strnadatka.cz
Issued by R3
About this certificate
This digital certificate with serial number 03:36:7b:d1:d0:91:b0:29:61:a3:cc:18:8a:5d:87:70:f0:1e was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=strnadatka.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:36:7b:d1:d0:91:b0:29:61:a3:cc:18:8a:5d:87:70:f0:1eSerial Number (int): 279876690072820195911129471294132353822750
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 43:55:19:3c:67:8d:67:bc:36:ca:9c:c0:a8:5a:5c:eb:41:28:dd:2b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 54:08:75:55:cc:e8:58:67:eb:96:f5:b2:6d:f3:2d:61:8d:6b:51:59
Fingerprint (sha256): c2:79:e5:62:83:02:58:ca:e4:99:5a:26:68:6a:d1:e1:8e:bf:2a:64:83:cc:80:b9:fb:41:f5:31:4b:fb:a4:40
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate strnadatka.cz
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for strnadatka.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
horeckovnik.strnadatka.cz
strnadatka.cz
turistickeznamky.strnadatka.cz
turistika.strnadatka.cz
www.strnadatka.cz
strnadatka.cz
turistickeznamky.strnadatka.cz
turistika.strnadatka.cz
www.strnadatka.cz
Other certificates including the domain name strnadatka.cz
(limited to 100 certificates)
noahcallen.com
windowseat.agency
strnadatka.cz
mestaobce.strnadatka.cz
strnadatka.cz
www.minipush.com
horeckovnik.strnadatka.cz
screens.tauchschule-poseidon.ch
www.boopthegame.com
www.smart-academy.online
strnadatka.cz
mestaobce.strnadatka.cz
order.epicwings.com
www.billionfinds.com
strnadatka.cz
me.asure.me
strnadatka.cz
www.itsok.co
strnadatka.cz
www.mandalist.co
open.renaissance.app
strnadatka.cz
popularwebapps.com
www.nsfw.xenoai.com
strnadatka.cz
thefewnessofthesaved.com
strnadatka.cz
dev.maria.cloud
strnadatka.cz
www.bhumacet.in
www.bireyodaklimatematik.com
speedml.com
turistickeznamky.strnadatka.cz
windowseat.agency
strnadatka.cz
mestaobce.strnadatka.cz
strnadatka.cz
www.minipush.com
horeckovnik.strnadatka.cz
screens.tauchschule-poseidon.ch
www.boopthegame.com
www.smart-academy.online
strnadatka.cz
mestaobce.strnadatka.cz
order.epicwings.com
www.billionfinds.com
strnadatka.cz
me.asure.me
strnadatka.cz
www.itsok.co
strnadatka.cz
www.mandalist.co
open.renaissance.app
strnadatka.cz
popularwebapps.com
www.nsfw.xenoai.com
strnadatka.cz
thefewnessofthesaved.com
strnadatka.cz
dev.maria.cloud
strnadatka.cz
www.bhumacet.in
www.bireyodaklimatematik.com
speedml.com
turistickeznamky.strnadatka.cz
Certificate
The complete raw certificate details for strnadatka.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgISAzZ70dCRsClho8wYil2HcPAeMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTkyMzAyNDhaFw0yNDA3MTgyMzAyNDdaMBgxFjAUBgNVBAMT DXN0cm5hZGF0a2EuY3owggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDQ vUeyXXQDaUqlFaNuH0RzAu28WTDmUPp1WpdnMDqUxRRNZoi0vwO5mRUycXRH9sOj Umwbpx6S8r5UYu6M3Zv+5gmftV/ad8RLk4S6MA7YPjFdoSMMqBDO9DcVdFS12ist 1AJKoCXpctUw41gVF4fDVjksrVIia+Pfme58zDK1hBLDefP+Jb6tnB78F4qVtajA jxZcq7p4z88XnFTPBkcZcpVjomOT0JpEL8OTydUTCi4sXaHNv7jRSHIhH2tbJuU0 RNQT/wY3vo6xcSgEo12x5mxGve6lMQGOVIbPek/eoRTRWgj6R14vL4sp8bpsjheI BkXms+9zNJHiS8gVivFAyF/qG3HPvLLDV93ivg1IpfclVO+n5G21+dpoLqCdDc/i OWl3f8nvYSeiQuA/PZAz9pDcXsD8b67mKcCl22PF0d7KpozTE4hffdONRFUDfbEz 87SC1dGLt29JuBj/A+/gZ3BUlKbMJIsmP8e52nDeWVeJr27pRW4qLWck1mTUwlD6 l6IFFv0NvdmqZrpntWH5wVgBGRpZgVlnP1Jwd5WF/tSXhc9RASgbzOmpKdxYztZj 51AVraRFXRIRjYZmjAxhXi+aQlftM2BbhcJspuM+fcFc+aFQjf2XgmoHEHDGp/LS 9QbwYwcLQMJ6QMXiA8+btjEiZTqsSD0Icx4mf6ohPwIDAQABo4ICdzCCAnMwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBRDVRk8Z41nvDbKnMCoWlzrQSjdKzAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzB/BgNVHREEeDB2ghlob3JlY2tvdm5pay5zdHJuYWRh dGthLmN6gg1zdHJuYWRhdGthLmN6gh50dXJpc3RpY2tlem5hbWt5LnN0cm5hZGF0 a2EuY3qCF3R1cmlzdGlrYS5zdHJuYWRhdGthLmN6ghF3d3cuc3RybmFkYXRrYS5j ejATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2 AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjvjQDjYAAAQDAEcw RQIhAJsRFkIOYm2wBVwvy9WCvDikruT6nzfdu1Fztrcx5IsaAiAQVyLYXxlG5wSg u/3s/o4ZyEhu4o1Pq2dVwqk6aEbJ3gB3AN/hVuuqBa+1nA+GcY2owDJOrlbZbqf1 pWoB0cE7vlJcAAABjvjQDqoAAAQDAEgwRgIhAPcQ3PPOJip0JlSjjCJjhKFze/+f LE3t3yoE+UeWnx91AiEA+lFdOY+jXUl4wzn1PiYDGI/wxqjw7nI0ra2LV/Mqossw