dev.sig.ma

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ec:d9:f0:cb:0c:d3:f8:9a:1b:f6:09:ce:aa:a7:03:00:33 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.sig.ma

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ec:d9:f0:cb:0c:d3:f8:9a:1b:f6:09:ce:aa:a7:03:00:33
Serial Number (int): 429045475065059328436799044545734571655219
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 43:db:70:d3:0a:72:18:a7:da:02:49:b7:72:01:33:ee:d2:94:ee:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:98:54:ac:77:f5:38:9f:51:63:ff:19:96:8b:cb:11:dd:69:82:67
Fingerprint (sha256): 6f:02:09:f4:08:19:f9:e8:2b:e7:69:01:49:74:96:30:4e:98:7a:59:3a:05:0e:78:96:31:f4:f7:4c:47:93:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dev.sig.ma

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.sig.ma

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.sig.ma

Other certificates including the domain name sig.ma

(limited to 100 certificates)
s2.shared.global.fastly.net
dev.sig.ma
dev.sig.ma
help.sig.ma
dev.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
help.sig.ma
st2.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
bigthings.info
help.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
blog.sig.ma
s2.shared.global.fastly.net
*.sig.ma
go.sig.ma
s2.shared.global.fastly.net
try.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
help.sig.ma
s2.shared.global.fastly.net
help.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
*.sig.ma
images.sig.ma
try.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
urna.net.br
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
help.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
try.sig.ma
s2.shared.global.fastly.net
blog.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
dev.sig.ma
s2.shared.global.fastly.net
help.sig.ma
try.sig.ma
images.sig.ma
s2.shared.global.fastly.net
dev.sig.ma
help.sig.ma
www.datanta.com.ar
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
try.sig.ma
go.sig.ma
s2.shared.global.fastly.net
images.sig.ma
dev.sig.ma
s2.shared.global.fastly.net
*.sig.ma
try.sig.ma
s2.shared.global.fastly.net
try.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
try.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net

