thinkabit.es
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ac:26:df:24:e6:67:61:de:18:04:27:57:91:d3:a9:41:13 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=thinkabit.es
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ac:26:df:24:e6:67:61:de:18:04:27:57:91:d3:a9:41:13Serial Number (int): 319917094200142654105669052383573284831507
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6b:65:26:81:ec:5c:f2:5c:e5:1b:5b:73:ac:8b:c9:cc:b9:7a:7d:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 99:26:ef:70:3c:56:c5:3c:04:18:9e:db:7d:d4:97:3f:09:4e:c9:9e
Fingerprint (sha256): 67:03:c3:9d:22:c6:77:5b:09:ee:0a:9b:89:8a:f6:fb:88:04:14:4a:b2:2e:c9:b1:6d:cd:64:e1:8b:c9:21:d6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate thinkabit.es
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for thinkabit.es
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
thinkabit.es
www.thinkabit.es
www.thinkabit.es
Other certificates including the domain name thinkabit.es
(limited to 100 certificates)
*.gke.dev.thinkabit.es
tls.automattic.com
tls.automattic.com
srdanstanic.com
thinkabit.es
jenkins.gke.dev.thinkabit.es
storage.gce.dev.thinkabit.es
cnccuyo.com
tls.automattic.com
tls.automattic.com
gitlab.gce.dev.thinkabit.es
tls.automattic.com
thinkabit.es
www.thinkabit.es
mentoro.app
metalparts.hu
visa-cms-dev.hicity.world
tls.automattic.com
clubpropagas.com
thinkabit.es
controlroom.iotdataroom.com
tls.automattic.com
epidemicrpmtest.ward.technology
schoonheidsinstituutlaurence.be
tls.automattic.com
*.gke.dev.thinkabit.es
thinkabit.es
thinkabit.es
merterim.dev
tls.automattic.com
storage.gce.dev.thinkabit.es
tls.automattic.com
tls.automattic.com
tls.automattic.com
storage.gce.dev.thinkabit.es
pwa-builder.swandoola.com
tls.automattic.com
epidemicrpmtest.ward.technology
tls.automattic.com
thinkabit.es
thinkabit.es
evening.makers.kg
static.gcs.dev.thinkabit.es
*.gke.dev.thinkabit.es
kajimotomusic.paris
youtube2text.com
tls.automattic.com
*.gke.dev.thinkabit.es
tls.automattic.com
tls.automattic.com
chicken-dinner.com
static.gcs.dev.thinkabit.es
thingyoucollect.com
*.gke.dev.thinkabit.es
tls.automattic.com
fanlife.tech
tls.automattic.com
apps.gce.dev.thinkabit.es
admin.thebestweddingapp.com
www.standzero.com
storage.gce.dev.thinkabit.es
rossblufordenterprises.com
tls.automattic.com
a-c.app
*.gke.dev.thinkabit.es
tls.automattic.com
www.standzero.com
storage.gce.dev.thinkabit.es
thinkabit.es
tls.automattic.com
tls.automattic.com
srdanstanic.com
thinkabit.es
jenkins.gke.dev.thinkabit.es
storage.gce.dev.thinkabit.es
cnccuyo.com
tls.automattic.com
tls.automattic.com
gitlab.gce.dev.thinkabit.es
tls.automattic.com
thinkabit.es
www.thinkabit.es
mentoro.app
metalparts.hu
visa-cms-dev.hicity.world
tls.automattic.com
clubpropagas.com
thinkabit.es
controlroom.iotdataroom.com
tls.automattic.com
epidemicrpmtest.ward.technology
schoonheidsinstituutlaurence.be
tls.automattic.com
*.gke.dev.thinkabit.es
thinkabit.es
thinkabit.es
merterim.dev
tls.automattic.com
storage.gce.dev.thinkabit.es
tls.automattic.com
tls.automattic.com
tls.automattic.com
storage.gce.dev.thinkabit.es
pwa-builder.swandoola.com
tls.automattic.com
epidemicrpmtest.ward.technology
tls.automattic.com
thinkabit.es
thinkabit.es
evening.makers.kg
static.gcs.dev.thinkabit.es
*.gke.dev.thinkabit.es
kajimotomusic.paris
youtube2text.com
tls.automattic.com
*.gke.dev.thinkabit.es
tls.automattic.com
tls.automattic.com
chicken-dinner.com
static.gcs.dev.thinkabit.es
thingyoucollect.com
*.gke.dev.thinkabit.es
tls.automattic.com
fanlife.tech
tls.automattic.com
apps.gce.dev.thinkabit.es
admin.thebestweddingapp.com
www.standzero.com
storage.gce.dev.thinkabit.es
rossblufordenterprises.com
tls.automattic.com
a-c.app
*.gke.dev.thinkabit.es
tls.automattic.com
www.standzero.com
storage.gce.dev.thinkabit.es
thinkabit.es
Certificate
