www.saint-aime-du-lac-des-iles.ca
Issued by R3
About this certificate
This digital certificate with serial number 04:9f:45:db:96:23:93:29:48:9c:4b:cb:28:f4:dd:33:7d:28 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.saint-aime-du-lac-des-iles.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:9f:45:db:96:23:93:29:48:9c:4b:cb:28:f4:dd:33:7d:28Serial Number (int): 402646896957371351040698869136516084628776
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 31:dc:16:52:0a:36:58:a7:f2:fc:b8:09:6e:52:9f:3d:0c:a5:5b:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 61:cb:bf:05:cf:7c:d0:9b:a0:24:9a:ae:c1:ce:58:89:39:91:04:a8
Fingerprint (sha256): f4:25:11:ac:c0:bd:69:93:53:cd:2e:83:b7:2b:31:8f:5e:02:a9:28:95:77:1b:34:39:d1:a7:32:89:9d:fe:86
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.saint-aime-du-lac-des-iles.ca
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.saint-aime-du-lac-des-iles.ca
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
saint-aime-du-lac-des-iles.ca
saldi.aegir3.koumbit.net
www-saint-aime-du-lac-des-iles-ca.aegir3.koumbit.net
www.saint-aime-du-lac-des-iles.ca
saldi.aegir3.koumbit.net
www-saint-aime-du-lac-des-iles-ca.aegir3.koumbit.net
www.saint-aime-du-lac-des-iles.ca
Other certificates including the domain name saint-aime-du-lac-des-iles.ca
(limited to 100 certificates)
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
Certificate
The complete raw certificate details for www.saint-aime-du-lac-des-iles.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISBJ9F25YjkylInEvLKPTdM30oMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDMwODUxMzFaFw0yNDAzMDIwODUxMzBaMCwxKjAoBgNVBAMT IXd3dy5zYWludC1haW1lLWR1LWxhYy1kZXMtaWxlcy5jYTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBANXaYQWiCgORG1UbIDuOxytHCHfzJfbwtb7kJC7w mmbsMqVF+WiZCHdWM2QheS3AeRzRKGJA63+Rt/Cu0E6toGUZJ6FuSg4PX8AZL+uh UEZl0CEt4jhb/2NQ/nkFUBtkkjn50Q8LhUdiBUe+cZ6QKRSnXrNz7N5mzJr3QcZQ 0ePa8hFaP/GjDNwHMogalYdW4Qjgl0CJN0XTis/RbHspageRiN7Ba4P2owU+a0EE RbewVGmxyTSVaJdT6EJJRUEbaw/G7trkiBpZFPM62eHl+X0MjWx/ldI7fMeAUv43 d1n4e2IwSW+oWx5lW3KySMlDYuyxxEt0YWcl/BMUc5tHBilRlmBn39iq0jnC13uA 6o3GIW3Wed1bT93MBXRlO9tna+3/csYTw5bnOy2LhP8HYXnJfPAX7EgeX0hysB5X GXVy/ETHZbc/Uhh6RT38rP7cVpH+1n03A5GEIvkNoj0TDR1d/eKGb6ltBxtg2BLv qi/dxrvk+G1+soYckKXw+n4/ZMpiQzHtEJ/7ks1KFz/uEUyVauLCmTEvPbUk6KLz o+DPepWcEa5jmQ2rBEuSb8g3mZ95zIXi+DMsNf+6GwjE/RhC6CGUxHEuzbBjccvI joUDzdAblxD8WQAS86kysoCNVvGbMwEijcmoo4s0pCRyOFrH4nmUfg4uSKI2Cctk 7a7pAgMBAAGjggGiMIIBnjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDHcFlIKNlin 8vy4CW5Snz0MpVurMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUG CCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3Jn MCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIGdBgNVHREEgZUw gZKCHXNhaW50LWFpbWUtZHUtbGFjLWRlcy1pbGVzLmNhghhzYWxkaS5hZWdpcjMu a291bWJpdC5uZXSCNHd3dy1zYWludC1haW1lLWR1LWxhYy1kZXMtaWxlcy1jYS5h ZWdpcjMua291bWJpdC5uZXSCIXd3dy5zYWludC1haW1lLWR1LWxhYy1kZXMtaWxl cy5jYTATBgNVHSAEDDAKMAgGBmeBDAECATATBgorBgEEAdZ5AgQDAQH/BAIFADAN BgkqhkiG9w0BAQsFAAOCAQEApvAYfcy6bha5LmD5lfnuTqzSfPhHkSyMnJD5EXzP kwbmIo0/bsOrmWiuNwBZLJL4EJ4CzPIWsKP5b2Ysbpq4aiH3KQVLZoLZyFbsEaXt 7WS0oVjeOPGDZg+X2/lCipkPkDhI5vdzamMucub/mTf6hHxwq6KBv3KIF+9VuLBy fPMfkAToMlwCtgOH+0DELep48P0Sbtg/4TJD0oCT2kpZrWCX2ALPoFInflEGSwf3 v7wF1gYKf7yjg5ZzaB65unSoVRNlZs8GZgwY4CEAuK1ydv8mBD9uLXY35hGMYxz2 