webmail.arpalombardia.it

Issued by TI Trust Technologies Global CA

About this certificate


This digital certificate with serial number 86:f5:b4:af:dc:40:23:5b:1c:c4:aa:f1:31:de:1d:bd:b7:b6:f8:10 was issued on by Telecom Italia Trust Technologies S.r.l. .

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

ARPA - Agenzia Regionale Protezione Ambiente della Lombardia

Organization: ARPA - Agenzia Regionale Protezione Ambiente della Lombardia
Organization unit: ICT
State / Province: MI
Locality: MILANO
Country: IT

Telecom Italia Trust Technologies S.r.l.

Organization: Telecom Italia Trust Technologies S.r.l.
Organization unit: Servizi di certificazione
State / Province: MI
Locality: MILANO
Country: IT

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 86:f5:b4:af:dc:40:23:5b:1c:c4:aa:f1:31:de:1d:bd:b7:b6:f8:10
Serial Number (int): 770484185917679610100175003594980943401359702032
Serial Number lenght: 160 bits, 20 octets

SubjectKeyId: 9b:9b:47:27:72:bd:9c:ba:8b:dc:dd:e6:b8:a4:86:95:16:82:5d:58
AuthorityKeyId: fd:25:dd:69:06:35:47:cd:e7:30:de:31:e8:1e:f9:88:00:79:c3:e2

Fingerprint (sha1): 6e:10:c9:b7:10:87:34:41:60:a1:d8:fb:e7:40:bd:9c:1d:72:74:ef
Fingerprint (sha256): 9f:81:b8:fc:04:0e:07:e5:3b:d5:46:ce:af:08:d8:0f:7e:e5:aa:84:d5:b9:92:eb:44:c9:eb:b1:bf:e7:8d:35

Issuing Certificate URL: http://ca.tipki.it/TTGlobalCA/CERT

Revocation information

OCSP Server: http://ocsp.tipki.it
CRL Distribution Point: http://ca.tipki.it/TTGlobalCA/CRL

Check the revocation status for the current certificate on webmail.arpalombardia.it
5
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.arpalombardia.it
autodiscover.arpalombardia.it
arpalombardia.it
outlook.arpalombardia.it
hybrid.arpalombardia.it

