blog.giftya.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a3:93:d2:bc:bc:df:f1:a1:c5:3b:ab:fc:e0:3c:00:2c:d0 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=blog.giftya.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a3:93:d2:bc:bc:df:f1:a1:c5:3b:ab:fc:e0:3c:00:2c:d0Serial Number (int): 316999374329171591742968344939535712398544
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 3b:bf:57:f0:37:34:a0:8c:8d:ce:37:36:2c:ac:70:23:1f:57:de:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a5:4d:9f:52:67:b9:0b:9b:6e:49:05:13:51:25:72:6a:7c:f5:1f:38
Fingerprint (sha256): 5b:4d:37:c5:e5:3b:f2:79:ae:03:a6:77:17:b6:e9:1c:57:f5:6c:f5:f2:af:22:e7:88:fd:25:dc:8c:ee:8c:83
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate blog.giftya.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blog.giftya.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blog.giftya.com
Other certificates including the domain name giftya.com
(limited to 100 certificates)
redeem.giftya.com
api.giftya.com
www.shoprous.com
share.giftya.com
www.bayoulacombemuseum.com
share.giftya.com
blog.giftya.com
blog.giftya.com
blog.giftya.com
giftya.com
redeem.giftya.com
giftya.com
blog.giftya.com
blog.giftya.com
elitetouchbeauty.com
www.thebestyounow.co.uk
giftya.com
share.giftya.com
giftya.com
siteform.net
blog.giftya.com
blog.giftya.com
www.bayoulacombemuseum.com
giftya.com
tables.chat
help.giftcardgranny.com
www.shoprous.com
saborissa.com
giftya.com
share.giftya.com
www.giftya.com
www.giftya.com
giftya.com
giftya.com
blog.giftya.com
blog.giftya.com
giftya.com
giftya.com
giftya.com
giftya.com
giftya.com
giftya.com
www.gerstner.dev
blog.giftya.com
www.hjap.in
giftya.com
giftya.com
test.veewar.com
giftya.com
giftya.com
giftya.com
giftya.com
blog.giftya.com
giftya.com
blog.giftya.com
www.fgasesoresdeempresas.com.ar
giftya.com
mensafutura.com
giftya.com
giftya.com
go.giftya.com
blog.giftya.com
giftya.com
quiz.caritas-neuss.de
giftya.com
gastronomit.com.ar
blog.giftya.com
www.giftya.com
giftya.com
bdo.money
blog.giftya.com
blog.giftya.com
share.giftya.com
giftya.com
giftya.com
*.giftya.com
www.giftya.com
www.lift.com.br
www.giftya.com
blog.giftya.com
giftya.com
www.giftya.com
giftya.com
blog.giftya.com
blog.giftya.com
share.giftya.com
enroll.dev.your.vet
inpatpro.com
giftya.com
share.giftya.com
blog.giftya.com
test.veewar.com
giftya.com
giftya.com
giftya.com
blog.giftya.com
www.titop.fr
giftya.com
blog.giftya.com
go.giftya.com
api.giftya.com
www.shoprous.com
share.giftya.com
www.bayoulacombemuseum.com
share.giftya.com
blog.giftya.com
blog.giftya.com
blog.giftya.com
giftya.com
redeem.giftya.com
giftya.com
blog.giftya.com
blog.giftya.com
elitetouchbeauty.com
www.thebestyounow.co.uk
giftya.com
share.giftya.com
giftya.com
siteform.net
blog.giftya.com
blog.giftya.com
www.bayoulacombemuseum.com
giftya.com
tables.chat
help.giftcardgranny.com
www.shoprous.com
saborissa.com
giftya.com
share.giftya.com
www.giftya.com
www.giftya.com
giftya.com
giftya.com
blog.giftya.com
blog.giftya.com
giftya.com
giftya.com
giftya.com
giftya.com
giftya.com
giftya.com
www.gerstner.dev
blog.giftya.com
www.hjap.in
giftya.com
giftya.com
test.veewar.com
giftya.com
giftya.com
giftya.com
giftya.com
blog.giftya.com
giftya.com
blog.giftya.com
www.fgasesoresdeempresas.com.ar
giftya.com
mensafutura.com
giftya.com
giftya.com
go.giftya.com
blog.giftya.com
giftya.com
quiz.caritas-neuss.de
giftya.com
gastronomit.com.ar
blog.giftya.com
www.giftya.com
giftya.com
bdo.money
blog.giftya.com
blog.giftya.com
share.giftya.com
giftya.com
giftya.com
*.giftya.com
www.giftya.com
www.lift.com.br
www.giftya.com
blog.giftya.com
giftya.com
www.giftya.com
giftya.com
blog.giftya.com
blog.giftya.com
share.giftya.com
enroll.dev.your.vet
inpatpro.com
giftya.com
share.giftya.com
blog.giftya.com
test.veewar.com
giftya.com
giftya.com
giftya.com
blog.giftya.com
www.titop.fr
giftya.com
blog.giftya.com
go.giftya.com
Certificate
