forum.teknikk.tech

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8d:aa:1b:64:01:a2:aa:39:a6:2d:84:59:9b:10:d4:f1:97 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=forum.teknikk.tech

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8d:aa:1b:64:01:a2:aa:39:a6:2d:84:59:9b:10:d4:f1:97
Serial Number (int): 309542782510802210315849163684294371373463
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:1b:79:df:fc:47:59:b4:67:12:10:cb:42:e1:e1:63:15:3e:cf:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:63:32:b2:4a:73:29:8b:b3:7c:9a:80:b4:9f:ec:22:cf:db:2c:48
Fingerprint (sha256): 2b:91:c6:d3:98:22:86:2d:59:af:7c:a8:14:18:d3:e1:72:7b:7c:48:d8:b3:22:cd:19:d8:9f:77:d5:21:bd:43

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate forum.teknikk.tech

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forum.teknikk.tech

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forum.teknikk.tech

Other certificates including the domain name teknikk.tech

(limited to 100 certificates)
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
teknikk.tech
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
teknikk.tech
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
i5.io
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
teknikk.tech
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
forum.teknikk.tech
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
i5.io
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
teknikk.tech
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
forum.teknikk.tech
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
teknikk.tech
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
i5.io
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com
sni65300.cloudflaressl.com

Certificate

The complete raw certificate details for forum.teknikk.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgISA42qG2QBoqo5pi2EWZsQ1PGXMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzAzMTYwMTAxMDBaFw0x
NzA2MTQwMTAxMDBaMB0xGzAZBgNVBAMTEmZvcnVtLnRla25pa2sudGVjaDCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2GuWuz/WG9Lfb98PYUH/0MOb1Q
88aqRE22i8o/L43EKmbbp1dxhjA9386onU5AwIH9VQunEcuKEWtA0JrnhVSRIJ5b
1hdZTg13vL59PJHDaZy1RcotJ7mmocLm7F74qAaexRyWS2TjZ4WnYO3AghEppgR5
gpXgJCtbunnxjFg1LKHlFermXsmPPRPdAQ1BDSxjEnkS3get23r2UO+NBJPNnVvR
a08iO7nR4TDtFBa+4IgD/FTYtpfqE3JkYeTQc7b86zgS6PplHJXjfaDV5DcElLwQ
NDIZJKVAbuGYNDAnEEwd9JXvySV/11WZmgI16du3Vu3Jqt6MfP+iqNb52uqOwlN2
irJ996vmw7JUFT8J8pY7Y7ovD9nPjr8Hf53F9qEP9Y6xuwN6DIrHX6r76XJSMd59
UF5J1JLyE4IdZCexqQBr4IuDNKPxnYr95n1rMIj8mV2f4TuTsp2krq4/hm51et96
F5fBkZIcQMASSOWdh6MG5vo9ZFB13DDTsGYlFgdxEIM+rK8jtZvZ/y7uKsWe4zU3
91wMc4d4QAIR1lFbQdI6gxzqmH662A77CNdxFldvTMpgnGrpA+Dl1gYrj34HwhOA
XziYZTmfR06rSQhvPjXMpQXJHnom1dJDUr4CxpPxJBRGC79vNCIgbLLoC8vTo9d1
KmNlMHz35aA5WBKZAgMBAAGjggITMIICDzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FNobed/8R1m0ZxIQy0Lh4WMVPs+uMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB0GA1UdEQQWMBSCEmZvcnVtLnRla25p
a2sudGVjaDCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEw
gdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggr
BgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVk
IHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ug
d2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0
c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQCHIlYQ
5x0exXiItDUg7XkxtMDj6/NPmSb3Cw7FQ8sMnE5SNNttWd5CT6ZmO1UOBpEukMRt
FRq4yVdcxD9w0V26+fzTMu7vfXRojqCPyF3P3Gr/St6j0YsrzbbDm9THPKsOdhGJ
OzqzxmiZGnHFiYppIHajKsjIbYljneUjAYIV0vptJxbF4Jj17IazGKvRp7nucv7C
Qtx+sd59eV6CC5Pzth2nFVfs3OYSxZEcguar/ZLWmKbSHesVGOIBeLIWkfEpkBsi
2ybr/NCN1DyvxIEBnTfEygHv/zxDnhWOXfJvU96F3fZIA33rPCx3BwqWyJQ7AaLB
vWPdTxBA4VpdWa8W
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309542782510802210315849163684294371373463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-16 01:01:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-14 01:01:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forum.teknikk.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 707925404978268682310554036665636774214817633828836896434720194473271616428266956464176394001641761508492028325643500164168731347615145783434230815515211044742929756368944653185330256277183002405885193063831417988551913188842039122849691723323690091035685309519810499164245005371061339617984621913791291208030052778773743636029646488693991845333835169368822088896008991070560543965357231657797037324570807856148767703373388240024454601938313927059431547212577654948688776035259862414280553738267520540040372905185344635101228144447671012088332977663949773592184627147357834596973037547056238146978989127881576910861457179490451816031853707213848596115816065399696099248424904576659153206746342599577125579696310843422635925621219718030329065653454783601385238467955487521131276280467078008606230129142847529327455219508916873120530219811988374415353399562568147979738816457829854768745251451554201446630060297935745204095851182491792295335955821073024875098947702714726905923559653169585628015471418614335748006859584797662241467156434630471099515354187264486448564771571708891837158260219659141533751647975053657804954435630297409472024272128295429323268909358593932916758059795320119427594312437027633380016851872453178089671234201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da1b79dffc4759b4671210cb42e1e163153ecfae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.teknikk.tech'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0087225610e71d1ec57888b43520ed7931b4c0e3ebf34f9926f70b0ec543cb0c9c4e5234db6d59de424fa6663b550e06912e90c46d151ab8c9575cc43f70d15dbaf9fcd332eeef7d74688ea08fc85dcfdc6aff4adea3d18b2bcdb6c39bd4c73cab0e7611893b3ab3c668991a71c5898a692076a32ac8c86d89639de523018215d2fa6d2716c5e098f5ec86b318abd1a7b9ee72fec242dc7eb1de7d795e820b93f3b61da71557ecdce612c5911c82e6abfd92d698a6d21deb1518e20178b21691f129901b22db26ebfcd08dd43cafc481019d37c4ca01efff3c439e158e5df26f53de85ddf648037deb3c2c77070a96c8943b01a2c1bd63dd4f1040e15a5d59af16