www.symisponges.symiart.com
Issued by R3
About this certificate
This digital certificate with serial number 03:40:72:61:7d:9f:c5:41:2a:56:63:22:ab:cf:78:92:81:aa was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.symisponges.symiart.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:40:72:61:7d:9f:c5:41:2a:56:63:22:ab:cf:78:92:81:aaSerial Number (int): 283266967470495085512591543178192735076778
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a6:24:07:7e:f0:a2:27:92:be:b5:dc:af:4b:2b:1b:28:62:9f:90:c6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ae:57:91:6c:bf:a4:26:3c:4b:a5:46:35:de:d3:0e:4b:14:67:41:84
Fingerprint (sha256): 2d:c9:27:b7:75:81:40:49:d9:cf:f8:95:1b:f0:f5:22:77:ca:25:e6:57:4d:d0:2d:ba:c5:d8:63:da:0f:ce:9d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.symisponges.symiart.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.symisponges.symiart.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.symiart.com
*.symisponges.com
symisponges.com
www.symisponges.symiart.com
*.symisponges.com
symisponges.com
www.symisponges.symiart.com
Other certificates including the domain name symiart.com
(limited to 100 certificates)
magictorch.me.uk
casaluna-symi.com
fussi.co
fussi.co
merchanthousesymi.com
symiart.com
merchanthousesymi.com
mediagee.com
mediagee.com
hollie.symiart.com
symihillhouse.com
symiboatexcursion.com
thejcafeportland.symiart.com
takisleatherfashion.com
symihillhouse.com
jcafepdx.net
thejcafeportland.com
merchanthousesymi.com
merchanthousesymi.com
magictorch.me.uk
www.symisponges.symiart.com
casaluna-symi.com
experiencesymi.com
symiart.com
fussi.co
merchanthousesymi.com
experiencesymi.com
jcafepdx.net
fussi.co
symiboatexcursion.com
magictorch.me.uk
takisleatherfashion.com
merchanthousesymi.com
fussi.co
casaluna-symi.com
symiboatexcursion.com
oregonconventioncafe.com
symiart.com
thejcafeportland.com
www.woodlandcottagenorfolk.symiart.com
symiprime.com
www.hardwoodgifts.com
symiart.com
thejcafeportland.com
thejcafeportland.com
symiprime.com
*.symivillagalanis.com
symiboatexcursion.com
symiprime.com
merchanthousesymi.com
www.mediagee.symiart.com
*.symisponges.com
takisleatherfashion.com
*.merchanthousesymi.com
symiart.symiart.com
takisleatherfashion.com
*.woodlandcottagenorfolk.co.uk
symiart.com
symiart.com
casaluna-symi.com
casaluna-symi.com
www.oregonconventioncafe.symiart.com
symiprime.com
mediagee.com
thejcafeportland.com
twlandpservices.com
thejcafeportland.com
magictorch.me.uk
experiencesymi.com
twlandpservices.com
merchanthousesymi.com
takisleatherfashion.com
mediagee.com
magictorch.me.uk
takisleatherfashion.com
jcafepdx.net
mediagee.com
merchanthousesymi.com
symihillhouse.com
casaluna-symi.com
symihillhouse.com
fussi.co
symiboatexcursion.com
symiprime.com
fussi.co
www.twlandpservices.com.symiart.com
thejcafeportland.com
symiart.com
symiart.com
magictorch.me.uk
mediagee.com
fussi.co
www.magictorch.symiart.com
casaluna-symi.com
fussi.co
fussi.co
merchanthousesymi.com
symiart.com
merchanthousesymi.com
mediagee.com
mediagee.com
