www.lamereveille.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:34:ea:24:f5:ae:10:13:b2:77:da:5a:0c:1d:d8:64:43:d1 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lamereveille.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:34:ea:24:f5:ae:10:13:b2:77:da:5a:0c:1d:d8:64:43:d1
Serial Number (int): 366455058063611392999326288751101957391313
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 22:e5:50:82:61:a9:9b:36:2d:6c:78:86:1b:a0:9c:42:e2:8d:31:b9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 82:9a:da:14:e6:b0:7b:93:e2:b4:cb:b1:d6:8e:c8:a2:0d:90:cb:8c
Fingerprint (sha256): db:c5:9b:11:65:52:b3:c0:b7:b6:b3:a1:0b:e4:9e:8f:cd:c0:61:a0:24:35:c3:bf:99:b6:96:25:04:80:ab:43

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lamereveille.ca

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lamereveille.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lamereveille.aegir3.koumbit.net
lamereveille.ca
www-lamereveille-ca.aegir3.koumbit.net
www.lamereveille.ca

Other certificates including the domain name lamereveille.ca

(limited to 100 certificates)
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca

Certificate

The complete raw certificate details for www.lamereveille.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHajCCBlKgAwIBAgISBDTqJPWuEBOyd9paDB3YZEPRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMDQyMDM5MDBaFw0x
OTAyMDIyMDM5MDBaMB4xHDAaBgNVBAMTE3d3dy5sYW1lcmV2ZWlsbGUuY2EwggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQD/GDtT5c6cAfmrLqEvB3j6ZRS0
WYkuk77DsgWHy80iuuS8yeM6cHoW5BPpwsGQJcoguII9mI2N2/3z1oBvXaC+3F3w
WTOS4XP1rgIdB8o5dMER71PC8IjvHnV4uzeQbf40On50zHJXsE/RG8ONEu2ebNJE
Ka8iTdp1aX7M66cEXeWfuDrvLmveVMP1mgqeVZv2gGbsElK/uFRUIrfylXVtKLbD
nWfKU4tWgiF+5XxZOJxOu/Mgnr7FKo/fR3TH+8Uh7vRaZChEjZFfLAeNewON1JSB
FK8e7xeJLABevD7zGyjgf/5cGVN3/Rdc+Yc+mQ6QEjCohjClscmnMGM63Cmt9SIT
ZRNDG73+Hpu1aQUANFuTvism/lbjLKkuqRGFa6/SMLsSzK8/NO+hoQA2nOK57wuT
0QS5nASZ6iQMqX6opzhgqXcZjJtbeMVMm0+ZwMpynOyaylg1T6JCLrrfzNFPB6x3
gv2zFeVtEZd4zwhueyjYKXYypvEvdEm1YwdyngWrrO2BJ/+vR4HzhR6nMeEOe9rs
6EoWDFYmRQe/9veZCaG596+zvOTHpFV8VAzKoNbjtubmRZjXquGDgEBeFkrX2oIz
s28sapKX78j0DbMfoK8axfD+2pVZ7DPJEzFZBmP5vPvVgr8F6FJH7UiRDAzIqIpB
OBz0AVgEFQRXJ2ByUQIDAQABo4IDdDCCA3AwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBQi5VCCYambNi1seIYboJxC4o0xuTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMHgGA1UdEQRxMG+CH2xhbWVyZXZlaWxs
ZS5hZWdpcjMua291bWJpdC5uZXSCD2xhbWVyZXZlaWxsZS5jYYImd3d3LWxhbWVy
ZXZlaWxsZS1jYS5hZWdpcjMua291bWJpdC5uZXSCE3d3dy5sYW1lcmV2ZWlsbGUu
Y2Ewgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYG
CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUH
AgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9u
IGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGgg
dGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNy
eXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ACk8
UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZuCqLE0AAAQDAEYwRAIg
TVxXSkl1gUZEpeaQ0WRuIP8dCKFMq2AqNE8VqrKxCawCIGHL/yCRU/DHCJHZXNPU
hcwG9XViDeFHCxF27FLK63zGAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMB
nd3x2/4AAAFm4KosugAABAMARzBFAiEAsRn4TzApYH/+g+glqpWEFymqvnsNYVXk
Mo3m66+pd0YCIEN6SpEPJqSWpZsgLO88eaV7nUsJONtNIE8ULBQO9lotMA0GCSqG
SIb3DQEBCwUAA4IBAQCcTJD6rJvHaqyQTB+zMEeJBJHekm94UPHqBMosx/f8i/3v
