www.cetrel.net

Issued by LuxTrust Qualified CA

About this certificate


This digital certificate with serial number 06:14:61 was issued on by LuxTrust S.A. .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • WARNING: Certificate contains unknown extension ([2.16.840.1.113730.1.1])
  • ERROR: Certificate contains a key usage different from ClientAuth or EmailProtection

CETREL S.A.

Organization: CETREL S.A.
Organization unit: CIIO
State / Province: Luxembourg
Locality: Munsbach
Country: LU

LuxTrust S.A.

Organization: LuxTrust S.A.
State / Province: Luxembourg
Locality: Munsbach
Country: LU

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 06:14:61
Serial Number (int): 398433
Serial Number lenght: 19 bits, 3 octets

SubjectKeyId: 47:ba:04:52:8b:e8:45:32:e1:06:6f:22:61:cf:be:17:ca:e4:cb:05
AuthorityKeyId: 8d:90:a3:07:dd:1a:13:77:99:4c:92:ab:4d:43:de:3f:cd:29:64:05

Fingerprint (sha1): db:07:63:57:b5:12:22:57:2b:de:9b:21:ac:4d:6a:23:9f:fd:9a:8c
Fingerprint (sha256): 78:78:9e:f9:97:66:54:1a:3e:dd:fc:0c:5f:30:38:35:ca:29:61:ce:63:b8:0a:14:2c:34:6c:20:91:50:a9:e3

Issuing Certificate URL: http://ca.luxtrust.lu/LTQCA.crt

Revocation information

OCSP Server: http://ocsp.luxtrust.lu
CRL Distribution Point: http://crl.luxtrust.lu/LTQCA.crl

Check the revocation status for the current certificate on www.cetrel.net
0
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Email Protection

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names (DNS Name).