DQYJKoZIhvcNAQELBQADggEBAAE2VeaCYzXhwgVLp4oT07X/fJ1CPvCByq1K9kHq AZazOSTLsQCsmnLl2Y3yroEW2hnRAkGZEZCXmkQLse6CYk2eWx+ccLsWlRMKdukZ 2YBp/WZHYOPu7dFAzTzVKOfCGtodBeNptFR4dWrrC3EHN7v7aOslasrUj4wwIr9d 5DoDDoOGX3BJw4XmOc+HuEiGf9T15Io+novJwwYTJU8QNF2g6RoDuYA/Y89Xp7hk KayN8W6nwxSjBFzt5E6/JR62akKq9ax0LJ7//SQpEllO9bBspgYCXyCnN0woEYZX wz6JluDMHGeFocDvr1XT6MOWt35l3xcKJPUQTQ3vZvDfzXI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0L1Hsl10A2lKpRWjbh9E cwLtvFkw5lD6dVqXZzA6lMUUTWaItL8DuZkVMnF0R/bDo1JsG6cekvK+VGLujN2b /uYJn7Vf2nfES5OEujAO2D4xXaEjDKgQzvQ3FXRUtdorLdQCSqAl6XLVMONYFReH w1Y5LK1SImvj35nufMwytYQSw3nz/iW+rZwe/BeKlbWowI8WXKu6eM/PF5xUzwZH GXKVY6Jjk9CaRC/Dk8nVEwouLF2hzb+40UhyIR9rWyblNETUE/8GN76OsXEoBKNd seZsRr3upTEBjlSGz3pP3qEU0VoI+kdeLy+LKfG6bI4XiAZF5rPvczSR4kvIFYrx QMhf6htxz7yyw1fd4r4NSKX3JVTvp+RttfnaaC6gnQ3P4jlpd3/J72EnokLgPz2Q M/aQ3F7A/G+u5inApdtjxdHeyqaM0xOIX33TjURVA32xM/O0gtXRi7dvSbgY/wPv 4GdwVJSmzCSLJj/Hudpw3llXia9u6UVuKi1nJNZk1MJQ+peiBRb9Db3Zqma6Z7Vh +cFYARkaWYFZZz9ScHeVhf7Ul4XPUQEoG8zpqSncWM7WY+dQFa2kRV0SEY2GZowM YV4vmkJX7TNgW4XCbKbjPn3BXPmhUI39l4JqBxBwxqfy0vUG8GMHC0DCekDF4gPP m7YxImU6rEg9CHMeJn+qIT8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279876690072820195911129471294132353822750 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 23:02:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 23:02:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'strnadatka.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 851582354022956486058795129098529412359593340542611772208056690115895891811947716929540921729191235574252244481714279721498312730445466905000477518658590261618000349356949743349286658613488096377295293208581169988149263941150164097920275823551274958893021064649088394836271508126479159761372597981617556092651601683366275164614265249971593914297819044990370347930266065181237037468648987953141709447036284561817057168620634425377587035629771336437247604995759477176898772177125236908624418233811137068343425983452846619181896062705331460092583292812406558269875475629306735308035596685512263596480107567678660621970178808429083762589101426313019039222400982421788372254190226617008136786487369831829245480803194200199180599137032553838485079658474581946032428929269901337515779597845588235311952778150819745990772516863720884746286806609113348224601227234299440201754608658248081284871810713867486699891857349313043245637886655180378422062151918019135814063330218933182152066764416210403710352868191104965708394156503788519611275117477177818875836157903049847597851194058563982430569774435674334910705787708392068255989584298002035506151041740488610730395952347825796232486233280853479308873501612164409364848191062139068272603701567 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4355193c678d67bc36ca9cc0a85a5ceb4128dd2b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horeckovnik.strnadatka.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strnadatka.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turistickeznamky.strnadatka.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turistika.strnadatka.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strnadatka.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ef8d00e3600000403004730450221009b1116420e626db0055c2fcbd582bc38a4aee4fa9f37ddbb5173b6b731e48b1a0220105722d85f1946e704a0bbfdecfe8e19c8486ee28d4fab6755c2a93a6846c9de007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ef8d00eaa0000040300483046022100f710dcf3ce262a742654a38c226384a1737bff9f2c4deddf2a04f947969f1f75022100fa515d398fa35d4978c339f53e2603188ff0c6a8f0ee7234adad8b57f32aa2cb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00013655e6826335e1c2054ba78a13d3b5ff7c9d423ef081caad4af641ea0196b33924cbb100ac9a72e5d98df2ae8116da19d10241991190979a440bb1ee82624d9e5b1f9c70bb1695130a76e919d98069fd664760e3eeedd140cd3cd528e7c21ada1d05e369b45478756aeb0b710737bbfb68eb256acad48f8c3022bf5de43a030e83865f7049c385e639cf87b848867fd4f5e48a3e9e8bc9c30613254f10345da0e91a03b9803f63cf57a7b86429ac8df16ea7c314a3045cede44ebf251eb66a42aaf5ac742c9efffd242912594ef5b06ca606025f20a7374c28118657c33e8996e0cc1c6785a1c0efaf55d3e8c396b77e65df170a24f5104d0def66f0dfcd72