audiopro.cz
Issued by R3
About this certificate
This digital certificate with serial number 04:b8:65:8a:79:d3:1f:cb:6f:03:80:e1:b9:b9:47:fe:d9:c8 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=audiopro.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b8:65:8a:79:d3:1f:cb:6f:03:80:e1:b9:b9:47:fe:d9:c8Serial Number (int): 411196070275932962476987594234729649330632
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 06:31:67:76:cf:93:65:3e:21:82:7d:75:d6:80:28:9d:9b:d2:f0:c3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b5:75:de:73:c2:fd:4c:c7:e4:dc:1a:a0:81:49:8b:30:b4:67:cd:e8
Fingerprint (sha256): a5:c5:47:9d:4b:eb:2d:00:2d:35:12:a9:57:a6:dd:55:0d:56:13:ce:9e:fa:68:45:1f:8b:62:92:0f:c5:cc:89
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate audiopro.cz
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for audiopro.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
audiopro.cz
dealer.audiopro.cz
smartvideo.cz
www.audiopro.cz
www.kreatek.cz
www.smartvideo.cz
www.zasedackanaklic.cz
www.zasedackynaklic.cz
dealer.audiopro.cz
smartvideo.cz
www.audiopro.cz
www.kreatek.cz
www.smartvideo.cz
www.zasedackanaklic.cz
www.zasedackynaklic.cz
Other certificates including the domain name audiopro.cz
(limited to 100 certificates)
audiopro.cz
*.audiopro.cz
*.audiopro.cz
api.audiopro.cz
audiopro.cz
citrix-ddc.corp.audiopro.cz
www.audiopro.cz
*.audiopro.cz
audiopro.cz
www.audiopro.cz
www.audiopro.cz
audiopro.cz
audiopro.cz
*.audiopro.cz
audiopro.cz
audiopro.cz
audiopro.cz
audiopro.cz
audiopro.cz
audiopro.cz
audiopro.cz
www.audiopro.cz
*.audiopro.cz
b2b.audiopro.cz
audiopro.cz
audiopro.cz
audiopro.cz
gw.audiopro.cz
*.audiopro.cz
*.audiopro.cz
audiopro.cz
audiopro.cz
audiopro.cz
*.audiopro.cz
*.audiopro.cz
api.audiopro.cz
audiopro.cz
citrix-ddc.corp.audiopro.cz
www.audiopro.cz
*.audiopro.cz
audiopro.cz
www.audiopro.cz
www.audiopro.cz
audiopro.cz
audiopro.cz
*.audiopro.cz
audiopro.cz
audiopro.cz
audiopro.cz
audiopro.cz
audiopro.cz
audiopro.cz
audiopro.cz
www.audiopro.cz
*.audiopro.cz
b2b.audiopro.cz
audiopro.cz
audiopro.cz
audiopro.cz
gw.audiopro.cz
*.audiopro.cz
*.audiopro.cz
audiopro.cz
audiopro.cz
audiopro.cz
Certificate
The complete raw certificate details for audiopro.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgISBLhlinnTH8tvA4DhublH/tnIMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMjMwODU5MDZaFw0yNDAyMjEwODU5MDVaMBYxFDASBgNVBAMT C2F1ZGlvcHJvLmN6MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3Nm+ cBSONqCW13RRwUrfugFEQ4f1fR2lp0VVq+/HThYQXZOA2BXgnhwpUM7vnKMXbz/N svv/72icc5romRU3JYZzeR70KoD+NLU9qIbspG42ra5r8CInVvZj+S41DdyL3FjD J6K2YVGVMgAroTcMwxKoENR9pcHB0lsjhCFGRMCuwhwzLV61GlO2iBAVq7Va6iDx z+fCdGbj48JNbxp738kbh4R4ljHY9ZOanrPR3AXTOnlQ+VtR8OfmyzDiaTewsHAs p51WydcqeyYBbn+OlbZ6Kp/bCSqLqPw8DqGfhl7t4eJyQ93mbJaps4I6Z8Pycf2u hGX8ya4aqrv3KQjrY2MxFT35aJfNXrrU7sO/4ysMJC2WQXrWp7l7sbgMquDOuvXN bDG0VT/d2HmxCb0hxTL4UkILqD9//x5XIP6tZ/U3ks79ZivjlAA5SP8mKyrUOLw1 etWiYCMKLz9qXBTpndNMpiS7UH//OvyHmAo7oxG/yuBQySWt2LHRqIYIwCGIQ2sK h1ApXukaBnlWBvbAS7P00piH4S3oDdq+opIIs8/QjcYBNcqCjr3qstd+5/wTlPD3 KxThogns3CQUI5gyap4PkV59xEQ7rrrAnZF3V6AyeWkGvsl5gaiO9RaNzWMu31iE wknBjVU7M1wrCNNmWMG8WKQnObqXjsZVklGUcWcCAwEAAaOCApcwggKTMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUBjFnds+TZT4hgn111oAonZvS8MMwHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wgZ8GA1UdEQSBlzCBlIILYXVkaW9wcm8uY3qCEmRlYWxl ci5hdWRpb3Byby5jeoINc21hcnR2aWRlby5jeoIPd3d3LmF1ZGlvcHJvLmN6gg53 d3cua3JlYXRlay5jeoIRd3d3LnNtYXJ0dmlkZW8uY3qCFnd3dy56YXNlZGFja2Fu YWtsaWMuY3qCFnd3dy56YXNlZGFja3luYWtsaWMuY3owEwYDVR0gBAwwCjAIBgZn gQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQA7U3d1Pi25gE6LMFsG/kA7 Z9hPw/THvQANLXJv4frUFwAAAYv7nnIhAAAEAwBGMEQCIFNSr51zC6XmM/TkxWFX zSTVdXL38QBxwJ2iWM50n7/pAiBAeAqRAUEDXj9IyLCWUwYKRw0/meu2zvhScuAK sAVSsAB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABi/uecjQA AAQDAEgwRgIhAMC9p9pAtrAiL803xLDVn9kTN3bRp8JUrqgcYdtTcUQWAiEAiGot bZavYwIwnTv/5yfnucatDxR3vkyk+onOsy/lzKEwDQYJKoZIhvcNAQELBQADggEB AFgaL+XDVJCn/cEAPTtY7bxuZNGibTn2E1/aUJszx5Qcr89JlEJ38zPLet0L97q7 dweK1MiBE8kdzv0Hn7/HX+AAg1zGoilgKLg8cuPXPQEwc+8kRA+/7su+NBp5o49F