The complete raw certificate details for blog.giftya.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgISA6OT0ry83/GhxTur/OA8ACzQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMDExNDE5MDBaFw0x OTA1MDIxNDE5MDBaMBoxGDAWBgNVBAMTD2Jsb2cuZ2lmdHlhLmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVA8M4Nxy/oTUOojvkHlDZn6p+VnQYt yaHmJUsp850yKtOLf3RNUPvBn/TaYB6SZ13fOPMU7Guay9U0hq42V18oOJhnunb0 iaIoGv9qN+qxCGaDQ1zYWPOoLcgf9Vl2AL/gKDXYiVCiwvcGaJdaFmG2Apbx7V6/ Y74IRqhO8eRPcxDa+3chLUzrF9gZZgteaiVdC18T38unE+jgBOc1IchrhaU3xFjJ ueaY7S2uf5K0/0d4titCJJ/eLMiScY2BuvUciXs9DIFW9R3b/g6MitFGgowNd4DL 1dLek6iRhHv9wXtApZgezwlp+v9xM8dV6mK2mTgAWQqXpjagoW3ZBrUCAwEAAaOC AmYwggJiMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUO79X8Dc0oIyNzjc2LKxwIx9X 3sUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzAaBgNVHREEEzARgg9ibG9nLmdpZnR5YS5jb20wTAYDVR0gBEUwQzAIBgZn gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwDiaUuuJujp QAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWippEMgAAAEAwBIMEYCIQCaxUKl RsqKlycG9wTW8SBAyGNjtYIszjhjxnq0YRbG9wIhAK+2PHsYuZ8YaEMxA/tHidRm jfT6BE7llGvTQ2mrRlrJAHcAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL 2I0AAAFoqaRBUwAABAMASDBGAiEA8sn7UyyzxtJxlSded+lm1uHPyson+VJJfCMC PbA6QngCIQCcG5K7QP0rnQUodZaXyhDWZ+DF/NfuDG11CitlY9nWYzANBgkqhkiG 9w0BAQsFAAOCAQEAYlznApGRY0RBdFhyzkehYfHWdPBnyY7v5yxMA07rK6Twwsd8 btKwrlcpl0qbBWCkqhKTTese+ptKg+XLISNlc6jUX8mxCrCvvOzPiVeMyliUkd5i bQ2k/GVjcVY23++h2wZBcBJmot6NyjcCQPC/UKrwYTxm04rEyONH3N02S+J37xmp b0VKLkRtDscXnSH4ovA2uPWfLXcFZcfuLFfn7pCPIrzcmGGgtTnDQk0ba4ZJ9PNl Rm5AONerKzDTh5e14TRFi1EXehq67lA97cLGvzfd29v+jqGyMBUbP2YaF3TGkCI+ +0dCCbrVw1bnnuKG3raVmzLorNkCf66MZx4d5A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUDwzg3HL+hNQ6iO+QeU Nmfqn5WdBi3JoeYlSynznTIq04t/dE1Q+8Gf9NpgHpJnXd848xTsa5rL1TSGrjZX Xyg4mGe6dvSJoiga/2o36rEIZoNDXNhY86gtyB/1WXYAv+AoNdiJUKLC9wZol1oW YbYClvHtXr9jvghGqE7x5E9zENr7dyEtTOsX2BlmC15qJV0LXxPfy6cT6OAE5zUh yGuFpTfEWMm55pjtLa5/krT/R3i2K0Ikn94syJJxjYG69RyJez0MgVb1Hdv+DoyK 0UaCjA13gMvV0t6TqJGEe/3Be0ClmB7PCWn6/3Ezx1XqYraZOABZCpemNqChbdkG tQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316999374329171591742968344939535712398544 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 14:19:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-02 14:19:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.giftya.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24900969503464331594106488762209914828581335612802970452393303471455178495412099604911881277388431259692655925824640051597609810862469489337648862400378718655939201497857871719432477099670858105286777436373109300542358411676089333810492344435325191781359167321568237645984506949624400945121572559402900610776967576712452889352289421536676489804209814276970426265365066674161109988082307671779715177855887721291640476778460445849121082990836365973708364109121654850817257436844472263456301734517486970760744562572584834698719784116191077915502234899021985657890313733610647824439892439689317026365882465427817911355061 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3bbf57f03734a08c8dce37362cac70231f57dec5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.giftya.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168a9a4432000000403004830460221009ac542a546ca8a972706f704d6f12040c86363b5822cce3863c67ab46116c6f7022100afb63c7b18b99f1868433103fb4789d4668df4fa044ee5946bd34369ab465ac900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168a9a441530000040300483046022100f2c9fb532cb3c6d27195275e77e966d6e1cfcaca27f952497c23023db03a42780221009c1b92bb40fd2b9d0528759697ca10d667e0c5fcd7ee0c6d750a2b6563d9d663 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00625ce7029191634441745872ce47a161f1d674f067c98eefe72c4c034eeb2ba4f0c2c77c6ed2b0ae5729974a9b0560a4aa12934deb1efa9b4a83e5cb21236573a8d45fc9b10ab0afbceccf89578cca589491de626d0da4fc6563715636dfefa1db0641701266a2de8dca370240f0bf50aaf0613c66d38ac4c8e347dcdd364be277ef19a96f454a2e446d0ec7179d21f8a2f036b8f59f2d770565c7ee2c57e7ee908f22bcdc9861a0b539c3424d1b6b8649f4f365466e4038d7ab2b30d38797b5e134458b51177a1abaee503dedc2c6bf37dddbdbfe8ea1b230151b3f661a1774c690223efb474209bad5c356e79ee286deb6959b32e8acd9027fae8c671e1de4