM+BbRh1jQOmyhqrZcC 9Z1SDcg/GkJ+98EqLfHE2ZNTAGUgynM9k9fV+2ornfxBI5ojp1MonCB1hDJ01Ta8 UGOEL2ZJAgMBAAGjggJyMIICbjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLh/PHTM qtcj1aJWeRaPhVusXnTAMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIMdGlja2V0YWsuY29tghB3d3cu dGlja2V0YWsuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYK KwYBBAHWeQIEAgSB9ASB8QDvAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV5 5hB7zFYAAAFnVTHoAAAABAMARzBFAiBtCjOjYxeCg5EXTSxyDYRX8wv4NuSdzRin iB8xgqND4wIhAIaseGI9PWCkCNc188LyL1MGmWN4hrMKyFtpZHTIIOZkAHUAY/Lb zeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFnVTHmCAAABAMARjBEAiBH jiPNZ/Z0MHVrAgooXaES2gcdkcO++4WgIkFWoAG+5QIgWcSVrq9nahsUklzQJDpo BEc28zMtHUpvNZSS1Yzee0swDQYJKoZIhvcNAQELBQADggEBAHZp4OO1BHSXlznE a/ka1byEthmwm4BKAMgAt6eFC35p94fOdeFB7Jg2SPpbUYR+BKvyUEADnkyiA6mK sFdfTPr3YupFlFZmVBGxqrAlrctPb52BldFO+T/OeOr5pkEu7WKIcElsNL7Xmhoa 0zVPFLwCJEM6Sd959gnKk08yLjWbm0S8RTDXurDwTJ3Fp2R2oaz879pjfVM25NSI RS2ap3ZZWR8oHNvA5Jj4rm2AP4ynFIIwP2hp4bj1+a9J/s96Kn1R9SzHxY9lc0y0 GcNMZdHp9F8Mkz9yaapdQkNhyG/JNHpysHPivFf8QnlNz5K4hEooTJi1DtvNquxU HoKchD0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5Qrm72YGkFOf4UYQVR0/ S2m6eb7FTUJE0fjWMD/TZHstsS/niK1Qo6fuMW3gNLnWaq9a0BEpaV5pfNH/fqOR DsttycromQgMvo1K870Z1Xlg7GQ4Gei+wExOkjwPlYcirm/d34ecUNp8hooCyemg Ci6gOC/S/K3tehbrlKa12n1Q/aV4FPe9//n9ofi6IIEUwj4VNnQN2IWYZShSbTUH ef0ngnfQQMebAJ0forG4FgEkIPjgM2UXVvYxD9FQTS2RoeW67wXDlnKu2lHfeUC+ /FgiV0oy4MMleX0C0Y9mmuXrnsRK8y5PB7kPL8YdI3nA0FBXi0VR52/1kthKHb1t 4Chhc8qVPjfkz9u1VAupeSWbZ9OjtGFMl3wjVNEJT2DJWfp9INNY0d/r6yuh4IC9 BqcvbcyQ77AAZ1N4Wwi6NjhHYbxP3LFiyhrpRdwywmyIMH2ZwHqHtK6qhk2KzzX3 MEoHqPbrCvsq//TlPINI/ntLKzcd5mkVU4sF9a9sBLMklKEd3PBBp5IlHB40Ailw Ja+V2Bb3f19Pvx7pvoYk3648i9AbP1ZrdfWYdSbdfxBCeQ86ISsvHWYjFgjB4z4F tGHWNA6bKGqtlwL1nVINyD8aQn73wSot8cTZk1MAZSDKcz2T19X7aiud/EEjmiOn UyicIHWEMnTVNrxQY4QvZkkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 328158120290527776639093205765790598358537 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-27 11:43:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-25 11:43:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ticketak.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 934412228485042916948296100994941116148954957016613802734548147791078366515960027929663980989158144470183152182988500236394746319451313325693912807089597210206440378623224105884327756319125743912880904974506011179601592778664391168376369882968290444926578531892167064800359801602009623491751107455883015052286162517032728802239401625388654875587766152323101096020297654841492237077971314252491036650080179239720121964297763144048011667668874263358680586913190112609805846933265433770881909063263903847785452240520276466412538431206859712389028834869321477407179467693199952307312636500564086873497417984166043683082858516494857739889523701265592127556508293265305501031303074481925344526556314005066253352995057471849147335779455588777269567452752666901376057762742040804204607089180353719617538164076625390457382935587296734434074456504446513270114141066875016393435820217975451706872084474805025279562747794959691011288488277322011540689705222473895826752122887560027372757262056758187376972977020251269021193706859659662208687204244922543721091377379787962136100862201630097220454632949568074529312174594998185504649898756613354166539595376199126520943964509991439011404009601155615517587606615341223190442001387292768866740954697 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b87f3c74ccaad723d5a25679168f855bac5e74c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketak.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ticketak.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001675531e800000004030047304502206d0a33a36317828391174d2c720d8457f30bf836e49dcd18a7881f3182a343e302210086ac78623d3d60a408d735f3c2f22f530699637886b30ac85b696474c820e66400750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001675531e60800000403004630440220478e23cd67f67430756b020a285da112da071d91c3befb85a0224156a001bee5022059c495aeaf676a1b14925cd0243a68044736f3332d1d4a6f359492d58cde7b4b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007669e0e3b50474979739c46bf91ad5bc84b619b09b804a00c800b7a7850b7e69f787ce75e141ec983648fa5b51847e04abf25040039e4ca203a98ab0575f4cfaf762ea459456665411b1aab025adcb4f6f9d8195d14ef93fce78eaf9a6412eed628870496c34bed79a1a1ad3354f14bc0224433a49df79f609ca934f322e359b9b44bc4530d7bab0f04c9dc5a76476a1acfcefda637d5336e4d488452d9aa77659591f281cdbc0e498f8ae6d803f8ca71482303f6869e1b8f5f9af49fecf7a2a7d51f52cc7c58f65734cb419c34c65d1e9f45f0c933f7269aa5d424361c86fc9347a72b073e2bc57fc42794dcf92b8844a284c98b50edbcdaaec541e829c843d