owncloud.devshm.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0c:57:1b:ec:80:e7:ef:23:ce:98:48:d5:d9:55:49:a1:34 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=owncloud.devshm.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:57:1b:ec:80:e7:ef:23:ce:98:48:d5:d9:55:49:a1:34
Serial Number (int): 265536034022842121025974298640440846033204
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:a0:09:3f:8c:53:a7:8d:29:28:2e:36:d0:69:52:77:e6:47:ed:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e6:48:ea:53:9a:6b:49:52:50:56:71:11:b3:7f:7a:68:6a:b2:8f:bf
Fingerprint (sha256): 97:df:06:cc:1f:9b:74:16:64:9b:fb:3c:b5:54:64:d4:5b:fc:db:ff:6f:79:6c:02:f2:6b:7b:56:f4:9e:13:b4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate owncloud.devshm.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owncloud.devshm.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oc.x7u.de
owncloud.devshm.de

Other certificates including the domain name devshm.de

(limited to 100 certificates)
owncloud.devshm.de
owncloud.devshm.de
intern.devshm.de
intern.devshm.de
owncloud.devshm.de
dav.devshm.de
owncloud.devshm.de
owncloud.devshm.de
owncloud.devshm.de
elia.devshm.de
mail.devshm.de
wedding.devshm.de
owncloud.devshm.de
svn.devshm.de
svn.devshm.de
dav.devshm.de
owncloud.devshm.de
mgmt.devshm.de
owncloud.devshm.de
owncloud.devshm.de
owncloud.devshm.de
owncloud.devshm.de
elia.devshm.de
owncloud.devshm.de
owncloud.devshm.de
mail.devshm.de
mail.devshm.de
owncloud.devshm.de
intern.devshm.de
owncloud.devshm.de
intern.devshm.de
dav.devshm.de
owncloud.devshm.de
mgmt.devshm.de
owncloud.devshm.de
owncloud.devshm.de
owncloud.devshm.de
owncloud.devshm.de
svn.devshm.de
mail.devshm.de
owncloud.devshm.de
private.devshm.de
elia.devshm.de
dav.devshm.de
wedding.devshm.de
intern.devshm.de
owncloud.devshm.de
private.devshm.de
owncloud.devshm.de
owncloud.devshm.de
intern.devshm.de
owncloud.devshm.de
private.devshm.de
owncloud.devshm.de
mgmt.devshm.de

