oauth.digitrend.it
Issued by R3
About this certificate
This digital certificate with serial number 03:f0:03:f3:40:a9:e9:95:35:27:e2:bf:5d:f3:a6:3b:80:00 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=oauth.digitrend.it
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:f0:03:f3:40:a9:e9:95:35:27:e2:bf:5d:f3:a6:3b:80:00Serial Number (int): 343009876579966014368688310281944153423872
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c9:48:6a:b2:29:02:6d:35:1a:ec:2a:91:31:36:42:cf:87:d9:b7:be
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 51:e8:cf:fa:90:51:9a:ca:7e:64:72:74:0e:90:39:94:15:d6:44:2d
Fingerprint (sha256): 28:ee:71:e9:ea:42:a3:df:06:77:ce:06:27:20:84:c2:06:ef:22:c9:b0:97:c1:29:5f:fc:8e:3f:84:8b:ac:13
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate oauth.digitrend.it
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for oauth.digitrend.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
oauth.digitrend.it
Other certificates including the domain name digitrend.it
(limited to 100 certificates)
itservicedesk.locknet.com
itservicedesk.locknet.com
app.digitrend.it
sviluppo.digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
app.digitrend.it
itservicedesk.locknet.com
digitrend.it
itservicedesk.locknet.com
oauth.digitrend.it
digitrend.it
oauth.digitrend.it
sviluppo.digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
techsupport.dmgevents.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
techsupport.dmgevents.com
itservicedesk.locknet.com
digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
digitrend.it
itservicedesk.locknet.com
techsupport.dmgevents.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
servicedesk.aspirehp.org
itservicedesk.locknet.com
helpdesk.loftinequip.com
itservicedesk.locknet.com
sviluppo.digitrend.it
sviluppo.digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
digitrend.it
digitrend.it
helpdesk.loftinequip.com
sviluppo.digitrend.it
sviluppo.digitrend.it
digitrend.it
itservicedesk.locknet.com
servicedesk.aspirehp.org
itservicedesk.locknet.com
service.digitrend.it
servicedesk.aspirehp.org
itservicedesk.locknet.com
service.digitrend.it
itservicedesk.locknet.com
techsupport.dmgevents.com
service.digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
helpdesk.loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
sviluppo.digitrend.it
servicedesk.aspirehp.org
digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
sviluppo.digitrend.it
itservicedesk.locknet.com
digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
helpdesk.loftinequip.com
itservicedesk.locknet.com
digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
service.digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
sviluppo.digitrend.it
itservicedesk.locknet.com
sviluppo.digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
app.digitrend.it
sviluppo.digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
app.digitrend.it
itservicedesk.locknet.com
digitrend.it
itservicedesk.locknet.com
oauth.digitrend.it
digitrend.it
oauth.digitrend.it
sviluppo.digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
techsupport.dmgevents.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
techsupport.dmgevents.com
itservicedesk.locknet.com
digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
digitrend.it
itservicedesk.locknet.com
techsupport.dmgevents.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
servicedesk.aspirehp.org
itservicedesk.locknet.com
helpdesk.loftinequip.com
itservicedesk.locknet.com
sviluppo.digitrend.it
sviluppo.digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
digitrend.it
digitrend.it
helpdesk.loftinequip.com
sviluppo.digitrend.it
sviluppo.digitrend.it
digitrend.it
itservicedesk.locknet.com
servicedesk.aspirehp.org
itservicedesk.locknet.com
service.digitrend.it
servicedesk.aspirehp.org
itservicedesk.locknet.com
service.digitrend.it
itservicedesk.locknet.com
techsupport.dmgevents.com
service.digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
helpdesk.loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
sviluppo.digitrend.it
servicedesk.aspirehp.org
digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
sviluppo.digitrend.it
itservicedesk.locknet.com
digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
helpdesk.loftinequip.com
itservicedesk.locknet.com
digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
