service.apoyar.eu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9f:7e:2c:bf:50:49:31:92:8f:c1:26:a4:cd:0f:59:63:7c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=service.apoyar.eu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9f:7e:2c:bf:50:49:31:92:8f:c1:26:a4:cd:0f:59:63:7cSerial Number (int): 315609469204541770196759422303345657340796
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f8:8d:d5:f5:b1:eb:af:6b:65:87:08:a8:88:05:fe:1b:19:84:be:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 34:13:4c:bc:25:cd:6b:6e:52:7b:9e:16:3f:18:35:da:95:57:77:5a
Fingerprint (sha256): 57:44:7e:df:70:67:e4:3e:d1:96:7d:af:d5:85:96:ef:62:25:96:10:22:85:83:a2:39:1c:d1:05:b4:94:1f:ae
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate service.apoyar.eu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for service.apoyar.eu
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
service.apoyar.eu
Other certificates including the domain name apoyar.eu
(limited to 100 certificates)
apoyar.net
apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
service.apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
mail.apoyar.net
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
mail.apoyar.net
mail.apoyar.net
apoyar.eu
service.apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
apoyar.eu
mail.apoyar.net
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
decovry2.apoyar.eu
printzpl.uat.apoyar.eu
apoyar.eu
*.apoyar.eu
mail.apoyar.net
printzpl.uat.apoyar.eu
xeroapi.apoyar.eu
printzpl.uat.apoyar.eu
service.apoyar.eu
printzpl.uat.apoyar.eu
service.apoyar.eu
apoyar.eu
printzpl.uat.apoyar.eu
service.apoyar.eu
apoyar.eu
apoyar.eu
apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
mail.apoyar.net
printzpl.uat.apoyar.eu
apoyar.eu
service.apoyar.eu
printzpl.uat.apoyar.eu
apoyar.eu
service.apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
service.apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
mail.apoyar.net
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
mail.apoyar.net
mail.apoyar.net
apoyar.eu
service.apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
apoyar.eu
mail.apoyar.net
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
decovry2.apoyar.eu
printzpl.uat.apoyar.eu
apoyar.eu
*.apoyar.eu
mail.apoyar.net
printzpl.uat.apoyar.eu
xeroapi.apoyar.eu
printzpl.uat.apoyar.eu
service.apoyar.eu
printzpl.uat.apoyar.eu
service.apoyar.eu
apoyar.eu
printzpl.uat.apoyar.eu
service.apoyar.eu
apoyar.eu
apoyar.eu
apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
mail.apoyar.net
printzpl.uat.apoyar.eu
apoyar.eu
service.apoyar.eu
printzpl.uat.apoyar.eu
apoyar.eu
service.apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
Certificate
The complete raw certificate details for service.apoyar.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgISA59+LL9QSTGSj8EmpM0PWWN8MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMzEwODAwMzBaFw0y MDAzMzAwODAwMzBaMBwxGjAYBgNVBAMTEXNlcnZpY2UuYXBveWFyLmV1MIIBojAN BgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEA1lLdk46p6/AsHGN/Ay18e8s0v+SG ZTTCc/ZIGQWTJchgULELMDsY/PuBT4aphGbtA6cyoZK0KrhtTQTsSvhDaf5pf68X aMeyN/QgDjmxmbDblFCPR6TYLNbxyOSaKKOOri1Zck6EVMZB5CP55hqLkko29qwh HgYdTXJMPLEL2dpPLY8HrN+SGEEzpbnq0geyyEKV/xTUVdRoxDtrvkPgrpXO/mpg n1ahsopGgz2CiSq/qVEu7azvXwImOxMMHuXlqLDB+QguGOCHfbb6yymXxncc1/3b mDxc5EYpFH6EeZTWb0Uvw4ktydNVvSyh3dZLK3ynFeXDkRpoZ6glSW2ebfnL2Db5 6BU8o7Qx6eCegepBVF2QI373zDopopWRSeujDGwTQW1IZfM7bdBWx/fAN5cAy4so vbMyqty3udKCUz2YMsiTT+Tz3g+zMZre18sepShjjTW04GRBRlK6v7zCsxt9a4qh XW/nmnUpi8h1EugC0IPQ6pj+r+o3dBbzkFrxAgMBAAGjggJmMIICYjAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFPiN1fWx669rZYcIqIgF/hsZhL6uMB8GA1UdIwQYMBaA FKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcw AYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcw AoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHAYDVR0RBBUw E4IRc2VydmljZS5hcG95YXIuZXUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBep3P531bA57U2SH3QSeAyepGa DIShEhKEGHWWgXFFWAAAAW9bL2X8AAAEAwBHMEUCIQDgE4e6p/AERh8mWhA7Og3k ZkS2Re0adsy4iDGo74DIyQIgEgj9NtIN0xPPCDkq3Gjo5e5ekOU3siEWwOVID7x4 qm8AdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW9bL2XeAAAE AwBHMEUCIQCuhAfvkBaC/+EU1aatOYiT0ZusRTJhXgeY1DRnbPonOQIgTtSMi52F OO3HuG45XMoJr8QYfPAkvsiXG9obWLh18F8wDQYJKoZIhvcNAQELBQADggEBAJX1 1yvI6pxJeplhLcS/TizPgzL4eYM/a03oQIF+3we8QIRbDnB6r1pIGR4YGBg6/Uoj RI9bu+OlsgHhG0+/2qTBNzTOFzTkGq+YjKddK/roEL8GuhyKH4WFnuik/Wzbcl0M Pu7x1r8MFv6R6H0Jzl2itMH+TtT0q7jwO3qUT86MJ1jQklwIKQ+/3SxH3s6tkIFO 9rzTpbAiAe7vtewsCQ+El2PwaoWdOmSIe/bnPEy9cs/JTSL+drCSiQuAP4aq3nSN u2E5s2pje523KSS7azCt/3rLfDNZd3xbpnzxAjXF07mv3LLEm5d5S+TnFuYHirj1 4jUQhEput5WXreiC7jo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEA1lLdk46p6/AsHGN/Ay18 e8s0v+SGZTTCc/ZIGQWTJchgULELMDsY/PuBT4aphGbtA6cyoZK0KrhtTQTsSvhD af5pf68XaMeyN/QgDjmxmbDblFCPR6TYLNbxyOSaKKOOri1Zck6EVMZB5CP55hqL kko29qwhHgYdTXJMPLEL2dpPLY8HrN+SGEEzpbnq0geyyEKV/xTUVdRoxDtrvkPg rpXO/mpgn1ahsopGgz2CiSq/qVEu7azvXwImOxMMHuXlqLDB+QguGOCHfbb6yymX xncc1/3bmDxc5EYpFH6EeZTWb0Uvw4ktydNVvSyh3dZLK3ynFeXDkRpoZ6glSW2e bfnL2Db56BU8o7Qx6eCegepBVF2QI373zDopopWRSeujDGwTQW1IZfM7bdBWx/fA N5cAy4sovbMyqty3udKCUz2YMsiTT+Tz3g+zMZre18sepShjjTW04GRBRlK6v7zC sxt9a4qhXW/nmnUpi8h1EugC0IPQ6pj+r+o3dBbzkFrxAgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 315609469204541770196759422303345657340796 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 08:00:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 08:00:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'service.apoyar.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4863813338416832728409273806453873852399782810369670856328222359253964998609467516907495222001099159987299084570654296882425653261589950322012971761034253275622200453547194308818316662968959211585069189015494647308700243856696121696774005840801973341514026567783800867102397900406219974806114486618007574847485017022301856804247492779779806793792223008711631136965001248947220436830555376050724094089189682433453549255725448972490134464420733093645235111023026230819615373970377896983384418512039279382726617565499430758941269751985727368357890944383750723738058248238366485272852264511755038760903427452584901277458445559033403901848773260594193000161155630011033802959945866227448409954831678450191159315957262494875204557202876219612270053818016094422312092773406482922420301627058510185148895766553532127610895503543759048830083501947068600864841046568444074842857078137171426132923054678186068629516162331236646425484017 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f88dd5f5b1ebaf6b658708a88805fe1b1984beae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.apoyar.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f5b2f65fc0000040300473045022100e01387baa7f004461f265a103b3a0de46644b645ed1a76ccb88831a8ef80c8c902201208fd36d20dd313cf08392adc68e8e5ee5e90e537b22116c0e5480fbc78aa6f007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f5b2f65de0000040300473045022100ae8407ef901682ffe114d5a6ad398893d19bac4532615e0798d434676cfa273902204ed48c8b9d8538edc7b86e395cca09afc4187cf024bec8971bda1b58b875f05f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0095f5d72bc8ea9c497a99612dc4bf4e2ccf8332f879833f6b4de840817edf07bc40845b0e707aaf5a48191e1818183afd4a23448f5bbbe3a5b201e11b4fbfdaa4c13734ce1734e41aaf988ca75d2bfae810bf06ba1c8a1f85859ee8a4fd6cdb725d0c3eeef1d6bf0c16fe91e87d09ce5da2b4c1fe4ed4f4abb8f03b7a944fce8c2758d0925c08290fbfdd2c47decead90814ef6bcd3a5b02201eeefb5ec2c090f849763f06a859d3a64887bf6e73c4cbd72cfc94d22fe76b092890b803f86aade748dbb6139b36a637b9db72924bb6b30adff7acb7c3359777c5ba67cf10235c5d3b9afdcb2c49b97794be4e716e6078ab8f5e23510844a6eb79597ade882ee3a