esf-lescarroz.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:8a:78:75:2f:b9:a7:22:eb:91:63:b3:07:fa:eb:dc:22:c5 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=esf-lescarroz.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:8a:78:75:2f:b9:a7:22:eb:91:63:b3:07:fa:eb:dc:22:c5Serial Number (int): 395568226188339320673345818114873618080453
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: fe:65:3b:7e:b5:bc:3a:62:95:20:0e:48:cc:b2:06:6c:0c:3c:3a:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b4:7d:cd:81:fa:34:80:4c:44:23:bf:b9:7e:ce:e9:46:0b:77:2c:1c
Fingerprint (sha256): b7:9c:10:bf:a0:2b:df:7c:6e:c5:7c:7b:8a:dd:82:77:0f:ec:9d:02:9d:fc:13:c9:85:ae:3c:39:05:a3:b0:6e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate esf-lescarroz.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for esf-lescarroz.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
esf-lescarroz.com
esf-lescarroz.valraiso.net
ski-school-lescarroz.co.uk
www.esf-lescarroz.com
www.ski-school-lescarroz.co.uk
esf-lescarroz.valraiso.net
ski-school-lescarroz.co.uk
www.esf-lescarroz.com
www.ski-school-lescarroz.co.uk
Other certificates including the domain name esf-lescarroz.com
(limited to 100 certificates)
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
www.esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
www.esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
www.esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
www.esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
esf-lescarroz.com
Certificate
The complete raw certificate details for esf-lescarroz.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGgDCCBWigAwIBAgISBIp4dS+5pyLrkWOzB/rr3CLFMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MDQwNDE3MzZaFw0x ODEyMDMwNDE3MzZaMBwxGjAYBgNVBAMTEWVzZi1sZXNjYXJyb3ouY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ih6dJgzqQx4UwtAJau2rXqFu2Z8 ryO6eM1XcOtssqFrQC7WtSXVRdz9nEhDfiEa/T2/Ks5AVmV1FsTqvehSBEc+x/Tm oHEcgdH+7yMXFwQLFXUmwk3SiouxlcvVxxjnG5/kBsvxc0+IqvjF+J62nIz6azKV 39sObBhlI84f28p5UBxkny/4ePzEQfRhaAy/bONcnNmQCOhz4RVMYSrcoSTxmHe6 Gr3MrXuD5gbY+Rj7Ji55kPG+t2b2OtKRUDsxsPIhwwyrTjuSBeDYH0gEAOnxYtSO xe50HwG9Dru+OKojZCXqrQcGXCk36SpDgjyNt2dQQXk2xLZLHV9iL4+mMwIDAQAB o4IDjDCCA4gwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT+ZTt+tbw6YpUgDkjMsgZs DDw6eDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw dC5vcmcvMIGNBgNVHREEgYUwgYKCEWVzZi1sZXNjYXJyb3ouY29tghplc2YtbGVz Y2Fycm96LnZhbHJhaXNvLm5ldIIac2tpLXNjaG9vbC1sZXNjYXJyb3ouY28udWuC FXd3dy5lc2YtbGVzY2Fycm96LmNvbYIed3d3LnNraS1zY2hvb2wtbGVzY2Fycm96 LmNvLnVrMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB 1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3 aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEA dgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWWjA77rAAAEAwBH MEUCIQCMPv35+pHo5V6IMHfnXeGfoiY1mg3sRW0J8PLiy5SBbwIgCZ1dfP06yUhU sCqHxBR86gJmPgwmIKKowxe3qoz8XrUAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily 3KTDDPTlRUf0eAAAAWWjA8C9AAAEAwBIMEYCIQCtNBI5lWEUZESRy4wYOE9h1g5V OSjXT+wywWC2P/EQfwIhAM4afbjzT2AcphYwSfyYDSeM5ZrP/aZ9KAH99hI3sgIz MA0GCSqGSIb3DQEBCwUAA4IBAQAZ+o0hkjutbmFZO9V42hCAe4djZztsCH80Cqvi