pawel.prz.edu.pl

- Politechnika Rzeszowska im. Ignacego Łukasiewicza -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0f:3c:06:ba:de:66:5e:67:10:01:a6:91:70:14:24:fa was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Politechnika Rzeszowska im. Ignacego Łukasiewicza

Organization: Politechnika Rzeszowska im. Ignacego Łukasiewicza
Organization unit: WZ
Locality: Rzeszów
Country: PL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:3c:06:ba:de:66:5e:67:10:01:a6:91:70:14:24:fa
Serial Number (int): 20250094248011105732014984661260575994
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e3:4a:14:1f:0d:ea:8d:e7:8b:67:67:75:d3:de:e2:2a:97:f7:74:a6
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 96:bc:29:28:a5:f7:d9:b0:1c:99:6b:aa:12:59:bb:41:8f:6f:7f:b4
Fingerprint (sha256): 00:1d:56:d5:d4:f5:3d:9c:ab:44:3f:78:6b:88:5e:d2:1e:3b:dd:ce:10:23:96:60:7a:2e:39:f8:a5:3d:ca:d7

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate pawel.prz.edu.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pawel.prz.edu.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pawel.prz.edu.pl
www.pawel.prz.edu.pl

Other certificates including the domain name prz.edu.pl

(limited to 100 certificates)
pawel.prz.edu.pl
ketling.prz.edu.pl
katalog.prz.edu.pl
sbp.prz.edu.pl
*.portal.prz.edu.pl
kia.prz.edu.pl
ketling.prz.edu.pl
jerzy.prz.edu.pl
*.w.prz.edu.pl
obsada.prz.edu.pl
klik.prz.edu.pl
aszcz.strony.prz.edu.pl
et08.prz.edu.pl
forum.stud.prz.edu.pl
*.w.prz.edu.pl
kod.prz.edu.pl
graduacjawz.prz.edu.pl
power.prz.edu.pl
*.portal.prz.edu.pl
usosadm2.prz.edu.pl
nwiki.prz.edu.pl
pawel.prz.edu.pl
kia.prz.edu.pl
aszcz.strony.prz.edu.pl
*.sd.prz.edu.pl
power.prz.edu.pl
ketling.prz.edu.pl
power.prz.edu.pl
ketling.prz.edu.pl
konf.sasit.prz.edu.pl
legitymacje.prz.edu.pl
srs.prz.edu.pl
sprawozdania.kia.prz.edu.pl
kod.prz.edu.pl
stud.prz.edu.pl
biurokarier.prz.edu.pl
power.prz.edu.pl
usosapps.prz.edu.pl
ketling.prz.edu.pl
power.prz.edu.pl
graduacjawz.prz.edu.pl
ketling.prz.edu.pl
*.prz.edu.pl
praktyki-weii.prz.edu.pl
graduacjawz.prz.edu.pl
power.prz.edu.pl
*.w.prz.edu.pl
graduacjawz.prz.edu.pl
apd.prz.edu.pl
power.prz.edu.pl
jerzy.prz.edu.pl
power.prz.edu.pl
aszcz.strony.prz.edu.pl
stud.prz.edu.pl
*.w.prz.edu.pl
test.birt.prz.edu.pl
*.kia.prz.edu.pl
*.wbisia.prz.edu.pl
journals.prz.edu.pl
sprawozdania.kia.prz.edu.pl
ketling.prz.edu.pl
klik.prz.edu.pl
usosadm.prz.edu.pl
kni.prz.edu.pl
test.srs.prz.edu.pl
kni.prz.edu.pl
test.usos.prz.edu.pl
aszcz.strony.prz.edu.pl
stud.prz.edu.pl
test.usosapps.prz.edu.pl
krk.prz.edu.pl
biurokarier.prz.edu.pl
graduacjawz.prz.edu.pl
test.usosapps.prz.edu.pl
forum.stud.prz.edu.pl
ketling.prz.edu.pl
*.prz.edu.pl
biurokarier.prz.edu.pl
konf.sasit.prz.edu.pl
obsada.prz.edu.pl
stud.prz.edu.pl
graduacjawz.prz.edu.pl
aszcz.strony.prz.edu.pl
ankieter.prz.edu.pl
office.kia.prz.edu.pl
jerzy.prz.edu.pl
gw-admin.prz.edu.pl
usos.prz.edu.pl
vpn.prz.edu.pl
biurokarier.prz.edu.pl
biurokarier.prz.edu.pl
biurokarier.prz.edu.pl
usosapps.prz.edu.pl
oc.prz.edu.pl
kni.prz.edu.pl
test.usosadm.prz.edu.pl
imap.kia.prz.edu.pl
usosadm2.prz.edu.pl
podyplomowe.weii.prz.edu.pl
jerzy.prz.edu.pl

Certificate

The complete raw certificate details for pawel.prz.edu.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20250094248011105732014984661260575994
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-04 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rzeszów'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Politechnika Rzeszowska im. Ignacego Łukasiewicza'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pawel.prz.edu.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783476268394076091742213145537218418191269609568353819909296423910737505258712582918663516553763728417504085753893357996799766187216338356233686700414182137793477859180933520096318008385156674018560624602143189269525865444160958497477775176380608921474426781442228822929917617346097331160040769087629302414606113708911267438810801152381206370625273676710993829857963061015220733922948685130580439755227854204852843149385640352276396775022772855363759618396310127428778575473961446813812025522001057863760505038467143550357967056748069636434602750918502408877782260147973844507631382751287666997158941781633377045576898345561387371935335900119706354989161111453845433634995673254512398301373454364208184173299228848189615312482673691021511408399849129958501705511004039103191079756790527705827743722347690643958340296335298617008007213774012889431834158306044486983046471319880135796394712431865255447924744474885796892201495217064818913846248262259988921657843111386152855397234922003987366988740616967139035068122542638426451026189319816754938733945208266177856303998125491249561661893507194736461180848174782499933662494678684662270364976847410421352638487683552871477192883198344354748024215755232524269906185394326180104820695789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e34a141f0dea8de78b676775d3dee22a97f774a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawel.prz.edu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pawel.prz.edu.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007860c5be8eaaf851afdb6c6527aff7ed68e5c2712870e3f6761ba4df31e0697b331d6ec14f7fc7ca767db0b9612e612a351047bf82959795044867d47a04155be18770d8460de7c1183e618add908010245f7800bf748d56a9bc71e9cc4247b10189281d2b87d8b37c4d58e5cafb48cf3e3536740484a094f7a59fe26e8af8134f042430f702f809570069fcc5321f49c94ad6a9bce095da64a4b2068db5cc813a118e8bb3cfb7b011f0b10f3bd5ffd4dcfcc61a3c9a3c08c9e6873b9e5c515d7a73a3aa360dc063a3a4b9f460275d4aea2faac4e6dfe846b42e608860bcdf1a0d5966d8cc89bef61386bbd5878056a327c310ed0a102bd15c99fd06dd71f679