reimerfreeman.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:6d:50:25:ac:84:02:9e:e7:b6:b9:18:47:89:73:13:ac:72 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=reimerfreeman.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6d:50:25:ac:84:02:9e:e7:b6:b9:18:47:89:73:13:ac:72
Serial Number (int): 385646455575103218516964640149457375308914
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e8:c6:7e:fd:00:e6:b5:df:04:f4:c7:73:7d:c8:b3:dd:54:4c:07:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c6:5d:d9:00:4e:49:02:5c:68:a2:0e:ee:65:43:94:5b:df:fa:dc:c9
Fingerprint (sha256): 4d:de:fa:83:e2:47:2e:4b:25:ec:8d:58:1b:45:a3:ca:45:2c:c8:79:27:85:8b:28:0e:e7:da:7d:0d:b8:55:ab

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate reimerfreeman.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reimerfreeman.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reimerfreeman.com

Other certificates including the domain name reimerfreeman.com

(limited to 100 certificates)
sampletaxfirm.com
portal.reimerfreeman.com
portal.reimerfreeman.com
sampletaxfirm.com
portal.huntchase.us
clientportal.mcgaunnschwadron.com
portal.odc-cpa.com
portal.reimerfreeman.com
clientportal.mcgaunnschwadron.com
portal.reimerfreeman.com
portal.j-bfinancial.com
sampletaxfirm.com
portal.odc-cpa.com
portal.odc-cpa.com
portal.reimerfreeman.com
sampletaxfirm.com
portal.j-bfinancial.com
www.shieldfinancialaz.com
portal.j-bfinancial.com
portal.huntchase.us
portal.reimerfreeman.com
portal.j-bfinancial.com
portal.odc-cpa.com
sampletaxfirm.com
www.reimerfreeman.com
portal.reimerfreeman.com
portal.infiniumat.com
portal.reimerfreeman.com
www.reimerfreeman.com
portal.reimerfreeman.com
portal.hayestaxes.com
sampletaxfirm.com
portal.reimerfreeman.com
portal.j-bfinancial.com
sampletaxfirm.com
www.kceatax.com
portal.j-bfinancial.com
www.fanecafinancial.com
portal.j-bfinancial.com
portal.reimerfreeman.com
portal.reimerfreeman.com
sampletaxfirm.com
portal.j-bfinancial.com
reimerfreeman.com
sampletaxfirm.com
clientportal.mcgaunnschwadron.com
clientportal.mcgaunnschwadron.com
portal.reimerfreeman.com
clientportal.mcgaunnschwadron.com
portal.odc-cpa.com
www.fanecafinancial.com
www.ittaxsolutions.net
portal.reimerfreeman.com
portal.hayestaxes.com
clientportal.mcgaunnschwadron.com
sampletaxfirm.com
portal.huntchase.us
portal.infiniumat.com
sampletaxfirm.com
portal.j-bfinancial.com
portal.reimerfreeman.com
sampletaxfirm.com
portal.reimerfreeman.com
portal.reimerfreeman.com
sampletaxfirm.com
reimerfreeman.com
portal.j-bfinancial.com
portal.j-bfinancial.com
portal.j-bfinancial.com
sampletaxfirm.com
sampletaxfirm.com
portal.reimerfreeman.com
sampletaxfirm.com
portal.j-bfinancial.com
sampletaxfirm.com
portal.odc-cpa.com
portal.odc-cpa.com
reimerfreeman.com
clientportal.mcgaunnschwadron.com
portal.hayestaxes.com
sampletaxfirm.com
portal.reimerfreeman.com
portal.j-bfinancial.com
portal.j-bfinancial.com
portal.reimerfreeman.com
www.reimerfreeman.com
portal.reimerfreeman.com
portal.pdkentrust.com
portal.reimerfreeman.com
test-custom-domains-3.thesmartnik.com
portal.odc-cpa.com
portal.j-bfinancial.com
portal.pdkentrust.com
www.fanecafinancial.com
portal.odc-cpa.com
sampletaxfirm.com
portal.reimerfreeman.com
portal.reimerfreeman.com
www.kceatax.com
www.reimerfreeman.com

