auroraadvertiser.net

Issued by Amazon

About this certificate

This digital certificate with serial number 04:af:c0:50:76:ad:54:8e:8c:f0:2b:c3:5b:d3:cc:31 was issued on by Amazon.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auroraadvertiser.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:c0:50:76:ad:54:8e:8c:f0:2b:c3:5b:d3:cc:31
Serial Number (int): 6229464531008935222566404205980142641
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 8f:30:1e:83:3b:d4:4f:6d:82:6f:fc:90:05:5f:b3:23:ec:6e:99:37
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 4f:52:4a:d7:f8:24:89:b5:a8:51:2d:2c:38:19:e0:55:6a:2e:77:a1
Fingerprint (sha256): 35:da:9a:96:e4:86:4d:d3:83:f6:3a:dd:f7:30:cd:9c:88:9f:2b:6a:95:3a:58:2b:03:b8:00:20:e4:7a:35:bd

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate auroraadvertiser.net

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auroraadvertiser.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auroraadvertiser.net
*.auroraadvertiser.net
*.boonvilledailynews.com
boonvilledailynews.com
*.carthagepress.com
carthagepress.com
*.chillicothenews.com
chillicothenews.com
*.columbiatribune.com
columbiatribune.com
*.devilslakejournal.com
devilslakejournal.com
*.examiner.net
examiner.net
*.hannibal.net
hannibal.net
*.kirksvilledailyexpress.com
kirksvilledailyexpress.com
*.lakenewsonline.com
lakenewsonline.com
*.leaderjournal.com
leaderjournal.com
*.linncountyleader.com
linncountyleader.com
*.mexicoledger.com
mexicoledger.com
*.moberlymonitor.com
moberlymonitor.com
*.neoshodailynews.com
neoshodailynews.com
*.therolladailynews.com
therolladailynews.com
*.waynesvilledailyguide.com
waynesvilledailyguide.com
*.newscyclecloud.com

Other certificates including the domain name auroraadvertiser.net

(limited to 100 certificates)
incapsula.com
*.auroraadvertiser.net
incapsula.com
incapsula.com
auroraadvertiser.net
*.auroraadvertiser.net
auroraadvertiser.net
incapsula.com
*.auroraadvertiser.net
*.auroraadvertiser.net
incapsula.com
incapsula.com
auroraadvertiser.net
local.brechinadvertiser.co.uk
auroraadvertiser.net
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
*.auroraadvertiser.net
statejournal.wanderful.ownlocal.com
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
incapsula.com
incapsula.com
*.auroraadvertiser.net
barrie.simcoe.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
incapsula.com
incapsula.com

Certificate

The complete raw certificate details for auroraadvertiser.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkz/0FDwxNMCbBiOWTJC
+/DYbwObfbnnCCTPZvNkf92uXiv3Nch2GrQE9IcIKSPUOj7KWyIFCzbLxaegDJnk
qHi4B0SMIKpWbI8OvP2NavBx4hia/hEuPe1RJjO8xJ3GJ+jQn/WLCS2R51+sU3AZ
SGNm30z7JljDgtzvE9MuiXhO/uau9nmZ+gyNAajYRf5tYDVoTCRzkRu13dJqc0I0
hukULYWat+Kr74Uw7/tKwXCrCT5FwZbN2dCc/kTQH2zT1ZRLmvnFaUNLNYf+bwug
HwO0ZCfsys2EqpqQzz2fPd17ZB2clxMKHFn6MzJdHzza22BS4cpuAzP0Jl3QAnec
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6229464531008935222566404205980142641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auroraadvertiser.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16953902621825755199611965239807028213190842986073379021558976728374353401236172596920843699575821181992932597608836788466348224408988157856295426824849275676300759653431150689949679409019402662025524783251763948260908357811481858895106115490535672158918325067303987136711022236249519677462547875021288042605911156198688740922944293870805049937769028548138341534788016311870687905903134352952342971348168478655525223611009725086470512199957776920444554924857117386929770355729123710643706585274242990537554446173183235190657644838921414431779801939944960540213276303718524053203693335186740553056648279406038104906919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f301e833bd44f6d826ffc90055fb323ec6e9937
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (772 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auroraadvertiser.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auroraadvertiser.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boonvilledailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boonvilledailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carthagepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carthagepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chillicothenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chillicothenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiatribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiatribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devilslakejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devilslakejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.examiner.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examiner.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hannibal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hannibal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kirksvilledailyexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirksvilledailyexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lakenewsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakenewsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leaderjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaderjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linncountyleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linncountyleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mexicoledger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mexicoledger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moberlymonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moberlymonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neoshodailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neoshodailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therolladailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therolladailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waynesvilledailyguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waynesvilledailyguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newscyclecloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016687e0873e0000040300483046022100a8cd45dd8cbf25b80bf1acd23d409ff2cbe7bec4f62e7c0bda69e6231e432215022100d27416d457a0a295a93a3032c7fddf95afe32bcf8cbd8cc2ef1b79c7c520685e0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016687e088450000040300483046022100ee9316a9902580b954e366ca712d99a4e4a39b02aaf01afb900153267aeabab3022100f3f03a2ab252247a2365bc54cecc41f73c0967f3cf8a83ee1b8bcbb5236eafc8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003c9fd42eab16c91a1eb42bcc686c886688506155b48856c2a89a017c4d45a7f18ffa6b0ee4e7b0b0c8be26ff603032feb6758763df52a37a9edfa52c0923597a878ad673d5e2f6cdf311c0e71ec3093d308f8bbfb4b15fcce71b541b87cc6209c38df4e30f46ac53678c48b4cf08df3ed00772ea21e3d8543940567674314a69f655360935557081473f6a4f37a780b977f06fb2a04d8bfe8a4b3f2b44fc44c46f35511666b2fdbbc8494a0d929e66d656739ae1c4bae0465c0286e52542fc5e3b837083cb7c28aecd2d5f9c5bf3105aa1f717e9f07c9f95047e3ecf3c85393ecd07ac97722d84dfaa75896ea4dc64b777f93838feb4ddd09911774a4832e6d4