UEnQSF6IT0ysmBGBr12xT6wi0W5TnWVqnR5esq8D3sxydw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1dphBaIKA5EbVRsgO47H K0cId/Ml9vC1vuQkLvCaZuwypUX5aJkId1YzZCF5LcB5HNEoYkDrf5G38K7QTq2g ZRknoW5KDg9fwBkv66FQRmXQIS3iOFv/Y1D+eQVQG2SSOfnRDwuFR2IFR75xnpAp FKdes3Ps3mbMmvdBxlDR49ryEVo/8aMM3AcyiBqVh1bhCOCXQIk3RdOKz9Fseylq B5GI3sFrg/ajBT5rQQRFt7BUabHJNJVol1PoQklFQRtrD8bu2uSIGlkU8zrZ4eX5 fQyNbH+V0jt8x4BS/jd3Wfh7YjBJb6hbHmVbcrJIyUNi7LHES3RhZyX8ExRzm0cG KVGWYGff2KrSOcLXe4DqjcYhbdZ53VtP3cwFdGU722dr7f9yxhPDluc7LYuE/wdh ecl88BfsSB5fSHKwHlcZdXL8RMdltz9SGHpFPfys/txWkf7WfTcDkYQi+Q2iPRMN HV394oZvqW0HG2DYEu+qL93Gu+T4bX6yhhyQpfD6fj9kymJDMe0Qn/uSzUoXP+4R TJVq4sKZMS89tSToovOj4M96lZwRrmOZDasES5JvyDeZn3nMheL4Myw1/7obCMT9 GELoIZTEcS7NsGNxy8iOhQPN0BuXEPxZABLzqTKygI1W8ZszASKNyaijizSkJHI4 WsfieZR+Di5IojYJy2TtrukCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 402646896957371351040698869136516084628776 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 08:51:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-02 08:51:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.saint-aime-du-lac-des-iles.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 872444298051248134072099789790724756453408470599906448567904020500722580916278631372441063648859906613649677599496071047940569236259653454106996339468494564711907554006164582241971465795276033641371279168528443925721151354475328783908345637702400261289511571443455518045434273301646122490330469117532354706848482533655774304333142146981011656644636861254949586076144330416307606884584128097507681119911837792260055418185173839198111217847757235886251282050302057673513442682620543750665091305190006733708962524372601584793485745914818919582018881654690557299813076723857512639269706093689556616208393597504966866602442361866852104738149631134351886319339003436669859719435572560630207095748247731194973334702066759399411972197882240738361121704989672500838294625826911994884415290292971468501551000429789160573084776998140354346301845996434454533281229340330857090628721803477333151949963136853213109949168717642158035807593734527473145719195705224550733752526860907652773108168451924770818677661235400326619495653774890908852817408130653549263902809793178454530088308527869968534880193841824061320481651528883713032119558101846525265647747363610886405559039357273727688967945704170170849879680494238303997745954644867964717566373609 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 31dc16520a3658a7f2fcb8096e529f3d0ca55bab . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-aime-du-lac-des-iles.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saldi.aegir3.koumbit.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-saint-aime-du-lac-des-iles-ca.aegir3.koumbit.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saint-aime-du-lac-des-iles.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a6f0187dccba6e16b92e60f995f9ee4eacd27cf847912c8c9c90f9117ccf9306e6228d3f6ec3ab9968ae3700592c92f8109e02ccf216b0a3f96f662c6e9ab86a21f729054b6682d9c856ec11a5eded64b4a158de38f183660f97dbf9428a990f903848e6f7736a632e72e6ff9937fa847c70aba281bf728817ef55b8b0727cf31f9004e8325c02b60387fb40c42dea78f0fd126ed83fe13243d28093da4a59ad6097d802cfa052277e51064b07f7bfbc05d6060a7fbca3839673681eb9ba74a855136566cf06660c18e02100b8ad7276ff26043f6e2d7637e6118c631cf65049d0485e884f4cac981181af5db14fac22d16e539d656a9d1e5eb2af03decc7277