librairie.artcurial.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:76:d5:b0:41:f2:b3:72:41:e4:3d:9f:ea:a7:92:ed:03:e0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=librairie.artcurial.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:d5:b0:41:f2:b3:72:41:e4:3d:9f:ea:a7:92:ed:03:e0
Serial Number (int): 301774217836886143350417158106072686068704
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:12:23:f1:c9:89:c6:e1:db:56:5a:ce:77:5a:ee:e7:99:d6:e2:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): da:1b:12:c3:eb:1b:7c:de:9c:ff:3c:11:a6:24:1b:a2:b1:af:80:c8
Fingerprint (sha256): 2f:06:b2:7a:a0:11:7f:87:5f:b2:72:11:aa:a1:21:ac:d8:12:73:21:ca:e1:59:2c:23:08:78:bf:c8:36:6b:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate librairie.artcurial.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for librairie.artcurial.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

librairie.artcurial.com

Other certificates including the domain name artcurial.com

(limited to 100 certificates)
m2.shared.global.fastly.net
m2.shared.global.fastly.net
artcurial.com
m2.shared.global.fastly.net
artcurial.com
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
sni.cloudflaressl.com
artcurial.com
*.artcurial.com
m2.shared.global.fastly.net
www.artcurial.com
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
librairie.artcurial.com
m2.shared.global.fastly.net
librairie.artcurial.com
m2.shared.global.fastly.net
m2.shared.global.fastly.net
auctions-dev.artcurial.com
m2.shared.global.fastly.net
librairie.artcurial.com
m2.shared.global.fastly.net
www.artcurial.com
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
librairie.artcurial.com
m2.shared.global.fastly.net
m2.shared.global.fastly.net
myaccount-dev.artcurial.com
www.artcurial.com
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
staging-auctions.artcurial.com
m2.shared.global.fastly.net
m2.shared.global.fastly.net
librairie.artcurial.com
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
librairie.artcurial.com
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
librairie.artcurial.com
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
www.artcurial.com
m2.shared.global.fastly.net
auctions.artcurial.com
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
m2.shared.global.fastly.net
librairie.artcurial.com
m2.shared.global.fastly.net
m2.shared.global.fastly.net
www.artcurial.com
m2.shared.global.fastly.net
myaccount-dev.artcurial.com
m2.shared.global.fastly.net
www.artcurial.com
m2.shared.global.fastly.net
www.artcurial.com
m2.shared.global.fastly.net