Certificate

The complete raw certificate details for owncloud.devshm.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHGjCCBgKgAwIBAgISAwxXG+yA5+8jzphI1dlVSaE0MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMTgyMTMxNDFaFw0x
OTAxMTYyMTMxNDFaMB0xGzAZBgNVBAMTEm93bmNsb3VkLmRldnNobS5kZTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALn0gtdW+SyeBcZ7EW2+FFcXXhdc
NSLkXJfJU8frhuqdSG0M+MoWllkdcANRrrpV0bhUrGCYTvY6cFUZeytsjSJ1n2Ue
YYkDcqOI5ojYsVmuBv9gglaT+0IhUdkdz/mxUX9q15XeB2A3+mhs0QcnIktILAbv
geuNgRRFSJKdoc+2HFV0LU5tFHr0a0eGMgHE8keAEtOkN942wUdIMz2UqIYor4Jr
sLifrLdmzY6FgPK4ud73jWOsipPdw4kOYZgjmT9TUgtGJcwgdOoSIGFM3yBM+GAq
6USdRb2uSkMZeDyqnUDrslj/wA0ozb6m1qHOd4Yjr6w7idZlIgIG2tBHRMUmWr8v
p7KRvAozyhJ4kqhDbHOc7ofa8A43dB5PCPFpynASfFn9ih02EyBLjz1nwcfDAP/b
zf2N5tSFzh/+oK8eNyx/XNXsH2gtq9C7+0Y65S7SCc2QJqqn/ZXziSzjh8DI2N7Q
Ro9CDRYnbzOZxIJN1VnVGKeqwCgES/UABVUPW27looJjNpdpxS+iAS8Fiej6Dc5b
chMBNCS3y5iWXbyQhQcMNGic5F7rDkV49oxLkAsnfbQ3/3GxfYjGlDezWPjr7aeU
WDDbUcmXKC88wWAFNN7BNeQivrfX0E+F9uKN/ulwmG2teviwHfH0GA91TKviQNnc
AY11y1/5aV+jtwdrAgMBAAGjggMlMIIDITAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FGugCT+MU6eNKSguNtBpUnfmR+3kMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wKAYDVR0RBCEwH4IJb2MueDd1LmRlghJv
d25jbG91ZC5kZXZzaG0uZGUwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysG
AQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5
IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBh
Y2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBo
dHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAAB
ZolOTCEAAAQDAEYwRAIgFa5VfPIrVY+0yTQ8L/eYXJj8dqKNTMR1G2V1SXPn8UgC
IEmDVAhVEaXwHfTyFgQmjAw2t3QFK4JDB/c0FUz1PfeaAHcAKTxRllTIOWW6qlD8
WAfUt2+/WHopctykwwz05UVH9HgAAAFmiU5MYAAABAMASDBGAiEA5F0GEpEwW0Qa
aJXytr8UIvVGTqRJKlN35kiMVWy0hq4CIQDBif3nN1XKrnxZdk9XdPk9qABrv5tx
Gah51+dzf8+SXDANBgkqhkiG9w0BAQsFAAOCAQEAKm9EGe2Zo28c40JFP4QWduDn
dlJ7FfrZTg7vd+rF7Ztgq/4YgzuTPioD7h/ggsI4YIBZWR9ec57vxU1zA8pdrqq/
IHqAKiZYgL5E7jkwWxBid11LTpmScN56l9rtXSvPxNyOoFpiddCTAXjLR98hBI9k
0xjjNPSjECwmMijLGaDpQsNxnMWbeyj4u85nMoQaYMksGrNVkLUwxUFG2WxmF7ra
gRFt2xX+5Zx8ee8hlkDPUgunAw14s5njGW4rFgfk/k1tirr/kk2uqbemEKH6rmoy
IOduOvd0t02wFdyo8ZXq/SKrwB5s6nE+mu9B8Dl8lWKkPHpj1WbB9KwzzBxWJw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265536034022842121025974298640440846033204
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-18 21:31:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-16 21:31:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owncloud.devshm.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758630708254978252828056466046498327267719822065833399901253529731117456309713412762872904135932063299187373375366955478021760435602118576300246462735332976432474906673959546614080406394341889118413994310172009553048398231020319174447495775953867873929509321648330330352038805160555994404198812885123042498950717375418205016757077272627636668171783587359766445334512052320305209579613067871927207048758506625839626713532124701908539030566261662797866967164101022287555134286436926958968839639409792024108433887398533972099429427719963370654802645493099013608718114230741256370815968341526165570887724010181473843401932946350935923552774586559716980119199997167052431037262683835884754328662851220808675509203935051843401378975946320017965556328317278711090813211254669187461505001658793959689829657948637973548935750990481171160878951189716895954443237187636253413012517695628446386373244552560971553546924804939749339181352541886858097759228584222632271278040260324837655790598827474386655686117505606828162263426407651459398353013425895238719154776050502152934429243079131446963422679027978249217455836721311890346840528168788383498204252903094662556216693825961112552586059581597791920617574046941502078696398788751376733003253611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ba0093f8c53a78d29282e36d0695277e647ede4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.x7u.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owncloud.devshm.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166894e4c210000040300463044022015ae557cf22b558fb4c9343c2ff7985c98fc76a28d4cc4751b65754973e7f1480220498354085511a5f01df4f21604268c0c36b774052b824307f734154cf53df79a007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166894e4c600000040300483046022100e45d061291305b441a6895f2b6bf1422f5464ea4492a5377e6488c556cb486ae022100c189fde73755caae7c59764f5774f93da8006bbf9b7119a879d7e7737fcf925c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002a6f4419ed99a36f1ce342453f841676e0e776527b15fad94e0eef77eac5ed9b60abfe18833b933e2a03ee1fe082c238608059591f5e739eefc54d7303ca5daeaabf207a802a265880be44ee39305b1062775d4b4e999270de7a97daed5d2bcfc4dc8ea05a6275d0930178cb47df21048f64d318e334f4a3102c263228cb19a0e942c3719cc59b7b28f8bbce6732841a60c92c1ab35590b530c54146d96c6617bada81116ddb15fee59c7c79ef219640cf520ba7030d78b399e3196e2b1607e4fe4d6d8abaff924daea9b7a610a1faae6a3220e76e3af774b74db015dca8f195eafd22abc01e6cea713e9aef41f0397c9562a43c7a63d566c1f4ac33cc1c5627