Certificate

The complete raw certificate details for reimerfreeman.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISBG1QJayEAp7ntrkYR4lzE6xyMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTcxNjE2MzRaFw0x
OTA5MTUxNjE2MzRaMBwxGjAYBgNVBAMTEXJlaW1lcmZyZWVtYW4uY29tMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy+6Yq62mLdkAb3Mgss9B6jyipB0E
6Du2CoDXQueQ917+CbLBj7HlOfvTkOhObRGjLyoSon2JjJzdMovznH0QlLXrYodN
V5sdmwRkXO+JyhnjKAOb1DFThNRsUS8MjWghcIVlyuujI3zJ98iuMX85QfJWdZRH
bajuRd4QUjnl9cqb1VICEJYNfd7s+XXXjBDRwNXfb1puF9m96LVK3pe17uqzncRF
JrMP7f31wGla0p6Re8FKyJ85O53yeBO8A3wd1fW3YzhX6hfo5frhq8b0Svqym3kV
i1CSBlwxVahKOiOhiJ5qBN9T+0yBV2lQNZ94ElapLWGvfJxFLGdq4U9EJFhFd9Yy
qAKqYMlcek1SazBKf1tYF4SGfP+1ipAYMdp+KRkjKGIDt9euUmEYC1zY4u0hxz4Y
m+0abspXUyw2vvdt2IcsMe51iPlmadMo1jzmTuThlsQrehoBwS2IPuvhgiCIbmAr
tOCQ5CGiTWid6lIV7ubmSWOMbDLk8IE7BmcNeDlCUeLu3+b6giMT22JJA1uUvYsF
3/55Beca5BiC/XntokB2MG9tXi2wJcTxV0tl/5bVSB4LXV2vSlAIdve1RiXZ6dBz
JCjUCDaf4oj434ResJzyAGERXZ9xGvJnBkjGRieXbqUx6gu9YgEJ4s7rHfj8LPdx
KxaRTFttX5pQkRUCAwEAAaOCAmcwggJjMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
6MZ+/QDmtd8E9Mdzfciz3VRMB4YwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghFyZWltZXJmcmVlbWFu
LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkC
BAIEgfYEgfMA8QB2AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAAB
a2ZwwyAAAAQDAEcwRQIhAKuAqk7elU8SHbHoH+0tb8gjq0/UiguAjEistnNwHbsl
AiA3wtOanCXxkwmLHIIlJKOYWcsw/JKVmQ5LBiKdfh4ZegB3ACk8UZZUyDlluqpQ
/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABa2ZwwxgAAAQDAEgwRgIhAPofOu9qSGYz
ZkrhpDQzmKmkZd7dUFrPv9DG8vycvQI/AiEAkD2OGAX+MS789Jr7uboYlIzPutuJ
6dwSqU7fjn/6n5wwDQYJKoZIhvcNAQELBQADggEBAIf6pF5Jr/7PBWGeYvBfX3gU
hrmjy54FzxV33r8HQzCvzohJBtnFoVaWMKuJr+UbbHr9pPV87E+JtaVqdxhMFUKd
fZvpIrKpf/S3IaoJo2bbV2R/SN5IgCTnoB2Kd+0PjR67i/YseFJVZ7TUmdlbr/eq
04FecYbeNocoMNjmVl4d5BO5janbI+TikHId4C78tTK6rQY6wq0bwV4aBzxdP7xA
4Doy49b7fGFFKe+elCUBbcppyLxaS6OPoGMMxiH5hNNbepe1XxCtJKYN48SnZlcu
9HlItNIhz/lc8XXyIF0SUt0Pu1O2P7QLGGWA8xlriL+ZEMKQ1k43NZmYoENAyJs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385646455575103218516964640149457375308914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-17 16:16:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-15 16:16:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reimerfreeman.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831970043713956612218247457900924012118876158391110381223404163075362143271998207564077891328460617227934150298424168058134685539384827096794734872638057789539104144168349510062549150049641752635620929584703115764993174063928398375254658748236018806223358172022305151177354078575883913798679934024411595439901195086258786150713219562695659347627558763251064236824218525444799874300481608608499197945886987319778905580901556981197331211820140239608613474042295317066062423511685347185053065623941763324974113472615053314252561166821923296331915499647199957158226743490156705644486974213594360591595310900215433781747343347403811230911743399077855590713565270752648145440385236121284750057752369067643106106487084830383059092290103917178575312075034451146203859987743926164470267855733469816757180686242666877659724964922084615497782824093099148929741578888465295870976850541768369175642234514080890430512791324485483074599358775868027439721899686557883916904406128028977397877941148015634895398116956377861151861302421462132704418898965892989312653689718468977160522103829067192320933012258953844200508073774200847853118596232560432113358802836253044136359191193964789128613430851608476639620545614963132339422658361476019045360767253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8c67efd00e6b5df04f4c7737dc8b3dd544c0786
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reimerfreeman.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b6670c3200000040300473045022100ab80aa4ede954f121db1e81fed2d6fc823ab4fd48a0b808c48acb673701dbb25022037c2d39a9c25f193098b1c822524a39859cb30fc9295990e4b06229d7e1e197a007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b6670c3180000040300483046022100fa1f3aef6a486633664ae1a4343398a9a465dedd505acfbfd0c6f2fc9cbd023f022100903d8e1805fe312efcf49afbb9ba18948ccfbadb89e9dc12a94edf8e7ffa9f9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0087faa45e49affecf05619e62f05f5f781486b9a3cb9e05cf1577debf074330afce884906d9c5a1569630ab89afe51b6c7afda4f57cec4f89b5a56a77184c15429d7d9be922b2a97ff4b721aa09a366db57647f48de488024e7a01d8a77ed0f8d1ebb8bf62c78525567b4d499d95baff7aad3815e7186de36872830d8e6565e1de413b98da9db23e4e290721de02efcb532baad063ac2ad1bc15e1a073c5d3fbc40e03a32e3d6fb7c614529ef9e9425016dca69c8bc5a4ba38fa0630cc621f984d35b7a97b55f10ad24a60de3c4a766572ef47948b4d221cff95cf175f2205d1252dd0fbb53b63fb40b186580f3196b88bf9910c290d64e37359998a04340c89b