tag-der-sommerfrische.de
Issued by R3
About this certificate
This digital certificate with serial number 04:9d:b5:e1:0a:1b:68:ed:88:cb:d6:54:95:c4:b9:df:03:92 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=tag-der-sommerfrische.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:9d:b5:e1:0a:1b:68:ed:88:cb:d6:54:95:c4:b9:df:03:92Serial Number (int): 402115234072654295486301904576192169575314
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: df:b6:7a:86:ca:9d:8a:79:93:51:6c:11:a7:07:35:3a:6e:6b:ef:1f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 9d:55:1f:a0:8e:af:11:d4:b5:ee:8a:99:01:90:f8:6d:53:27:00:fd
Fingerprint (sha256): 45:f6:33:1c:4d:11:a0:6b:76:6c:ee:5d:28:0d:b0:87:f0:f9:30:80:7f:a4:51:39:57:04:49:8e:68:46:fb:f7
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate tag-der-sommerfrische.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tag-der-sommerfrische.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tag-der-sommerfrische.de
www.tag-der-sommerfrische.de
www.tag-der-sommerfrische.de
Other certificates including the domain name tag-der-sommerfrische.de
(limited to 100 certificates)
ftherapy.co.uk
staging.karla.ai
vougadev.com
sine.solutions
aleksivirkkala.com
bomrelmohan.com.np
profxcompany.com
doloresmarco.es
webtime.com.ar
bergsneider.dev
switchfood.net
www.sanbeaman.com
download.vocepede.online
2017.tag-der-sommerfrische.de
2017.tag-der-sommerfrische.de
www.mes-rendements.com
foreverware.app
residencia.medicinasuprema.com.br
cerqul.com
tag-der-sommerfrische.de
www.adsimpli.com
www.rballot.org
portal.vtmoney.com.br
webprofy.uz
pasqualezingo.me
diggy.me
www.theiosystems.com
tag-der-sommerfrische.de
system.datakora.com
login.mybrand.site
painelcamara.g2canal.com.br
www.giftofcrafttoronto.ca
www.hagestam.com
fifa.shapegames.dev
risenrollwarsaw.order.3bapps.com
messages.remac.app
themandir.com
adtrans.fr
fitgram.app
www.mutual-node.com
password-generator.alanch.am
password-generator.alanch.am
justgyms.me
likelive.jp
www.altiplus.ca
avatarcountry.com
admin.placemeet.fr
tag-der-sommerfrische.de
dev.earthyclaystudio.com
profxcompany.com
learn-programming.app
rslnf.site
www.scoredt.com
simpleschoolapp.ca
storybook.spacha.b7s.dev
www.rballot.org
restauracy.com
eventsethiopia.com
www.youva.org
www.connlar.com
2019.tag-der-sommerfrische.de
www.urbancivic.in
chainstack.com
viewtual.com
gitidevprayag.org
www.materuel.com
www.human-glycome.com
www.medme.life
dashboard.voxpopme.com
www.wskidata.com
quality.coinpaper.io
www.bike-calculator.com
www.ayushaggy.com
prj.beapnow.com
foreverware.app
www.wskidata.com
upload.consultaspg.com.br
niftychars.com
www.tag-der-sommerfrische.de
www.argintis.com
www.studiosenra.com.br
prestini.app
cardypto-coin.com
www.scoredt.com
www.hagestam.com
4-states.com
gestor.publinet.cl
nrobinson.ca
content.electro.mw
www.altiplus.ca
www.voron.xyz
sidewalkpdx.com
www.maltashorelineexcursions.com
www.thomasvaleri.com
blog.connorhatch.com
staging.karla.ai
sarahsurrette.com
goldfieldshouse.equiem.mobi
www.krujob.info
www.pharmacymarketcr.com
staging.karla.ai
vougadev.com
sine.solutions
