cogitstudio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2f:b2:fd:ba:93:69:46:21:9b:d1:9e:2c:37:be:17:32:2a was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cogitstudio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:b2:fd:ba:93:69:46:21:9b:d1:9e:2c:37:be:17:32:2a
Serial Number (int): 277568049059127078937775815490831761486378
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: df:3c:e2:46:68:2f:77:87:8f:5f:38:be:c3:1c:e8:96:ce:08:01:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6a:67:65:39:f9:80:26:52:b9:3a:98:c7:4c:27:36:e7:52:05:c5:22
Fingerprint (sha256): be:21:76:b3:e9:b3:35:f4:22:24:93:8e:d7:ef:2b:aa:a4:19:bc:62:8f:93:c9:bb:e8:27:ef:cd:cb:5d:ff:bc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cogitstudio.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cogitstudio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cogit.studio
cogitstudio.be
cogitstudio.biz
cogitstudio.com
cogitstudio.eu
cogitstudio.fr
cogitstudio.info
cogitstudio.net
cogitstudio.org
www.cogit.studio
www.cogitstudio.be
www.cogitstudio.biz
www.cogitstudio.com
www.cogitstudio.eu
www.cogitstudio.fr
www.cogitstudio.info
www.cogitstudio.net
www.cogitstudio.org

Other certificates including the domain name cogitstudio.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cogitstudio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHlzCCBn+gAwIBAgISAy+y/bqTaUYhm9GeLDe+FzIqMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDYyMjQ0NTVaFw0y
MDA1MDYyMjQ0NTVaMBoxGDAWBgNVBAMTD2NvZ2l0c3R1ZGlvLmNvbTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBALJHNCJkKGCeE+ez7QUPpJwPUFj6mZbO
tKcKcwH0eqOHpWCQmD3KrjiAGepbB+76FJillJN6F0KwNNVjfdGAEnKLjBGkEsJM
6cNLH/QqOj1aLzGIoNcNswsujG2M+ZTCGbA2iDHiLheKAna4IsejmVSWjeWngerq
ekzXddjOoPuYBsQpEQhFgHVPrVLvka486VUn30OGL62E8f6X9AoF2IFL1xurZtah
/93M0lkSEVrUY9ZjqWQ7LgbXroVxO1kXeW1s5c8Obv75GFHEtgar1YKRM8PuNMR9
F/3tZcOSyiMfDRtLyHtm4D9kLeW8wdZGz7qHT5Q7tmG/9AEupUwgag7XO1M9/MZQ
iHwAu2k9uJ68Q/3oce+vrMms0uSg13cFZ7/uG0DOk7PWW3wcHXbHxroNkpavOPwQ
6GrUV+aLwsxyd57gxSQQfzWtcHu6Kj4TvnNzh2iaOyuRQJnLIS6qTQX1T6DHs7Fh
OSlCl65JbTh+7BTaPrkpnxoETICfI9jykV2nFARsnj3jBvjqW29nbgtWNI5QpoeT
ZFvnDVNMoSuQxJSU6MUMz2YtS4rH03IV5Wta2tmPBeN6PLFAkquXyqVM73g7VNMO
Zki5uNICPF6OGCpX44rKBb6VFkFE/gFRiMOIODajzGTVNRW0ZjeS5ZC54Ps3ckTK
MR0zLIFFIuFnAgMBAAGjggOlMIIDoTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFN88
4kZoL3eHj184vsMc6JbOCAEPMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wggFZBgNVHREEggFQMIIBTIIMY29naXQuc3R1
ZGlvgg5jb2dpdHN0dWRpby5iZYIPY29naXRzdHVkaW8uYml6gg9jb2dpdHN0dWRp
by5jb22CDmNvZ2l0c3R1ZGlvLmV1gg5jb2dpdHN0dWRpby5mcoIQY29naXRzdHVk
aW8uaW5mb4IPY29naXRzdHVkaW8ubmV0gg9jb2dpdHN0dWRpby5vcmeCEHd3dy5j
b2dpdC5zdHVkaW+CEnd3dy5jb2dpdHN0dWRpby5iZYITd3d3LmNvZ2l0c3R1ZGlv
LmJpeoITd3d3LmNvZ2l0c3R1ZGlvLmNvbYISd3d3LmNvZ2l0c3R1ZGlvLmV1ghJ3
d3cuY29naXRzdHVkaW8uZnKCFHd3dy5jb2dpdHN0dWRpby5pbmZvghN3d3cuY29n
aXRzdHVkaW8ubmV0ghN3d3cuY29naXRzdHVkaW8ub3JnMEwGA1UdIARFMEMwCAYG
Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu
bGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAXqdz+d9W
wOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFwHORoqwAABAMARzBFAiEA6pCf
8iBpfcbB7mJ3M9HV2Jt8GqDoq48PgY+qLdCwBaECIDoafAnp1QLqHbXj14RgN242
1f30Tt+fr3tnyaXHdA3JAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+L
