varjak.fr
Issued by R3
About this certificate
This digital certificate with serial number 03:cb:f0:60:76:04:56:ac:42:41:16:13:e5:92:e8:33:dd:16 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=varjak.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:cb:f0:60:76:04:56:ac:42:41:16:13:e5:92:e8:33:dd:16Serial Number (int): 330733693853386117015802590308340249910550
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ca:87:d2:e5:b7:8d:46:08:a9:fc:d2:05:b5:e5:9a:aa:c5:da:3d:e3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): de:09:41:c0:8e:fc:74:24:4c:89:b5:3b:cd:3b:ed:28:42:b4:37:38
Fingerprint (sha256): 51:ce:a9:16:da:08:0e:7f:7d:1b:ab:87:53:b6:72:1e:b7:1d:99:16:14:45:87:bb:0e:08:a0:e8:70:a1:9d:62
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate varjak.fr
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for varjak.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
varjak.fr
www.varjak.fr
www.varjak.fr
Other certificates including the domain name varjak.fr
(limited to 100 certificates)
wagrametvous.varjak.fr
clients.missioncreativeco.com
dashboard.getorwell.com
clients.missioncreativeco.com
pay.printrove.com
varjak.fr
pay.printrove.com
middleware-prod-edbn.varjak.fr
campari.varjak.fr
clients.missioncreativeco.com
clients.missioncreativeco.com
pay.printrove.com
clients.missioncreativeco.com
clients.missioncreativeco.com
clients.missioncreativeco.com
billings.avenirit.com
clients.missioncreativeco.com
clients.missioncreativeco.com
project.senhorpc.com
varjak.fr
clients.missioncreativeco.com
clients.missioncreativeco.com
project.senhorpc.com
clients.missioncreativeco.com
pay.printrove.com
clients.missioncreativeco.com
pay.printrove.com
pay.printrove.com
pay.printrove.com
project.senhorpc.com
clients.missioncreativeco.com
wfs.varjak.fr
clients.missioncreativeco.com
varjak.fr
pay.printrove.com
pay.printrove.com
pay.printrove.com
pay.printrove.com
pay.printrove.com
clients.missioncreativeco.com
csp.trustedtechteam.com
pay.printrove.com
dm.varjak.fr
varjak.fr
pay.printrove.com
billing.tidewaterwebsites.com
pay.printrove.com
wfs.varjak.fr
clients.missioncreativeco.com
projetos.consultoriaegn.com.br
wfs.varjak.fr
esi.varjak.fr
clients.missioncreativeco.com
pay.printrove.com
clients.missioncreativeco.com
clients.missioncreativeco.com
clients.missioncreativeco.com
pay.printrove.com
pay.printrove.com
clients.missioncreativeco.com
pay.printrove.com
wagrametvous.varjak.fr
projects.expertsolutionsindia.in
pay.printrove.com
clients.missioncreativeco.com
rafale.varjak.fr
pay.printrove.com
pay.printrove.com
pay.printrove.com
project.senhorpc.com
subscriptions.stratlantis.com
varjak.fr
project.senhorpc.com
varjak.fr
pay.printrove.com
pay.printrove.com
clients.missioncreativeco.com
pay.printrove.com
clients.missioncreativeco.com
clients.missioncreativeco.com
esi.varjak.fr
pay.printrove.com
subscriptions.smarthomeassurance.com
clients.missioncreativeco.com
varjak.fr
clients.missioncreativeco.com
middleware-esi.varjak.fr
clients.missioncreativeco.com
project.senhorpc.com
clients.missioncreativeco.com
suscripciones.embprime.com
esi.varjak.fr
clients.missioncreativeco.com
clients.missioncreativeco.com
pay.printrove.com
clients.missioncreativeco.com
billing.benefitx.com
clients.missioncreativeco.com