hollie.symiart.com
symihillhouse.com
symiboatexcursion.com
thejcafeportland.symiart.com
takisleatherfashion.com
symihillhouse.com
jcafepdx.net
thejcafeportland.com
merchanthousesymi.com
merchanthousesymi.com
magictorch.me.uk
www.symisponges.symiart.com
casaluna-symi.com
experiencesymi.com
symiart.com
fussi.co
merchanthousesymi.com
experiencesymi.com
jcafepdx.net
fussi.co
symiboatexcursion.com
magictorch.me.uk
takisleatherfashion.com
merchanthousesymi.com
fussi.co
casaluna-symi.com
symiboatexcursion.com
oregonconventioncafe.com
symiart.com
thejcafeportland.com
www.woodlandcottagenorfolk.symiart.com
symiprime.com
www.hardwoodgifts.com
symiart.com
thejcafeportland.com
thejcafeportland.com
symiprime.com
*.symivillagalanis.com
symiboatexcursion.com
symiprime.com
merchanthousesymi.com
www.mediagee.symiart.com
*.symisponges.com
takisleatherfashion.com
*.merchanthousesymi.com
symiart.symiart.com
takisleatherfashion.com
*.woodlandcottagenorfolk.co.uk
symiart.com
symiart.com
casaluna-symi.com
casaluna-symi.com
www.oregonconventioncafe.symiart.com
symiprime.com
mediagee.com
thejcafeportland.com
twlandpservices.com
thejcafeportland.com
magictorch.me.uk
experiencesymi.com
twlandpservices.com
merchanthousesymi.com
takisleatherfashion.com
mediagee.com
magictorch.me.uk
takisleatherfashion.com
jcafepdx.net
mediagee.com
merchanthousesymi.com
symihillhouse.com
casaluna-symi.com
symihillhouse.com
fussi.co
symiboatexcursion.com
symiprime.com
fussi.co
www.twlandpservices.com.symiart.com
thejcafeportland.com
symiart.com
symiart.com
magictorch.me.uk
mediagee.com
fussi.co
www.magictorch.symiart.com
Certificate
The complete raw certificate details for www.symisponges.symiart.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISA0ByYX2fxUEqVmMiq894koGqMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMDcyMzQ2MzVaFw0yNDA1MDcyMzQ2MzRaMCYxJDAiBgNVBAMT G3d3dy5zeW1pc3Bvbmdlcy5zeW1pYXJ0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALMXspvHScp8ouVFc2NNfaWq76tPaMvLwRjlLWNjqeRoOmjI rdMfoL3gb9wRLbV/2mdptsflVfWvAF4mtYY0VwFVLlMo4MKEl4AjCfB5cv3rAejo inOcsPzlMt5ClDbRtyqwFxTJGeZlNMJkjezBpQ3d6tJs7sZsnISzHeF2+XeQMEem 23pG0dlPCMb2cVkaDQHMl1kNHlbOULR98r4F8AuYCydknR1Er7ob6RR4e6vX97Cv qxOEJJ3duwkzFaP0T9v53387octKQ6l1PuH5RLY5zavXQfvOiqFZzE3VdtJtF6BE SJ1NBUdbVFRsfeeuOO7O8oKwtYn7xUy9yuZP25ECAwEAAaOCAlEwggJNMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUpiQHfvCiJ5K+tdyvSysbKGKfkMYwHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wWQYDVR0RBFIwUIINKi5zeW1pYXJ0LmNvbYIRKi5zeW1p c3Bvbmdlcy5jb22CD3N5bWlzcG9uZ2VzLmNvbYIbd3d3LnN5bWlzcG9uZ2VzLnN5 bWlhcnQuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB 9gSB8wDxAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGNhi5E JQAABAMARzBFAiBw6HSyuC65PMgCEtecq3RGYd4FNDcrCIv7CRy/NomdhwIhALpH 9O0q1Eby+jNQWi+8JEV4EcoozCx67s8kdXA/GfeHAHcAouK/1h7eLy8HoNZObTen 3GVDsMa1LqLat4r4mm31F9gAAAGNhi5EfgAABAMASDBGAiEAtuFs6eEEiDkyHXPm 00pyugKJ94jRuQWLjMC0y8bymqsCIQDbw881X9uFeclelrQTfZ0Z6G9vVKBk0R0e K8Csvr+dIjANBgkqhkiG9w0BAQsFAAOCAQEAWolRWZJhIhuCdYfyXQQ+9+EfxXZg