kF4AAAFwHORolwAABAMARzBFAiEA7VfMPBee6xVddJvHPnNsBk4qEZYsA2qK8h+T
yEjJryECIDxCWW67TKzC9Y9N0MFLPcTX1Yn2Sxrx1avn9MMPgClUMA0GCSqGSIb3
DQEBCwUAA4IBAQCPnWTL+DBFRS/xpGuc0JRjcZqdQQijG+tAtHhe7a1Vk0Q3wguN
2Nuc9MB0h6t7oSFpIixpsUu3ImYvQDkmBPTeSrB6nWaSQJOpRm2T7TUjoxUr5GbW
ceVgf8vmACFGcBO17INF8IivkDqwXiSDx/KthJtFQjYwngT/STTusuzlF7OL6c6I
Wk2/cVKr8OMGSHZM+QnSgxeLfje16MlnTPr/pKtu2gL4RHrSvrPRt+MJHOkfAqq9
3K1gJkHBQZArUa6Vfh737PNmzR2hTW6AfX5Mk2vlvM+5dTgZS8MOqSUPwusisrSm
l/GEHPKPSTxlwrGu3PVhcLkqg8khz7I65MPZ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277568049059127078937775815490831761486378
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 22:44:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-06 22:44:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cogitstudio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727311353277114766158065629879556831410610188751031715450937567514399026412920598528527168014085228534354322339865013212077534390121635661927500381899090438221368138160837165089357214767571576122551264426924915604689599502727289429428908856693792322341405874021913038293171156703021960903229941795406155037204601132244785135337915837819012368629986049682398239248184490316881085003421811445291218268323373934672709556791747284945328504987999076841203453761172729644205148563784141352714226610570921815627651450627809192987919871299106097156576013547536756818073838168250206795508849904767089016660132173432422044084858552630536278454218491489453219904630420065603771984337642798318170395846054476075393425903363100478072861076511930737126567618394444762668675529989026953709654399182261953583175684923740626247207438439980342299428690966175721481927748550105568148431251239842153987992990638689130284391686801283154328302696463924721015083262798677215702089074207267469511161099154887724210840291936122163908185102597650803393705337031575661733299375007250061874942023970603847776663634703311974382354723543757730006703634884838748663670536582347003623737776278993948401350042327419704552870645065204931373430419059068860133076558183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df3ce246682f77878f5f38bec31ce896ce08010f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogit.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogit.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001701ce468ab0000040300473045022100ea909ff220697dc6c1ee627733d1d5d89b7c1aa0e8ab8f0f818faa2dd0b005a102203a1a7c09e9d502ea1db5e3d78460376e36d5fdf44edf9faf7b67c9a5c7740dc9007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001701ce468970000040300473045022100ed57cc3c179eeb155d749bc73e736c064e2a11962c036a8af21f93c848c9af2102203c42596ebb4cacc2f58f4dd0c14b3dc4d7d589f64b1af1d5abe7f4c30f802954
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008f9d64cbf83045452ff1a46b9cd09463719a9d4108a31beb40b4785eedad55934437c20b8dd8db9cf4c07487ab7ba12169222c69b14bb722662f40392604f4de4ab07a9d66924093a9466d93ed3523a3152be466d671e5607fcbe60021467013b5ec8345f088af903ab05e2483c7f2ad849b454236309e04ff4934eeb2ece517b38be9ce885a4dbf7152abf0e30648764cf909d283178b7e37b5e8c9674cfaffa4ab6eda02f8447ad2beb3d1b7e3091ce91f02aabddcad602641c141902b51ae957e1ef7ecf366cd1da14d6e807d7e4c936be5bccfb97538194bc30ea9250fc2eb22b2b4a697f1841cf28f493c65c2b1aedcf56170b92a83c921cfb23ae4c3d9