nextcloud.daswing.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:04:ca:5b:26:81:b0:c0:a0:e1:3f:e9:25:1e:82:a3:cd:c2 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=nextcloud.daswing.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:04:ca:5b:26:81:b0:c0:a0:e1:3f:e9:25:1e:82:a3:cd:c2Serial Number (int): 262966964598133873607689220567762288758210
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 58:83:8c:30:ff:2c:83:f5:f9:76:ed:c2:3d:10:45:6b:09:78:31:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): de:c3:90:2c:c6:80:4e:06:02:45:b6:25:4a:38:87:a3:b7:41:7c:70
Fingerprint (sha256): 77:79:1c:79:3c:4d:b3:6a:1b:39:10:94:19:5a:3d:f7:3d:02:6c:03:ec:e8:06:08:15:63:3d:68:19:27:3b:a3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate nextcloud.daswing.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nextcloud.daswing.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kskcovw2rmkg6i2v.goip.de
nextcloud.daswing.de
nextcloud.daswing.de
Other certificates including the domain name daswing.de
(limited to 100 certificates)
www.daswing.de
www.daswing.de
daswing.de
www.daswing.de
www.finde-die-loesung.de
www.homeofsummer.lima-city.de
nextcloud2.daswing.de
logimon3.lima-city.de
schneider-reinhold.de
www.daswing.de
eguro.moin-alex.de
wp.notar-lissem.de
www.daswing.de
*.xn--winterthur-zgelfirma-0ec.ch
nextcloud2.daswing.de
www.daswing.de
nextcloud.daswing.de
daswing.de
www.facebook.fototour.hamburg
h6i5z11vjod2njgi.cms.loox.tools
nkmcbzkkgpxhsdo.execbase.de
landschaftspflege-maier.de
www.insights-philippines.de
www.wir-heiraten.daswing.de
nextcloud2.daswing.de
daswing.de
login.wishlist.jonte.info
preise.salon-riemath.de
www.daswing.de
nextcloud.daswing.de
daswing.de
uth.moinalex.de
www.webmail.tvnschwimmen.de
www.triplefly.de
expertialatam.jaegerhof-schneider.at
smarthome.daswing.de
www.daswing.de
daswing.de
www.daswing.de
www.finde-die-loesung.de
www.homeofsummer.lima-city.de
nextcloud2.daswing.de
logimon3.lima-city.de
schneider-reinhold.de
www.daswing.de
eguro.moin-alex.de
wp.notar-lissem.de
www.daswing.de
*.xn--winterthur-zgelfirma-0ec.ch
nextcloud2.daswing.de
www.daswing.de
nextcloud.daswing.de
daswing.de
www.facebook.fototour.hamburg
h6i5z11vjod2njgi.cms.loox.tools
nkmcbzkkgpxhsdo.execbase.de
landschaftspflege-maier.de
www.insights-philippines.de
www.wir-heiraten.daswing.de
nextcloud2.daswing.de
daswing.de
login.wishlist.jonte.info
preise.salon-riemath.de
www.daswing.de
nextcloud.daswing.de
daswing.de
uth.moinalex.de
www.webmail.tvnschwimmen.de
www.triplefly.de
expertialatam.jaegerhof-schneider.at
smarthome.daswing.de
Certificate
The complete raw certificate details for nextcloud.daswing.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGejCCBWKgAwIBAgISAwTKWyaBsMCg4T/pJR6Co83CMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDEyMjMzMDVaFw0x OTEyMzAyMjMzMDVaMB8xHTAbBgNVBAMTFG5leHRjbG91ZC5kYXN3aW5nLmRlMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2bktASY5XGUTNumooSbcvHZx o8tHunoOwLzCqdwLeADXSSXWVYrF/cRW6eCFE5l5T78pcr3Vh5bSULk7h8MiRNJ8 yavKcPsTZRBs1vP94tIN5ZXmIPVGsvYvkyezOS2elSKGio5B+T/Wfu8ksFw+Uo9F R30KVY870dMobBC7CxJj2Y79v5fzzVJkwM7p2SCPfiNPmMHfgD095uHqeKbhjE2D rw6NgWjMGGH3ZasY2S2JtRnRk91OIzmdRuTGxwRqniOMxICLYXPGt+Vh/I3U65j3 GScy6NvP5/L9OC2lyRil72btedUI173SW4ildkWPSzYzRLzJ2i4hd+BDAq8HW5ja dUQHO0jHgPblOhVrTK/UtyaCTebdjHg6t9VTN5CiZxBgKZiMvrVdpuVxUISS7GN5 BIYKZrYZcTXiZDIaVfd25DvhE52hoRRpiWT/dcf16H7b96+tGeGpSnUJkFtavK2u kXEV7IwnGcuzof6Pz+18UxYfXzodCpcyGKCyHFGc940nMB6c2/rbtyYfZcLAyMwQ a3nUe8fntN926dwsSCkbgzYnGhUHBPPpdxLX/YFQ0WqdqNhRcNHK9IumfVmvb+kn DkgV6YFA/q3ilKXy6TiDe1DH4QSnp0XN8uwe4hWlIhcxOJX+iC+JW+XGARHzfoye XNUP/UmDaT8C85yiGssCAwEAAaOCAoMwggJ/MA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUWIOMMP8sg/X5du3CPRBFawl4MecwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3 pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzA5BgNVHREEMjAwghhrc2tjb3Z3MnJt a2c2aTJ2LmdvaXAuZGWCFG5leHRjbG91ZC5kYXN3aW5nLmRlMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA4mlL ribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFtiauSCgAABAMARzBFAiBQ 21r978KNzSW0M6lBliooupey/bOse7yuv9QtUeauDQIhAIqAvUeaT00NphWme2+s