estaescrito.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:80:cf:23:d8:cb:1a:fe:35:9c:d2:bf:04:80:74:86:ca:57 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=estaescrito.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:80:cf:23:d8:cb:1a:fe:35:9c:d2:bf:04:80:74:86:ca:57Serial Number (int): 392280623015530781524213945110947613297239
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: c3:9f:bc:76:69:83:01:dc:f6:9d:23:05:2a:c8:2e:2c:15:e4:b8:ee
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 14:29:36:03:b2:63:f4:01:b3:0c:da:be:e6:19:96:7d:4a:a1:7d:28
Fingerprint (sha256): 52:c9:b2:a6:5d:07:38:82:8b:d5:df:a0:4f:0f:b2:58:a3:9c:6d:d6:46:ee:e7:a4:ed:8d:14:7a:54:81:72:d0
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate estaescrito.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for estaescrito.ca
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
estaescrito.ca
Other certificates including the domain name estaescrito.ca
(limited to 100 certificates)
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
estaescrito.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
estaescrito.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
estaescrito.ca
www.estaescrito.ca
www.estaescrito.ca
Certificate
The complete raw certificate details for estaescrito.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISBIDPI9jLGv41nNK/BIB0hspXMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTgxNDQxNDFaFw0x OTA5MTYxNDQxNDFaMBkxFzAVBgNVBAMTDmVzdGFlc2NyaXRvLmNhMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwHwGneapp1ndI0QatOv9flK1ykiswQvW QoISixP65ILPj9v57/Hrs0kEec1jCgWTC4RX/dLJNVbZMp/cGiKNzWfrzfav5U28 Ig7gAtmKVl49fs4RwQDDjIiWhtCYA9G6Oy6z/hz1WCyPPACBlRTvAa3EtpDvJ++c nVxhLeWHY3EJkpUqSCL1IVhqKKSbxcFY8NvY7UUKoEj7VGnI4np+4Yg4MwLXQiXj cIaXfIY5hn//W5f9K/3z5wHjru30Tl0KINOK1DY8QHYfsoFs2CvsEfB63+N3E7qK zOw928upvH4YzKE5ptZjKdWy4Q23WE30PhavOu3BeM1AjjzQ0aaw4YTlOp+OR4hg 2LTSOHuj13/SXOWOZUTpPDFVlky97HRk62bjuIhMbC60Z8BYitoKm0A0LjRxZrIV 63jjRVRH8dt5cX4vhVa9CX67eAsWhvKbxXH1Tsbr54yK4BPFTKKAhmoX3sN1RgIV hj5I4x9KAtNVAm+04tqHJVaHyaiq8MoGzosVIgyGduGu/ryvO/YxETSkzEKqxahL 8M510FNfGZqDJ2xr8mvWvOXhut0Y7hBd13thITqDRjuNbY1c6KoDZLF4r9x0a9lH IjlveNyMMeIjopDXDAjbgLD5YTzvHtbBJD7gF56re69M6if1xrRJRDnJXbSKNmRV w3ZwxiUCQ08CAwEAAaOCAmEwggJdMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUw5+8 dmmDAdz2nSMFKsguLBXkuO4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5lc3RhZXNjcml0by5jYTBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfME gfAA7gB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABa2tAQnIA AAQDAEYwRAIgM40ejzSWHL5dnpBchDIcPrH0py4MZowZvKNhmedG3I4CIC6+KKVL eH0TSncOFn9SlyB6JtbESUixoR3MZFEXHsN8AHUAKTxRllTIOWW6qlD8WAfUt2+/ WHopctykwwz05UVH9HgAAAFra0BCSgAABAMARjBEAiAhsSFkeVLtN1YINAXiif/a Ld/0pNTeug4Uu+iQ2NN5fwIgD98tzxskAo25fUs9huWYi9Tuh3ffKlfgItuhgJlz NtIwDQYJKoZIhvcNAQELBQADggEBAIXroqt6Gz0bPBHYR5r3d+QshgVY4jgEgfcO ai1Ha5cyPLdiVITTrEuKPABgrv/+wNximVnfOA5f73pa9kMs3C55sUQB3Cco9ABl SQIAKqJL0h+c+7jgHs3AcGA0F1HIk2w2gGhPNPcQrDcWGGKX7uFBJBwcNkrqruOg DkMyHO8mjFGiSv7dG60iOKWhr7oBRa1RYZ61RMdAKqpsIIUsegdPnJTAQ1WLv45j vBtw89BHHRrWhm3GYShkacy0RbrxD1tacFLPzDAO55moIxqKRTHD6eVbEjB3bAdp Y7uOR5/Hn/wZ9vQfzfCyPRZI4VgZ8sKHldc7HHqkwkgMXV6qUuk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwHwGneapp1ndI0QatOv9 flK1ykiswQvWQoISixP65ILPj9v57/Hrs0kEec1jCgWTC4RX/dLJNVbZMp/cGiKN