services.atest.cdk.no
Issued by StartCom BR SSL ICA
About this certificate
This digital certificate with serial number 37:87:e6:8d:f6:6f:47:1f was issued on by StartCom CA.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=services.atest.cdk.no,C=NO
StartCom CA
Organization:
StartCom CA
Organization unit: StartCom Certification Authority
Organization unit: StartCom Certification Authority
Country:
ES
This certificate has expire since
Certificate Details
Serial Number (hex): 37:87:e6:8d:f6:6f:47:1fSerial Number (int): 4001420291341240095
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: 69:a7:ed:1d:7d:8d:3d:16:44:1f:1a:2c:8f:90:12:7a:9c:09:65:29
AuthorityKeyId: fb:10:4b:95:b1:35:55:2f:bd:62:14:a9:52:02:12:0a:68:e8:12:42
Fingerprint (sha1): 38:af:ba:cc:21:db:04:06:49:6f:26:b7:88:e3:b6:dd:0d:35:a1:89
Fingerprint (sha256): 9f:e1:bf:3e:99:35:29:8b:e2:21:5f:8e:a6:40:f1:0c:5f:ef:61:41:01:99:8f:36:6a:05:4b:43:f4:b2:02:c4
Issuing Certificate URL: http://aia.startcomca.com/certs/sca.server1.crt
Revocation information
OCSP Server: http://ocsp.startcomca.comCRL Distribution Point: http://crl.startcomca.com/sca-server1.crl
Check the revocation status for certificate services.atest.cdk.no
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for services.atest.cdk.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
services.atest.cdk.no
Other certificates including the domain name cdk.no
(limited to 100 certificates)
smallmap.cdk.no
webext-atest.cdk.no
web.atest.cdk.no
web.vktest.cdk.no
cdk.no
services.cdk.no
web.atest.cdk.no
qlikview.cdk.no
selger.sitest.cdk.no
web.atest.cdk.no
selger.vktest.cdk.no
webext-kampanjetest.cdk.no
webext-atest.cdk.no
citrix.cdk.no
services.atest.cdk.no
web.sitest.cdk.no
tvguide-test.cdk.no
services.atest.cdk.no
webext-kampanjetest.cdk.no
connector.cdk.no
cdk.no
citrix.cdk.no
webext-sitest.cdk.no
webext-atest.cdk.no
smallmap.cdk.no
citrix.cdk.no
connector.cdk.no
services.learning.cdk.no
services.atest.cdk.no
smallmap.cdk.no
smallmap.cdk.no
smallmap.cdk.no
cdk.no
webext-atest.cdk.no
passord.cdk.no
connector.cdk.no
connector-test.cdk.no
connector.cdk.no
webext-vktest.cdk.no
kampanje.test.cdk.no
services.sitest.cdk.no
citrix.cdk.no
webext-atest.cdk.no
web.atest.cdk.no
web.vktest.cdk.no
cdk.no
services.cdk.no
web.atest.cdk.no
qlikview.cdk.no
selger.sitest.cdk.no
web.atest.cdk.no
selger.vktest.cdk.no
webext-kampanjetest.cdk.no
webext-atest.cdk.no
citrix.cdk.no
services.atest.cdk.no
web.sitest.cdk.no
tvguide-test.cdk.no
services.atest.cdk.no
webext-kampanjetest.cdk.no
connector.cdk.no
cdk.no
citrix.cdk.no
webext-sitest.cdk.no
webext-atest.cdk.no
smallmap.cdk.no
citrix.cdk.no
connector.cdk.no
services.learning.cdk.no
services.atest.cdk.no
smallmap.cdk.no