aleksivirkkala.com
bomrelmohan.com.np
profxcompany.com
doloresmarco.es
webtime.com.ar
bergsneider.dev
switchfood.net
www.sanbeaman.com
download.vocepede.online
2017.tag-der-sommerfrische.de
2017.tag-der-sommerfrische.de
www.mes-rendements.com
foreverware.app
residencia.medicinasuprema.com.br
cerqul.com
tag-der-sommerfrische.de
www.adsimpli.com
www.rballot.org
portal.vtmoney.com.br
webprofy.uz
pasqualezingo.me
diggy.me
www.theiosystems.com
tag-der-sommerfrische.de
system.datakora.com
login.mybrand.site
painelcamara.g2canal.com.br
www.giftofcrafttoronto.ca
www.hagestam.com
fifa.shapegames.dev
risenrollwarsaw.order.3bapps.com
messages.remac.app
themandir.com
adtrans.fr
fitgram.app
www.mutual-node.com
password-generator.alanch.am
password-generator.alanch.am
justgyms.me
likelive.jp
www.altiplus.ca
avatarcountry.com
admin.placemeet.fr
tag-der-sommerfrische.de
dev.earthyclaystudio.com
profxcompany.com
learn-programming.app
rslnf.site
www.scoredt.com
simpleschoolapp.ca
storybook.spacha.b7s.dev
www.rballot.org
restauracy.com
eventsethiopia.com
www.youva.org
www.connlar.com
2019.tag-der-sommerfrische.de
www.urbancivic.in
chainstack.com
viewtual.com
gitidevprayag.org
www.materuel.com
www.human-glycome.com
www.medme.life
dashboard.voxpopme.com
www.wskidata.com
quality.coinpaper.io
www.bike-calculator.com
www.ayushaggy.com
prj.beapnow.com
foreverware.app
www.wskidata.com
upload.consultaspg.com.br
niftychars.com
www.tag-der-sommerfrische.de
www.argintis.com
www.studiosenra.com.br
prestini.app
cardypto-coin.com
www.scoredt.com
www.hagestam.com
4-states.com
gestor.publinet.cl
nrobinson.ca
content.electro.mw
www.altiplus.ca
www.voron.xyz
sidewalkpdx.com
www.maltashorelineexcursions.com
www.thomasvaleri.com
blog.connorhatch.com
staging.karla.ai
sarahsurrette.com
goldfieldshouse.equiem.mobi
www.krujob.info
www.pharmacymarketcr.com
Certificate
The complete raw certificate details for tag-der-sommerfrische.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISBJ214QobaO2Iy9ZUlcS53wOSMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMjcxNTM4MjRaFw0yNDAyMjUxNTM4MjNaMCMxITAfBgNVBAMT GHRhZy1kZXItc29tbWVyZnJpc2NoZS5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKNqPzCpwWlRVr6xvLVAeiOYaOXwt/R9seYjEZ1CEqALvho6litX wSGmRP2zOesK9t+rt8QvyP9HYAlXhNogHd7womfNJkK7BMoLQD3mxrJbZ1norja8 GbUChfIkzYWtXdr0ngIma6CHFzbaFNnhW3E79Shid6bbr+fLkRPQJ2Eqzp/p2K7o xZy7G8bhkkNS3DXtrC/9Pw3gctQWfg58xf31RSsOQjBE9vMwPxE2NV7Ty4QKo9eP sGlbhffoFEtK5fRkJzQvaCpYCBWV+tS6IKJdmbVAPRFqzLEREk4YxOac7sZHA77F 6uSD/PluHszOItCZ1cXZV9IwBYJ9lqtOIt8CAwEAAaOCAjgwggI0MA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQU37Z6hsqdinmTUWwRpwc1Om5r7x8wHwYDVR0jBBgwFoAU FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p LmxlbmNyLm9yZy8wQQYDVR0RBDowOIIYdGFnLWRlci1zb21tZXJmcmlzY2hlLmRl ghx3d3cudGFnLWRlci1zb21tZXJmcmlzY2hlLmRlMBMGA1UdIAQMMAowCAYGZ4EM AQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA7s3QZNXbGs7FXLedtM0TojKH Rny87N7DUUhZRnEftZsAAAGMEaV0vwAABAMARzBFAiB2dZV3tD21yvJjSn3B+vER oMx9FKjD2g7f7opHzZKR7AIhALwhrqJvAINKCFsL/8tk6681otVv/tTexIhgAcoK QzjzAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGMEaV2pwAA