aumio.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:79:7a:8c:a5:1d:72:ac:06:d7:bd:d5:ba:e4:2f:cd:82:9a was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aumio.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:79:7a:8c:a5:1d:72:ac:06:d7:bd:d5:ba:e4:2f:cd:82:9aSerial Number (int): 302673920278690939205416105451241994027674
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 83:44:a2:14:c0:7a:12:d8:ca:f8:b1:a5:f6:4d:c6:4a:b6:9e:6c:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): cb:21:05:82:7b:ba:47:70:e7:79:21:76:09:53:45:73:46:83:c7:70
Fingerprint (sha256): b6:62:8d:2e:ba:29:17:c8:3a:e3:bb:91:64:92:9b:59:d0:96:89:6e:b9:a4:e4:67:cb:e6:8d:54:58:d6:71:5c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate aumio.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aumio.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aumio.de
www.aumio.de
www.aumio.de
Other certificates including the domain name aumio.de
(limited to 100 certificates)
gitlab.aumio.de
aumio.de
wp-staging.aumio.de
bitwarden.aumio.de
www.aumio.de
aumio.de
www.aumio.de
aumio.de
aumio.de
aumio.com
www.aumio.de
cdn.aumio.de
aumio.de
link.aumio.de
bitwarden.aumio.de
aumio.de
www.sigastudio.com
aumio.de
www.aumio.de
aumio.de
wp-staging.aumio.de
gitlab.aumio.de
app.aumio.de
preparedhouston.com
aumio.de
bitwarden.aumio.de
aumio.de
aumio.de
aumio.de
aumio.de
www.aumio.de
staging.aumio.de
hostpress.aumio.de
aumio.de
aumio.de
aumio.de
viro.kurowasi.com
aumio.de
aumio.de
gitlab.aumio.de
aumio.de
cdn.aumio.de
aumio.de
aumio.de
aumio.de
sentry.service.aws.aumio.de
gitlab.aumio.de
aumio.de
gitlab.aumio.de
aumio.de
wp-staging.aumio.de
bitwarden.aumio.de
www.aumio.de
aumio.de
www.aumio.de
aumio.de
aumio.de
aumio.com
www.aumio.de
cdn.aumio.de
aumio.de
link.aumio.de
bitwarden.aumio.de
aumio.de
www.sigastudio.com
aumio.de
www.aumio.de
aumio.de
wp-staging.aumio.de
gitlab.aumio.de
app.aumio.de
preparedhouston.com
aumio.de
bitwarden.aumio.de
aumio.de
aumio.de
aumio.de
aumio.de
www.aumio.de
staging.aumio.de
hostpress.aumio.de
aumio.de
aumio.de
aumio.de
viro.kurowasi.com
aumio.de
aumio.de
gitlab.aumio.de
aumio.de
cdn.aumio.de
aumio.de
aumio.de
aumio.de
sentry.service.aws.aumio.de
gitlab.aumio.de
aumio.de
gitlab.aumio.de
Certificate
The complete raw certificate details for aumio.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgISA3l6jKUdcqwG173VuuQvzYKaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTkwODU1MDJaFw0y MDA2MTcwODU1MDJaMBMxETAPBgNVBAMTCGF1bWlvLmRlMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEAqrpDYLn7p8qa/NtM8/GJD2r1thrYsIvw4kGexbsp EdC/WJZRN6BOKbY3UVOgolzi3FPH8xZW7tePFWzg9H5Z1ZOMdPwz84rFnQBcy/YZ gK1xe6+Uc9GCxJJvhO0FzBoRhrewxmoOJWzH28bjLOnwRGOdfhSkvv17PacDIXHv g0+6AvQrPLZTBuHcn/2WGmoqF5sws5PdzNseJ2E2nt0z5vkGTnFqip6cZoUoPyKC J1WOqIvvxoXh9Y3Ps1I62xtIXlx2xNiIimn1duNei1ThPVeK60+8ZXDOX+cqqfFZ Cwi2a8UMpo6h1ri5Q7jx2K1lgZNW+JPeGgpLUPhCIWjNXxFZSRqiTEg4JeUBnkD6 z04eOOx0nQwMOuC+SCkIpG5IR3CyBckHtvdTJCM2WuNOTNRkqEy99mwPZuoHFgBf pYuMpo1TiFMRiYZzBPgyTL/uS95R87HZP8zjfw4To2Aawlx6fhCkKr8mLmzbofCv h+mdhIBt0zEDittdZQjFkzcqEfhjRSaCNbGBbEVJTvn/rDVI4wGwzzdVzJ/yHYCq xLn8HwvuZMF52Yc13N/VWxrDA4d9I0vLwuuH9ZuqeBHrKG4RfOdzOcR7qbRzCdY5 qV7XwehaQP2S64rJPTf0koyXDqTOgWkHFWPLBxdH7FRPyHsmCFgOTIALy6tn8TOD s8UCAwEAAaOCAm0wggJpMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUg0SiFMB6EtjK +LGl9k3GSraebCkwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzAhBgNVHREEGjAYgghhdW1pby5kZYIMd3d3LmF1bWlvLmRl MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB 9wSB9ADyAHcAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFw8je3 QgAABAMASDBGAiEAuYwLZj5kd+84+8JF1GNmZ6X7gGjD+aST0NJkG3hy824CIQD6 SA2ewz2m06MJagiFZtyYy24PZcf3i63nqplYNZD5TgB3AOcS8rA3fhpi+47JDGGE 8ep7N8tWHREmW/Pg80vyQVRuAAABcPI3tw4AAAQDAEgwRgIhAM13xHDYL3N9n8/F 9Qz+JlnGbJmCBXNoJPCYQRMWTYAuAiEA7lJOxqMOCKoOo3091DZzgX2dkNQUAGMB 1Xy6xoyCw9QwDQYJKoZIhvcNAQELBQADggEBACDTSLWZY8Vdu2YmYUfc3VfrnUYM