lm5Y5XT2AVPziR+xsXcD8qhdkaXq/m5JNTc2AWq0aEZpKD8U+R+aSnL8U1gWmych aW/kbtY2v4Wii9ie/W3WNtKgGkLZVDPXxrdUOC5IN2sAQQ5pL5gN9IVq4KvgB3+Z OQQcPkWpAi07P1gLX/nRkuFetno1Xok71xn1kr5vjJ361fQGwHY6KKZ9gQe+32X8 9XRSV8QyPA74thouEjPhFNFNHB3QAgxGV2WQKP4TTfVBDC+WajkME9CafXH1s6O3 Uwbp7Uz6otShEHK/xuvnqNpkN8laNHqT0XoE0jOS8Zz+JfFdVfbeBMcTqQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxeym8dJynyi5UVzY019 parvq09oy8vBGOUtY2Op5Gg6aMit0x+gveBv3BEttX/aZ2m2x+VV9a8AXia1hjRX AVUuUyjgwoSXgCMJ8Hly/esB6OiKc5yw/OUy3kKUNtG3KrAXFMkZ5mU0wmSN7MGl Dd3q0mzuxmychLMd4Xb5d5AwR6bbekbR2U8IxvZxWRoNAcyXWQ0eVs5QtH3yvgXw C5gLJ2SdHUSvuhvpFHh7q9f3sK+rE4Qknd27CTMVo/RP2/nffzuhy0pDqXU+4flE tjnNq9dB+86KoVnMTdV20m0XoERInU0FR1tUVGx956447s7ygrC1ifvFTL3K5k/b kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 283266967470495085512591543178192735076778 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 23:46:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 23:46:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.symisponges.symiart.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22608342355146883266644415724270618541624172147410464551815763229714652426553919844915790998183713721930005945559533649120512487030145155991802325872713619764869785101080828294274537180385755152300621809393248437383088016830055214116241000841824056343697004698783679034199881842377920869539229257691961304389811451579306476470794548521918854137450548194729790787195319549685797863915295506684423570203898304795766472300144821806264921807410588991002196055283472044717972292736487198645224340875550519631370008069764031708564173276023170522496419204922629208866445207396917908930082209442263627189574468103417747200913 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a624077ef0a22792beb5dcaf4b2b1b28629f90c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symiart.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symisponges.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symisponges.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.symisponges.symiart.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d862e44250000040300473045022070e874b2b82eb93cc80212d79cab744661de0534372b088bfb091cbf36899d87022100ba47f4ed2ad446f2fa33505a2fbc24457811ca28cc2c7aeecf2475703f19f787007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d862e447e0000040300483046022100b6e16ce9e1048839321d73e6d34a72ba0289f788d1b9058b8cc0b4cbc6f29aab022100dbc3cf355fdb8579c95e96b4137d9d19e86f6f54a064d11d1e2bc0acbebf9d22 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005a8951599261221b827587f25d043ef7e11fc57660966e58e574f60153f3891fb1b17703f2a85d91a5eafe6e49353736016ab4684669283f14f91f9a4a72fc5358169b2721696fe46ed636bf85a28bd89efd6dd636d2a01a42d95433d7c6b754382e48376b00410e692f980df4856ae0abe0077f9939041c3e45a9022d3b3f580b5ff9d192e15eb67a355e893bd719f592be6f8c9dfad5f406c0763a28a67d8107bedf65fcf5745257c4323c0ef8b61a2e1233e114d14d1c1dd0020c4657659028fe134df5410c2f966a390c13d09a7d71f5b3a3b75306e9ed4cfaa2d4a11072bfc6ebe7a8da6437c95a347a93d17a04d23392f19cfe25f15d55f6de04c713a9