nextcloud.kalahariresearch.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e1:3c:ff:20:87:e9:e3:9f:92:5a:ab:3b:ac:2a:84:67:22 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nextcloud.kalahariresearch.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e1:3c:ff:20:87:e9:e3:9f:92:5a:ab:3b:ac:2a:84:67:22
Serial Number (int): 425093754659503456642458982238065522927394
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f7:a7:e2:26:95:0e:49:4e:ab:fa:0d:10:8f:77:f8:01:73:f5:3f:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:ad:d0:7d:be:cf:5f:8f:33:7b:0c:d8:7c:72:ac:39:e2:a5:82:ca
Fingerprint (sha256): 82:c5:b0:7a:6a:13:e1:79:b9:9f:d0:0f:6a:c7:4a:25:5b:dd:ce:0f:22:df:fe:55:a9:e2:a2:8c:b6:c8:7b:f4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nextcloud.kalahariresearch.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nextcloud.kalahariresearch.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nextcloud.kalahariresearch.org

Other certificates including the domain name kalahariresearch.org

(limited to 100 certificates)
moleratxray.kalahariresearch.org
meerkat.kalahariresearch.org
portal.kalahariresearch.org
meerkat.kalahariresearch.org
nextcloud.kalahariresearch.org
molerat.kalahariresearch.org
meerkatfiles.kalahariresearch.org
mail.kalahariresearch.org
nextcloud.kalahariresearch.org
molerat.kalahariresearch.org
meerkat.kalahariresearch.org
meerkat.kalahariresearch.org
vegetation.kalahariresearch.org
portal.kalahariresearch.org
molerat.kalahariresearch.org
databases.kalahariresearch.org
portal.kalahariresearch.org
meerkat.kalahariresearch.org
databases.kalahariresearch.org
meerkat.kalahariresearch.org
portal.kalahariresearch.org
meerkatfiles.kalahariresearch.org
portal.kalahariresearch.org
portal.kalahariresearch.org
meerkatfiles.kalahariresearch.org
moleratdatabase.kalahariresearch.org
nextcloud.kalahariresearch.org
moleratdatabase.kalahariresearch.org
meerkat.kalahariresearch.org
moleratdatabase.kalahariresearch.org
portal.kalahariresearch.org
databases.kalahariresearch.org
meerkat.kalahariresearch.org
nextcloud.kalahariresearch.org
moleratdatabase.kalahariresearch.org
portal.kalahariresearch.org
molerat.kalahariresearch.org
meerkatfiles.kalahariresearch.org
nextcloud.kalahariresearch.org
databases.kalahariresearch.org
databases.kalahariresearch.org
moleratdatabase.kalahariresearch.org
molerat.kalahariresearch.org
meerkat.kalahariresearch.org
databases.kalahariresearch.org
meerkat.kalahariresearch.org
portal.kalahariresearch.org
moleratdatabase.kalahariresearch.org
molerat.kalahariresearch.org
meerkat.kalahariresearch.org
meerkat.kalahariresearch.org
nextcloud.kalahariresearch.org
molerat.kalahariresearch.org
portal.kalahariresearch.org
meerkat.kalahariresearch.org
databases.kalahariresearch.org
databases.kalahariresearch.org
meerkat.kalahariresearch.org
mail.kalahariresearch.org
meerkat.kalahariresearch.org
meerkat.kalahariresearch.org
meerkat.kalahariresearch.org
meerkatfiles.kalahariresearch.org
portal.kalahariresearch.org
meerkat.kalahariresearch.org