The complete raw certificate details for thinkabit.es in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISA6wm3yTmZ2HeGAQnV5HTqUETMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDEwNDQ3NThaFw0y MDAyMjkwNDQ3NThaMBcxFTATBgNVBAMTDHRoaW5rYWJpdC5lczCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBALNG0dQC8Y9UwIDL/QAgHbqg/Z5pDEARZt8l NZNnw7tk+g5Iotaon9Ndp3ruvfF5mUmB2Ghn3ePzo41z7LfkCP3C/Jmu4bLVVls0 5EPleE8hKc5n1clqFTBEX09F1Dw1GXCTWyOKweSFgNn+Hx/pjwqW6PJ6h8PYxaH4 8+Bf0kRV4LFbV918o9td7gVvKpFr9eXt0YUK5DBnD6KSRGm0VE2I55bTWV1ug7xv fmXZp9UhsHdOa1qaHBJTbEAR8p3GRbQD8Ww5yKn7MjM9m79M5toxsIxNsAjmaudS cVWbuqfdznhu16iFdZb+lrWdol8u0XBQh9G6g22SuPK0ke9VKecCAwEAAaOCAnIw ggJuMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUa2Umgexc8lzlG1tzrIvJzLl6fXww HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzApBgNVHREEIjAgggx0aGlua2FiaXQuZXOCEHd3dy50aGlua2FiaXQuZXMwTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW7AAFepAAAE AwBHMEUCIFo+TBJrlKUiJGcSv8hiUqsGQJjAcaQ8u1ogFChiroxDAiEArgXjHZNb uyx3k41eLx46Jw4boM2C9P/t/uFkFuuH7dQAdQCyHgXMi6LNiiBOh2b5K7mKJSBn a9r6cOeySVMt74uQXgAAAW7AAFeZAAAEAwBGMEQCIGweBvjMAcsVuaYqgToQKQ4d vdeq2HNNaBIALJxGaTz4AiBlBfe/vc8dEGP4GeKxsuNtWefMZuTVZl2foOr1Qm9X /jANBgkqhkiG9w0BAQsFAAOCAQEAZZrJmuRZKJ72PYC3xyLkgnhTytfmCoelctI6 CuZAo4TCSqztIXFSMCBmKN2LeS8DVhbfjqbmPWrtPTJwo009nOaqXSfrW++WC8qn GM3dwoEaNzI6gOETqFIRJD7kAt4exEAl5HxIVPjzPIDreuix303IEU43jOD5yUpq s0gfbOaDdraC1Qob7UKAsqN2eHqcnZJuw9dQRpDWbnNgHMrRViIHYreryqhQOUz0 sSKRsd6mihllFKBT0qC3jZYnyxWBfEEwd2YUKVM/Ba9eQ1/wwVR3OjfhWxXTj/j4 RWwGCngqiFERCgEOPdK6aFIpcLna63Jhw2+h9l4oOOc2tuj1iA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0bR1ALxj1TAgMv9ACAd uqD9nmkMQBFm3yU1k2fDu2T6Dkii1qif012neu698XmZSYHYaGfd4/OjjXPst+QI /cL8ma7hstVWWzTkQ+V4TyEpzmfVyWoVMERfT0XUPDUZcJNbI4rB5IWA2f4fH+mP Cpbo8nqHw9jFofjz4F/SRFXgsVtX3Xyj213uBW8qkWv15e3RhQrkMGcPopJEabRU TYjnltNZXW6DvG9+Zdmn1SGwd05rWpocElNsQBHyncZFtAPxbDnIqfsyMz2bv0zm 2jGwjE2wCOZq51JxVZu6p93OeG7XqIV1lv6WtZ2iXy7RcFCH0bqDbZK48rSR71Up 5wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 319917094200142654105669052383573284831507 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-01 04:47:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 04:47:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thinkabit.es' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22631579055622126057391775857959399777225871314688070159497593421377079625570761522816190738074892250454305939762357799937268056180513489303568988120906324394187233178878689387020676003036905442698844791663492044150366310960895534429539510052073633325985368805209055044452764522287061336815778995114894459350933876886558501281545408134008624595784956110674845197792233440737368021926942731666742027364958928357550524156983049551404330357780709908001945952943883896382330354762149648479372580271691171559248780007329484281227754188284107044896173900821000122820888055649743323211284064861751733510333865862124889516519 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6b652681ec5cf25ce51b5b73ac8bc9ccb97a7d7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkabit.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkabit.es' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ec00057a9000004030047304502205a3e4c126b94a522246712bfc86252ab064098c071a43cbb5a20142862ae8c43022100ae05e31d935bbb2c77938d5e2f1e3a270e1ba0cd82f4ffedfee16416eb87edd4007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec0005799000004030046304402206c1e06f8cc01cb15b9a62a813a10290e1dbdd7aad8734d6812002c9c46693cf802206505f7bfbdcf1d1063f819e2b1b2e36d59e7cc66e4d5665d9fa0eaf5426f57fe . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00659ac99ae459289ef63d80b7c722e4827853cad7e60a87a572d23a0ae640a384c24aaced21715230206628dd8b792f035616df8ea6e63d6aed3d3270a34d3d9ce6aa5d27eb5bef960bcaa718cdddc2811a37323a80e113a85211243ee402de1ec44025e47c4854f8f33c80eb7ae8b1df4dc8114e378ce0f9c94a6ab3481f6ce68376b682d50a1bed4280b2a376787a9c9d926ec3d7504690d66e73601ccad156220762b7abcaa850394cf4b12291b1dea68a196514a053d2a0b78d9627cb15817c413077661429533f05af5e435ff0c154773a37e15b15d38ff8f8456c060a782a8851110a010e3dd2ba68522970b9daeb7261c36fa1f65e2838e736b6e8f588