Certificate

The complete raw certificate details for dev.sig.ma in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgISBOzZ8MsM0/iaG/YJzqqnAwAzMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMjkxODU2MjdaFw0x
OTAyMjcxODU2MjdaMBUxEzARBgNVBAMTCmRldi5zaWcubWEwggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQCu/Ss8WJ0G3ujpKbD4wdD1EcvCuKvrcmeRu1eO
XyYSpJqxK4fu9hsmr0aeY65TXAxcM+EYBR09Tsiuet8ovdOKusqq+ip+46Py2xA6
m1UPYkNe+FKDQe32DMehsQC0rGMcHFyK0ntfvG+KzfOzuHfvkWZOpAVV1KmCclrW
ccpMj2pkb2TGRQa7vfK0an2DDcftMOoKF039H3z6uYa7BmuUy0u9i/3mMnkn116+
cOki21qB55+YkWrcFTOQRQKquEQtyZ6IihmblqVM7TRUq4PwQEwH3ZSF/7Cxbvce
nJExgwQJ3Bmeo2dXyW6h87hlZN5UZRMFLDl+NawlD6Q+PTLM4JP0aThCwE2C1f6I
sDkuJeFk99NudiuiU/+hK/KXxck2Xq+KvC1eF1KNenHbYNdQdCcfdpc0j3aOHvem
VNOq16fJ2iMFUrsRGLB3DJvLAKyo2Y4dqdxNlzDq9jkyJAXAJfSHFgMeWkX3E596
7/yzIAAICNUzJcbrZmEeQRcHWogiSKbcNlN5Hcno7y1tLFBlzdxdphPIskYdIvdu
QxP8QEnHUO1vyCPm9xtEySt+FLlcAglhfLtMryFDj4o6BgERYKkTKyZVHQQ1gY2G
1KBRKzg9+cYNIppYtr/NceSyQibcCuv9yO0XtMy5XHq9Z8+0LvzGFaBe6ugvUw5w
h+eLawIDAQABo4ICXjCCAlowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRD23DTCnIY
p9oCSbdyATPu0pTuQjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCmRldi5zaWcubWEwTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBV
gdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWdhC0W/AAAEAwBHMEUC
IQC05+Aemw42hkkJA4BKfLOJoiBz+6/BDP/SKSv/ljaGtgIgTe/Q7vsQczf9V/i9
wkiGtVEkQTlxJsxwBSsMEiKtIt0AdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTD
DPTlRUf0eAAAAWdhC0bUAAAEAwBGMEQCIFqVBFSJ9rJUXN3mH+U8QAK7NPZv/B3X
3irmid+IwrsaAiAx1Y8J/+j6uqLiCOlVDZIeJHXp+pimx8sCPqnKxcTccTANBgkq
hkiG9w0BAQsFAAOCAQEAiUaGtHrufq5dz+HSIZfVk5m/nLDavNIl+iF180RNpj68
WJQ6dVbg4RQ6VRjbjzLqi3ChZS+1s1gwVqDzSvvoZGVvODPRWRmFwbv3V4npFylg
oTrj/MbnHTob32lo1QXykUXA2oVkcGainB1kJYWnNl5kfSlDAVBpDAVeqTzwd8RK
/lLiy/sbXLbVZM1xl2nTmDQuFsV5jMaWH2GMB9zU3LhOSJauOC6oZVkIh2oLfSZG
PU7n8Zn82zOamOJyydd0BwiEyqcUrdWu+QwPlEURTPZVKopbWVipQhq1ADn5NcRC
58HFDdFy3jK6t2j/Kk2kAZD4Xw7QDSKt4XnLFoZLcA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429045475065059328436799044545734571655219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 18:56:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-27 18:56:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.sig.ma'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713892595017131307765128726177241754160896761449483612213629273875574672133684275318388969951989561185368305590619721405288284365005356970837410838994750110983477746824238871986217542146027042156478855797496062846890692138556986793402466559030756040009358505601950693520545024389733693416407416435907744954531178987943594388875171934691846523834623224221551623848157910159966138773315551503888804997850588366957076493670186825308408044464778798302725774048623368051465962259942517747485638782486652901858794094291760950871637656267499904622957092445142226106475620575514313904302843826661472432908587686811581007220668269747020013339863281756455889829598771089839679499611207322929011543598497594814415778198080966370610547218480226134409646198758791814259398979188348941775018972447379194689480518603724479689804378571544310552424783675159410844347684863183315976985474122541129771422363407992100803886698822595289387440096152716648181909573293714666022157053411065794388201004104634485183356382961091744698903575456298655567241568106598580476331194787753259048785092257006447232938274660290404658637806121381647561600731050361169160399856482386809341506993932901742509438992121023267112577454632348874770320620098478054881318374251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43db70d30a7218a7da0249b7720133eed294ee42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sig.ma'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000167610b45bf0000040300473045022100b4e7e01e9b0e3686490903804a7cb389a22073fbafc10cffd2292bff963686b602204defd0eefb107337fd57f8bdc24886b5512441397126cc70052b0c1222ad22dd007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167610b46d4000004030046304402205a95045489f6b2545cdde61fe53c4002bb34f66ffc1dd7de2ae689df88c2bb1a022031d58f09ffe8fabaa2e208e9550d921e2475e9fa98a6c7cb023ea9cac5c4dc71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00894686b47aee7eae5dcfe1d22197d59399bf9cb0dabcd225fa2175f3444da63ebc58943a7556e0e1143a5518db8f32ea8b70a1652fb5b3583056a0f34afbe864656f3833d1591985c1bbf75789e9172960a13ae3fcc6e71d3a1bdf6968d505f29145c0da85647066a29c1d642585a7365e647d29430150690c055ea93cf077c44afe52e2cbfb1b5cb6d564cd719769d398342e16c5798cc6961f618c07dcd4dcb84e4896ae382ea8655908876a0b7d26463d4ee7f199fcdb339a98e272c9d774070884caa714add5aef90c0f9445114cf6552a8a5b5958a9421ab50039f935c442e7c1c50dd172de32bab768ff2a4da40190f85f0ed00d22ade179cb16864b70