git.uvt.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:3d:66:c1:02:a3:90:f8:af:10:c5:b4:60:49:d0:56:30:ea was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=git.uvt.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3d:66:c1:02:a3:90:f8:af:10:c5:b4:60:49:d0:56:30:ea
Serial Number (int): 369342951531605867677399438287741195268330
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e5:27:65:51:c2:63:d2:ed:d4:ba:16:a6:3e:70:17:2c:bf:f8:6c:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1c:b8:7b:67:3f:e7:29:28:38:00:60:d9:4f:ac:bf:34:67:8d:4b:6d
Fingerprint (sha256): 36:50:cf:fc:5f:ed:02:29:70:b5:17:4c:56:87:f8:67:af:3b:54:b1:b7:95:3a:56:80:c6:4a:8d:19:45:c1:c1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate git.uvt.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for git.uvt.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

git.uvt.cz
gitlab.uvt.cz

Other certificates including the domain name uvt.cz

(limited to 100 certificates)
opentis.uvt.cz
phpmyadmin.hosting.uvt.cz
letest1.uvt.cz
tv.uvt.cz
tiki.uvt.cz
opentis.uvt.cz
spravait.uvt.cz
uvt.cz
mail.uvt.cz
uvt.cz
opentis.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
letest1.uvt.cz
mail.uvt.cz
uvt.cz
ncb.uvt.cz
git.uvt.cz
ncb.uvt.cz
ncb.uvt.cz
mail.uvt.cz
psw.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
opentis.uvt.cz
tv.uvt.cz
uvt.cz
git.uvt.cz
opentis.uvt.cz
psw.uvt.cz
mail.uvt.cz
tv.uvt.cz
centreon.uvt.cz
tv.uvt.cz
letest1.uvt.cz
uvt.cz
opentis.uvt.cz
spravait.uvt.cz
spravait.uvt.cz
phpmyadmin.hosting.uvt.cz
git.uvt.cz
centreon.uvt.cz
uvt.cz
mail.uvt.cz
chat.uvt.cz
uvt.cz
git.uvt.cz
opentis2.uvt.cz
syspass.uvt.cz
spravait.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
mail.uvt.cz
tiki.uvt.cz
phpmyadmin.hosting.uvt.cz
opentis.uvt.cz
mail.uvt.cz
opentis.uvt.cz
ncb.uvt.cz
git.uvt.cz
phpmyadmin.hosting.uvt.cz
centreon.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
spravait.uvt.cz
centreon.uvt.cz
spravait.uvt.cz
opentis2.uvt.cz
centreon.uvt.cz
phpmyadmin.hosting.uvt.cz
opentis.uvt.cz
opentis2.uvt.cz
uvt.cz
opentis.uvt.cz
chat.uvt.cz
tiki.uvt.cz
mail.uvt.cz
tiki.uvt.cz
opentis.uvt.cz
mail.uvt.cz
centreon.uvt.cz
tv.uvt.cz
opentis.uvt.cz
mail.uvt.cz
mail.uvt.cz
ncb.uvt.cz
tv.uvt.cz
spravait.uvt.cz
ncb.uvt.cz
uvt.cz
opentis.uvt.cz
uvt.cz
syspass.uvt.cz
centreon.uvt.cz
centreon.uvt.cz
tv.uvt.cz
spravait.uvt.cz
mail.uvt.cz
tv.uvt.cz
opentis.uvt.cz

