git.uvt.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:81:91:74:0a:6d:8d:e7:2b:8a:e8:9a:fa:e9:ec:09:e8:9f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=git.uvt.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:91:74:0a:6d:8d:e7:2b:8a:e8:9a:fa:e9:ec:09:e8:9f
Serial Number (int): 305426623705410087172667812529221749303455
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:27:65:51:c2:63:d2:ed:d4:ba:16:a6:3e:70:17:2c:bf:f8:6c:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9c:c5:ce:96:a7:6d:2f:1b:28:7e:06:dc:86:35:76:75:a6:54:27:8e
Fingerprint (sha256): 96:f6:6e:be:73:ad:51:6c:ee:5c:23:05:5e:60:99:35:3d:1c:b4:36:f2:ac:6a:62:d8:92:8e:dd:7c:84:26:15

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate git.uvt.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for git.uvt.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

git.uvt.cz
gitlab.uvt.cz

Other certificates including the domain name uvt.cz

(limited to 100 certificates)
opentis.uvt.cz
phpmyadmin.hosting.uvt.cz
letest1.uvt.cz
tv.uvt.cz
tiki.uvt.cz
opentis.uvt.cz
spravait.uvt.cz
uvt.cz
mail.uvt.cz
uvt.cz
opentis.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
letest1.uvt.cz
mail.uvt.cz
uvt.cz
ncb.uvt.cz
git.uvt.cz
ncb.uvt.cz
ncb.uvt.cz
mail.uvt.cz
psw.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
opentis.uvt.cz
tv.uvt.cz
uvt.cz
git.uvt.cz
opentis.uvt.cz
psw.uvt.cz
mail.uvt.cz
tv.uvt.cz
centreon.uvt.cz
tv.uvt.cz
letest1.uvt.cz
uvt.cz
opentis.uvt.cz
spravait.uvt.cz
spravait.uvt.cz
phpmyadmin.hosting.uvt.cz
git.uvt.cz
centreon.uvt.cz
uvt.cz
mail.uvt.cz
chat.uvt.cz
uvt.cz
git.uvt.cz
opentis2.uvt.cz
syspass.uvt.cz
spravait.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
mail.uvt.cz
tiki.uvt.cz
phpmyadmin.hosting.uvt.cz
opentis.uvt.cz
mail.uvt.cz
opentis.uvt.cz
ncb.uvt.cz
git.uvt.cz
phpmyadmin.hosting.uvt.cz
centreon.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
spravait.uvt.cz
centreon.uvt.cz
spravait.uvt.cz
opentis2.uvt.cz
centreon.uvt.cz
phpmyadmin.hosting.uvt.cz
opentis.uvt.cz
opentis2.uvt.cz
uvt.cz
opentis.uvt.cz
chat.uvt.cz
tiki.uvt.cz
mail.uvt.cz
tiki.uvt.cz
opentis.uvt.cz
mail.uvt.cz
centreon.uvt.cz
tv.uvt.cz
opentis.uvt.cz
mail.uvt.cz
mail.uvt.cz
ncb.uvt.cz
tv.uvt.cz
spravait.uvt.cz
ncb.uvt.cz
uvt.cz
opentis.uvt.cz
uvt.cz
syspass.uvt.cz
centreon.uvt.cz
centreon.uvt.cz
tv.uvt.cz
spravait.uvt.cz
mail.uvt.cz
tv.uvt.cz
opentis.uvt.cz