bvWFJWtXGkjPsEsuPaEeSHIXj6pAdjNXLT42OEXL+l3bSo7OAiwRzyRLpO3wAGb1 im+qvp7ouyu87FIx9qzwvNZLeLIV4r1Uq7q5CoOx75eQ/IyaEEiXsakiH+qO0IMy 1eTWo64zk8RV8ywbj/gbej2bxfWEMpbne0g1/uZTipFbVQaBpls/+JUD7iklcZe/ 8kqO+5kglmu/lP/NxUC8mj2HBJp/wptkOskD39Ezdar18nI/MXlrtc0MAZ5aBoa0 WBEWrEYFtxlyfPdpiPNwBtPZW7kC2hIXN0GTnPZWolW0w654EYmDXmQeAQo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqrpDYLn7p8qa/NtM8/GJ D2r1thrYsIvw4kGexbspEdC/WJZRN6BOKbY3UVOgolzi3FPH8xZW7tePFWzg9H5Z 1ZOMdPwz84rFnQBcy/YZgK1xe6+Uc9GCxJJvhO0FzBoRhrewxmoOJWzH28bjLOnw RGOdfhSkvv17PacDIXHvg0+6AvQrPLZTBuHcn/2WGmoqF5sws5PdzNseJ2E2nt0z 5vkGTnFqip6cZoUoPyKCJ1WOqIvvxoXh9Y3Ps1I62xtIXlx2xNiIimn1duNei1Th PVeK60+8ZXDOX+cqqfFZCwi2a8UMpo6h1ri5Q7jx2K1lgZNW+JPeGgpLUPhCIWjN XxFZSRqiTEg4JeUBnkD6z04eOOx0nQwMOuC+SCkIpG5IR3CyBckHtvdTJCM2WuNO TNRkqEy99mwPZuoHFgBfpYuMpo1TiFMRiYZzBPgyTL/uS95R87HZP8zjfw4To2Aa wlx6fhCkKr8mLmzbofCvh+mdhIBt0zEDittdZQjFkzcqEfhjRSaCNbGBbEVJTvn/ rDVI4wGwzzdVzJ/yHYCqxLn8HwvuZMF52Yc13N/VWxrDA4d9I0vLwuuH9ZuqeBHr KG4RfOdzOcR7qbRzCdY5qV7XwehaQP2S64rJPTf0koyXDqTOgWkHFWPLBxdH7FRP yHsmCFgOTIALy6tn8TODs8UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 302673920278690939205416105451241994027674 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 08:55:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 08:55:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aumio.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696507802255857078934771066263989021625612468073066787723419481939184021036509841521678949779984575994856359674793996654114595593125088649105258582728342668770614617520226495397710352535756456971892645972352624954331567148959886579578910803484212026963283749447121748071485547397153640054406348502660235103179555956746340832575099165002798648304661113996096405826316774928258487227184247420684537839143533138933407987590645717548847090872826491307406262365041436761964343217408422177643429568408335229053010438109183587296682114571022503212876774320427405798411509861429676659632637285477450705383534405777417369240408508552465243009366081107748327706944191094781078035881783519783741829336581117533389296220142447766039187478843775095201597185387632773365080941256727524811704984193274779188670420426152151536131127603172423545306799238534904094130915473642276562088836106321531598722801086245411473382759821202244155356796568848215579160446908129127301578593821150943869057813932804933569110198093623960001126506428072703436831978368679784548203405006880710944887067054341381492736149348786277571423520228132776558334438249459382474061234931674880143847556657268981709430230210849458937336482178749056680877611921360836492674708421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8344a214c07a12d8caf8b1a5f64dc64ab69e6c29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aumio.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aumio.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170f237b7420000040300483046022100b98c0b663e6477ef38fbc245d4636667a5fb8068c3f9a493d0d2641b7872f36e022100fa480d9ec33da6d3a3096a088566dc98cb6e0f65c7f78bade7aa99583590f94e007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170f237b70e0000040300483046022100cd77c470d82f737d9fcfc5f50cfe2659c66c998205736824f0984113164d802e022100ee524ec6a30e08aa0ea37d3dd43673817d9d90d414006301d57cbac68c82c3d4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0020d348b59963c55dbb66266147dcdd57eb9d460c6ef585256b571a48cfb04b2e3da11e4872178faa407633572d3e363845cbfa5ddb4a8ece022c11cf244ba4edf00066f58a6faabe9ee8bb2bbcec5231f6acf0bcd64b78b215e2bd54abbab90a83b1ef9790fc8c9a104897b1a9221fea8ed08332d5e4d6a3ae3393c455f32c1b8ff81b7a3d9bc5f5843296e77b4835fee6538a915b550681a65b3ff89503ee29257197bff24a8efb9920966bbf94ffcdc540bc9a3d87049a7fc29b643ac903dfd13375aaf5f2723f31796bb5cd0c019e5a0686b4581116ac4605b719727cf76988f37006d3d95bb902da12173741939cf656a255b4c3ae781189835e641e010a