service.digitrend.it
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
sviluppo.digitrend.it
itservicedesk.locknet.com
sviluppo.digitrend.it
itservicedesk.locknet.com
Certificate
The complete raw certificate details for oauth.digitrend.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgISA/AD80Cp6ZU1J+K/XfOmO4AAMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MDcxOTM4MDRaFw0yNDA4MDUxOTM4MDNaMB0xGzAZBgNVBAMT Em9hdXRoLmRpZ2l0cmVuZC5pdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANZ7VpnbFKtUZMMPP2rFxOzQIy+4g9p6jP96tiamhWCerJgO2c2x1+XseCAD yVHU+/uuofgCZYi/GCrlzYMoHB3+e7+WTLz856PUIbI9euqYx9VOHrctaQzjKTAi PnZYH6pu/a7yLyEW8zKrUnxbFVOf8u7fyX9K69UM70YBMiuAN5OwpzKfus49b2It 722/nphIcYtUDKZ5ZH8Nx5f44pxfV4OsmPGHdlR8ofeCV8ECp/2bcT7OUoOwnDU6 SrHPXhSTX7/UnzZZqYL/5ee2lB0n7nM/o2CSsBSiEY4YWdA+UU89tfVRmG/qmq3d YU+AjJ/M1T2JwQZHsmO4CJMMtRMCAwEAAaOCAhQwggIQMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUyUhqsikCbTUa7CqRMTZCz4fZt74wHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wHQYDVR0RBBYwFIISb2F1dGguZGlnaXRyZW5kLml0MBMGA1UdIAQMMAow CAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAPxdLT9ciR1iUHWUc hL4NEu2QN38fhWrrwb8ohez4ZG4AAAGPVMcUYwAABAMARzBFAiBS9ouGB9BN26bO Vumam3Bp2p9LlzcFB1zApHktHzT2DQIhAMDlU/B2ESP9QlJEucijbB4tIXFKtoso gy5YnGU7E1WrAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGP VMcUWwAABAMARzBFAiEAuJgGD71DS11ueeDrl5gWCPoI3XZzpcRMrEL9fRWQeDEC IAm07K5rYEEEiQg769PJ66mur15S94wXvNm1cEJvH28xMA0GCSqGSIb3DQEBCwUA A4IBAQAYof6k257Uo6Ap5xJActFcUduqMoZNsCwFZKYabXOUOAkIQsucWTxYn93o 8mspyVEelJ366R0MKcMNQuCC2cEQk81UN4mTrlJwLEE4d+L+3MBrf5++nwr0Dad6 lulnQY4aInkhzpBMn6zHgTQNY43CR3SmgtTw09X/aS3p1I6A5WVPQWsbGTl5evXZ uCrH8CiaNbff64XDzLCB9uu/DU8e0SIf0esCNcGHose0wiVFmR7PKIWCSVBdSlCI UfXjG+uXZus/esP3Tl8oYMATktZoEZy59ZIlIqswnVxd0NvJ7qC3QTa+95vmxeYJ aDpQsVEoAFtvKS3GismN11K5zivC -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ntWmdsUq1Rkww8/asXE 7NAjL7iD2nqM/3q2JqaFYJ6smA7ZzbHX5ex4IAPJUdT7+66h+AJliL8YKuXNgygc Hf57v5ZMvPzno9Qhsj166pjH1U4ety1pDOMpMCI+dlgfqm79rvIvIRbzMqtSfFsV U5/y7t/Jf0rr1QzvRgEyK4A3k7CnMp+6zj1vYi3vbb+emEhxi1QMpnlkfw3Hl/ji nF9Xg6yY8Yd2VHyh94JXwQKn/ZtxPs5Sg7CcNTpKsc9eFJNfv9SfNlmpgv/l57aU HSfucz+jYJKwFKIRjhhZ0D5RTz219VGYb+qard1hT4CMn8zVPYnBBkeyY7gIkwy1 EwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 343009876579966014368688310281944153423872 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 19:38:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-05 19:38:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oauth.digitrend.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27075817637951895109516698196145163039180810165852750090600942107073740440266565228350425066451533660650287913910385027578476852626415923391604162250444301035848359264777150375112218769759008703436158547786826570484270938088214740386912485657779578819001980552031187184499164289181015617299242019971756238441596523909739361025224154498044837492677069453679959276234593989737921774677431512238732999614008792697731834796181134018523067469151629617905207438185263918781396828207524617081200086563753977400942046108481114909449905967420406716813827508022683926871709048896019503194484512802297983645885843034263178229011 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c9486ab229026d351aec2a91313642cf87d9b7be . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.digitrend.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f54c714630000040300473045022052f68b8607d04ddba6ce56e99a9b7069da9f4b973705075cc0a4792d1f34f60d022100c0e553f0761123fd425244b9c8a36c1e2d21714ab68b28832e589c653b1355ab00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f54c7145b0000040300473045022100b898060fbd434b5d6e79e0eb97981608fa08dd7673a5c44cac42fd7d15907831022009b4ecae6b60410489083bebd3c9eba9aeaf5e52f78c17bcd9b570426f1f6f31 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0018a1fea4db9ed4a3a029e7124072d15c51dbaa32864db02c0564a61a6d739438090842cb9c593c589fdde8f26b29c9511e949dfae91d0c29c30d42e082d9c11093cd54378993ae52702c413877e2fedcc06b7f9fbe9f0af40da77a96e967418e1a227921ce904c9facc781340d638dc24774a682d4f0d3d5ff692de9d48e80e5654f416b1b1939797af5d9b82ac7f0289a35b7dfeb85c3ccb081f6ebbf0d4f1ed1221fd1eb0235c187a2c7b4c22545991ecf28858249505d4a508851f5e31beb9766eb3f7ac3f74e5f2860c01392d668119cb9f5922522ab309d5c5dd0dbc9eea0b74136bef79be6c5e609683a50b15128005b6f292dc68ac98dd752b9ce2bc2