revitalair.com
Issued by R3
About this certificate
This digital certificate with serial number 03:de:8d:e9:3f:af:b8:11:22:2c:44:c0:8b:51:ce:1f:15:a4 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=revitalair.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:de:8d:e9:3f:af:b8:11:22:2c:44:c0:8b:51:ce:1f:15:a4Serial Number (int): 337068175496016490006632373757067850093988
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e2:76:4c:6b:a1:ca:3c:c8:56:1a:68:6a:01:26:99:69:a4:bb:fe:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 1f:9d:f0:51:b3:72:a0:3c:e2:ad:59:79:a0:72:51:5e:b2:a0:dc:4b
Fingerprint (sha256): c2:b2:4d:8a:c7:ce:94:28:37:af:60:56:e5:7f:1e:a1:59:aa:f9:21:ee:14:e9:92:09:21:35:8a:ec:19:e8:94
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate revitalair.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for revitalair.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
revitalair.com
Other certificates including the domain name revitalair.com
(limited to 100 certificates)
reakt.trevvelroute.nl
sni81113.cloudflaressl.com
cirjunior.com
sni81113.cloudflaressl.com
revitalair.com
cafe.tekom.de
sni81113.cloudflaressl.com
saml.siftai.com
easyclasses.hostdost.in
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
reakt.trevvelroute.nl
sni81113.cloudflaressl.com
donate.tfkhdyt.my.id
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
metroflex.app
sni81113.cloudflaressl.com
blowgummies.com.br
metroflex.app
magicseth.com
cliente.jusvita.com.br
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
feliciaalfieri.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
account.labolive.com
revitalair.com
windo.design
email.paidy.com
www.appboxo.com
sni81113.cloudflaressl.com
www.memcap.net
windo.design
sni81113.cloudflaressl.com
app.aclipp.com
daveypants.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
www.mettle-studio.co.uk
www.casadelvoltosanto.it
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
cliente.jusvita.com.br
aamhei.com
ronyman.com
dev.sommersause.ch
quadqode.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
test.timezonewizard.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
focus37.ru
aamhei.com
www.bjorsmakk.app
sni81113.cloudflaressl.com
portal.aerialcanvas.com
www.betonopoliravimas.lt
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
castify.jp
sni81113.cloudflaressl.com
cv.clemont.org
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
ct.gestion-traiteur.shop
washmecleanlaundry.com
phbyggtraunderhall.se
cafe.tekom.de
phbyggtraunderhall.se
sni81113.cloudflaressl.com
tvmovie.isnottv.com
en.revitalair.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
appsforce.io
sni81113.cloudflaressl.com
sni.cloudflaressl.com
revitalair.com
sni81113.cloudflaressl.com
www.employmentwale.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
camilafachin.com
dev.sommersause.ch
www.falconpoolspr.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
relookyourkitchen.speakylink.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
cirjunior.com
sni81113.cloudflaressl.com
revitalair.com
cafe.tekom.de
sni81113.cloudflaressl.com
saml.siftai.com
easyclasses.hostdost.in
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
reakt.trevvelroute.nl
sni81113.cloudflaressl.com
donate.tfkhdyt.my.id
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
metroflex.app
sni81113.cloudflaressl.com
blowgummies.com.br
metroflex.app
magicseth.com
cliente.jusvita.com.br
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
feliciaalfieri.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
account.labolive.com
revitalair.com
windo.design
email.paidy.com
www.appboxo.com
sni81113.cloudflaressl.com
www.memcap.net
windo.design
sni81113.cloudflaressl.com
app.aclipp.com
daveypants.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
www.mettle-studio.co.uk
www.casadelvoltosanto.it
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
cliente.jusvita.com.br
aamhei.com
ronyman.com
dev.sommersause.ch
quadqode.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
test.timezonewizard.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
focus37.ru
aamhei.com
www.bjorsmakk.app
sni81113.cloudflaressl.com
portal.aerialcanvas.com
www.betonopoliravimas.lt
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
castify.jp
sni81113.cloudflaressl.com
cv.clemont.org
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
ct.gestion-traiteur.shop
washmecleanlaundry.com
phbyggtraunderhall.se
cafe.tekom.de
phbyggtraunderhall.se
sni81113.cloudflaressl.com
tvmovie.isnottv.com
