www.airtel.lk

- Bharti Airtel Lanka Pvt Ltd -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0f:9b:11:48:21:88:33:76:b1:d8:4c:e5:ce:a2:1c:17 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bharti Airtel Lanka Pvt Ltd

Organization: Bharti Airtel Lanka Pvt Ltd
Organization unit: IT
Locality: Colombo
Country: LK

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:9b:11:48:21:88:33:76:b1:d8:4c:e5:ce:a2:1c:17
Serial Number (int): 20743576465615261747202327848562072599
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ae:d7:d9:bf:6c:e3:50:ac:ac:df:72:69:64:3d:da:ec:2e:0b:33:4d
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): a8:51:00:5a:92:7f:cf:4e:0c:8a:ad:eb:65:c3:84:45:15:bb:68:e3
Fingerprint (sha256): 28:28:e3:cf:a0:7d:5e:3a:c2:80:48:90:be:de:5e:d2:d3:47:0c:21:4a:f3:0a:ac:68:2a:72:93:e5:8c:d5:6a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate www.airtel.lk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.airtel.lk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.airtel.lk
airtel.lk

Other certificates including the domain name airtel.lk

(limited to 100 certificates)
ebpp.airtel.lk
vpn.airtel.lk
ltrack.airtel.lk
mytst.airtel.lk
idocs.airtel.lk
my.airtel.lk
vas.airtel.lk
tst.recharge.airtel.lk
mail.airtel.lk
vpn.airtel.lk
my.airtel.lk
tst.recharge.airtel.lk
sewacenter.airtel.lk
recharge.airtel.lk
mselfcare.airtel.lk
www.airtel.lk
vpn.airtel.lk
vlmtp.airtel.lk
www.airtel.lk
www.airtel.lk
ae.slvpn.airtel.lk
www.airtel.lk
my.airtel.lk
tst.recharge.airtel.lk
idocs.airtel.lk
sewacenter.airtel.lk
vpn.airtel.lk
recharge.airtel.lk
sfa.airtel.lk
ebpp.airtel.lk
idocs.airtel.lk
ebpp.airtel.lk
vas.airtel.lk
sewacenter.airtel.lk
my.airtel.lk
sfa.airtel.lk
slvpn.airtel.lk
www.airtel.lk
recharge.airtel.lk
mytstapp.airtel.lk
sewacenter.airtel.lk
msfa.airtel.lk
my.airtel.lk
vas.airtel.lk
sp.slvpn.airtel.lk
recharge.airtel.lk
vpn.airtel.lk
idocs.airtel.lk
my.airtel.lk
ae.slvpn.airtel.lk
sfa.airtel.lk
www.airtel.lk
recharge.airtel.lk
sewacenter.airtel.lk
www.airtel.lk
vas.airtel.lk
tst.recharge.airtel.lk
sfa.airtel.lk
recharge.airtel.lk
myappsec.airtel.lk
recharge.airtel.lk
sfa.airtel.lk
sfa.airtel.lk
sp.slvpn.airtel.lk
ebpp.airtel.lk
abms.airtel.lk
ebpp.airtel.lk
ebpp.airtel.lk
recharge.airtel.lk
vpn.airtel.lk
myappsec.airtel.lk
recharge.airtel.lk
sp.slvpn.airtel.lk
www.airtel.lk
bp.slvpn.airtel.lk
vas.airtel.lk
ebpp.airtel.lk
msfa.airtel.lk
ebpp.airtel.lk
recharge.airtel.lk
bp.slvpn.airtel.lk
ebpp.airtel.lk
tst.recharge.airtel.lk
airtel.lk
vlmtp.airtel.lk
vpn.airtel.lk
sewacenter.airtel.lk
mail.airtel.lk
recharge.airtel.lk
slvpn.airtel.lk
slvpn.airtel.lk
ebpp.airtel.lk
retailer.airtel.lk
mail.airtel.lk
retailer.airtel.lk
ebpp.airtel.lk
recharge.airtel.lk
vlmtp.airtel.lk
vpn.airtel.lk
reload.airtel.lk

Certificate

The complete raw certificate details for www.airtel.lk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZowpzYmgbYrOBIezu6z
v2bo7H2Sj/DswOXMj7KjZlUQbWmPZMJ/hZmgCkly2GlrOXhXRoZ2D9FYfldZ/uHF
k7Bqo/x5rgFlezDpb8i8idOPZt2NmiTM1nIiZtfrN3VhIXj2D1DESx6CJz76102v
4ctIFyLW6EV9XKhKZcg80kZXT5nafdg0wCIImH9Tj3LjOgfZX5qjlP4pXMGQxlnZ
4l8TAh7hJoC1Q8sNrYbnv92GobOEzKYHx9/YHgsaXw+q7z/kMiN6re2ekhhtClSk
+yhlPbfBIeh7NrsNQeEuNUEEM99mizwEYv8yu7gsUBIB2oyPySpkAJRfDb3gWPww
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20743576465615261747202327848562072599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colombo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bharti Airtel Lanka Pvt Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.airtel.lk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21915260707319920498559828521325835978404190062282078206261732252685165656258723752204298667945730508050006096727425369827529253700736124396043420841968158755412310450111185931212785600352121241057220453060427814450937856249897422043595775817442871432429699980742236847097677213662586469847009648248546159440818042071569931685369582923075419602814638072275871436158951622741665344180744346741272837886829365289270303305217289940804852404126634583828687703924569845840716862670395954618151503817199537555299434039661379683855875357440362868487485551080230107412150696107002755130186405335520800611963505616491692961899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aed7d9bf6ce350acacdf7269643ddaec2e0b334d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airtel.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airtel.lk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001667cdad3550000040300463044022008a07baa16903d2d169da2b33aaf8b2a01b05fbb2040b0f723dc40c19d738ea70220546a4acc7e1cb613985a915292703556ae245c9ca17a0f573337015d54d47cff0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001667cdad3660000040300473045022100c242f360c27cdc8625d61c047df1d0d0535f89831e49dc4d0b4820bb83a1398902207389b12aa9881350c1bbd5f5a547d9a040cab65904b1c2a6a090e482a9a4ed47
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009b8053b940f9b5210dc5aa37181cc6c4f944c558b17ce71240978f367376393edf4361c62efe57c693b20ce50dc8787388019b053a0b9790cdd832fef7b209602db8991abccc53e980d596f900d072324358f5a45ab391a7fec4da06fcd950512c065f1edb62ef062b7054979169df3fd60b5104c976bf5e9015177229ee936a706bfcb0e71dcf5c04ce86a86fb6d18973fc9097ba2676cb09e351554fe3d93c74c9bc6dd4ef7521a25fda37c4a7bbcaa31b518b1f35e816e52e89eb4ef994346e81d45407d87d02ba596675ce48b4a37e72c5ec82975c16803d5b8cd6a3de26dbb252f49ebc7fc3f6121b63df45b8dfe290a045691b5bd2693bdb5b19eac5ec