Certificate

The complete raw certificate details for librairie.artcurial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgISA3bVsEHys3JB5D2f6qeS7QPgMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTMwMzA5MTFaFw0x
OTA4MTEwMzA5MTFaMCIxIDAeBgNVBAMTF2xpYnJhaXJpZS5hcnRjdXJpYWwuY29t
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtu19vweHegXOEFZwsbzQ
MQfYy93ligLF5PWDGW4kI6HljqoCB0r5SjBFiNLl4U0p1fDeteHZT/D8BUz1kE/6
56vHMHdfPXJhHhHgdGUqN/dA++lHkLveXSLUnBNci/udycXqWfAIoFpqonQD6tZI
HH3mEe/LAKcmpnLr0OJwT1+tK1r9+6rVCCL4C0UvB+212XHb91sawRPg5Js3IZOq
yGcYkTaFnBahN1EugOYXfCwzR3KTVRxC6bXKuYwGCKLvRpjrdHclvdtUV4zS5qQp
l4mgBG0OqqjvgU3o/OB1jIk8sZ39F1QBBB26MHJVLZJMhyF3rjkVvEYsDDYcViHC
cq6eU6VDHvrfOpcNPb0Oe9djXyJgaQkbicdX+mihfMXrBUvhGoAr46Br8jONkyFk
AbJ/MASd82ugQL2lkzXcD1nGjyy/1R95OEYFo+DDlomPVrKOj5bsR4Wa4vfJaqIr
W8r2PhK97hEAQGWquPRCal0SD6Vu6syBmMON9vXo+/wSBK32j5VzX8Dzg0qCGnn7
0wimyOKKwXUraUqQLBuIk2e9BY6O5sn9fT2GFSiSZsN/t64vTCWEWylC7Zh4YmWz
9RzdsfsRhU3zGokGH85mBVka67YA2p0q0x3WtJpLNvjLKJ8fC8Wat/dq0S55jG8l
QLXWHren1W/4diGFZNhcokUCAwEAAaOCAmowggJmMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUnxIj8cmJxuHbVlrOd1ru55nW4pwwHwYDVR0jBBgwFoAUqEpqYwR93brm
0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8v
b2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8v
Y2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAiBgNVHREEGzAZghdsaWJyYWly
aWUuYXJ0Y3VyaWFsLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AOJpS64m6OlACeiGG7Y7g9Q+5/50iPuk
jyiTAZ3d8dv+AAABaq9hUmkAAAQDAEYwRAIgFrCHPyQKmGGv/VOBaicRo33f0bSz
rktepa0F4q/8tV0CIGh+BT/NqE/PQBQvPE0bE0Kg7kiLCteRNNxepRcpIetpAHUA
Y/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFqr2FSUwAABAMARjBE
AiBuZzfnMUlRm8au7iCFJC9tdJYMGr4ubaB+kcqo0lJMtQIgRFuf0KQQOA42Ld5T
fLe+AgSufB26qmlHB2zs+N2u2icwDQYJKoZIhvcNAQELBQADggEBACx53B0Wp3MD
SD5VJPB+CfTFUeOgBizxORJDcC39bqH0ML5IbM7b7ZtfnKaDawXOEfMrTR1KHg5r
WJ0Rx3nUGAAgocUnR9uFeLDutozCxg1cJKYP45lQtiADBiqbrumhIgnUmnr4/Niz
8Qe5b0zXpMX7qXKL/x1qjnVeK0BOP8XI6IAt+SpmTbJ072HBD5IQfPcBo567hd3u
+0+wcu+qf7NgP6hqeOxfk5JgAVgJHwCg+rZm3WpPmiZRbw/dAHom210/tyCZTbkV
zECQeXybnBJHGaRUd+epbABE6Bzg60IJpAVgQm71kk/T1jy5cH9iL8j/jhq2i30e
1Ic6Hlh6+TY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301774217836886143350417158106072686068704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 03:09:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 03:09:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'librairie.artcurial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 746279906119852583368225525892550405748670001919894172137281279726663428072748001719336553136205487156568912010465597438419213627731739029591236030120335227531792177302391809504150068885263229193875376175171886662705704465553185976887996508780577847047859991608732092329601230461522271727312050432030413196514254661157859377724706697959555579747589561202219191139908345494004296101716696345472955048268954070072366958356052583259522113724077341330014237181464280432684442849196739763162556143526412076014284722372272997472245891790208433639091778201486276257543875845373111151137667386569140469707282124714638507338279150170907916350611411745104392276575013286363244653405731206286346309384528540416781814360575309277660154394222537941093083832270736628169797239966668874422191832183225017008486411102216228287818849504981630601985991106901907506308100769498188708571138860528264641073143012500604691838925196676076088775551839666705323694054239679938780097750314441606287588911586445280326495281050760990526435285763448820610538276498168097272497082815129597589620114526809866251145432619745428167896768416479523023997005219927645769618476508982312473244392806332655378999675525749932809758324462303913865882642144007630033172341317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f1223f1c989c6e1db565ace775aeee799d6e29c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'librairie.artcurial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aaf6152690000040300463044022016b0873f240a9861affd53816a2711a37ddfd1b4b3ae4b5ea5ad05e2affcb55d0220687e053fcda84fcf40142f3c4d1b1342a0ee488b0ad79134dc5ea5172921eb6900750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aaf615253000004030046304402206e6737e73149519bc6aeee2085242f6d74960c1abe2e6da07e91caa8d2524cb50220445b9fd0a410380e362dde537cb7be0204ae7c1dbaaa6947076cecf8ddaeda27
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002c79dc1d16a77303483e5524f07e09f4c551e3a0062cf1391243702dfd6ea1f430be486ccedbed9b5f9ca6836b05ce11f32b4d1d4a1e0e6b589d11c779d4180020a1c52747db8578b0eeb68cc2c60d5c24a60fe39950b62003062a9baee9a12209d49a7af8fcd8b3f107b96f4cd7a4c5fba9728bff1d6a8e755e2b404e3fc5c8e8802df92a664db274ef61c10f92107cf701a39ebb85ddeefb4fb072efaa7fb3603fa86a78ec5f9392600158091f00a0fab666dd6a4f9a26516f0fdd007a26db5d3fb720994db915cc4090797c9b9c124719a45477e7a96c0044e81ce0eb4209a40560426ef5924fd3d63cb9707f622fc8ff8e1ab68b7d1ed4873a1e587af936