Certificate

The complete raw certificate details for nextcloud.kalahariresearch.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgISBOE8/yCH6eOfklqrO6wqhGciMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MjkxODA3NDJaFw0x
ODEyMjgxODA3NDJaMCkxJzAlBgNVBAMTHm5leHRjbG91ZC5rYWxhaGFyaXJlc2Vh
cmNoLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJl52GHvorY+
wawu3k+H+7dM6L5jCKsixKLhmSlcdECghUp5kZIGjkj1pJGBz/wLEhpfZEvgSh7h
ym/pGspSZzMHXtfhwYLRPsU8QSJFIgX8KxyqdG5ETMYPJtioYK/KkmRNUr21LEcc
MyCwkfLyZUNcSqqoIVr7YUsqQn6l3FS4hZX8IFs0q0Wq0QII+aElc/4MfVVzrCuU
QM5qAeLtCH4urAbV2LszSBD2M9OLjiJhKWYrPM4R/XrZ07FhTHenJZx7Wr6/VsCz
4AsN+JCwJGV/IaRi55H+YExMsD2KNBgVBYlbeXQJZw8/t82E+qrNUGQTFxqxUaRs
DDLoFLm9VA8CAwEAAaOCAyUwggMhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU96fi
JpUOSU6r+g0Qj3f4AXP1P4wwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzApBgNVHREEIjAggh5uZXh0Y2xvdWQua2FsYWhh
cmlyZXNlYXJjaC5vcmcwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQB
gt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y
ZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJl
IHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2Nv
cmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRw
czovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQMGCisGAQQB1nkCBAIE
gfQEgfEA7wB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZia6
t2QAAAQDAEYwRAIgTsrJI89f2i8E42kO3qlmuar2ui+/QxBJBp/tuJQPAtkCIBma
LXk2cmd6kmj5dUReaEfiKMoFZwZIUHGKjc37IT0JAHYAVYHUwhaQNgFK6gubVzxT
8MDkOHhwJQgXL6OqHQcT0wwAAAFmJrq30gAABAMARzBFAiEAiTJdXy8lc69t/lzp
pFxfwzJh1y8FaDqpsxQGjreQM4gCIA9Q2uArwW5ey5j2QQXFnGWOu3dCSbVRmoWm
uz4T0eQWMA0GCSqGSIb3DQEBCwUAA4IBAQAJHvuJj3vXtRX1gW6viGK+7MAwv0DD
yorcrzso/83vw0SFMs8mCaxBXE8J3UWP6CCbWUZ/7P+LA3wTRkzsTxEnPsAsGGqy
LOXQ20XncepppnQf+NAGoZqk9a+ypAC6rRAYZ+iwMvrrsu4CFBQpdo39dxiOjBg/
jc7RTaVBxO6PNWrOx6K9vBVVCloO/IXsXD51ngMTycdAMMn+E1QD+t7V4kuPhtgD
oRq2OFkZig9esdEKMqEySEbhAWaFU2Q9aivU8rYWJJ5njomC4xxjTf/e5yxErI+1
mhlK+Zik9EDn0EkGvRnpyYzRwiYY/ptAMTfGIQ7OxDdIXDnjlzmZgR6/
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXnYYe+itj7BrC7eT4f7
t0zovmMIqyLEouGZKVx0QKCFSnmRkgaOSPWkkYHP/AsSGl9kS+BKHuHKb+kaylJn
Mwde1+HBgtE+xTxBIkUiBfwrHKp0bkRMxg8m2Khgr8qSZE1SvbUsRxwzILCR8vJl
Q1xKqqghWvthSypCfqXcVLiFlfwgWzSrRarRAgj5oSVz/gx9VXOsK5RAzmoB4u0I
fi6sBtXYuzNIEPYz04uOImEpZis8zhH9etnTsWFMd6clnHtavr9WwLPgCw34kLAk
ZX8hpGLnkf5gTEywPYo0GBUFiVt5dAlnDz+3zYT6qs1QZBMXGrFRpGwMMugUub1U
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425093754659503456642458982238065522927394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-29 18:07:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-28 18:07:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nextcloud.kalahariresearch.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19374544789179841913230239602235980573900453114721947305601798347561305498775256989424351229720756553542324403713525709256283419015974194486422948334801850508258459464820917459023538525144440941299382287671575451134597113040939626553795545755197019463156150207352410143583604269733901172127038235122018156079049547253233346183669572731123231072769648133257364334947919196447330249255706256932566715903217125071731435815098203113619697928292510973881134926137591830601651591520682677982593181368664153344210971312676364074774045873991151438946560417240121828001227772859916753772666008313781466046186039164913424618511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7a7e226950e494eabfa0d108f77f80173f53f8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud.kalahariresearch.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016626bab764000004030046304402204ecac923cf5fda2f04e3690edea966b9aaf6ba2fbf431049069fedb8940f02d90220199a2d793672677a9268f975445e6847e228ca0567064850718a8dcdfb213d090076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016626bab7d2000004030047304502210089325d5f2f2573af6dfe5ce9a45c5fc33261d72f05683aa9b314068eb790338802200f50dae02bc16e5ecb98f64105c59c658ebb774249b5519a85a6bb3e13d1e416
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00091efb898f7bd7b515f5816eaf8862beecc030bf40c3ca8adcaf3b28ffcdefc3448532cf2609ac415c4f09dd458fe8209b59467fecff8b037c13464cec4f11273ec02c186ab22ce5d0db45e771ea69a6741ff8d006a19aa4f5afb2a400baad101867e8b032faebb2ee02141429768dfd77188e8c183f8dced14da541c4ee8f356acec7a2bdbc15550a5a0efc85ec5c3e759e0313c9c74030c9fe135403faded5e24b8f86d803a11ab63859198a0f5eb1d10a32a1324846e101668553643d6a2bd4f2b616249e678e8982e31c634dffdee72c44ac8fb59a194af998a4f440e7d04906bd19e9c98cd1c22618fe9b403137c6210ecec437485c39e3973999811ebf