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgIVAIb1tK/cQCNbHMSq8THeHb23tvgQMA0GCSqGSIb3DQEB CwUAMIGOMQswCQYDVQQGEwJJVDExMC8GA1UECgwoVGVsZWNvbSBJdGFsaWEgVHJ1 c3QgVGVjaG5vbG9naWVzIFMuci5sLjEiMCAGA1UECwwZU2Vydml6aSBkaSBjZXJ0 aWZpY2F6aW9uZTEoMCYGA1UEAwwfVEkgVHJ1c3QgVGVjaG5vbG9naWVzIEdsb2Jh bCBDQTAeFw0xNTA2MjUwODQ3NTZaFw0xNjA2MjUwODQ3NTZaMIGjMQswCQYDVQQI DAJNSTELMAkGA1UEBhMCSVQxDzANBgNVBAcMBk1JTEFOTzFFMEMGA1UECgw8QVJQ QSAtIEFnZW56aWEgUmVnaW9uYWxlIFByb3RlemlvbmUgQW1iaWVudGUgZGVsbGEg TG9tYmFyZGlhMQwwCgYDVQQLDANJQ1QxITAfBgNVBAMMGHdlYm1haWwuYXJwYWxv bWJhcmRpYS5pdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMrCKgm9 muEs6VMeZ/ghBzuby1tj1oaRcgSxJR+pNM9RY9eN454u6Qp2fql3wjiyRv87PTnC UcKWWEkd/yX20bY2IewbayGDFv1sZGJ2CsQxVgxpbkGiwp8OoOJ1wf9GkhSkNyoV 1oUkNkbIonkfHwPRAk3etrTjKYIioiYYqZlp064jCRIAQN/pAGa/sy5SW5/B7A2d YQ7L0v9oLrMUvRkS/6gei6PPeMsn3SGIYl+Il8cVEUQYyNbCQFuUcMnK4xG4BmvW +Yu+OnKrEbVttCf9Wi2hfHUxtkl5sKHmPRCiPVIJw8OX4QukaZ7nIPFuJtZ8u1EQ Eca6P2NrQGachBMCAwEAAaOCAjgwggI0MAkGA1UdEwQCMAAwgZYGA1UdIASBjjCB izCBiAYJK0whAQEeAQEBMHswSgYIKwYBBQUHAgIwPgw8WC41MDkgU1NMIFNlcnZl ciBBdXRoZW50aWNhdGlvbiBEb21haW4gVmFsaWRhdGVkIENlcnRpZmljYXRlMC0G CCsGAQUFBwIBFiFodHRwOi8vY2EudGlwa2kuaXQvVFRHbG9iYWxDQS9DUFMwgYgG A1UdEQSBgDB+ghh3ZWJtYWlsLmFycGFsb21iYXJkaWEuaXSCHWF1dG9kaXNjb3Zl ci5hcnBhbG9tYmFyZGlhLml0ghBhcnBhbG9tYmFyZGlhLml0ghhvdXRsb29rLmFy cGFsb21iYXJkaWEuaXSCF2h5YnJpZC5hcnBhbG9tYmFyZGlhLml0MGAGCCsGAQUF BwEBBFQwUjAgBggrBgEFBQcwAYYUaHR0cDovL29jc3AudGlwa2kuaXQwLgYIKwYB BQUHMAKGImh0dHA6Ly9jYS50aXBraS5pdC9UVEdsb2JhbENBL0NFUlQwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSME GDAWgBT9Jd1pBjVHzecw3jHoHvmIAHnD4jAyBgNVHR8EKzApMCegJaAjhiFodHRw Oi8vY2EudGlwa2kuaXQvVFRHbG9iYWxDQS9DUkwwHQYDVR0OBBYEFJubRydyvZy6 i9zd5rikhpUWgl1YMA0GCSqGSIb3DQEBCwUAA4IBAQB7zj8fKpvgmN4uTEHVCJKf iS226xgNdpJdJbljhzEXVLHZ/zEUtjn2IpAJDs+b8RcV4zc4v19VNONrddmbtvIu 3vBMRDSYcTbxCG8mmZL901vUT7nTvH5FPX0eJctv8H4uuH32p62S1LfWnox7F5rA 80DBP0CCzDz2Str+x/Rgs1RgojIgHypS9mUv0jMN5Q70fV51fr6QWDPI98qOmoW1 uuPbD9QSZn0+DN2Vx8iXOgjY6eI5eTb+BC2Xc5kvmlYp42dE4jLgvpQUco90/zae lAoF7Io3BkJllzzlDURAAh6SqMbmdIdP8mz1qMkecYoP20WJ1z/XeE7s4sWUyf9L -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysIqCb2a4SzpUx5n+CEH O5vLW2PWhpFyBLElH6k0z1Fj143jni7pCnZ+qXfCOLJG/zs9OcJRwpZYSR3/JfbR tjYh7BtrIYMW/WxkYnYKxDFWDGluQaLCnw6g4nXB/0aSFKQ3KhXWhSQ2RsiieR8f A9ECTd62tOMpgiKiJhipmWnTriMJEgBA3+kAZr+zLlJbn8HsDZ1hDsvS/2gusxS9 GRL/qB6Lo894yyfdIYhiX4iXxxURRBjI1sJAW5RwycrjEbgGa9b5i746cqsRtW20 J/1aLaF8dTG2SXmwoeY9EKI9UgnDw5fhC6Rpnucg8W4m1ny7URARxro/Y2tAZpyE EwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 770484185917679610100175003594980943401359702032 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telecom Italia Trust Technologies S.r.l.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Servizi di certificazione' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TI Trust Technologies Global CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-25 08:47:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-25 08:47:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MILANO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ARPA - Agenzia Regionale Protezione Ambiente della Lombardia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'webmail.arpalombardia.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25595883544152352230838622384021349651558373629384318245033543581938235403333273634457393136985867937949870189676661054837215407752459246925581806604437711514832822060447770926750874238374309024019074344623127566430230964974627269854578820253587541823033552633915341741075521150241513560404687315273983678563291553568459249977488285263416613346777240783765445747118938943142607113147460669776267705796007220625730297537346709596912874050954792155090307456505054738564610275518791741192995121238099955523605019439795062256501203831863017383530490076493691853104750080760187513352448309678820421807822036354577739842579 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (142 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.76.33.1.1.30.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'X.509 SSL Server Authentication Domain Validated Certificate' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://ca.tipki.it/TTGlobalCA/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.arpalombardia.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.arpalombardia.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arpalombardia.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.arpalombardia.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid.arpalombardia.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tipki.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.tipki.it/TTGlobalCA/CERT' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fd25dd69063547cde730de31e81ef9880079c3e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.tipki.it/TTGlobalCA/CRL' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9b9b472772bd9cba8bdcdde6b8a4869516825d58 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007bce3f1f2a9be098de2e4c41d508929f892db6eb180d76925d25b96387311754b1d9ff3114b639f62290090ecf9bf11715e33738bf5f5534e36b75d99bb6f22edef04c4434987136f1086f269992fdd35bd44fb9d3bc7e453d7d1e25cb6ff07e2eb87df6a7ad92d4b7d69e8c7b179ac0f340c13f4082cc3cf64adafec7f460b35460a232201f2a52f6652fd2330de50ef47d5e757ebe905833c8f7ca8e9a85b5bae3db0fd412667d3e0cdd95c7c8973a08d8e9e2397936fe042d9773992f9a5629e36744e232e0be9414728f74ff369e940a05ec8a37064265973ce50d4440021e92a8c6e674874ff26cf5a8c91e718a0fdb4589d73fd7784eece2c594c9ff4b