sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:89:57:bf:0b:bb:1c:e6:b7:de:5a:41:ae:83:4b:1d:be:d6 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:57:bf:0b:bb:1c:e6:b7:de:5a:41:ae:83:4b:1d:be:d6
Serial Number (int): 308072176865713693799217762305564879994582
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:b3:88:49:05:7f:90:75:a6:d0:f4:fd:44:48:4e:ed:2b:6a:ad:4d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 88:71:4e:7e:5b:05:b0:f8:5a:f2:fc:8b:29:16:5c:8f:54:d8:74:20
Fingerprint (sha256): 8c:ac:57:41:a2:1b:a1:84:1d:67:ca:ef:0f:59:aa:83:02:5c:6d:72:7c:13:73:18:69:4a:aa:be:4d:db:c6:f2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akaranacityrifleclub.co.nz
belfastrugby.co.nz
canterburywaterpolo.org.nz
cdcricket.co.nz
centralcitybaseball.org.nz
crossrecreationcentre.co.nz
edenrugby.co.nz
flaxmillbaymotel.co.nz
goodmanrural.co.nz
greenislandbadmintonclub.net.nz
hampsteadclub.co.nz
havelocknorthbridgeclub.co.nz
hawkesbayrugbyreferees.co.nz
hawkfootball.org.nz
hbcricket.co.nz
hbmagpies.co.nz
hbreds.nz
hbrfu.co.nz
hbru.co.nz
healthyfamiliesinvercargill.org.nz
highlightcam.co.nz
hillseekers.co.nz
hillseekers4wd.co.nz
hockeymarlborough.org.nz
hpnc.org.nz
huttaikido.org.nz
invercargillnetball.co.nz
karakarugbyclub.co.nz
kjcc.org.nz
magpies.co.nz
maristrugby.org.nz
marsdensport.school.nz
merivalepap.co.nz
mtsquashclub.co.nz
northshorerugby.co.nz
nzblackpowder.nz
nzssfootball.co.nz
nzsssc.co.nz
papakurarugbyleague.co.nz
photocard.co.nz
rangatiragolf.co.nz
schoolsportnz.co.nz
schoolsportnz.org.nz
sportauckland.co.nz
sportauckland.nz
sportauckland.org.nz
sporty.org.nz
totaltouch.org.nz
turbotouch.co.nz
turbotouch.org.nz
wellingtonsoftball.org.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DF5IB4fdYzYjdxuqB2P
xHv7lyVskevxJkRSBV3jVjSebce6i5s3M3uX+WuzT/pEWYYA/MOKnNqWuFlyuLaa
WKAznfk9c9JIVVJqUJnBkaLccgZrXhxirzJJ0Hyx0poRfDv4Vaq5SwlfH4EuxdyG
Bs97EiuBKJA/r/UiKhlvqEEKTIBJ+W4tYG+7/S2h3od7fgP7Ly3I8KOmfI7MDMOn
8+owYzuXj9VCzaj2AVBOhZlHS5zUEb8PxrEiscEE1NFOFU3A3qZvqGCA7YRbO9J1
0NXTH1EVDvGdB9JuhROyTeSuLcsxFvmp3F5U9Kr3ES+sD4kLlNOdxYxaDrvRHK0n
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308072176865713693799217762305564879994582
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 21:06:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 21:06:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28806729649970827460786339722363081612645404651143504461364185015039075084777760930545416215290275036525901939233264841340485142047527190301439121054763091944235254095326417457974518952930904567939749372325510956419764690262719174287727606180740454923182764659101924748575201798874982504313662975178832867190018977912779264936692216009944972472191053436948309971843275881735877672438159862916868478497710534983312285477452022179387432759025095881304245466185524255803521145156683846129289838347764402779132411897998922340897642133936133450995619513783910122159007027878685544426896779109003533232212857701629940279277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7eb38849057f9075a6d0f4fd44484eed2b6aad4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1079 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001894c2416190000040300483046022100999522e390c70d155dbd1ecd493e7efe2cf34e4d4a10fb3ef9bfca58cffb3b750221008182862253db06deacd8e66c2a15582747f7575a08481ae0b9b4bf5272d2098d007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001894c2415f600000403004630440220491ca4d1733df736faeac8d946a1d96a684115f7e131640984a1024562aab51602205393041e192cacd121e9f1a9f5e15767daf3d7e432329e0269ee3a74fac5ca13
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003c6c3056612dfffc3c29bcbe080925e33ac4c21f13eb64e26f5d142df9be792c75fbafbbb143f59ae9faf72e7bb29e87cf997850bda6358d121e40eaef6b6ae58d1d2e81a70c548d27eef6eaf0c2d0e380e60ba041e0533b11de7280e166b6519f6108a47cc5086fd92e3c84f2a554967349bd91bb7a4503c90d617c124c938ecc76546c0122efc5aba402bd83271c7d3c6bb56c5a86628d281dc4b2bbb985518d2508202ac8b1648aaec07aab3263cfe4d7692102badaed0c5a53d7274a55d1f6da9f98071915275a3b6a04ab5baf1f1c857200d369899a7a4cff1f4c205c059151f86276979e336affa1a0043ebcedd6aa223fdd597ef1339d8ac903ce150a