ulr.ubiquitypress.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c2:f8:92:d4:55:4f:df:df:31:a9:56:30:df:ae:1f:92:0d was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ulr.ubiquitypress.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:f8:92:d4:55:4f:df:df:31:a9:56:30:df:ae:1f:92:0d
Serial Number (int): 327682047902868756821184358981298651369997
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2e:bc:67:88:08:a3:3e:32:a8:99:29:29:f2:53:4f:7d:fd:fc:d6:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:5e:82:be:f0:84:d4:89:5f:e4:37:f1:56:4e:37:9e:75:64:16:88
Fingerprint (sha256): f3:f3:02:de:32:e3:b2:f8:45:43:f1:52:af:3b:92:85:b4:fb:32:86:71:e9:2d:31:a1:26:16:a1:f4:1c:64:49

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ulr.ubiquitypress.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ulr.ubiquitypress.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ulr.ubiquitypress.com
utrechtlawreview.org
www.utrechtlawreview.org

Other certificates including the domain name ubiquitypress.com

(limited to 100 certificates)
working-papers.research.uoc.edu
cie.ubiquitypress.com
pjsl.ubiquitypress.com
jrcs.ubiquitypress.com
sjms.ubiquitypress.com
journalofmore.org
aa.ubiquitypress.com
fou.ubiquitypress.com
ijosts.ubiquitypress.com
www.psychologicabelgica.com
journal-labphon.org
luminos.ubiquitypress.com
www.sjwop.com
besl.sljol.info
anthurium.miami.edu
www.worldwidewastejournal.com
www.psychologicabelgica.com
www.culturalscience.org
ijc.ubiquitypress.com
jeps.ubiquitypress.com
besl.sljol.info
ijic.ubiquitypress.com
conference.codata.org
nsbmjm.sljol.info
jumr.ubiquitypress.com
www.sjms.nu
aa.ubiquitypress.com
www.sjms.nu
history-culture-modernity.org
gaj.ubiquitypress.com
joshhm.sljol.info
ubiquitypress.com
cg.ubiquitypress.com
www.utrechtlawreview.org
prodtest.ubiquitypress.com
jpl.ubiquitypress.com
dze.ubiquitypress.com
www.ubiquitypress.com
medenv.ubiquitypress.com
sljfa.sljol.info
www.comicsgrid.com
demo.ubiquitypress.com
coll.ubiquitypress.com
ajar.ubiquitypress.com
www.ssas-yearbook.com
entsportslawjournal.com
gaj.ubiquitypress.com
os.ubiquitypress.com
nsbmjm.sljol.info
healthpsychologybulletin.com
journal-labphon.org
wwwj.ubiquitypress.com
ijic.ubiquitypress.com
www.culturalscience.org
www.gewina-studium.nl
egems.ubiquitypress.com
www.ubiquityproceedings.com
www.19.bbk.ac.uk
datascience.codata.org
llpp.ubiquitypress.com
gsa.ubiquitypress.com
ajar.ubiquitypress.com
thecommonsjournal.org
journalofmore.org
www.psychologicabelgica.com
jpl.ubiquitypress.com
slvj.sljol.info
transactions.ismir.net
conference.codata.org
healthpsychologybulletin.com
history-culture-modernity.org
www.designsforlearning.nu
art.ubiquitypress.com
sim.openlibhums.org
ejmcm.ubiquitypress.com
sljm.sljol.info
blog.ubiquitypress.com
uksgs.ubiquitypress.com
junction.ubiquitypress.com
openhealthdata.metajnl.com
sta.ubiquitypress.com
ijosts.ubiquitypress.com
nsbmjm.sljol.info
www.dictatorships-democracies.com
www.worldwidewastejournal.com
thecommonsjournal.org
bst.ubiquitypress.com
rg.ubiquitypress.com
amsp.ubiquitypress.com
cjsbs.sljol.info
vtuhr.ubiquitypress.com
rnef.ubiquitypress.com
paahjournal.com
gaj.ubiquitypress.com
jccc.ubiquitypress.com
srjed.ubiquitypress.com
dscn.ubiquitypress.com
meliora.soton.ac.uk
entsportslawjournal.com
bhumi.ubiquitypress.com