g+JEqqx4byN3gkGTBCz4TvpgAHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHH aFRL2I0AAAFtiauSAgAABAMARzBFAiEA3csL+lJEoqThtwiye14PpmtnDYkfGKNe 9rF5Hr9O7oACICO0wv7jjuUmJYkHetxwEzCF8FjgT8VFt/BtmuW69sbSMA0GCSqG SIb3DQEBCwUAA4IBAQAMTsFg1gGyv62ZuU8JmvQDz0z3Y4JYqG/pObs45/H0Ftgm DKZnx0o/z7nDfo2eqzO/3l9/URvbKGn/z+XRKiOOQbOAe+AYmhrFuIo08T6iFfGc gHL2cQNVrUpnI7X+HEy3U4vwY8EKD/HYy7y7Zu8HEIMvYlvvutloZ7MGsSYUNL4e yob2ePJ5ePV9X5UfAFFMTs7TEGZPbwGL1JRp7EfEJrKuR+wxJ+gwNgfaun6XZSpB fUxAXkUW5vm3b2JByuSXq4OMGCw0jQYGQlO2kVSjuAFbYixVtT3ygqMIldskCQ2l Isfd+Ydrg/kqxsUHLK3LsgO/O4QIyMeQGcuZsrp/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2bktASY5XGUTNumooSbc vHZxo8tHunoOwLzCqdwLeADXSSXWVYrF/cRW6eCFE5l5T78pcr3Vh5bSULk7h8Mi RNJ8yavKcPsTZRBs1vP94tIN5ZXmIPVGsvYvkyezOS2elSKGio5B+T/Wfu8ksFw+ Uo9FR30KVY870dMobBC7CxJj2Y79v5fzzVJkwM7p2SCPfiNPmMHfgD095uHqeKbh jE2Drw6NgWjMGGH3ZasY2S2JtRnRk91OIzmdRuTGxwRqniOMxICLYXPGt+Vh/I3U 65j3GScy6NvP5/L9OC2lyRil72btedUI173SW4ildkWPSzYzRLzJ2i4hd+BDAq8H W5jadUQHO0jHgPblOhVrTK/UtyaCTebdjHg6t9VTN5CiZxBgKZiMvrVdpuVxUISS 7GN5BIYKZrYZcTXiZDIaVfd25DvhE52hoRRpiWT/dcf16H7b96+tGeGpSnUJkFta vK2ukXEV7IwnGcuzof6Pz+18UxYfXzodCpcyGKCyHFGc940nMB6c2/rbtyYfZcLA yMwQa3nUe8fntN926dwsSCkbgzYnGhUHBPPpdxLX/YFQ0WqdqNhRcNHK9IumfVmv b+knDkgV6YFA/q3ilKXy6TiDe1DH4QSnp0XN8uwe4hWlIhcxOJX+iC+JW+XGARHz foyeXNUP/UmDaT8C85yiGssCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 262966964598133873607689220567762288758210 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 22:33:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-30 22:33:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nextcloud.daswing.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 888233744592643986455185298293852841737809049169895617059418682276936654398596103017719280905670249022173939411890423235739797431069845614718112007389187460029211210735411302258048011056686019232353400089517335057658347873492832734409797560764777201741348259046067030282716575132518495312631706801745599506173477432410930304818993840266412304308208292934968373692198107634410655001367717355428627530561742065806295042649386903441840113290591349320593108220469792733453545300447445280112202193710428923041911704462431473634917303022733198620853403020765168927582016711497996598135340086452402138756942936018081628400670651090066596829786330276887230610906721097904929204510034426572095590475640532301848847918503615282538631187971447691482526446371148033327049279721425452824283287150783538697993693196345008212628808000827382832389115561265920288518595495385747433263218169570792747503660797015369622200923017593631158898613532210462963911916400790437733714000843465374591651306095445026355176634980318616986176556394657490651883269508093069604411596985808412911581258020423782397602179127466168607767588166710042742145015991173240324405032708274449114827891119120088929551488893139172815403828226401586450645524670978889674056145611 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 58838c30ff2c83f5f976edc23d10456b097831e7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kskcovw2rmkg6i2v.goip.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud.daswing.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d89ab920a0000040300473045022050db5afdefc28dcd25b433a941962a28ba97b2fdb3ac7bbcaebfd42d51e6ae0d0221008a80bd479a4f4d0da615a67b6fac83e244aaac786f2377824193042cf84efa6000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d89ab92020000040300473045022100ddcb0bfa5244a2a4e1b708b27b5e0fa66b670d891f18a35ef6b1791ebf4eee80022023b4c2fee38ee5262589077adc70133085f058e04fc545b7f06d9ae5baf6c6d2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000c4ec160d601b2bfad99b94f099af403cf4cf7638258a86fe939bb38e7f1f416d8260ca667c74a3fcfb9c37e8d9eab33bfde5f7f511bdb2869ffcfe5d12a238e41b3807be0189a1ac5b88a34f13ea215f19c8072f6710355ad4a6723b5fe1c4cb7538bf063c10a0ff1d8cbbcbb66ef0710832f625befbad96867b306b1261434be1eca86f678f27978f57d5f951f00514c4eced310664f6f018bd49469ec47c426b2ae47ec3127e8303607daba7e97652a417d4c405e4516e6f9b76f6241cae497ab838c182c348d06064253b69154a3b8015b622c55b53df282a30895db24090da522c7ddf9876b83f92ac6c5072cadcbb203bf3b8408c8c79019cb99b2ba7f