blog.elpit.sk

Issued by R3

About this certificate

This digital certificate with serial number 04:1f:f7:2d:c5:c3:1e:79:1f:89:7b:d2:91:6b:40:62:10:ef was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=blog.elpit.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:1f:f7:2d:c5:c3:1e:79:1f:89:7b:d2:91:6b:40:62:10:ef
Serial Number (int): 359326454081001201830619655388039791907055
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: af:e1:64:17:6a:8a:b1:82:55:12:82:1d:df:09:34:75:b2:02:05:43
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:8e:5b:42:45:ff:a5:af:1f:69:c0:08:7c:7b:59:52:ba:63:c6:b6
Fingerprint (sha256): d7:7f:64:a7:b9:ee:62:4c:ca:49:cf:21:72:15:e1:f4:6b:ee:cb:e2:6f:d7:ba:78:52:4d:03:d0:64:2f:a8:c0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate blog.elpit.sk

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.elpit.sk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.elpit.sk
blog.elpit.sk
cpanel.elpit.sk
cpcalendars.elpit.sk
cpcontacts.elpit.sk
data.elpit.sk
elpit.sk
mail.elpit.sk
mhd.elpit.sk
webdisk.elpit.sk
webmail.elpit.sk
whm.elpit.sk
www.blog.elpit.sk
www.data.elpit.sk
www.elpit.sk
www.mhd.elpit.sk

Other certificates including the domain name elpit.sk

(limited to 100 certificates)
www.bride-cams.com
breu.io
www.rudycatwell.com
racedeck.fitness
tctvsoctrang.xbot.com.vn
download.active-framework.com
nutrition-origin.me2-stg.gmal.app
alpha.sunergi.app
games.elpit.sk
www.rudycatwell.com
elpit.sk
elpit.sk
motu.pursuitofequilibrium.art
matabi-tech.com
www.cakephp.elpit.sk
bignmore.com
ezleidiomas.com
myhw.elpit.sk
georgi.app
eous.spillpdf.com
share.w.ly
matabi-tech.com
www.votchstaging.ga
launchpad.animalsink.com
www.foxpaint.se
www.elpit.sk
www.blog.elpit.sk
www.anjawollan.com
fabian-gronert.de
realbudget.litapplications.com
www.ayudandodesdecasa.mx
elpit.sk
www.theatomic.space
diskover.app
instanteach.com
www.quettabytes.ai
coast.ai
mailgenx.com
firebase.kedevelopers.com
www.ontherocks.ml
binmahfouz.co
findme.movie
blog.elpit.sk
commonity.me
www.ontherocks.ml
www.ed-spi.com
www.drapriscillaandrade.com.br
www.revendique.com
appblaze.io
dashboard.start.africa
www.antonborri.es
my-hw.elpit.sk
contriv.in
sharefull.biz
www.thechurchil-group.ca
www.vinedevelop.com