BAMARzBFAiEAxUHAkzkGOZie6DPlGUIBodLQdOaMa8OjyUBhQTr/4qICICbeysBW HQV/8/IQeiBP2T7pSEcfMq8+PZkdA6j2+fFxMA0GCSqGSIb3DQEBCwUAA4IBAQBn H4OkqPKw3eioIzBIpNrgQQDd4O6yDvguM4BHUi1JYo3OCWyE1yc7u7VF+nRFYeIU tb+cY8o8oGRL5DMKtY0zJh4dzddNvAqKdkJKjtNbxSiMfPD52qQbdQiWJGtRXclb Oh/iTNmqTRcjReRxibiT5f/PT+e7hp/1W7mSFrbyCWLd2W1nMH4duCyXqI5iojQu OKQpOzYNu1ryb3OydvyKXALfvykIQrfo0RNHINAlMozQmJf3n4yNtXoJ7aYbQJAy tML06EX36DtG1Mrt6WB18IPaeMAm2K2htLQaRVdhdnvVccceccznNtdytqlFGmV3 Kv04jmOAsVrLPPMnQ8NT -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2o/MKnBaVFWvrG8tUB6 I5ho5fC39H2x5iMRnUISoAu+GjqWK1fBIaZE/bM56wr236u3xC/I/0dgCVeE2iAd 3vCiZ80mQrsEygtAPebGsltnWeiuNrwZtQKF8iTNha1d2vSeAiZroIcXNtoU2eFb cTv1KGJ3ptuv58uRE9AnYSrOn+nYrujFnLsbxuGSQ1LcNe2sL/0/DeBy1BZ+DnzF /fVFKw5CMET28zA/ETY1XtPLhAqj14+waVuF9+gUS0rl9GQnNC9oKlgIFZX61Log ol2ZtUA9EWrMsRESThjE5pzuxkcDvsXq5IP8+W4ezM4i0JnVxdlX0jAFgn2Wq04i 3wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 402115234072654295486301904576192169575314 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 15:38:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 15:38:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tag-der-sommerfrische.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20629235977128756784642237193950469420228037038177146069605438080130964043560089145249953228455277712481989150072405577976812580550726437914440833353430457367371186107420497630808529128127682940775793377983639587681958960667252634093339401779025482053663608046282184136003349113031515703361376895513573129377220039703198986843712104223540249927868344225510985724438564956102700140840718399635591794036836412511572191626703010513242444852261385302475007906716925235008311023750187187732642509853398119553535840631008034304791700940886862801245676136418544756601376764300978368994919677277207078318844409854505683657439 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dfb67a86ca9d8a7993516c11a707353a6e6bef1f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tag-der-sommerfrische.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tag-der-sommerfrische.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c11a574bf0000040300473045022076759577b43db5caf2634a7dc1faf111a0cc7d14a8c3da0edfee8a47cd9291ec022100bc21aea26f00834a085b0bffcb64ebaf35a2d56ffed4dec4886001ca0a4338f30076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c11a576a70000040300473045022100c541c093390639989ee833e5194201a1d2d074e68c6bc3a3c94061413affe2a2022026decac0561d057ff3f2107a204fd93ee948471f32af3e3d991d03a8f6f9f171 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00671f83a4a8f2b0dde8a8233048a4dae04100dde0eeb20ef82e338047522d49628dce096c84d7273bbbb545fa744561e214b5bf9c63ca3ca0644be4330ab58d33261e1dcdd74dbc0a8a76424a8ed35bc5288c7cf0f9daa41b750896246b515dc95b3a1fe24cd9aa4d172345e47189b893e5ffcf4fe7bb869ff55bb99216b6f20962ddd96d67307e1db82c97a88e62a2342e38a4293b360dbb5af26f73b276fc8a5c02dfbf290842b7e8d1134720d025328cd09897f79f8c8db57a09eda61b409032b4c2f4e845f7e83b46d4caede96075f083da78c026d8ada1b4b41a455761767bd571c71e71cce736d772b6a9451a65772afd388e6380b15acb3cf32743c353