xzjoZcTudtJZKhzV2PeSdUixp3xtIeF+4lJb1FYv77zd9fJ9JaAPMpSDSdKgU8uX
gebLQBagRp2hU3Xjoh+MM1Rjli/WqOtFupVIhQovQg/5PNEs5aEvdxEwkpzNF+dZ
T7Cm1XqzXZ14X3eS9/pP0idbt62UFhkVIdhb/5Di0slhC4YzEnw5fvYYvCUbxjj0
bV9mfNuVAwYlssGm+0qwxqNo2H2jOL5k+wGF9Y6NF1BiqO/dqdK28aCdWQTdhdCY
qQ7VRgavohwEbgRRFDSycTL0PTA2iNUZKDsff80u
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366455058063611392999326288751101957391313
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-04 20:39:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-02 20:39:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lamereveille.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1040695397152820023618852324311586298251225260792769963798634101413882336093307363837706177739238056393594713151378664916036994931606411726494425969392891958696815869198293145359797995391814672652423888685344376325811071908518634086430505929065825809996729982323072697589935895176586213804843795248342575070787678884149595778610798604034995820952548804956940106015026341356187841654157122032975373925863952443709202074409890798669825463353806569659003131917811275019457322002523386409398859967634980286223670478396422263330501595861525510699766528497890892928299228056608202022893000801032808990126990219922393890741453440679181749334676087310067378154649544868057380158199585367352065994287222425917777000092334242119927745925348904887842042220907322599291532527377913694568973974993762697436807698552330795144994078069658531812088741779055346085975353142720948638821960296782405971526540232498426571583427974515423360553681533422605906847660824366708299298016502553593537441168540925276227056649211715962848947654047083289671290174008316974156443507333161281553875499689919884175874630750172128807696696259463466852958187456307420110705966487443428287397318440204160136727231779034238448032194104255154675806539689037608884522480209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22e5508261a99b362d6c78861ba09c42e28d31b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamereveille.aegir3.koumbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamereveille.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-lamereveille-ca.aegir3.koumbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lamereveille.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166e0aa2c4d000004030046304402204d5c574a4975814644a5e690d1646e20ff1d08a14cab602a344f15aab2b109ac022061cbff209153f0c70891d95cd3d485cc06f575620de1470b1176ec52caeb7cc6007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166e0aa2cba0000040300473045022100b119f84f3029607ffe83e825aa95841729aabe7b0d6155e4328de6ebafa977460220437a4a910f26a496a59b202cef3c79a57b9d4b0938db4d204f142c140ef65a2d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009c4c90faac9bc76aac904c1fb33047890491de926f7850f1ea04ca2cc7f7fc8bfdefc738e865c4ee76d2592a1cd5d8f7927548b1a77c6d21e17ee2525bd4562fefbcddf5f27d25a00f32948349d2a053cb9781e6cb4016a0469da15375e3a21f8c335463962fd6a8eb45ba9548850a2f420ff93cd12ce5a12f771130929ccd17e7594fb0a6d57ab35d9d785f7792f7fa4fd2275bb7ad9416191521d85bff90e2d2c9610b8633127c397ef618bc251bc638f46d5f667cdb95030625b2c1a6fb4ab0c6a368d87da338be64fb0185f58e8d175062a8efdda9d2b6f1a09d5904dd85d098a90ed54606afa21c046e04511434b27132f43d303688d519283b1f7fcd2e