oqo.cl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:0d:62:94:1a:48:55:f2:37:cf:54:48:31:63:57:dc:1c:c0 was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=oqo.cl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0d:62:94:1a:48:55:f2:37:cf:54:48:31:63:57:dc:1c:c0Serial Number (int): 265891561901848601320337494149529373252800
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a3:5e:23:1f:b2:65:db:7e:a3:e1:e8:66:ad:42:22:3c:16:b9:29:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e0:97:19:57:8e:eb:77:ed:ef:03:a9:0f:3e:32:e4:54:f3:3c:24:44
Fingerprint (sha256): 3e:f4:c7:7d:d7:e1:54:e3:0c:bf:ae:ad:4c:6c:cb:f9:27:65:9a:4c:77:63:76:5a:43:b7:fe:a5:ea:0c:d4:ac
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate oqo.cl
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for oqo.cl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.oqo.cl
cpanel.oqo.cl
mail.oqo.cl
oqo.cl
webdisk.oqo.cl
webmail.oqo.cl
www.oqo.cl
cpanel.oqo.cl
mail.oqo.cl
oqo.cl
webdisk.oqo.cl
webmail.oqo.cl
www.oqo.cl
Other certificates including the domain name oqo.cl
(limited to 100 certificates)
gestion.oqo.cl
fw.oqo.cl
oqo.cl
digital.oqo.cl
ft.oqo.cl
soporte.oqo.cl
be.oqo.cl
oqo.cl
ft.oqo.cl
fw.oqo.cl
ft.oqo.cl
oqo.cl
oqo.cl
blog.oqo.cl
soporte.oqo.cl
cpech.oqo.cl
gm.oqo.cl
oqo.cl
oqo.cl
gestion.oqo.cl
cowork.oqo.cl
cpech.oqo.cl
digital.oqo.cl
ft.oqo.cl
oqo.cl
soporte.oqo.cl
oqo.cl
fw.oqo.cl
be.oqo.cl
blog.oqo.cl
fw.oqo.cl
oqo.cl
oqo.cl
oqo.cl
cpech.oqo.cl
fw.oqo.cl
fw.oqo.cl
cpech.oqo.cl
oqo.cl
fw.oqo.cl
soporte.oqo.cl
sni.cloudflaressl.com
oqo.cl
oqo.cl
cowork.oqo.cl
digital.oqo.cl
gestion.oqo.cl
oqo.cl
blog.oqo.cl
digital.oqo.cl
be.oqo.cl
blog.oqo.cl
oqo.cl
oqo.cl
oqo.cl
gestion.oqo.cl
ft.oqo.cl
oqo.cl
ft.oqo.cl
be.oqo.cl
digital.oqo.cl
oqo.cl
oqo.cl
oqo.cl
fw.oqo.cl
oqo.cl
oqo.cl
fw.oqo.cl
oqo.cl
digital.oqo.cl
ft.oqo.cl
soporte.oqo.cl
be.oqo.cl
oqo.cl
ft.oqo.cl
fw.oqo.cl
ft.oqo.cl
oqo.cl
oqo.cl
blog.oqo.cl
soporte.oqo.cl
cpech.oqo.cl
gm.oqo.cl
oqo.cl
oqo.cl
gestion.oqo.cl
cowork.oqo.cl
cpech.oqo.cl
digital.oqo.cl
ft.oqo.cl
oqo.cl
soporte.oqo.cl
oqo.cl
fw.oqo.cl
be.oqo.cl
blog.oqo.cl
fw.oqo.cl
oqo.cl
oqo.cl
oqo.cl
cpech.oqo.cl
fw.oqo.cl
fw.oqo.cl
cpech.oqo.cl
oqo.cl
fw.oqo.cl
soporte.oqo.cl
sni.cloudflaressl.com
oqo.cl
oqo.cl
cowork.oqo.cl
digital.oqo.cl
gestion.oqo.cl
oqo.cl
blog.oqo.cl
digital.oqo.cl
be.oqo.cl
blog.oqo.cl
oqo.cl
oqo.cl
oqo.cl
gestion.oqo.cl
ft.oqo.cl
oqo.cl
ft.oqo.cl
be.oqo.cl
digital.oqo.cl
oqo.cl
oqo.cl
oqo.cl
fw.oqo.cl
oqo.cl
oqo.cl
Certificate
The complete raw certificate details for oqo.cl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAw1ilBpIVfI3z1RIMWNX3BzAMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMzEwNDQ0MDRaFw0x OTA1MDEwNDQ0MDRaMBExDzANBgNVBAMTBm9xby5jbDCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAMGJ4MmUmg/pbmUYjBxnEdPVGDAajWCEMvuObh2UCeXp wWmUjQRtF3+y/DvxhpGAoJJwT7Rx8LwlbUFqGzVuXOToFhpxVSBKhwPc8yCYrlVu D1ILaTXHIyiLWb3cofCckA4YZ0hVmGn5Uq8fRUe82EwiSO4OveMeJN9lct88/jnS vbusoSYi2gofKisgtZl7Dn+dV1z4JQfg3o9k3RqtbEZTyNQ3NSoizewkpwLOaQl0 VyfHD+I6D6oHwoewRjP2KrmeCrU9q2FDIHfkjITj+AjDa0ibXCY1WzfSubGHKVFb Y2Ys1xqV94jqJlSr0a4QWGv+dQ5I8si4O5CoZaWXY38CAwEAAaOCArkwggK1MA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUo14jH7Jl236j4ehmrUIiPBa5KXQwHwYDVR0j BBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsG AQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsG AQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzBuBgNV HREEZzBlghNhdXRvZGlzY292ZXIub3FvLmNsgg1jcGFuZWwub3FvLmNsggttYWls Lm9xby5jbIIGb3FvLmNsgg53ZWJkaXNrLm9xby5jbIIOd2VibWFpbC5vcW8uY2yC Cnd3dy5vcW8uY2wwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEw KDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgor BgEEAdZ5AgQCBIH2BIHzAPEAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd 3fHb/gAAAWiib4YTAAAEAwBHMEUCIQCh5/T0MWBYfAfl2kZnoRLVxJqtBmeZ16sz 6syha+1wjgIgRMs520OhMfgp6ZNtGc4E3agz4mD7dzVPIY8ao6P+aVEAdwBj8tvN 6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWiib4YWAAAEAwBIMEYCIQCr llnKLRnloVQLtpnysKhDOMfkzOL4AlCnCwWBjXn/AwIhAOy5WwW3Gkxx9fKDf39V XjFWqQhdnfAEIc5CkkM6iWl2MA0GCSqGSIb3DQEBCwUAA4IBAQBwpItFcI/A2BFe jCzbHV/oW3+DKbkt4ZK6aZbi2MKbunvrgABTe8lH5Qp9L1PksHjbYNZFucBk//rK z4aK83H69w6FA4x7toBQ3RBt7+mmEnHuX1yRTDRPy+XVYxOIYYjF9edE++4juThl L7BKKnnDhJAM+Sp2473D9yRt2fFs64f9Zj9kThqDboVlDDaQsRoJLel1UffkU6ig UDDs0sZAWVhkCbJERKgh4mFnttCuEIkH3B14crvXcLr96DOajjcZkzsD0lqUW0wb sXKpiqMC16W4RBNFZI+tlALnjAkMDu+i9ozAdXWZoxu0gDmGc7cI61WFJOwjk2KO htYuiiMB -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYngyZSaD+luZRiMHGcR 09UYMBqNYIQy+45uHZQJ5enBaZSNBG0Xf7L8O/GGkYCgknBPtHHwvCVtQWobNW5c 5OgWGnFVIEqHA9zzIJiuVW4PUgtpNccjKItZvdyh8JyQDhhnSFWYaflSrx9FR7zY TCJI7g694x4k32Vy3zz+OdK9u6yhJiLaCh8qKyC1mXsOf51XXPglB+Dej2TdGq1s RlPI1Dc1KiLN7CSnAs5pCXRXJ8cP4joPqgfCh7BGM/YquZ4KtT2rYUMgd+SMhOP4 CMNrSJtcJjVbN9K5sYcpUVtjZizXGpX3iOomVKvRrhBYa/51DkjyyLg7kKhlpZdj fwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 265891561901848601320337494149529373252800 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-31 04:44:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 04:44:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oqo.cl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24431983071692713527220480502844950138070902306413713610278647787123243675347157357044932979583345161797207440940125378531428187402354338075477815285043602893328435937159705238261593778091191246829360427862481248930872104784137610114912368019325343968424495202586223032833180331842660423595945999134375908926400713679568660936050342855732295527327184167839113080764399057914017380127910161913054101382513699452135869210273310117798444244098993682864253400008454602565644076660809175871905141070937372859546509875894021347151615733046640619432121796940032967741607788888300197229312577438920927324542802641204400317311 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a35e231fb265db7ea3e1e866ad42223c16b92974 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.oqo.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.oqo.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.oqo.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oqo.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.oqo.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.oqo.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oqo.cl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168a26f86130000040300473045022100a1e7f4f43160587c07e5da4667a112d5c49aad066799d7ab33eacca16bed708e022044cb39db43a131f829e9936d19ce04dda833e260fb77354f218f1aa3a3fe695100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168a26f86160000040300483046022100ab9659ca2d19e5a1540bb699f2b0a84338c7e4cce2f80250a70b05818d79ff03022100ecb95b05b71a4c71f5f2837f7f555e3156a9085d9df00421ce4292433a896976 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0070a48b45708fc0d8115e8c2cdb1d5fe85b7f8329b92de192ba6996e2d8c29bba7beb8000537bc947e50a7d2f53e4b078db60d645b9c064fffacacf868af371faf70e85038c7bb68050dd106defe9a61271ee5f5c914c344fcbe5d56313886188c5f5e744fbee23b938652fb04a2a79c384900cf92a76e3bdc3f7246dd9f16ceb87fd663f644e1a836e85650c3690b11a092de97551f7e453a8a05030ecd2c64059586409b24444a821e26167b6d0ae108907dc1d7872bbd770bafde8339a8e3719933b03d25a945b4c1bb172a98aa302d7a5b8441345648fad9402e78c090c0eefa2f68cc0757599a31bb480398673b708eb558524ec2393628e86d62e8a2301