zWfrzfav5U28Ig7gAtmKVl49fs4RwQDDjIiWhtCYA9G6Oy6z/hz1WCyPPACBlRTv Aa3EtpDvJ++cnVxhLeWHY3EJkpUqSCL1IVhqKKSbxcFY8NvY7UUKoEj7VGnI4np+ 4Yg4MwLXQiXjcIaXfIY5hn//W5f9K/3z5wHjru30Tl0KINOK1DY8QHYfsoFs2Cvs EfB63+N3E7qKzOw928upvH4YzKE5ptZjKdWy4Q23WE30PhavOu3BeM1AjjzQ0aaw 4YTlOp+OR4hg2LTSOHuj13/SXOWOZUTpPDFVlky97HRk62bjuIhMbC60Z8BYitoK m0A0LjRxZrIV63jjRVRH8dt5cX4vhVa9CX67eAsWhvKbxXH1Tsbr54yK4BPFTKKA hmoX3sN1RgIVhj5I4x9KAtNVAm+04tqHJVaHyaiq8MoGzosVIgyGduGu/ryvO/Yx ETSkzEKqxahL8M510FNfGZqDJ2xr8mvWvOXhut0Y7hBd13thITqDRjuNbY1c6KoD ZLF4r9x0a9lHIjlveNyMMeIjopDXDAjbgLD5YTzvHtbBJD7gF56re69M6if1xrRJ RDnJXbSKNmRVw3ZwxiUCQ08CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 392280623015530781524213945110947613297239 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 14:41:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 14:41:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'estaescrito.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785268150554000505167686304882471518296068028642322808937214662283852765159079941051727498678388076156469575762712156257973308020006761601158730029061193729320332534925207239547326334093059314932824737970017708793303509362231553878048082743436412220497909207383351503158502654534938240434612028650004291583816969517604195367494179439652934651015448489311062139947223534709922187808704237169829886001879212285657631532510572447806470307853258337575004022652237064035645332610118069322628769076884153617607022964362667820211269585746158997972186578118528389527740210245141383677852572363767002180240481175825917623758538035173172518177769507361114208203818965966105682940027131861376417645632437718878709986501547495348169885131441478657524163281432799971311471691434960352583374120625219683877199770942819407679650123895956326944660249961866435963341256338409105411709619780229797612252799804752446154938755789516864630709977559871040466103550305573981507868515250039074300248545606399234661984275771913202743521829544937450864888938885857792256536952422202555259386929870525185766277158976510709538082788749916124629155282931765759206831226996181081413339130369018145911671377483909683467020598407350417613379309036584032374859383631 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c39fbc76698301dcf69d23052ac82e2c15e4b8ee . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estaescrito.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b6b40427200000403004630440220338d1e8f34961cbe5d9e905c84321c3eb1f4a72e0c668c19bca36199e746dc8e02202ebe28a54b787d134a770e167f5297207a26d6c44948b1a11dcc6451171ec37c007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b6b40424a0000040300463044022021b121647952ed3756083405e289ffda2ddff4a4d4deba0e14bbe890d8d3797f02200fdf2dcf1b24028db97d4b3d86e5988bd4ee8777df2a57e022dba180997336d2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0085eba2ab7a1b3d1b3c11d8479af777e42c860558e2380481f70e6a2d476b97323cb7625484d3ac4b8a3c0060aefffec0dc629959df380e5fef7a5af6432cdc2e79b14401dc2728f400654902002aa24bd21f9cfbb8e01ecdc07060341751c8936c3680684f34f710ac3716186297eee141241c1c364aeaaee3a00e43321cef268c51a24afedd1bad2238a5a1afba0145ad51619eb544c7402aaa6c20852c7a074f9c94c043558bbf8e63bc1b70f3d0471d1ad6866dc661286469ccb445baf10f5b5a7052cfcc300ee799a8231a8a4531c3e9e55b1230776c076963bb8e479fc79ffc19f6f41fcdf0b23d1648e15819f2c28795d73b1c7aa4c2480c5d5eaa52e9