kentucky.dev
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:6b:55:29:5b:a5:4e:2a:f9:bb:60:4f:cf:b5:64:a4:c4:88 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kentucky.dev
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6b:55:29:5b:a5:4e:2a:f9:bb:60:4f:cf:b5:64:a4:c4:88Serial Number (int): 297860270178430185839714223235445131887752
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6d:28:f1:34:9c:18:2a:52:5e:1f:b2:9d:60:ea:9d:75:24:0d:54:b2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6e:0d:21:0a:46:d6:82:40:af:02:21:27:4a:45:e5:bf:8d:65:92:52
Fingerprint (sha256): e8:c7:ba:3e:55:06:6c:10:de:1a:5c:8c:d7:66:e1:b3:24:d7:ae:79:92:b3:94:19:44:d7:3e:78:26:9c:4a:b2
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate kentucky.dev
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kentucky.dev
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kentucky.dev
www.kentucky.dev
www.kentucky.dev
Other certificates including the domain name kentucky.dev
(limited to 100 certificates)
www.goalyapps.com
www.kentucky.dev
www.enpassantlabs.com
kentucky.dev
webreports.popupbusinessschool.co.uk
app.ubcbiztech.com
www.vercatalogo.com
redige.lapieza.io
canvasapplications.com
irishradiointernational.com
getsway.app
www.rydan.dev
www.cdpg.lat
app.ubcbiztech.com
saintmichaelschoolhn.com
jerry.my
www.bankerwealth.com
www.bxwebexperience.com
billett.no
www.khriiistosarcana.app
worldagainstrape.com
webreports.popupbusinessschool.co.uk
melodysorasi-wedding.com
bayadnow.com
www.goalyapps.com
www.kentucky.dev
kentucky.dev
asknamer.com
www.trivia.adure.me
ask.hellopro.winc.ne.jp
admin-jobs4neets.formprof.ro
kentucky.dev
getsway.app
td.parkalot.io
foodkrane.com
www.kentucky.dev
www.enpassantlabs.com
kentucky.dev
webreports.popupbusinessschool.co.uk
app.ubcbiztech.com
www.vercatalogo.com
redige.lapieza.io
canvasapplications.com
irishradiointernational.com
getsway.app
www.rydan.dev
www.cdpg.lat
app.ubcbiztech.com
saintmichaelschoolhn.com
jerry.my
www.bankerwealth.com
www.bxwebexperience.com
billett.no
www.khriiistosarcana.app
worldagainstrape.com
webreports.popupbusinessschool.co.uk
melodysorasi-wedding.com
bayadnow.com
www.goalyapps.com
www.kentucky.dev
kentucky.dev
asknamer.com
www.trivia.adure.me
ask.hellopro.winc.ne.jp
admin-jobs4neets.formprof.ro
kentucky.dev
getsway.app
td.parkalot.io
foodkrane.com
Certificate
The complete raw certificate details for kentucky.dev in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgISA2tVKVulTir5u2BPz7VkpMSIMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTkyMTU2NTVaFw0x OTEyMTgyMTU2NTVaMBcxFTATBgNVBAMTDGtlbnR1Y2t5LmRldjCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAMYq/j4XK0cNTXYrMJZCTKHf7ZG9CQXD4epk Os4U0cUWxbH+pKlxTS6tKF4e5ds72k7PLdO3zu4UoavfJSFSiPaLZ5pqILYjtukh 8frJVQNv3ozvrAJc+0PyL9qRdsm6+YdH/iFwxEx+fcf4K+rnx6kLLf5C0/OlXZY8 dpXLAexzF8PosagNgo/rreiBx4SrA4Ko6JZ17NK4uZFzUcrbXISE14lrwdCpSrey juQRwH7XAEcDj3GI/nErO/1K9PK7yYx0mqhKNixFi7NQs32gdQai1Z9jPO4wtD61 fpH/tUXQw1CLH5U/UUyOOfajpFiDDWuIQEIfP/xYoICgQK7s0N+Hhv5ghsUNnVUm PVS6v2PzEHGH/AX4NYh8elFyitb/hnVI8cObEl6vJ0uWHquO6g9chKQz23Cmzy2t trAnJnzlMcTxXrrlQTz9KRVxc9+FOqSof8Zy8FUl8ER7HSGJmhY0kRHaTrP5i2RP 45VTR9/wbeX/w+jRaaILcYGkEW+uWpY4Ag6jyW18JUZbMeBfNfas1eDskZKnnwos dFnAJiMUZlUPYSXarLvizvkEJ99tjzjD2YFbEj4hlzmjOw8aRz2bg1kmn56vMy36 GPBBg/m/cGRkfC6So0q88JxR9RVFUL0B0tminMrjRLCg8Qhgty58muANDvbdxLPf NKW2ATsHAgMBAAGjggJxMIICbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFG0o8TSc GCpSXh+ynWDqnXUkDVSyMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIMa2VudHVja3kuZGV2ghB3d3cu a2VudHVja3kuZGV2MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYK KwYBBAHWeQIEAgSB8wSB8ADuAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV5 5hB7zFYAAAFtS74lkgAABAMARjBEAiAm4Bxj4OdCigZe4nrgOhN50zAJa9QzlcNH huioJNauoQIgEm6RtFB8xs6KOhqgUVfWVdA5Q7kWbPcheACwZxBfcVQAdQBj8tvN 6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAW1LviemAAAEAwBGMEQCIFvH PV+KfIf8IQHrVsdLYdbzEcXHiZlJw3GE7qsBzjRsAiAQGOQlBPV1hRmq1YWOyXyk