en.revitalair.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
appsforce.io
sni81113.cloudflaressl.com
sni.cloudflaressl.com
revitalair.com
sni81113.cloudflaressl.com
www.employmentwale.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
camilafachin.com
dev.sommersause.ch
www.falconpoolspr.com
sni81113.cloudflaressl.com
sni81113.cloudflaressl.com
relookyourkitchen.speakylink.com
sni81113.cloudflaressl.com
Certificate
The complete raw certificate details for revitalair.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgISA96N6T+vuBEiLETAi1HOHxWkMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMTExODE2MjZaFw0yNDA0MTAxODE2MjVaMBkxFzAVBgNVBAMT DnJldml0YWxhaXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA pzHVX4Hk9LAcpfp00Q06R17ZJPH1JJhk0IO8Ursg+M+jxYSyCRVJ/rQhsxxc2zFa iy2d7Pr1kkDHkOOIbJ+weVUKg+9yDoxzEsI36zqYfSVcQmzWIIBYbGYXKqDGuonc yf6bVluDg9vUUkpfRXoyjpz7K1hRggj8uwVll35G12yECG7pulHLS9DYhLrYkbRq 5ZHV/WblsdHxSyAdVr0s7LkF0Oof6H2CKj/F7+E8OATiaQVQgiPToY5uJHoJBtRG lMnQmXFQVs7W1K8NANX+QZ7va6+gfJgDlCcolhRdNBUjZmPHN83S7S74M+SdSVia 4GcPelu+l7KarB/7SwJdaQIDAQABo4ICEDCCAgwwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBTidkxroco8yFYaaGoBJplppLv+5jAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzAZBgNVHREEEjAQgg5yZXZpdGFsYWlyLmNvbTATBgNVHSAEDDAKMAgGBmeBDAEC ATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AKLiv9Ye3i8vB6DWTm03p9xlQ7DG tS6i2reK+Jpt9RfYAAABjPn0TGgAAAQDAEcwRQIhAJGvINemvXkMATop5Zp/NCOe YLM2eD9T40AjGno1LErVAiALo0eG2E9KwQiJ8PMle/dB20f1cbjrIYi3pmIo8UyX gAB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjPn0TIQAAAQD AEcwRQIgV/Ht20LCgM4u8xo47HS60AC3VmSM8/mpluLzs7u5z3gCIQD832MXfi96 /4upnieoaOIvU8SBHQicx5KOPaPvyJ+WuzANBgkqhkiG9w0BAQsFAAOCAQEAcLeA Rs1S6ak7IP9WC0VJ6+S1ateAKAhjXCzQB9NOOnSTcAdgdkNhnKPc8Qvh6CZPQbTa NMA/aFpUpdK5r46Gyq1WpBut99yOU4soE/lAlhOanX0a81U2km7AMthIjCxT3C2B GZaHvpeJNLMLqMmUmvtzEHE1OySoodqaNvi7z05Blw5+k+/CvDe8q0rZ2X3HVEep /kn5wwTQWXC+dJAS8ULzOeIbID9orMKC4MhC5jD/JWNFXgYRNFRjvU8so5Trzbm8 hgLgixx39nMw/KA4qJ8cAqZDnqMtyknRI/J6PNdFtnyRrLZdMUFgCjyjFf6pX6n+ Wio66V1BBEg3zkhC+g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzHVX4Hk9LAcpfp00Q06 R17ZJPH1JJhk0IO8Ursg+M+jxYSyCRVJ/rQhsxxc2zFaiy2d7Pr1kkDHkOOIbJ+w eVUKg+9yDoxzEsI36zqYfSVcQmzWIIBYbGYXKqDGuoncyf6bVluDg9vUUkpfRXoy jpz7K1hRggj8uwVll35G12yECG7pulHLS9DYhLrYkbRq5ZHV/WblsdHxSyAdVr0s 7LkF0Oof6H2CKj/F7+E8OATiaQVQgiPToY5uJHoJBtRGlMnQmXFQVs7W1K8NANX+ QZ7va6+gfJgDlCcolhRdNBUjZmPHN83S7S74M+SdSVia4GcPelu+l7KarB/7SwJd aQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 337068175496016490006632373757067850093988 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 18:16:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 18:16:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'revitalair.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21106370738427648364047184111589685340546262036730372725797507033591980015808015595858783852409643314226648755201006291431399349472557013294543277640250811260035274675425739904863462363583869658403936956507546740393176927402401201962968856674577866192774117481356022075610054321713381102927579673448233753291593124232181781124912141664117857182401017635701992886907790742128086949499437589178995430545873414951073949378987607574862161900529962594618731640379407905282235807716299715297371233829161023705037415029773352838338723652587314530889920730694410602912195630248465228709759903964732422431847630141404840353129 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e2764c6ba1ca3cc8561a686a01269969a4bbfee6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revitalair.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cf9f44c68000004030047304502210091af20d7a6bd790c013a29e59a7f34239e60b336783f53e340231a7a352c4ad502200ba34786d84f4ac10889f0f3257bf741db47f571b8eb2188b7a66228f14c97800076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cf9f44c840000040300473045022057f1eddb42c280ce2ef31a38ec74bad000b756648cf3f9a996e2f3b3bbb9cf78022100fcdf63177e2f7aff8ba99e27a868e22f53c4811d089cc7928e3da3efc89f96bb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0070b78046cd52e9a93b20ff560b4549ebe4b56ad7802808635c2cd007d34e3a74937007607643619ca3dcf10be1e8264f41b4da34c03f685a54a5d2b9af8e86caad56a41badf7dc8e538b2813f94096139a9d7d1af35536926ec032d8488c2c53dc2d81199687be978934b30ba8c9949afb731071353b24a8a1da9a36f8bbcf4e41970e7e93efc2bc37bcab4ad9d97dc75447a9fe49f9c304d05970be749012f142f339e21b203f68acc282e0c842e630ff2563455e0611345463bd4f2ca394ebcdb9bc8602e08b1c77f67330fca038a89f1c02a6439ea32dca49d123f27a3cd745b67c91acb65d3141600a3ca315fea95fa9fe5a2a3ae95d41044837ce4842fa