smallmap.cdk.no
smallmap.cdk.no
cdk.no
webext-atest.cdk.no
passord.cdk.no
connector.cdk.no
connector-test.cdk.no
connector.cdk.no
webext-vktest.cdk.no
kampanje.test.cdk.no
services.sitest.cdk.no
citrix.cdk.no
Certificate
The complete raw certificate details for services.atest.cdk.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF1zCCA7+gAwIBAgIIN4fmjfZvRx8wDQYJKoZIhvcNAQELBQAwbDELMAkGA1UE BhMCRVMxFDASBgNVBAoMC1N0YXJ0Q29tIENBMSkwJwYDVQQLDCBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEcMBoGA1UEAwwTU3RhcnRDb20gQlIgU1NM IElDQTAeFw0xNzA5MTUwNzI3MjNaFw0xOTA5MTQyMzM3MDBaMC0xCzAJBgNVBAYT Ak5PMR4wHAYDVQQDDBVzZXJ2aWNlcy5hdGVzdC5jZGsubm8wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDTR5Ob0NKMW3yYDmie26/P8Yb5LVjZE0I3cTgc 22ndh4nr7fc8r1ammuvX5lG7W8ViQ31L7Uefp4gvIdK2Q/o2168nFKVsOn0Mo5et Xanm+wlaxF8hF7UuM/lFyA32s1tCBkn5GXNsqTV5Z3Emf31GrafXfRXe3Q42c7II 8bkYrsk8HsLqAVvq4lUilP1IUfiet6i8o3Wmu8L6zE6tZe+vG5e3vxPYC7y5G20V wQQnAFQKHJZqs7FNdV+wt/cEX3BMlaBSQfmMKwxtyH2yIoeNmyT1uOSAxDllRwlw viCwFzm9JIirhfgGSEH8A0piyUAoRKasmtf/PFcqUCGvCsfnAgMBAAGjggG6MIIB tjBzBggrBgEFBQcBAQRnMGUwOwYIKwYBBQUHMAKGL2h0dHA6Ly9haWEuc3RhcnRj b21jYS5jb20vY2VydHMvc2NhLnNlcnZlcjEuY3J0MCYGCCsGAQUFBzABhhpodHRw Oi8vb2NzcC5zdGFydGNvbWNhLmNvbTAdBgNVHQ4EFgQUaaftHX2NPRZEHxosj5AS epwJZSkwCQYDVR0TBAIwADAfBgNVHSMEGDAWgBT7EEuVsTVVL71iFKlSAhIKaOgS QjBSBgNVHSAESzBJMA0GCysGAQQBgbU3AQIDMDgGBmeBDAECATAuMCwGCCsGAQUF BwIBFiBodHRwOi8vd3d3LnN0YXJ0Y29tY2EuY29tL3BvbGljeTA6BgNVHR8EMzAx MC+gLaArhilodHRwOi8vY3JsLnN0YXJ0Y29tY2EuY29tL3NjYS1zZXJ2ZXIxLmNy bDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMB MCAGA1UdEQQZMBeCFXNlcnZpY2VzLmF0ZXN0LmNkay5ubzATBgorBgEEAdZ5AgQD AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAgEAXEbh9klhi4EMV3uKtcTQuDOWi6Ni HPpYVwQP662B5T8Vq7O4StzY90k7xew7HwLn/yCk4+53BtVSOSNEKmZvOX8NyT3T A3het+ZNUs/eYksNZ3JDJQOduvWzCWl3Rd+ujudm/sknme6uPxUgQjOhv779wfRS krZVaF3yHWgjSkP2K9D9CBuz5XC6v8/lYN5gw+oBD5eh/Ibo+8uyPihPLHoR7m+i WT1+PQz/VroSk/UN/DWH3KWe1UIfcs7Em7oAVgld8vNITfXSb5qdC9HinRuko0k4 IUGLGAlICTUUnM/s+utCj2sPgqPvZUg88I5LTNXgWxcf0sKU+4U0M73nkEZUh5sC T5v1tDfFnsbOU1H36Jwd5OptmEeI+e17rucjgmlYYUkYUal8NIjyHDp4m49h0Y1W pgnG/bQie7G48M3+wfTsfu6ykIxTj7+ULrjOR/rUAD7CuZNjMMFVCbMENc2Pcefo CUJrEkHcNZDC5bHsCK0YQFI/TFh5tlB/5vSsLTprTtB+BbnxHpvFvtAmWQSRhyL+ CeAiNXSLDWEffW7708MKoQ7Pylb7CGvdLRiAlW31dxxQFWqlWvmTOQHpJ/3MF/O+ zBdvBF64F29JBJJNB0NOzeOxqHLRkH74ywRjP7sbYJyzKGIdvMYWZlPtzh15paxh z8uTI+Eiv5rhCns= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00eTm9DSjFt8mA5ontuv z/GG+S1Y2RNCN3E4HNtp3YeJ6+33PK9Wpprr1+ZRu1vFYkN9S+1Hn6eILyHStkP6 NtevJxSlbDp9DKOXrV2p5vsJWsRfIRe1LjP5RcgN9rNbQgZJ+RlzbKk1eWdxJn99 Rq2n130V3t0ONnOyCPG5GK7JPB7C6gFb6uJVIpT9SFH4nreovKN1prvC+sxOrWXv rxuXt78T2Au8uRttFcEEJwBUChyWarOxTXVfsLf3BF9wTJWgUkH5jCsMbch9siKH