*.kiva.org
Issued by R3
About this certificate
This digital certificate with serial number 04:6f:7d:ba:48:97:0c:f7:29:ac:47:68:34:1b:42:b3:a2:b2 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.kiva.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:6f:7d:ba:48:97:0c:f7:29:ac:47:68:34:1b:42:b3:a2:b2Serial Number (int): 386387607194254914617146559643166732165810
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: d6:7f:27:48:82:b2:f9:f4:1d:29:1b:d5:b5:36:96:1f:36:9a:9b:20
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): fc:36:7b:47:60:29:3c:de:fc:c2:8d:d5:59:45:cc:bf:52:8f:75:1c
Fingerprint (sha256): 4f:ad:72:79:54:5c:0e:a1:1c:6e:88:85:c9:24:6e:88:7e:1b:8c:02:f5:8f:fb:70:7f:99:23:67:b8:58:6b:85
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.kiva.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.kiva.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.kiva.org
kiva.org
kiva.org
Other certificates including the domain name kiva.org
(limited to 100 certificates)
devvm-api.dk1.kiva.org
secure.novica.com
secure.novica.com
*.stage.kiva.org
*.stage.kiva.org
gender.kiva.org
masterbooker.com
lend.kiva.org
groove.ehlinks.com
jespergustafsson.com
secure.novica.com
*.dev.kiva.org
groove.simondata.com
careers.kiva.org
partnerships.kiva.org
sni.cloudflaressl.com
login.kiva.org
www.marlim.co
*.dev.kiva.org
groove.robinpowered.com
*.dev.kiva.org
www.kiva.org
lend.kiva.org
www.gender.kiva.org
sgchuscpje.device.sighub.ch
go.kiva.org
groove.swivl.com
www.gender.kiva.org
groove.lyric.com
partnerships.kiva.org
groove.kiva.org
links.kiva.org
www.starterplus.net
login.kiva.org
groove.ehlinks.com
secure.novica.com
cdn.steviewonder.es
lend.kiva.org
partnerships.kiva.org
groove.jebbit.com
lend.kiva.org
www.refugees.kiva.org
us.kiva.org
groove.jebbit.com
admin-api.k1.kiva.org
go.kiva.org
*.kiva.org
www.kiva.org
groove.adpearance.com
*.stage.kiva.org
*.kiva.org
educathours.com
secure.novica.com
groove.cloudleaf.io
*.kiva.org
secure.novica.com
www.refugees.kiva.org
login.kiva.org
partner-api.k1.kiva.org
novica.com
*.kiva.org
login.kiva.org
www.labs.kiva.org
www.dashboard.geotargetly.com
gender.kiva.org
groove.kiva.org
www.refugees.kiva.org
groove.trustarc.com
novica.com
viska.com
*.kiva.org
sg.travelrank.org
go.kiva.org
secure.novica.com
login.qa.kiva.org
*.qa.kiva.org
branded.grooveapp.com
us.kiva.org
groove.g2.com
groove.uber.com
www.webboot.io
refugees.kiva.org
careers.kiva.org
wordscanner.app
*.kiva.org
*.kiva.org
careers.kiva.org
sdk.sl.kiva.org
*.dev.kiva.org
*.stage.kiva.org
*.kiva.org
us.kiva.org
wordscanner.app
*.dk1.kiva.org
admin-api.dk1.kiva.org
careers.kiva.org
*.dev.kiva.org
*.dev.kiva.org
marketplace-api.k1.kiva.org
bjuttflix.niels.me
secure.novica.com
secure.novica.com
*.stage.kiva.org
*.stage.kiva.org
gender.kiva.org
masterbooker.com
lend.kiva.org
groove.ehlinks.com
jespergustafsson.com
secure.novica.com
*.dev.kiva.org
groove.simondata.com
careers.kiva.org
partnerships.kiva.org
sni.cloudflaressl.com
login.kiva.org
www.marlim.co
*.dev.kiva.org
groove.robinpowered.com
*.dev.kiva.org
www.kiva.org
lend.kiva.org
www.gender.kiva.org
sgchuscpje.device.sighub.ch
go.kiva.org
groove.swivl.com
www.gender.kiva.org
groove.lyric.com
partnerships.kiva.org
groove.kiva.org
links.kiva.org
www.starterplus.net
login.kiva.org
groove.ehlinks.com
secure.novica.com
cdn.steviewonder.es
lend.kiva.org
partnerships.kiva.org
groove.jebbit.com
lend.kiva.org
www.refugees.kiva.org
us.kiva.org
groove.jebbit.com
admin-api.k1.kiva.org
go.kiva.org
*.kiva.org
www.kiva.org
groove.adpearance.com
*.stage.kiva.org
*.kiva.org
educathours.com
secure.novica.com
groove.cloudleaf.io
*.kiva.org
secure.novica.com
www.refugees.kiva.org
login.kiva.org
partner-api.k1.kiva.org
novica.com
*.kiva.org
login.kiva.org
www.labs.kiva.org
www.dashboard.geotargetly.com
gender.kiva.org
groove.kiva.org
www.refugees.kiva.org
groove.trustarc.com
novica.com
viska.com
*.kiva.org
sg.travelrank.org
go.kiva.org
secure.novica.com
login.qa.kiva.org
*.qa.kiva.org
branded.grooveapp.com
us.kiva.org
groove.g2.com
groove.uber.com
www.webboot.io
refugees.kiva.org
careers.kiva.org
wordscanner.app
*.kiva.org
*.kiva.org
careers.kiva.org
sdk.sl.kiva.org
*.dev.kiva.org
*.stage.kiva.org
*.kiva.org
us.kiva.org
wordscanner.app
*.dk1.kiva.org
admin-api.dk1.kiva.org
careers.kiva.org