AkgsKn1PU1nWeMesMhghOGi3FAfXH6tib32wnvtJIEA9YVcZTZZX6/SgRyZBBerD 55xp8FMsIkGvEXLZ5xRdlR0yOo0CfJuN07cyVUHrQ/a+pYOQspxujgBjRqIkgIaq KH01ZN+KvsRF/isNK7XGdrWLW4yJiK80eJ/J0eSdB0cu4pXQ/ZxG7kgoqGo2UOi2 b6Z/SgR/LDCBfYOCtH/BN+U= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3Nm+cBSONqCW13RRwUrf ugFEQ4f1fR2lp0VVq+/HThYQXZOA2BXgnhwpUM7vnKMXbz/Nsvv/72icc5romRU3 JYZzeR70KoD+NLU9qIbspG42ra5r8CInVvZj+S41DdyL3FjDJ6K2YVGVMgAroTcM wxKoENR9pcHB0lsjhCFGRMCuwhwzLV61GlO2iBAVq7Va6iDxz+fCdGbj48JNbxp7 38kbh4R4ljHY9ZOanrPR3AXTOnlQ+VtR8OfmyzDiaTewsHAsp51WydcqeyYBbn+O lbZ6Kp/bCSqLqPw8DqGfhl7t4eJyQ93mbJaps4I6Z8Pycf2uhGX8ya4aqrv3KQjr Y2MxFT35aJfNXrrU7sO/4ysMJC2WQXrWp7l7sbgMquDOuvXNbDG0VT/d2HmxCb0h xTL4UkILqD9//x5XIP6tZ/U3ks79ZivjlAA5SP8mKyrUOLw1etWiYCMKLz9qXBTp ndNMpiS7UH//OvyHmAo7oxG/yuBQySWt2LHRqIYIwCGIQ2sKh1ApXukaBnlWBvbA S7P00piH4S3oDdq+opIIs8/QjcYBNcqCjr3qstd+5/wTlPD3KxThogns3CQUI5gy ap4PkV59xEQ7rrrAnZF3V6AyeWkGvsl5gaiO9RaNzWMu31iEwknBjVU7M1wrCNNm WMG8WKQnObqXjsZVklGUcWcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 411196070275932962476987594234729649330632 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 08:59:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 08:59:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'audiopro.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 900991685591921948890791809424347070727930200728099579439048523007661742880273821877434910882226264710108897342134010382897949479172183475137116741218820227906305088078180810304699601571797037461693813445531529617527984359686716381836474226681269013114426789504164390254207719848145792572719549248746448363125809818887721272045642899236155647622862234909400245835290574316326472105582353461017561176055571013745391819887309883663261430574009889213074277251251886143080138605022309030958697622411627582731847180630571686748759479954303279127992626053682630407103065034354333944028006499313593586639649495871189423207521046971044047623990625036674267035804212021751002811628471320326780853253383060034846636935804068569746105816412099598427226537214839037911297397884921600746221952572768504757296093372428025279455998288420483364183280984385240662522135912699001316491755951275117744326441578858682778613140578199391459696182679374232256448756961763007460011702138134323245908437254347989866302016174817660911391179548093254217348588984214332957230403182790271221456734587367375094991640120116732278327345508582551112920988491958207461072865993638543714554746960037034139749206962669259266535455291551456297119400290264528529759957351 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 06316776cf93653e21827d75d680289d9bd2f0c3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audiopro.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.audiopro.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartvideo.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audiopro.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kreatek.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartvideo.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zasedackanaklic.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zasedackynaklic.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bfb9e7221000004030046304402205352af9d730ba5e633f4e4c56157cd24d57572f7f10071c09da258ce749fbfe9022040780a910141035e3f48c8b09653060a470d3f99ebb6cef85272e00ab00552b0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bfb9e72340000040300483046022100c0bda7da40b6b0222fcd37c4b0d59fd9133776d1a7c254aea81c61db53714416022100886a2d6d96af6302309d3bffe727e7b9c6ad0f1477be4ca4fa89ceb32fe5cca1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00581a2fe5c35490a7fdc1003d3b58edbc6e64d1a26d39f6135fda509b33c7941cafcf49944277f333cb7add0bf7babb77078ad4c88113c91dcefd079fbfc75fe000835cc6a2296028b83c72e3d73d013073ef24440fbfeecbbe341a79a38f4502482c2a7d4f5359d678c7ac3218213868b71407d71fab626f7db09efb4920403d6157194d9657ebf4a047264105eac3e79c69f0532c2241af1172d9e7145d951d323a8d027c9b8dd3b7325541eb43f6bea58390b29c6e8e006346a2248086aa287d3564df8abec445fe2b0d2bb5c676b58b5b8c8988af34789fc9d1e49d07472ee295d0fd9c46ee4828a86a3650e8b66fa67f4a047f2c30817d8382b47fc137e5