ditsch.de

Issued by R3

About this certificate

This digital certificate with serial number 03:12:f5:6a:a0:35:93:f8:b1:e5:91:13:78:ee:70:7d:46:96 was issued on by Let's Encrypt.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ditsch.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:f5:6a:a0:35:93:f8:b1:e5:91:13:78:ee:70:7d:46:96
Serial Number (int): 267788154891722365510466403973837533038230
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:04:cc:01:f0:af:c5:da:ce:38:f9:98:35:a0:f9:aa:1e:54:54:5a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ca:13:ed:b5:19:17:bc:e1:c6:3f:07:ee:50:a6:4f:92:a6:ff:f1:81
Fingerprint (sha256): a9:52:5e:ba:42:83:ff:fa:28:8b:97:30:57:60:a2:a6:fe:da:65:2d:ea:4e:c1:68:6e:5f:eb:a5:31:5e:fd:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ditsch.de

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ditsch.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brezelbaeckerei-ditsch.at
brezelbaeckerei-ditsch.ch
brezelbaeckerei-ditsch.de
croissants.de
dev.ditsch.de
ditsch-brezelbaeckerei.com
ditsch.at
ditsch.biz
ditsch.ch
ditsch.de
ditsch.info
laugenprodukte.de
oktoberfest-bretzel.de
oktoberfest-brezel.de
pretzel-king.us
www.brezelbaeckerei-ditsch.at
www.brezelbaeckerei-ditsch.ch
www.brezelbaeckerei-ditsch.de
www.croissants.de
www.ditsch-brezelbaeckerei.com
www.ditsch.at
www.ditsch.biz
www.ditsch.ch
www.ditsch.de
www.ditsch.info
www.laugenprodukte.de
www.oktoberfest-bretzel.de
www.oktoberfest-brezel.de
www.pretzel-king.us
www.xn--brezelbckerei-ditsch-hzb.de
www.xn--brezelbckerei-hfb.de
www.xn--brezelknig-kcb.at
xn--brezelbckerei-ditsch-hzb.de
xn--brezelbckerei-hfb.de
xn--brezelknig-kcb.at

Other certificates including the domain name ditsch.de

(limited to 100 certificates)
owa.ditsch.de
*.ditsch.de
mzvc02.corp.ditsch.de
filialemonitoring.intranet.ditsch.de
ditsch.de
ditsch.de
citrix.ditsch.de
filialemonitoring.intranet.ditsch.de
*.ditsch.de
ditsch.de
intranet.ditsch.de
monitoring.intranet.ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
owa.ditsch.de
ditsch.de
ctxlogon.corp.ditsch.de
ditsch.de
ditsch.de
owa.ditsch.de
citrix.ditsch.de
*.ditsch.de
ditsch.de
intranet.ditsch.de
intranet.ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
monitoring.intranet.ditsch.de
citrix.ditsch.de
ctxlogon.corp.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
citrix.ditsch.de
mzctxnz01.corp.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
ditsch.de
adfs.ditsch.de
intranet.ditsch.de
ditsch.de
www.ditsch.de
www.ditsch.de
ditsch.de
monitoring.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
ditsch.de
filialemonitoring.intranet.ditsch.de
*.ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
*.ditsch.de
mzvc02.corp.ditsch.de
intranet.ditsch.de
intranet.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
filialemonitoring.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
*.ditsch.de
intranet.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ctxlogon.corp.ditsch.de
citrix.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ditsch.de
intranet.ditsch.de
www.ditsch.de
intranet.ditsch.de
owa.ditsch.de
intranet.ditsch.de
*.ditsch.de
intranet.ditsch.de
intranet.ditsch.de
intranet.ditsch.de

Certificate

The complete raw certificate details for ditsch.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSyzQFonDh8m3ozfGik3
rQIHwNdR56frS0CIVOej43qnuJ6q2Z8Ik+/sEYsH+F6mB+kUCfGwgswaCFuhu1RQ
MsH7SjtymajDQTfe3hNAbEkG2TW/oeEejpIOQIafXIHzF/SwoakY7b9o92SMONXy
ReXOrIOfd4qypJprM3TZdDjbOtxrnDzAHF9L5j4WuVIQbMHSmyYJmiSnhRgKLH81
kJvJLC+RidCBj4nw75CuNzK8XDMbsHSLceDGCc5uL6UgW5EwCxJfiCXVKVl0B9sl
p2fSysewZpJNr29wM9SZ1mCEEhnzkKawaQNgq8RaotkfF98Pdyt6L5PoFxMwrwiI
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267788154891722365510466403973837533038230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-16 21:00:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-14 21:00:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ditsch.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24386035348942457509322312035389420623879783407978252157304437465742694122552673453158637853415529237588938551844044465833868900458336671344089266713387923973303580915332465787394931089164925482828789488444190873521774413644418869397644145908310355451030176613262437657740851833169348462230601640050635581868837199590465510178656276444752345954559391309174244990452225955741527953006260236908897056933528322188236148310810055184890992413981463367223471314267466251887550815884086828976254926163131001709616126054588856160207782210964528355851659608304321709475392407166589631634966427021243199961415497826283406526707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f04cc01f0afc5dace38f99835a0f9aa1e54545a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (781 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelbaeckerei-ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelbaeckerei-ditsch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelbaeckerei-ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croissants.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch-brezelbaeckerei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laugenprodukte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oktoberfest-bretzel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oktoberfest-brezel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pretzel-king.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelbaeckerei-ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelbaeckerei-ditsch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelbaeckerei-ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.croissants.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch-brezelbaeckerei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laugenprodukte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oktoberfest-bretzel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oktoberfest-brezel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pretzel-king.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelbckerei-ditsch-hzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelbckerei-hfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelknig-kcb.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelbckerei-ditsch-hzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelbckerei-hfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelknig-kcb.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017c8b1ebba10000040300463044022038975a2877097a80d1df6c9bba5ab351b8854b81f4ddc16bf1e4f3ba347d56ee02205fdef4abc60808f5b1d4d8805900e1cbd22b53459fab8732595dc1250427790800750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017c8b1ebd9e00000403004630440220348b8cd6914a8fa2df9fcd75e53da5e44c8d2b386ada8f0a042b834cdcce264d02206780db300def47e7e5c109aa8c34feff43a550b61ca37b7fa643a41f4d6094a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0064e64e5dc29fbdccdd72a00eb1517e903f6a7cd7c1de4ad1f0580c455c5d59af56c7831e38354a1913db4d0ca0b50e0f1f217b25c3d801532ab5cadc6212cbf892256f425c1406dd574640fdb63fc9bb0858f0221cc1c0271308d0c90ed6de0365dd2c19f257af7bb8e8ed32bd769689a0ad0f1ff33a2d6906b9de4e0f94e02e80a92288ec8c0a37e5201627988b6fe2a00dc9d405d9d68a81aae1dbc7e4d24e71404e3d7af22426a65888ee5fabae0f8fee7dbfdba5f9c5cdf1de4b8d148c48744ca28a3859c8202b946f57a3e89ace5fcc529c5a80008430e4c6bc88ae920e0ab874997f58cb6656b788340f8dcafb0ca4b4de4c0dec4902f0abc4156f174a