saltstoneceramics.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fa:01:7e:e8:25:4d:fd:86:4d:cc:01:49:7b:87:3a:c2:3c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=saltstoneceramics.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:01:7e:e8:25:4d:fd:86:4d:cc:01:49:7b:87:3a:c2:3c
Serial Number (int): 346409437691389923008305582042995941360188
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:f7:87:a6:36:52:50:c5:02:41:45:b9:a7:d1:85:8d:60:2c:d3:f2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:b4:d5:26:0d:5d:cc:ef:54:dc:50:55:96:04:56:79:59:ef:63:c3
Fingerprint (sha256): d7:30:f9:e2:68:d5:02:12:8e:af:c2:7d:a3:d4:c5:fc:5a:1b:76:13:e7:29:0d:16:f1:10:17:3d:7a:1f:6c:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate saltstoneceramics.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saltstoneceramics.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

saltstoneceramics.com

Other certificates including the domain name saltstoneceramics.com

(limited to 100 certificates)
www.saltstoneceramics.com
www.saltstoneceramics.com
www.saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
www.saltstoneceramics.com
www.saltstoneceramics.com
saltstoneceramics.com
www.saltstoneceramics.com
www.saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
www.saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
www.saltstoneceramics.com
www.saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
www.saltstoneceramics.com
www.saltstoneceramics.com
www.saltstoneceramics.com
saltstoneceramics.com
www.saltstoneceramics.com
www.saltstoneceramics.com
saltstoneceramics.com
www.saltstoneceramics.com
www.saltstoneceramics.com
www.saltstoneceramics.com
www.saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
www.saltstoneceramics.com
www.saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
www.saltstoneceramics.com
saltstoneceramics.com
www.saltstoneceramics.com
www.saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
www.saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
saltstoneceramics.com
www.saltstoneceramics.com
www.saltstoneceramics.com
saltstoneceramics.com
www.saltstoneceramics.com
www.saltstoneceramics.com
www.saltstoneceramics.com
saltstoneceramics.com
www.saltstoneceramics.com