Fkrc4Cbf6W52Z4t9zmKBqjANBgkqhkiG9w0BAQsFAAOCAQEAV5SIBgBLDAzH3sn+ aITWOD0QuS25DWdxvstSnQI7NEL9saB33A8H3VuvCAEp+nf4pkvZxRF1gAUHO1z9 I/712zqD3JKvRpiG+b7a/oMHTQTvwEHOBgGym1ttLL/nAToN6MURMrqYlLcchEqI 06ewQwqRQQOWzF4/iZnZabREQu3eBhtAGs8F2dCHWwj+y2GqLEdDGLXo8nvz9exq H+bPMVAAU2q1Pug3ZohkP142d0XrJEsz7DUyi5QwqdDj3ikp+yXkzWOzaIL0dkD9 KZq780LVzVK5yNEZzRjm0+YnyHfxHz9Yop9qGz7ff5rX7Xq5J7AR3jA2cy7xY5Xs qRbegw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxir+PhcrRw1NdiswlkJM od/tkb0JBcPh6mQ6zhTRxRbFsf6kqXFNLq0oXh7l2zvaTs8t07fO7hShq98lIVKI 9otnmmogtiO26SHx+slVA2/ejO+sAlz7Q/Iv2pF2ybr5h0f+IXDETH59x/gr6ufH qQst/kLT86Vdljx2lcsB7HMXw+ixqA2Cj+ut6IHHhKsDgqjolnXs0ri5kXNRyttc hITXiWvB0KlKt7KO5BHAftcARwOPcYj+cSs7/Ur08rvJjHSaqEo2LEWLs1CzfaB1 BqLVn2M87jC0PrV+kf+1RdDDUIsflT9RTI459qOkWIMNa4hAQh8//FiggKBAruzQ 34eG/mCGxQ2dVSY9VLq/Y/MQcYf8Bfg1iHx6UXKK1v+GdUjxw5sSXq8nS5Yeq47q D1yEpDPbcKbPLa22sCcmfOUxxPFeuuVBPP0pFXFz34U6pKh/xnLwVSXwRHsdIYma FjSREdpOs/mLZE/jlVNH3/Bt5f/D6NFpogtxgaQRb65aljgCDqPJbXwlRlsx4F81 9qzV4OyRkqefCix0WcAmIxRmVQ9hJdqsu+LO+QQn322POMPZgVsSPiGXOaM7DxpH PZuDWSafnq8zLfoY8EGD+b9wZGR8LpKjSrzwnFH1FUVQvQHS2aKcyuNEsKDxCGC3 Lnya4A0O9t3Es980pbYBOwcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 297860270178430185839714223235445131887752 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 21:56:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 21:56:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kentucky.dev' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808454668779961928823283381580096249653646781611440488101045668674539447053429948461204278643840997741707584917424892961295780366286471700797840472905847092889483067155210286761768687390672664947657130284356021267529922184032975296669381937569996930886844252894091004188255467180094841357812441444561848792133251134618137724250374669994361940811581329997893002962293492774400338670712354709230110343671048740680538196786786826844725758390199887721454558112112204709840044943123859585194460447806931054888458642147327006651006744883332432323234646138639591998244697255522565533458644735023219117620574049772328921000512525164203049900872564548417741709517208444692294379118760291447830374952964239471914796904018788887471302190781460080622863145480974277238165288114687367206398822507036161071038292390694366094393550891437200417340061156408096834273222793744122114505663247397846832542973905086058099813319785763687320841111136782463842636172310112868539151902217501027777895605975657237121592880106461403616911792965781964357054873034182436194118228346079479099931705842077655233398204563179998320196647416583208750304017427383212010462222420652783344064626136115075162513294008480408522347585045645878670925295360140364819848051463 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6d28f1349c182a525e1fb29d60ea9d75240d54b2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentucky.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kentucky.dev' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d4bbe25920000040300463044022026e01c63e0e7428a065ee27ae03a1379d330096bd43395c34786e8a824d6aea10220126e91b4507cc6ce8a3a1aa05157d655d03943b9166cf7217800b067105f715400750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d4bbe27a6000004030046304402205bc73d5f8a7c87fc2101eb56c74b61d6f311c5c7899949c37184eeab01ce346c02201018e42504f5758519aad5858ec97ca4164adce026dfe96e76678b7dce6281aa . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0057948806004b0c0cc7dec9fe6884d6383d10b92db90d6771becb529d023b3442fdb1a077dc0f07dd5baf080129fa77f8a64bd9c511758005073b5cfd23fef5db3a83dc92af469886f9bedafe83074d04efc041ce0601b29b5b6d2cbfe7013a0de8c51132ba9894b71c844a88d3a7b0430a91410396cc5e3f8999d969b44442edde061b401acf05d9d0875b08fecb61aa2c474318b5e8f27bf3f5ec6a1fe6cf315000536ab53ee8376688643f5e367745eb244b33ec35328b9430a9d0e3de2929fb25e4cd63b36882f47640fd299abbf342d5cd52b9c8d119cd18e6d3e627c877f11f3f58a29f6a1b3edf7f9ad7ed7ab927b011de3036732ef16395eca916de83