jZsk9bjkgMQ5ZUcJcL4gsBc5vSSIq4X4BkhB/ANKYslAKESmrJrX/zxXKlAhrwrH 5wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4001420291341240095 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom BR SSL ICA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-15 07:27:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-14 23:37:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'services.atest.cdk.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26671578082968446385583267116685223542316089823843358700929654141595980861444151694917970272626720394663475855715280497429200475319853255694620857676773301756747084275685803360129169788962559903950545889880960298533585153095112599840305578506698373907504342792782149258663907427059712154433984351426763285831571989916939048631634446645973025814161395129123033902410767868238554383622146588387794349876219846932044983928656052289293266890997073857971815904600901882168876861517459655737002094351203333898420957829906737247051123251170645857205099266459509470599775432684702278375614092910901896741350872562042156009447 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startcomca.com/certs/sca.server1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startcomca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 69a7ed1d7d8d3d16441f1a2c8f90127a9c096529 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fb104b95b135552fbd6214a95202120a68e81242 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startcomca.com/policy' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startcomca.com/sca-server1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.atest.cdk.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 005c46e1f649618b810c577b8ab5c4d0b833968ba3621cfa5857040febad81e53f15abb3b84adcd8f7493bc5ec3b1f02e7ff20a4e3ee7706d5523923442a666f397f0dc93dd303785eb7e64d52cfde624b0d67724325039dbaf5b309697745dfae8ee766fec92799eeae3f15204233a1bfbefdc1f45292b655685df21d68234a43f62bd0fd081bb3e570babfcfe560de60c3ea010f97a1fc86e8fbcbb23e284f2c7a11ee6fa2593d7e3d0cff56ba1293f50dfc3587dca59ed5421f72cec49bba0056095df2f3484df5d26f9a9d0bd1e29d1ba4a3493821418b1809480935149ccfecfaeb428f6b0f82a3ef65483cf08e4b4cd5e05b171fd2c294fb853433bde7904654879b024f9bf5b437c59ec6ce5351f7e89c1de4ea6d984788f9ed7baee72382695861491851a97c3488f21c3a789b8f61d18d56a609c6fdb4227bb1b8f0cdfec1f4ec7eeeb2908c538fbf942eb8ce47fad4003ec2b9936330c15509b30435cd8f71e7e809426b1241dc3590c2e5b1ec08ad1840523f4c5879b6507fe6f4ac2d3a6b4ed07e05b9f11e9bc5bed0265904918722fe09e02235748b0d611f7d6efbd3c30aa10ecfca56fb086bdd2d1880956df5771c50156aa55af9933901e927fdcc17f3becc176f045eb8176f4904924d07434ecde3b1a872d1907ef8cb04633fbb1b609cb328621dbcc6166653edce1d79a5ac61cfcb9323e122bf9ae10a7b