Certificate

The complete raw certificate details for blog.elpit.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgISBB/3LcXDHnkfiXvSkWtAYhDvMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MjkwMDIyNDdaFw0yNDA3MjgwMDIyNDZaMBgxFjAUBgNVBAMT
DWJsb2cuZWxwaXQuc2swggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT
k5HR0I5iAelXCHnoQCLF5/enIy2esOyrmCD/ic6GystKy1rzzdfiIZAikItKfZNE
zjLKf23zOWvMUfNQLKbIDTUkgRbqZ73GtkCPMfPmf/h9wxoRdFy/geSG24X110/j
kfvSJKYB1RiDwfprf9t/GGM9SfpIrBXNXIUwLUOZyr3Rbcy1kfCfi/yH4D4OZkH8
yUwc2jSlKZvCS2/+eJa0NqV23hFEAHPSoY63znDCs1XIRyyrlWWk/iLlGH54oyCb
uLDMpFqkSvZfqzMHNH5GzRTfh2iU2j71COv/IFUoiF+xgtd/rDhmZQrlF7jhuP77
iXB5V0K3IUHluykbDcZLAgMBAAGjggMXMIIDEzAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFK/hZBdqirGCVRKCHd8JNHWyAgVDMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MIIBHQYDVR0RBIIBFDCCARCCFWF1dG9kaXNjb3Zlci5lbHBpdC5za4INYmxvZy5l
bHBpdC5za4IPY3BhbmVsLmVscGl0LnNrghRjcGNhbGVuZGFycy5lbHBpdC5za4IT
Y3Bjb250YWN0cy5lbHBpdC5za4INZGF0YS5lbHBpdC5za4IIZWxwaXQuc2uCDW1h
aWwuZWxwaXQuc2uCDG1oZC5lbHBpdC5za4IQd2ViZGlzay5lbHBpdC5za4IQd2Vi
bWFpbC5lbHBpdC5za4IMd2htLmVscGl0LnNrghF3d3cuYmxvZy5lbHBpdC5za4IR
d3d3LmRhdGEuZWxwaXQuc2uCDHd3dy5lbHBpdC5za4IQd3d3Lm1oZC5lbHBpdC5z
azATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2
AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjydyht0AAAQDAEcw
RQIhAONVMwP1eJwzo+2e9uUe8G5ajd9WGpnc1QHwYhefb/xgAiBReuTG0lCpas9R
RR/O/EIUf8LKp1l//OyKSMgJ5oV8pwB3AN/hVuuqBa+1nA+GcY2owDJOrlbZbqf1
pWoB0cE7vlJcAAABjydyh40AAAQDAEgwRgIhAKmq0BMMCY0a3o5SXLe7yZmp5jFg
71foZfE/ZPtUJTT2AiEAjOnlbmcdpttLfxK6/V/Hlt4uH/JtiFT0UgLOifzdNNkw
DQYJKoZIhvcNAQELBQADggEBAG4Xu4MZ1lIdNq/ANcKHkqqOUl/bKm1D7Y/S7pOM
WjVce4cVRdIxokozR+ZFYGAbzfIMJOZGSSrUs6I8zUJ9uyT8rkWcLUzr3USrIjWe
LvK4slllPGttwemJZiy+L7YIih5OhQhPYby3wpdrPFYTz0NzrvudpeuMf79Se1Sg
cthqaF+zEh1kG9vj6FFL70qLrNqpZtKiLVtLcn5zRudABN4yqdM3/2mv3Zz4bE16
vAa9v5C+BhfVBzO1J5acJ3cDFWGi6+haIR2nfKeFoNsbpQu7/9KBzCfjye1jO1rm
/rMHoiF0dXlUBM2PU43RxF0y6pJUYv1PUr+zx36BCrHCpRk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05OR0dCOYgHpVwh56EAi
xef3pyMtnrDsq5gg/4nOhsrLSsta883X4iGQIpCLSn2TRM4yyn9t8zlrzFHzUCym
yA01JIEW6me9xrZAjzHz5n/4fcMaEXRcv4HkhtuF9ddP45H70iSmAdUYg8H6a3/b
fxhjPUn6SKwVzVyFMC1Dmcq90W3MtZHwn4v8h+A+DmZB/MlMHNo0pSmbwktv/niW
tDaldt4RRABz0qGOt85wwrNVyEcsq5VlpP4i5Rh+eKMgm7iwzKRapEr2X6szBzR+
Rs0U34dolNo+9Qjr/yBVKIhfsYLXf6w4ZmUK5Re44bj++4lweVdCtyFB5bspGw3G
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359326454081001201830619655388039791907055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 00:22:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-28 00:22:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.elpit.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26709051633577108113290215873142454620315901205481795036152515403510789562653862640377197636730910620095598148389790118655146510329853641490185814715703904584214861311135881381158511794693227089999368837974213427645859088213261845588908229791873592167295456758267759286529066000976021113072628361564632351924802206404073798879899260997797712594779014033278382733296592951972241925371042688580114758767320139541441834200517044366930586281167997742568684337761456366554312700875257231989387223042973672214769430646007247782171243162403058999603391313813301017790798109583872662347083493001273978714700804507623291209291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afe164176a8ab1825512821ddf093475b2020543
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.elpit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.elpit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.elpit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.elpit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.elpit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.elpit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.elpit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhd.elpit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.elpit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.elpit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.elpit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blog.elpit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.data.elpit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elpit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mhd.elpit.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f277286dd0000040300473045022100e3553303f5789c33a3ed9ef6e51ef06e5a8ddf561a99dcd501f062179f6ffc600220517ae4c6d250a96acf51451fcefc42147fc2caa7597ffcec8a48c809e6857ca7007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f2772878d0000040300483046022100a9aad0130c098d1ade8e525cb7bbc999a9e63160ef57e865f13f64fb542534f60221008ce9e56e671da6db4b7f12bafd5fc796de2e1ff26d8854f45202ce89fcdd34d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006e17bb8319d6521d36afc035c28792aa8e525fdb2a6d43ed8fd2ee938c5a355c7b871545d231a24a3347e64560601bcdf20c24e646492ad4b3a23ccd427dbb24fcae459c2d4cebdd44ab22359e2ef2b8b259653c6b6dc1e989662cbe2fb6088a1e4e85084f61bcb7c2976b3c5613cf4373aefb9da5eb8c7fbf527b54a072d86a685fb3121d641bdbe3e8514bef4a8bacdaa966d2a22d5b4b727e7346e74004de32a9d337ff69afdd9cf86c4d7abc06bdbf90be0617d50733b527969c2777031561a2ebe85a211da77ca785a0db1ba50bbbffd281cc27e3c9ed633b5ae6feb307a2217475795404cd8f538dd1c45d32ea925462fd4f52bfb3c77e810ab1c2a519