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgIDBhRhMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNVBAYTAkxV MRYwFAYDVQQKEw1MdXhUcnVzdCBTLkEuMR4wHAYDVQQDExVMdXhUcnVzdCBRdWFs aWZpZWQgQ0EwHhcNMTQwNDIzMTQyNzI2WhcNMTYwNDIzMTQyNzI2WjCBkjELMAkG A1UEBhMCTFUxEzARBgNVBAgTCkx1eGVtYm91cmcxETAPBgNVBAcTCE11bnNiYWNo MRQwEgYDVQQKEwtDRVRSRUwgUy5BLjENMAsGA1UECxMEQ0lJTzEXMBUGA1UEAxMO d3d3LmNldHJlbC5uZXQxHTAbBgkqhkiG9w0BCQEWDnNzc0BjZXRyZWwubmV0MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCNiirszvvq2d03thw8WvDxD I+XbsVC0sKKXx1EeqBTw8zMY6Ct+09FwMfZuYigE/ZSlyD4nMhlrO31ic5CD8TCQ PrGiDD/Ie8MIlQ1MkPUSue4Nkl2neL7pHit6d+PF/hNuc9tQc6hXQmxd4pigU0TQ 7HBeC1Cct8CpZWuvNgZIAaU1RAts5Qlo6c1anb2wDlVIg4EcofLIr5z/3b8qpee0 9kjvqTfG/gIjNUDcfrHWyHAaMT39WiWdBC90SFKSRoN/xzJwhztk78SUzp2pYZ2H b3LRC8+J+cWgxOokSqWftj0YHpTIKrZWcEbJnvuQ8HvhgfwdAYVntSz5XtEUuQID AQABo4ICNzCCAjMwDAYDVR0TAQH/BAIwADBgBggrBgEFBQcBAQRUMFIwIwYIKwYB BQUHMAGGF2h0dHA6Ly9vY3NwLmx1eHRydXN0Lmx1MCsGCCsGAQUFBzAChh9odHRw Oi8vY2EubHV4dHJ1c3QubHUvTFRRQ0EuY3J0MIIBAAYDVR0gBIH4MIH1MIHoBggr gSsBAQIGATCB2zCBrQYIKwYBBQUHAgIwgaAagZ1MdXhUcnVzdCBTZXJ2ZXIgQ2Vy dGlmaWNhdGUuIE5vdCBzdXBwb3J0ZWQgYnkgU1NDRCwgS2V5IEdlbmVyYXRpb24g YnkgU3Vic2NyaWJlci4gR1RDLCBDUCBhbmQgQ1BTIG9uIGh0dHA6Ly9yZXBvc2l0 b3J5Lmx1eHRydXN0Lmx1LiBTaWduZWQgYnkgYSBRdWFsaWZpZWQgQ0EuMCkGCCsG AQUFBwIBFh1odHRwOi8vcmVwb3NpdG9yeS5sdXh0cnVzdC5sdTAIBgYEAI96AQMw EQYJYIZIAYb4QgEBBAQDAgXgMA4GA1UdDwEB/wQEAwIEsDAnBgNVHSUEIDAeBggr BgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFBwMEMB8GA1UdIwQYMBaAFI2QowfdGhN3 mUySq01D3j/NKWQFMDEGA1UdHwQqMCgwJqAkoCKGIGh0dHA6Ly9jcmwubHV4dHJ1 c3QubHUvTFRRQ0EuY3JsMB0GA1UdDgQWBBRHugRSi+hFMuEGbyJhz74XyuTLBTAN BgkqhkiG9w0BAQUFAAOCAQEAP9Mn8duTvyLT9Qhd5eIC4AhYexsnGX+Z/EmrTsNu C3x+u1f+ciupDCTdznEXtqLt8cKLfxrvIsXNEfoYwqulRw/CWTjh0vpVbkZuUeL3 qBmUZVEwD6fMhHUhFuMxsdO0vhMgmRz/C0aBgdI2tM9yYnpfMEtfXvcFeM+Rwex1 6VOWhMTtmVnOzKxi+kOo4hc1xHJ0uTeIfTvF0hF/KXmkij4EjxxcASt83TRqqLXn AxBs99un0fFtLNBSXbBMJeCWcJsgDGZUnzrd7Vkcas/WUU5nG/NNEmBEsSEgORqt SuzgluQAgMicfOHuuVFdiQ0YLuN1L/4wMqFGB5SX0G2H/w== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCNiirszvvq2d03thw8W vDxDI+XbsVC0sKKXx1EeqBTw8zMY6Ct+09FwMfZuYigE/ZSlyD4nMhlrO31ic5CD 8TCQPrGiDD/Ie8MIlQ1MkPUSue4Nkl2neL7pHit6d+PF/hNuc9tQc6hXQmxd4pig U0TQ7HBeC1Cct8CpZWuvNgZIAaU1RAts5Qlo6c1anb2wDlVIg4EcofLIr5z/3b8q pee09kjvqTfG/gIjNUDcfrHWyHAaMT39WiWdBC90SFKSRoN/xzJwhztk78SUzp2p YZ2Hb3LRC8+J+cWgxOokSqWftj0YHpTIKrZWcEbJnvuQ8HvhgfwdAYVntSz5XtEU uQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 398433 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LuxTrust S.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LuxTrust Qualified CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-23 14:27:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-23 14:27:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munsbach' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CETREL S.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CIIO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cetrel.net' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24255203512487707267828412587205943646975170559254183651484191774960360563540436532021548420599617840290718850463748284077836718958556483475281743212804289435832918499380230835766397021887314544977145259357496990791062732905483107380053661218854139281386076768412801074211177833541139645313989312416355459415577210348575269359293498035153931631124167419655573786024233595015876053632969242897634604658832780561570212307674232699346029805301460530881593033776203477983761410161338274504647063303014299910005230483254588456043398259727196469166283794122239612427625182590505077965764470975664276972979865507747228357817 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.luxtrust.lu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.luxtrust.lu/LTQCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (248 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.171.1.1.2.6.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [76 117 120 84 114 117 115 116 32 83 101 114 118 101 114 32 67 101 114 116 105 102 105 99 97 116 101 46 32 78 111 116 32 115 117 112 112 111 114 116 101 100 32 98 121 32 83 83 67 68 44 32 75 101 121 32 71 101 110 101 114 97 116 105 111 110 32 98 121 32 83 117 98 115 99 114 105 98 101 114 46 32 71 84 67 44 32 67 80 32 97 110 100 32 67 80 83 32 111 110 32 104 116 116 112 58 47 47 114 101 112 111 115 105 116 111 114 121 46 108 117 120 116 114 117 115 116 46 108 117 46 32 83 105 103 110 101 100 32 98 121 32 97 32 81 117 97 108 105 102 105 101 100 32 67 65 46] . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.luxtrust.lu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05e0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.4 (emailProtection) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d90a307dd1a1377994c92ab4d43de3fcd296405 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.luxtrust.lu/LTQCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 47ba04528be84532e1066f2261cfbe17cae4cb05 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003fd327f1db93bf22d3f5085de5e202e008587b1b27197f99fc49ab4ec36e0b7c7ebb57fe722ba90c24ddce7117b6a2edf1c28b7f1aef22c5cd11fa18c2aba5470fc25938e1d2fa556e466e51e2f7a819946551300fa7cc84752116e331b1d3b4be1320991cff0b468181d236b4cf72627a5f304b5f5ef70578cf91c1ec75e9539684c4ed9959ceccac62fa43a8e21735c47274b937887d3bc5d2117f2979a48a3e048f1c5c012b7cdd346aa8b5e703106cf7dba7d1f16d2cd0525db04c25e096709b200c66549f3added591c6acfd6514e671bf34d126044b12120391aad4aece096e40080c89c7ce1eeb9515d890d182ee3752ffe3032a146079497d06d87ff