pay.printrove.com
pay.printrove.com
clients.missioncreativeco.com
dashboard.getorwell.com
clients.missioncreativeco.com
pay.printrove.com
varjak.fr
pay.printrove.com
middleware-prod-edbn.varjak.fr
campari.varjak.fr
clients.missioncreativeco.com
clients.missioncreativeco.com
pay.printrove.com
clients.missioncreativeco.com
clients.missioncreativeco.com
clients.missioncreativeco.com
billings.avenirit.com
clients.missioncreativeco.com
clients.missioncreativeco.com
project.senhorpc.com
varjak.fr
clients.missioncreativeco.com
clients.missioncreativeco.com
project.senhorpc.com
clients.missioncreativeco.com
pay.printrove.com
clients.missioncreativeco.com
pay.printrove.com
pay.printrove.com
pay.printrove.com
project.senhorpc.com
clients.missioncreativeco.com
wfs.varjak.fr
clients.missioncreativeco.com
varjak.fr
pay.printrove.com
pay.printrove.com
pay.printrove.com
pay.printrove.com
pay.printrove.com
clients.missioncreativeco.com
csp.trustedtechteam.com
pay.printrove.com
dm.varjak.fr
varjak.fr
pay.printrove.com
billing.tidewaterwebsites.com
pay.printrove.com
wfs.varjak.fr
clients.missioncreativeco.com
projetos.consultoriaegn.com.br
wfs.varjak.fr
esi.varjak.fr
clients.missioncreativeco.com
pay.printrove.com
clients.missioncreativeco.com
clients.missioncreativeco.com
clients.missioncreativeco.com
pay.printrove.com
pay.printrove.com
clients.missioncreativeco.com
pay.printrove.com
wagrametvous.varjak.fr
projects.expertsolutionsindia.in
pay.printrove.com
clients.missioncreativeco.com
rafale.varjak.fr
pay.printrove.com
pay.printrove.com
pay.printrove.com
project.senhorpc.com
subscriptions.stratlantis.com
varjak.fr
project.senhorpc.com
varjak.fr
pay.printrove.com
pay.printrove.com
clients.missioncreativeco.com
pay.printrove.com
clients.missioncreativeco.com
clients.missioncreativeco.com
esi.varjak.fr
pay.printrove.com
subscriptions.smarthomeassurance.com
clients.missioncreativeco.com
varjak.fr
clients.missioncreativeco.com
middleware-esi.varjak.fr
clients.missioncreativeco.com
project.senhorpc.com
clients.missioncreativeco.com
suscripciones.embprime.com
esi.varjak.fr
clients.missioncreativeco.com
clients.missioncreativeco.com
pay.printrove.com
clients.missioncreativeco.com
billing.benefitx.com
clients.missioncreativeco.com
pay.printrove.com
pay.printrove.com
Certificate
The complete raw certificate details for varjak.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgISA8vwYHYEVqxCQRYT5ZLoM90WMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTIxMTI4MTdaFw0yNDAzMTExMTI4MTZaMBQxEjAQBgNVBAMT CXZhcmphay5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPW4SA6f N6frBNyhHTt/8BRQPXvx0TnXwbOJ9sGfsbD6GeDwA5cQPFngUElH5fx4ae7EQt5C X+mxy9dBc4g0iUSo5+/6GXchElW60Y7G6GpsdeEgpqrNkS32sCWTcqFdDGGYkOhn 9/qW5OWDGWKsmyuJLrFThSL3SogXTgLSVRSJwBwbNcwyrag0xiNo0p/pchmNRIUT i/AcF6cHYFw0auWqXGgQ1PkLOxmpjHY+U4GjU+6CwEF+ykjVqic1WUjP5sGed9oN wweEijZ9PL3i7GEJ3nv2x/J/LY9JCMxrofCFW/P8qUAuRS0R0ODC8fPl936KlR6E QCsjmvxoNS/Z/P0CAwEAAaOCAhowggIWMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU yofS5beNRgip/NIFteWaqsXaPeMwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wIwYD VR0RBBwwGoIJdmFyamFrLmZygg13d3cudmFyamFrLmZyMBMGA1UdIAQMMAowCAYG Z4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYASLDja9qmRzQP5WoC+p0w 