potterytree.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number a0:73:5e:32:27:bf:4c was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=potterytree.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): a0:73:5e:32:27:bf:4c
Serial Number (int): 45162844679290700
Serial Number lenght: 56 bits, 7 octets

SubjectKeyId: e2:5c:f3:ce:40:63:15:94:89:e5:e3:83:20:aa:4b:a1:3e:7c:d7:df
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 25:8d:f4:92:4b:0f:c5:f4:54:98:66:16:29:1d:cd:41:d1:bd:7a:14
Fingerprint (sha256): bc:fc:7b:45:d6:f2:f3:7f:35:39:6a:8d:04:14:27:b2:0b:4f:71:44:1c:cf:26:d0:46:0c:2f:bd:5d:56:df:19

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6479.crl

Check the revocation status for certificate potterytree.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for potterytree.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

potterytree.com

Other certificates including the domain name potterytree.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for potterytree.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHgjCCBmqgAwIBAgIIAKBzXjInv0wwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV
BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow
GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz
LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1
cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzAxMTcyNjM5WhcN
MjQwNzAxMTcyNjM5WjAaMRgwFgYDVQQDEw9wb3R0ZXJ5dHJlZS5jb20wggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDzZj3Lb7f/tA4ITp9V4uFUIH1T69hF
slRTaeGTx5BVjTxuMZEkIUzDgfkGUbLzwNI23jAkwYba+lc5/3F0ji2FyOl0eRFT
925QYb7+fA10q14/3Si60ED4yKEUQVPDDZtoy5NqPivzfELwqtzWERRlyoZOP09/
QmQszgrwVpxaLmbis7i1E9WR7lNZRdD+DuUAdRU27H1AbsPbARlYgv2tpPNMxvsQ
b4NNx4/ZfJkOoqEAdlGt8BiWn5VGUdVbMbdKlGmhbq0QtTkceFP6HICUvTERPtT9
QUoqe1K1VQU3JdyF0Bpn1DL8JDkv5DKqDhq8/hz/suoaOEUlaNFcXRjJef+dKbJ5
Ef7v+nw7gJ7WfFy7Ggd/xxhxKVK+t0HUAdGzzAFGUCkzNS6zQzArDIPGFMDUA7Fz
hAlxprChy34Me34a9Qo8o+Bd2/uRdiNMHeb659rj2Egsypobev/ALHvVHh5od0Ah
+o8IlodheBQqb5lcZMgc1xTIhKusCEGPMXvcmP0TiONSmUW6/5BTf/Hpw1VjdcKd
8EU4D3gKEmbHvDGk3XmFqmdErOw6t093wmm0u2uVJQEyIXNdHmKQs3L3jq5TTreO
DMUmBRq4i6IGAmO/R2FaatTc3u83ledyXFPBTY7g+3p6+q3r1WUnV5poD6OkCsGw
luNTdbmgNV8nMwIDAQABo4IDLzCCAyswDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8w
LaAroCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02NDc5LmNybDBd
BgNVHSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9j
ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYG
CCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5j
b20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29t
L3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/ts
s/C0LIDOMBoGA1UdEQQTMBGCD3BvdHRlcnl0cmVlLmNvbTAdBgNVHQ4EFgQU4lzz
zkBjFZSJ5eODIKpLoT58198wggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AO7N
0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiRJ+FHgAAAQDAEYwRAIg
dqmJKFQt438vxxUrQo1Ol0yAiDen5peqICcCv2FZfAwCIFXmHTUF+1dVAfYZrZFA
YZnNiuDLGOPDkFh+lKoRzEHBAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/
qznYhHMAAAGJEn4VPwAABAMARzBFAiEA6/FVsg0Pjm7FXn/l2R7ilA3htTd/tOn0
ho8tJ6ouGN8CICwqlgFxKqbz6cQhXmLRvZYcXhf3u1zTmThsFSSn+kxpAHYA2ra/
az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJEn4V9AAABAMARzBFAiAY
8CwqKNDtqaeFfK9j3Tb2RINaWVoRm40gcA4CdB1m0QIhAOdcsIKfWe3vbUYeitdY
DVs3YIQRvqyMyOi+gd8PZgCCMA0GCSqGSIb3DQEBCwUAA4IBAQBgOPLAuiEqm/ig
3MdX9XWdSNdlX4zbvA9Wo03xPZky2uM4xNzjMO0A9yHGvJ7PfcvXYEDqNeAkNyN2
817LDadDbYmLj4o0r6rTXGk1aOTvwBeqoVd5v/sDWuan9HNH8vLz2cTjqGoZKoE7
nFriy0GB9L5JF9TR/7XZ6bJI/pwWxgOpPRcAGPqTH8wmj6SFP/9oBLxT8pBCru1D
T1mZE85a+pzIVS/4Ip3VnLd2tq9IHMwtWh0UwSypg+tO2depGRj9v0Si6S7fUig6
lV2fi3URQXlMZy6Ekv/DUAmNSJzHx6pqqVyLvvF/eoFImZ7hSm7n0eCtTrZApVG5
huTAw7NC
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 45162844679290700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-01 17:26:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 17:26:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'potterytree.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 992982838457130107660045483853964792483527617381981661061432566449990364924400013763229948063195742740919908656576602160032646099060294250054015970509750439357520871871874659470029653608680301325545054119282175601576682690429803244221219822540240822264464934863488322289447883837656228830084066015837993837009591249035929302932448521313450949635189057194878060801289060388775680686885770598161554934878907721565604230030497270997549462086028516276097428521986130735096006524375930603801180305719433916110164609868894254277057328164782007973457164068635933779927043980144895957164505818436702097024443763059100273749186305283685517760890862540132880236062443272323556399649880686985887117440140401861572618078365080272113774152161359587425372219993995464164916910363210483119987474135583122102634191902514977634143211636874194878695494867289655026270731751156107692870177897346071791286213975413059360693906691596719141652035130938782535326155594619820027433592583093463555225606459041027300746128399947835541385345110012452222122571962132899208436780895756932691066650123466863391026975649178773441322843629054513682583442848227034815481825548082258249603082520392477519234321132937640963506783418005215862859965533749695089945290547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6479.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potterytree.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e25cf3ce4063159489e5e38320aa4ba13e7cd7df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006038f2c0ba212a9bf8a0dcc757f5759d48d7655f8cdbbc0f56a34df13d9932dae338c4dce330ed00f721c6bc9ecf7dcbd76040ea35e024372376f35ecb0da7436d898b8f8a34afaad35c693568e4efc017aaa15779bffb035ae6a7f47347f2f2f3d9c4e3a86a192a813b9c5ae2cb4181f4be4917d4d1ffb5d9e9b248fe9c16c603a93d170018fa931fcc268fa4853fff6804bc53f29042aeed434f599913ce5afa9cc8552ff8229dd59cb776b6af481ccc2d5a1d14c12ca983eb4ed9d7a91918fdbf44a2e92edf52283a955d9f8b751141794c672e8492ffc350098d489cc7c7aa6aa95c8bbef17f7a8148999ee14a6ee7d1e0ad4eb640a551b986e4c0c3b342