Certificate

The complete raw certificate details for git.uvt.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISA4GRdAptjecriuia+unsCeifMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTExODMzMjFaFw0y
MDA2MDkxODMzMjFaMBUxEzARBgNVBAMTCmdpdC51dnQuY3owggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQDMqGmc5aflUuxaf75z4/KHCQJUmHTe6ncwAXpU
h4Qv1GMN7EhjS8zN5Cn8XIPvjquy4djTG0Q9WpXW1BbMOx5AgpsXh7tCaRCrymGZ
puVK3RdmV262uHWSnFGzVYI+9v2fSpcCn0o3aPv1XDcJmBvBpcIuFjW7VM2+usNC
NtnJz+gJDVGpsm1yLAmG93uM7Pz0CaE2j80m9vMKDPH6jZGGfgywvbja8EH4uUZl
l0GydmXnH3W5IjQKzcoIU0ZbzCJJ1sJslWgQ/R1wkTf9m3QrijuSPbmosQjIhBNm
E1B6x3bw5uZ9Sbk1Dl7U0PjRIzLsPMTCW4TF8TmVq6uweLPMQdpmRG/fqHcjcI9p
RFvCgkyqCU/v/9MnKBrawxkQ9y4J0Pf+rofUPCv3CHC7X8Mt89gqiFYxSXdbCICy
vMxR9to/KqkFeZg3u1VrwZicKypeukOv44rkWUNgUsxdlQV11wuIHEgz3841X6WU
vT+v1dmXqK/KieMn5G05A1PvxVf/Gho6zyqhM0V2JQ5FcYtOgnXZNbpMRhcu7QsP
tWagQ70J++vPQI9bxLraO7m+STE1x8FRz2jZbFvQDTrVnRzCMKGeikslM0VwW39p
FhFPBY4Wuwm8CYC4DTmB9Rv7Za9jmS9pZkeW3hY5vt6bNJZLFArnToLQwnkvwFK0
uCl0fwIDAQABo4ICbjCCAmowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTlJ2VRwmPS
7dS6FqY+cBcsv/hs0DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMCQGA1UdEQQdMBuCCmdpdC51dnQuY3qCDWdpdGxhYi51
dnQuY3owTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5
AgQCBIH1BIHyAPAAdwDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAA
AXDLFkzJAAAEAwBIMEYCIQDeLfRdVu0Myib9SlhQgFAU+3cDH8HQxDidSWJ2ZQrg
KwIhANZkh0Vkeqwh6TGCoIp1299CjmnyjD9TP0Ed2oI5DwKSAHUAsh4FzIuizYog
Todm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFwyxZMvQAABAMARjBEAiALIPK2a+3S
VVGcPhq3r79ZOG1BsC3lHTUmOb6Kg8ZUugIgQe9s1ZUe0zJ1i/nHvP4WCHVL/F9K
mDj2TmMWxRap65gwDQYJKoZIhvcNAQELBQADggEBACWhbPxIPLhsuW3WIkFUiJhZ
q/l4EyxdNcbK4izvgrAuRngS3iDcgfkUlDT+NBUEx8/omoi/esfFG6AdYdb0X8vT
+1BNz9dF1FRLZm1eSbipXnDmIJqT0W19VD/6f4NYJhelGuprMVd+a2bQFoJvn5rT
SR0Wx3aRwp07fU8/Mw09tNuREirJIVAli43P/4RcRd2kdFt9vN0ueSJs6D7VcLTc
NC9+vp7yMewLwPpNyhY3TPhDMI/zVlr2f9fdJLd75E4sFW0z5vaNycBEEuAlQRQ2
5MlYCWEv/sLU6k0g20BWOzvxPDNStTbigVMMxM7QotFgm2OcZxtpyJCHzMvxkvg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305426623705410087172667812529221749303455
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 18:33:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 18:33:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'git.uvt.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834931230742710979852028567849649241498955040075192892160187724566662105644249490885151689809702554497552669606882495067323997045485072451062244364888153645213033141149410277737280079934219564789090549070547559470746772684319186179098701910798484868144657871415340657087472146085519775045513971885587994022162992310616957382958519548907026651431360472655653277361282880928372416254179352189459860572089240657559525894384137762575083807576679897243198365698538899509299515750505182218945754464139446472239417656171769375779452400691793198323977694776184002549191853671687807640854539247356179827444742980774324572532721175822790291061028346914572694799563475485003562933612971784115744105804883238792874282200078331829576837272262220664745935786673841567609440494218276702159626077853552022696742821217082680009167555426649409417217592583331221023179515974360934899767246715708873984269975456410756515235149478659277049458847648666730337051154585827039941960995028731242881296575270459735095953963270506465563034617775455734466921069526073859564845249899741038116609219225971581836249742370086109686393463945147595870169998073376701158847438419514634564268966981685159388055180125096565528949364593918938657446927052830065502292898943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5276551c263d2edd4ba16a63e70172cbff86cd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.uvt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.uvt.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170cb164cc90000040300483046022100de2df45d56ed0cca26fd4a5850805014fb77031fc1d0c4389d496276650ae02b022100d6648745647aac21e93182a08a75dbdf428e69f28c3f533f411dda82390f0292007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170cb164cbd000004030046304402200b20f2b66bedd255519c3e1ab7afbf59386d41b02de51d352639be8a83c654ba022041ef6cd5951ed332758bf9c7bcfe1608754bfc5f4a9838f64e6316c516a9eb98
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0025a16cfc483cb86cb96dd6224154889859abf978132c5d35c6cae22cef82b02e467812de20dc81f9149434fe341504c7cfe89a88bf7ac7c51ba01d61d6f45fcbd3fb504dcfd745d4544b666d5e49b8a95e70e6209a93d16d7d543ffa7f83582617a51aea6b31577e6b66d016826f9f9ad3491d16c77691c29d3b7d4f3f330d3db4db91122ac92150258b8dcfff845c45dda4745b7dbcdd2e79226ce83ed570b4dc342f7ebe9ef231ec0bc0fa4dca16374cf843308ff3565af67fd7dd24b77be44e2c156d33e6f68dc9c04412e025411436e4c95809612ffec2d4ea4d20db40563b3bf13c3352b536e281530cc4ced0a2d1609b639c671b69c89087cccbf192f8