6xxSActW3SyB2bu/qznYhHMAAAGMXf/YGQAABAMARzBFAiEArUq6HWQpihMdiGAB qPAIWsVi0cWpta8E8UrY2dvtE9ICIChphB7TXyxnVpGU9/9d1rV+CQERZxxr2cxJ jWBXaKPYAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGMXf/Y GwAABAMARzBFAiEAotVFesSbp47RbKkEn9DWxBfH1BlKnY2kfBc3aiFGEnACIANs kgx20yRDQrpym7bqXcOOOc/OOF27ApOHQbbXIYkAMA0GCSqGSIb3DQEBCwUAA4IB AQAZxGswAcBtUqmSBH0RE9oxjMYeoHuqWMK/ADCJIp/0ecq+OqpWofsDNts+OTss GWbi/IqN9aONdKIJ8ho3u7KOJV8w1N+/5pAftn5DMmkMJa/F5/5YPicKQSTzTbXX 2pqQNOtvn9DkKYr3jXtPaHq8/4GKiLaxPPQiZuvo/51wKLwYpcL4g1/X2pPsqJRm ojeGrKOUAsgME/K2edYFHwmTonFNKhwq7jC82EzbfUdtDx9BqPfR0g2mUOCGNi9w x1d85zMPvOgpx9DdUsq5mQ4wtdXezijGheKTNmbU5cNVX7Sel701wOBNCcvWcRxo v8bNWMrBakDI6FjYdNcIS8pw -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bhIDp83p+sE3KEdO3/w FFA9e/HROdfBs4n2wZ+xsPoZ4PADlxA8WeBQSUfl/Hhp7sRC3kJf6bHL10FziDSJ RKjn7/oZdyESVbrRjsboamx14SCmqs2RLfawJZNyoV0MYZiQ6Gf3+pbk5YMZYqyb K4kusVOFIvdKiBdOAtJVFInAHBs1zDKtqDTGI2jSn+lyGY1EhROL8BwXpwdgXDRq 5apcaBDU+Qs7GamMdj5TgaNT7oLAQX7KSNWqJzVZSM/mwZ532g3DB4SKNn08veLs YQnee/bH8n8tj0kIzGuh8IVb8/ypQC5FLRHQ4MLx8+X3foqVHoRAKyOa/Gg1L9n8 /QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 330733693853386117015802590308340249910550 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 11:28:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 11:28:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'varjak.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31019257297943938938098300547520029116091096884670180868142343425705530718233713019102518926187557325675594421244809218669976887476442791931449439683794483497787762426299720307065483543890795481102903203527416774671968419630460039332995353194544196736445328661688733442267273172940581358511437132840227741661682478459569256397396825598890607629959255139986005368347534356754144828875496010917280441057943826622159289402067917930091647783271617908274835713604650141517607081075892357668692197840834967226843893987095061020009039772940561705954365538381793807586025829896075209280457048357602722111678262401849227869437 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ca87d2e5b78d4608a9fcd205b5e59aaac5da3de3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varjak.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.varjak.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5dffd8190000040300473045022100ad4aba1d64298a131d886001a8f0085ac562d1c5a9b5af04f14ad8d9dbed13d202202869841ed35f2c67569194f7ff5dd6b57e090111671c6bd9cc498d605768a3d8007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c5dffd81b0000040300473045022100a2d5457ac49ba78ed16ca9049fd0d6c417c7d4194a9d8da47c17376a214612700220036c920c76d3244342ba729bb6ea5dc38e39cfce385dbb02938741b6d7218900 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0019c46b3001c06d52a992047d1113da318cc61ea07baa58c2bf003089229ff479cabe3aaa56a1fb0336db3e393b2c1966e2fc8a8df5a38d74a209f21a37bbb28e255f30d4dfbfe6901fb67e4332690c25afc5e7fe583e270a4124f34db5d7da9a9034eb6f9fd0e4298af78d7b4f687abcff818a88b6b13cf42266ebe8ff9d7028bc18a5c2f8835fd7da93eca89466a23786aca39402c80c13f2b679d6051f0993a2714d2a1c2aee30bcd84cdb7d476d0f1f41a8f7d1d20da650e086362f70c7577ce7330fbce829c7d0dd52cab9990e30b5d5dece28c685e2933666d4e5c3555fb49e97bd35c0e04d09cbd6711c68bfc6cd58cac16a40c8e858d874d7084bca70