Certificate

The complete raw certificate details for saltstoneceramics.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgISA/oBfuglTf2GTcwBSXuHOsI8MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MDQxOTI5NTNaFw0x
ODEyMDMxOTI5NTNaMCAxHjAcBgNVBAMTFXNhbHRzdG9uZWNlcmFtaWNzLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAP/RJ32bJhSdZyGoTK4hHlwS
Vcbi74AIVG8Ic9YRrARfl5g4oE3spaGuiSUNYz1rm20rT9EHrQ4n/85MoPIvzCX3
1KSyPlPtGXAc7R1sDjHnFDn7Z0dJrvId3fiBXcLH7Hj3OSgIQD24rzZNtlqzwdUQ
SAej9PwySGSb5I0qkMM/8PFwKuKEARHjlKYmfYPe6C0LEP3ZhAV5uyRWB3doY5uo
PQQrD2e/yOiTvJ3qsnXCaSDgibBb5ye73FbsIJIk4+uV3gYOPhGiBciboG47VE9l
Nbmgxr6yqWPijYuCEDU/AqcyEZyaG24k+vE3ipkTjHys9/y+gBStvZTycEi8UVcC
AwEAAaOCAxwwggMYMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUtveHpjZSUMUCQUW5
p9GFjWAs0/IwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzAgBgNVHREEGTAXghVzYWx0c3RvbmVjZXJhbWljcy5jb20wgf4G
A1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUF
BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4M
gZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJl
bHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENl
cnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9y
Zy9yZXBvc2l0b3J5LzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AKRQEmkFWhVU
XmIRqze8ED9irlV2pF5LFxRFPhsiEGolAAABZaZG99EAAAQDAEYwRAIgKDZUMpVt
Grm3FpfQ3uhJyyWc+vi1rRfG0aeaLVuTw0wCIGmNFyhYy5+tteH724bjP+DL7Y/3
e/dkIFET/wc1xyoSAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwA
AAFlpkb5qAAABAMARzBFAiEA+wwbWPAJYE0shpGpfONYJ57n2qqRcd785Te03GxN
40oCIHhu6pXJxxE7v2c+uM0Ng43E2wjKKlBviqTeonbuJOXdMA0GCSqGSIb3DQEB
CwUAA4IBAQBtNpiqNr+3JMr+NRr6jjwMUzZPgUZ0glEcAHrqtSV4oNv8SD1GQmJO
dX3zgoj7F56Yr2hkv6t2QrcVN745BMq+K2oAAzUTerccUkeJLme+lovvKVeWFpg0
/2AcWWvH6PaVc8vlDkh4cUOirD0k3jHNXqehUWu2OBmdBaVrVG9PzUp+RANZ049Z
gw5QDmC1Pvo2i09aMkSBaeIA+gtOg7nLfpv077SRFzVFM9asEjwYQWRiSoTkA8lk
6wMTnizj5TsV28aN61PVvK7v7rGq8QoyvEucfqXhjwWIDGUbB92FVF0VReC0KIIi
GTidPyyqNVwwD7dp40GMn0p1kg1T23lP
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/9EnfZsmFJ1nIahMriEe
XBJVxuLvgAhUbwhz1hGsBF+XmDigTeyloa6JJQ1jPWubbStP0QetDif/zkyg8i/M
JffUpLI+U+0ZcBztHWwOMecUOftnR0mu8h3d+IFdwsfsePc5KAhAPbivNk22WrPB
1RBIB6P0/DJIZJvkjSqQwz/w8XAq4oQBEeOUpiZ9g97oLQsQ/dmEBXm7JFYHd2hj
m6g9BCsPZ7/I6JO8neqydcJpIOCJsFvnJ7vcVuwgkiTj65XeBg4+EaIFyJugbjtU
T2U1uaDGvrKpY+KNi4IQNT8CpzIRnJobbiT68TeKmROMfKz3/L6AFK29lPJwSLxR
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346409437691389923008305582042995941360188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-04 19:29:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 19:29:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saltstoneceramics.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32293905576120481585973649966074027672209358615526511526645283760484917304262537514270827411702329702653788076794712637832872825188599259905885866903519297648458689477648035811330987505979043640351719823942494141455727977922043981509595887054472188829485746580036004706256243126468816067354747046618257877235617782698001603114604391117922808844208878045006601934790801348746520364210472322386649404865840815375297610367996035240905671093508861733947411009309941807619686977080570682982120020605817302780472425391753842279839847028047134886613904527784888310893112576421774363887482478154774870964423881071168595972439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6f787a6365250c5024145b9a7d1858d602cd3f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltstoneceramics.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165a646f7d10000040300463044022028365432956d1ab9b71697d0dee849cb259cfaf8b5ad17c6d1a79a2d5b93c34c0220698d172858cb9fadb5e1fbdb86e33fe0cbed8ff77bf764205113ff0735c72a120076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000165a646f9a80000040300473045022100fb0c1b58f009604d2c8691a97ce358279ee7daaa9171defce537b4dc6c4de34a0220786eea95c9c7113bbf673eb8cd0d838dc4db08ca2a506f8aa4dea276ee24e5dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006d3698aa36bfb724cafe351afa8e3c0c53364f81467482511c007aeab52578a0dbfc483d4642624e757df38288fb179e98af6864bfab7642b71537be3904cabe2b6a000335137ab71c5247892e67be968bef295796169834ff601c596bc7e8f69573cbe50e48787143a2ac3d24de31cd5ea7a1516bb638199d05a56b546f4fcd4a7e440359d38f59830e500e60b53efa368b4f5a32448169e200fa0b4e83b9cb7e9bf4efb49117354533d6ac123c184164624a84e403c964eb03139e2ce3e53b15dbc68deb53d5bcaeefeeb1aaf10a32bc4b9c7ea5e18f05880c651b07dd85545d1545e0b428822219389d3f2caa355c300fb769e3418c9f4a75920d53db794f