Certificate

The complete raw certificate details for ulr.ubiquitypress.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgISA8L4ktRVT9/fMalWMN+uH5INMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMDIwNzU0MThaFw0x
OTA0MDIwNzU0MThaMCAxHjAcBgNVBAMTFXVsci51YmlxdWl0eXByZXNzLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKucKtrA10EqTLUJ5v9/u0vP
rZlIqek+ASpY1cgEPVwJbr4SaCpAWkHji+wwpyAjLzmR8qT/egnbrLO4WR5pOJN6
c7i0dkykI8XoelD3xpHT5F5Ch3IDXj1uoSfRzGhWL6UCtItCKtUMCFOXWRIbMvIT
AvzDWwyzb1Hd6KyyhlI82THTd6/XR+AtQk3VRkjHivo6ky1mUnTVc1evIDuEG0je
xBybygnBLZGlKBd20DM2f3aBKFFCsXA5Nxgr5C9+KvoULZLxF2aMXoqEvWCxYl8F
aNf1h8OP0sy881V9MpkY6eiwMWu5qWnGb/FiBgg9PxS7pqi2ckDEv65aHc7UWfcC
AwEAAaOCApkwggKVMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQULrxniAijPjKomSkp
8lNPff381mcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzBQBgNVHREESTBHghV1bHIudWJpcXVpdHlwcmVzcy5jb22CFHV0
cmVjaHRsYXdyZXZpZXcub3Jnghh3d3cudXRyZWNodGxhd3Jldmlldy5vcmcwTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx
AO8AdQDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWgNxUXjAAAE
AwBGMEQCIE8zKEWwOTjcsEJ8SeynaemvXn60c+U3UYY2IALl2B7eAiBW/qsDn7ME
dcA0mmqy9dMm333c01SGf49qS2prQ6x5WgB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6
KXLcpMMM9OVFR/R4AAABaA3FRjgAAAQDAEcwRQIgcac2RykdLqtl9zV0ERxtll4S
FMjXYE0Grt3kWKbPkysCIQCVlTy4bVCfrD7oClZyKGpdQcbuav8gjEi7noAGt5HY
xTANBgkqhkiG9w0BAQsFAAOCAQEAQu9QBPz5trNQITQgAoe+rjyW5UJ6npOUR9in
/xRWr68PIIuPF5m0dv64nZTgt4HSXAECHmth0Ag7zdUEzSnnulvAYu35xhbyJdvE
DuWWHTAgPC9d6dXKtD/3Rzw4p7o0OR6UwIUy1LbNZ50fYu3O2VfX3H3xDsh/ozvp
ecjYwq2EbTbFGvhS9e+1N+RG8YhjOQ6RGqTGv8xj1LHqlko0ZQ4ywMMGrWKEqChF
qnqlLlOmgrP/Zqyof4fmcJiCdpM4DevdZxXmKxDsOMWlgXNw2YKsP8zLVbNzeLop
ZgHP4uFmmX/xxFzqOIgchyCpRXNbTIrypA9rHEyKAKDA80YKJg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5wq2sDXQSpMtQnm/3+7
S8+tmUip6T4BKljVyAQ9XAluvhJoKkBaQeOL7DCnICMvOZHypP96Cduss7hZHmk4
k3pzuLR2TKQjxeh6UPfGkdPkXkKHcgNePW6hJ9HMaFYvpQK0i0Iq1QwIU5dZEhsy
8hMC/MNbDLNvUd3orLKGUjzZMdN3r9dH4C1CTdVGSMeK+jqTLWZSdNVzV68gO4Qb
SN7EHJvKCcEtkaUoF3bQMzZ/doEoUUKxcDk3GCvkL34q+hQtkvEXZoxeioS9YLFi
XwVo1/WHw4/SzLzzVX0ymRjp6LAxa7mpacZv8WIGCD0/FLumqLZyQMS/rlodztRZ
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327682047902868756821184358981298651369997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-02 07:54:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-02 07:54:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ulr.ubiquitypress.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21663759164503612716483961372668095030656757160344388631595893002793826464239385275040478058301146073255742303488405103177713022746728209850111190906929590643769590085303156684882432688272642161500272716448305215061997675057846579530030436167931637311699341534273890604501885606379980040976191611076942726941865693033375988911542867217201689053575997361418637605366862510946550994076010786747537469171987383187273873246724122050732319403803763695688435608746174183384650520034755378065760038756007444771438072528936260600136949833503583294273713805837759404837485380935602295766286774613586523758437817200634211097079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ebc678808a33e32a8992929f2534f7dfdfcd667
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulr.ubiquitypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utrechtlawreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utrechtlawreview.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001680dc545e3000004030046304402204f332845b03938dcb0427c49eca769e9af5e7eb473e5375186362002e5d81ede022056feab039fb30475c0349a6ab2f5d326df7ddcd354867f8f6a4b6a6b43ac795a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001680dc546380000040300473045022071a73647291d2eab65f73574111c6d965e1214c8d7604d06aedde458a6cf932b02210095953cb86d509fac3ee80a5672286a5d41c6ee6aff208c48bb9e8006b791d8c5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0042ef5004fcf9b6b3502134200287beae3c96e5427a9e939447d8a7ff1456afaf0f208b8f1799b476feb89d94e0b781d25c01021e6b61d0083bcdd504cd29e7ba5bc062edf9c616f225dbc40ee5961d30203c2f5de9d5cab43ff7473c38a7ba34391e94c08532d4b6cd679d1f62edced957d7dc7df10ec87fa33be979c8d8c2ad846d36c51af852f5efb537e446f18863390e911aa4c6bfcc63d4b1ea964a34650e32c0c306ad6284a82845aa7aa52e53a682b3ff66aca87f87e67098827693380debdd6715e62b10ec38c5a5817370d982ac3fcccb55b37378ba296601cfe2e166997ff1c45cea38881c8720a945735b4c8af2a40f6b1c4c8a00a0c0f3460a26