m/rbN9SXkhYJw9laH2q6quS3W4vL0rsRUtpVCV9e3+XPzfx8yjt8suMETngtYDat iwUjcOnbiJxLMSvIT6SNrzMzqI63Jj3DWF7D0MiA5cE+dv+yliMzTAVqxy2mV4Oh odvdJSVPTubKDveWaK1Mdf9RZN4dxi20xYj/V+B6GtZvLG7hLU/KQ8KmHatoNkaJ DNLfVXiGrYnJjmZev1uZ1kejbmEIBO2TMYf4N6OoyAyzYEEFfRpRUwJ1bTk0lLjD XZIsBIo4QEZaCg7gYxMgxWwZRF9GPayDoxRgTcyrSX/Pn9i+ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ih6dJgzqQx4UwtAJau2 rXqFu2Z8ryO6eM1XcOtssqFrQC7WtSXVRdz9nEhDfiEa/T2/Ks5AVmV1FsTqvehS BEc+x/TmoHEcgdH+7yMXFwQLFXUmwk3SiouxlcvVxxjnG5/kBsvxc0+IqvjF+J62 nIz6azKV39sObBhlI84f28p5UBxkny/4ePzEQfRhaAy/bONcnNmQCOhz4RVMYSrc oSTxmHe6Gr3MrXuD5gbY+Rj7Ji55kPG+t2b2OtKRUDsxsPIhwwyrTjuSBeDYH0gE AOnxYtSOxe50HwG9Dru+OKojZCXqrQcGXCk36SpDgjyNt2dQQXk2xLZLHV9iL4+m MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 395568226188339320673345818114873618080453 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-04 04:17:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 04:17:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'esf-lescarroz.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26324867411483495492483069114514603798743411634115899728615140047215641246103109248933570644231108767898789322751247332965534859850531718531764455202145945625823646973498435896375478259690508323847525289929144687955015081926735161726023880489309961400352354789890138221142482906061643923034040406007430174533698068089506524140095455550723447267130896914176476127993615301856964027026818640799293982184475168739663635651008201636898143059860878334215289966228184098176658732090457285942319952205224080220275070829002532474951066209154521903803567615993189499704122952124628711573874346423823996088067989018753077585459 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fe653b7eb5bc3a6295200e48ccb2066c0c3c3a78 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esf-lescarroz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esf-lescarroz.valraiso.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ski-school-lescarroz.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esf-lescarroz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ski-school-lescarroz.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000165a303beeb00000403004730450221008c3efdf9fa91e8e55e883077e75de19fa226359a0dec456d09f0f2e2cb94816f0220099d5d7cfd3ac94854b02a87c4147cea02663e0c2620a2a8c317b7aa8cfc5eb5007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165a303c0bd0000040300483046022100ad341239956114644491cb8c18384f61d60e553928d74fec32c160b63ff1107f022100ce1a7db8f34f601ca6163049fc980d278ce59acffda67d2801fdf61237b20233 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0019fa8d21923bad6e61593bd578da10807b8763673b6c087f340aabe29bfadb37d497921609c3d95a1f6abaaae4b75b8bcbd2bb1152da55095f5edfe5cfcdfc7cca3b7cb2e3044e782d6036ad8b052370e9db889c4b312bc84fa48daf3333a88eb7263dc3585ec3d0c880e5c13e76ffb29623334c056ac72da65783a1a1dbdd25254f4ee6ca0ef79668ad4c75ff5164de1dc62db4c588ff57e07a1ad66f2c6ee12d4fca43c2a61dab683646890cd2df557886ad89c98e665ebf5b99d647a36e610804ed933187f837a3a8c80cb36041057d1a515302756d393494b8c35d922c048a3840465a0a0ee0631320c56c19445f463dac83a314604dccab497fcf9fd8be