Certificate

The complete raw certificate details for git.uvt.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgISBD1mwQKjkPivEMW0YEnQVjDqMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMTExODAxNDNaFw0x
OTA0MTExODAxNDNaMBUxEzARBgNVBAMTCmdpdC51dnQuY3owggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQDMqGmc5aflUuxaf75z4/KHCQJUmHTe6ncwAXpU
h4Qv1GMN7EhjS8zN5Cn8XIPvjquy4djTG0Q9WpXW1BbMOx5AgpsXh7tCaRCrymGZ
puVK3RdmV262uHWSnFGzVYI+9v2fSpcCn0o3aPv1XDcJmBvBpcIuFjW7VM2+usNC
NtnJz+gJDVGpsm1yLAmG93uM7Pz0CaE2j80m9vMKDPH6jZGGfgywvbja8EH4uUZl
l0GydmXnH3W5IjQKzcoIU0ZbzCJJ1sJslWgQ/R1wkTf9m3QrijuSPbmosQjIhBNm
E1B6x3bw5uZ9Sbk1Dl7U0PjRIzLsPMTCW4TF8TmVq6uweLPMQdpmRG/fqHcjcI9p
RFvCgkyqCU/v/9MnKBrawxkQ9y4J0Pf+rofUPCv3CHC7X8Mt89gqiFYxSXdbCICy
vMxR9to/KqkFeZg3u1VrwZicKypeukOv44rkWUNgUsxdlQV11wuIHEgz3841X6WU
vT+v1dmXqK/KieMn5G05A1PvxVf/Gho6zyqhM0V2JQ5FcYtOgnXZNbpMRhcu7QsP
tWagQ70J++vPQI9bxLraO7m+STE1x8FRz2jZbFvQDTrVnRzCMKGeikslM0VwW39p
FhFPBY4Wuwm8CYC4DTmB9Rv7Za9jmS9pZkeW3hY5vt6bNJZLFArnToLQwnkvwFK0
uCl0fwIDAQABo4ICbTCCAmkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTlJ2VRwmPS
7dS6FqY+cBcsv/hs0DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMCQGA1UdEQQdMBuCCmdpdC51dnQuY3qCDWdpdGxhYi51
dnQuY3owTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5
AgQCBIH0BIHxAO8AdQDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAA
AWg+SptoAAAEAwBGMEQCIDVu2JIDyHJaz9Nll2kQLzFXMuXllywtirQEu9ivrBeu
AiAtNzW00CpLV08+yvqFwxeh+2FbY8VrviZW1PsJHU5I+wB2ACk8UZZUyDlluqpQ
/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaD5Km14AAAQDAEcwRQIhAM443mAYcqSy
VeE9h98srSQ+iPoUXyT1goYp19tuxf6OAiAzvF1tLUdZnkvMr4dPYTTLlCSkFKuN
kFAZ5n7Syzi9PTANBgkqhkiG9w0BAQsFAAOCAQEAUSGxdx+WoGJSCjUwS57gfEPO
JUVHKFEK7dxb4QdZELxKNFBEnO/2lNZHMPPNSmyBcoJtrNm73ELg9KmC8B8i7X2A
bAv5vVFokbUHm/U90g9N3UUMkyRryiN8SpAR4dwWiwJsmD/ScBp6r0Dn/wNIlRKm
+6sj6hRR2MnSmWdFjnKxi3Gya2XLgVsUDXvBenoWwfJQ411Y2AkDdbtMX7CpX8QQ
APs9/Xj3x6lNASw/5nIJVZ+9R5G0J6bCEQ+gun/+RSuWRnV1Gxn7r+PLjbf3I6K5
Sy0nG2zem7XeUb1cOZ+1sir6z+RzCwOb+G8Pgr6/bVGAM3TCMm0adyT4k7hNVQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369342951531605867677399438287741195268330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 18:01:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 18:01:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'git.uvt.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834931230742710979852028567849649241498955040075192892160187724566662105644249490885151689809702554497552669606882495067323997045485072451062244364888153645213033141149410277737280079934219564789090549070547559470746772684319186179098701910798484868144657871415340657087472146085519775045513971885587994022162992310616957382958519548907026651431360472655653277361282880928372416254179352189459860572089240657559525894384137762575083807576679897243198365698538899509299515750505182218945754464139446472239417656171769375779452400691793198323977694776184002549191853671687807640854539247356179827444742980774324572532721175822790291061028346914572694799563475485003562933612971784115744105804883238792874282200078331829576837272262220664745935786673841567609440494218276702159626077853552022696742821217082680009167555426649409417217592583331221023179515974360934899767246715708873984269975456410756515235149478659277049458847648666730337051154585827039941960995028731242881296575270459735095953963270506465563034617775455734466921069526073859564845249899741038116609219225971581836249742370086109686393463945147595870169998073376701158847438419514634564268966981685159388055180125096565528949364593918938657446927052830065502292898943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5276551c263d2edd4ba16a63e70172cbff86cd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.uvt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.uvt.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001683e4a9b6800000403004630440220356ed89203c8725acfd3659769102f315732e5e5972c2d8ab404bbd8afac17ae02202d3735b4d02a4b574f3ecafa85c317a1fb615b63c56bbe2656d4fb091d4e48fb007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001683e4a9b5e0000040300473045022100ce38de601872a4b255e13d87df2cad243e88fa145f24f5828629d7db6ec5fe8e022033bc5d6d2d47599e4bccaf874f6134cb9424a414ab8d905019e67ed2cb38bd3d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005121b1771f96a062520a35304b9ee07c43ce25454728510aeddc5be1075910bc4a3450449ceff694d64730f3cd4a6c8172826dacd9bbdc42e0f4a982f01f22ed7d806c0bf9bd516891b5079bf53dd20f4ddd450c93246bca237c4a9011e1dc168b026c983fd2701a7aaf40e7ff03489512a6fbab23ea1451d8c9d29967458e72b18b71b26b65cb815b140d7bc17a7a16c1f250e35d58d8090375bb4c5fb0a95fc41000fb3dfd78f7c7a94d012c3fe67209559fbd4791b427a6c2110fa0ba7ffe452b964675751b19fbafe3cb8db7f723a2b94b2d271b6cde9bb5de51bd5c399fb5b22afacfe4730b039bf86f0f82bebf6d51803374c2326d1a7724f893b84d55