*.dev.kiva.org
*.dev.kiva.org
marketplace-api.k1.kiva.org
bjuttflix.niels.me
Certificate
The complete raw certificate details for *.kiva.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISBG99ukiXDPcprEdoNBtCs6KyMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjEyMTMwNDAyMzlaFw0yMzAzMTMwNDAyMzhaMBUxEzARBgNVBAMM Cioua2l2YS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChrgd6 mrFH0+2asqX552J3B82/J9FoBSNevjwUq0307nGwG+a/UcCsyrk86/rCuklYm2nh q5rls4j0sThOIoVXjsWRZBVfcq8oRhBVvPbm+qgvF4Rw6v1RDxS5TZgwxwJ0uXmA u5buITEf+zlyNTYolqZY92TWRfMf9GahYnpk8cSyV3jj6XbX9Gx3f23j3G1werxo zALoM3BRDZbJq3QI9jhd2Ybx0nFvTxzkapQvxt8ipwbQxtGtim8HcVGb1ZYN35yl KUsjKzdhMOZ3Xz6Bsv8udbOF0ooyI9pQqu96E/r29XRvuYmTNkeqZ+qUTwsyMcUl QOkckVyyQdxGipPPAgMBAAGjggJPMIICSzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FNZ/J0iCsvn0HSkb1bU2lh82mpsgMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMB8G A1UdEQQYMBaCCioua2l2YS5vcmeCCGtpdmEub3JnMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAtz77JN+cTbp1 8jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGFCd0LFAAABAMARjBEAiAwknJHUwIF dbEGD0NtvdU8eL9GSNZ3ctefekTD1WA5OgIgdsgTSkGW8SJuDblhMEbhk1GK8gIM aChmRtZmY0EBeuwAdwB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAA AYUJ3Q0XAAAEAwBIMEYCIQChK3MnuHNly2HZHzU6p4nv7Vuh9D/YekKtTset0A14 MQIhANgVRdEMRx5XPXXkuJsJy6eQBVCNimU/cxOFwzWLGRl9MA0GCSqGSIb3DQEB CwUAA4IBAQBJGkV09KQdKg1OGwh69RpuOUakVOypUMatOXZzUbFZ1FD7i6+UAwD4 TUfMGkS9+/d+EGtYP3u0ywZ06QIWgtJE+Gbh3ejCXupcWHBj9TuN152pK7ekb5a6 PKcDZ5S358iRZW8ZUY1kbb3nTWAP0GhLVf9bmsyb8it+ZgiUUws2SvXCC0EUrPpQ 7XEPdjd2n9lHwN0RI0TZwRWvZxynsghVJFiFypIf5zJTEUdxHWaZkfiBRZte+svV yLGW1M1BJl/wLdG+qbnNgB7tHfR2WO+xcJz+5uzHkFKnagYQZUKQpSJvaE46vsN5 1xwUekjXggwZZisOb2uC/TQ+0jV9+YI/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa4HepqxR9PtmrKl+edi dwfNvyfRaAUjXr48FKtN9O5xsBvmv1HArMq5POv6wrpJWJtp4aua5bOI9LE4TiKF V47FkWQVX3KvKEYQVbz25vqoLxeEcOr9UQ8UuU2YMMcCdLl5gLuW7iExH/s5cjU2 KJamWPdk1kXzH/RmoWJ6ZPHEsld44+l21/Rsd39t49xtcHq8aMwC6DNwUQ2Wyat0 CPY4XdmG8dJxb08c5GqUL8bfIqcG0MbRrYpvB3FRm9WWDd+cpSlLIys3YTDmd18+ gbL/LnWzhdKKMiPaUKrvehP69vV0b7mJkzZHqmfqlE8LMjHFJUDpHJFcskHcRoqT zwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 386387607194254914617146559643166732165810 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-13 04:02:39 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-13 04:02:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kiva.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20410184103669967922824218592607043726179329498589486386623448327011499205795872383100128243636339461493531917047878214535512565515074956505412881251213752129008777383563454007295602551453020741084251395896436515483965606262581696950628163067863665729301990218812195898829630978062173758536309278110652334697741061133812696434314331132592448437608031964173457689551418694709836982999743317298588093323786435435471758703647373182453568849367692529923011615208803371617137269508737991613729883466632906995022322946519730563417604173217383935663157102846279318348984144011022921597360756210088165738370706120659025171407 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d67f274882b2f9f41d291bd5b536961f369a9b20 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiva.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiva.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018509dd0b14000004030046304402203092724753020575b1060f436dbdd53c78bf4648d67772d79f7a44c3d560393a022076c8134a4196f1226e0db9613046e193518af2020c68286646d6666341017aec0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018509dd0d170000040300483046022100a12b7327b87365cb61d91f353aa789efed5ba1f43fd87a42ad4ec7add00d7831022100d81545d10c471e573d75e4b89b09cba79005508d8a653f731385c3358b19197d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00491a4574f4a41d2a0d4e1b087af51a6e3946a454eca950c6ad39767351b159d450fb8baf940300f84d47cc1a44bdfbf77e106b583f7bb4cb0674e9021682d244f866e1dde8c25eea5c587063f53b8dd79da92bb7a46f96ba3ca7036794b7e7c891656f19518d646dbde74d600fd0684b55ff5b9acc9bf22b7e660894530b364af5c20b4114acfa50ed710f7637769fd947c0dd112344d9c115af671ca7b20855245885ca921fe732531147711d669991f881459b5efacbd5c8b196d4cd41265ff02dd1bea9b9cd801eed1df47658efb1709cfee6ecc79052a76a0610654290a5226f684e3abec379d71c147a48d7820c19662b0e6f6b82fd343ed2357df9823f