bfs-trans2.qa.umd.edu

- University of Maryland, College Park -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 04:10:47:c0:17:a6:8e:03:44:b7:c7:b9:9d:69:2b:d5 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Maryland, College Park

Organization: University of Maryland, College Park
State / Province: Maryland
Locality: College Park
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:10:47:c0:17:a6:8e:03:44:b7:c7:b9:9d:69:2b:d5
Serial Number (int): 5401444003084790289304045047429802965
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 24:4f:78:92:d6:c3:5b:4e:d7:f5:da:e8:ef:dd:36:1f:00:4d:f2:1e
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 17:fc:41:71:6e:e1:24:e8:79:76:e8:06:93:aa:cc:0f:aa:27:e9:65
Fingerprint (sha256): 00:35:67:7a:17:d7:30:88:a5:4e:eb:1c:55:ac:1e:dd:19:a0:03:6d:fd:97:a5:8c:4f:94:09:1a:b7:34:5a:5d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate bfs-trans2.qa.umd.edu

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bfs-trans2.qa.umd.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bfs-trans2.qa.umd.edu
bfs.qa.umd.edu
www.bfs.qa.umd.edu
www.bfs-trans2.qa.umd.edu

Other certificates including the domain name umd.edu

(limited to 100 certificates)
grades.cs.umd.edu
sims.eng.it.umd.edu
sfunder1cert.net
www.see.umd.edu
www.bioscience.umd.edu
legacylamp-faculty.elb.it-prod-cots.aws.umd.edu
calce.umd.edu
test-web-lws.edu.help
kfs.umd.edu
www.recoveringdemocracyarchives.umd.edu
bsos.umd.edu
*.givegab.com
www.umdphysics.umd.edu
view.e.rhsmith.umd.edu
bfs-trans2.qa.umd.edu
oer.umd.edu
hcixdementia.umd.edu
vicarious.cs.umd.edu
user.eng.umd.edu
tin.umd.edu
www.temperamentandnarrativeslab.umd.edu
aast.umd.edu
*.rhsmith.umd.edu
me.umd.edu
universityhonors.umd.edu
lasonline.umd.edu
msmc.umd.edu
rcpsl.ece.umd.edu
ercimpaqt.umd.edu
publish.lib.umd.edu
qa.ccebh.umd.edu
akamaisan.qualtrics.com
www.aast.umd.edu
jmail.umd.edu
diversity.umd.edu
dns-vetting1j.map.fastly.net
umeg.umd.edu
nartc.fcm.arizona.edu
apphosting-tools.qa.umd.edu
*.ibbr.umd.edu
item.umd.edu
copier.umd.edu
umincentiveawards.umd.edu
infosci.umd.edu
cfar.umd.edu
5703789046661120-fe2.pantheonsite.io
dcicblog.umd.edu
balldoolinglab.umd.edu
icdldev.lib.umd.edu
experts.umd.edu
smart.bgr.umd.edu
phr-app4.umd.edu
dev.vaslavehousing.umd.edu
cgunupd1.umd.edu
ITFHR.UMD.EDU
voyager-mac.umd.edu
pm.umd.edu
*.ibbr.umd.edu
jqi-wiki.physics.umd.edu
*.proxy-ce.researchport.umd.edu
diversity.umd.edu
webmeeting-dev.umd.edu
*.givegab.com
viz.umd.edu
tls.automattic.com
sbnpsi.astro.umd.edu
evidlab.umd.edu
dev.msac.umd.edu
checkio.reslife.qa.umd.edu
www.modarres.umd.edu
openknowledge.umd.edu
dev.studentaffairs.umd.edu
sophie-test.umd.edu
*.givegab.com
5639026912526336-fe4.pantheonsite.io
wireless.umd.edu
www.tt.umd.edu
marylandrha.umd.edu
icecube.umd.edu
congo.umd.edu
maestro2-public.it-dev-cots.aws.umd.edu
tls.automattic.com
5639026912526336-fe4.pantheonsite.io
www.arhu.umd.edu
sophie-test.nflc.umd.edu
*.givegab.com
qa.studentconduct.umd.edu
oitap254v.umd.edu
dev.education.umd.edu
fastbreakers.umd.edu
gened.umd.edu
*.cbcb.umd.edu
agnr.umd.edu
eit.umd.edu
ctg-ws.umd.edu
apm1.qa.umd.edu
nxterra.ucop.edu
float.umd.edu
prosamservices.dev.umd.edu
mim-dev.umd.edu

Certificate

The complete raw certificate details for bfs-trans2.qa.umd.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL4fAP0HENff7mEjnQiP
hDU16vpzo16EnQVJnQ++EnxRsVQzozl4kgG7Zh95A0IEJ0OcX1R+E6s6Q+TtMjlW
ptXdFL2D+Ihaek14pWjmvAGQW8ANx/E+22a6GRfuPeS7HPHQ1M3K2bVlHa1H6S7A
ZhUL3tuW9o56Nel8+Kw/FwnjHe2MKJ2MU99VScVy6VeWz9IqjpQNJPrSuwXBUvnT
GpEIhKA9OgXjs+emnyxXpJ2YDENp0a+Awv71niDuhKpkqOcSaKApKOtMTLPpbvfY
Iiu6pF9jRLzIyRqLePyTAkraBagEQAQNRzO5tyjXPZyI3/cDzjZz1wrynOJDlu0w
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5401444003084790289304045047429802965
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'College Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Maryland, College Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bfs-trans2.qa.umd.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24331506766440955865576499938832287568020728984589330406168706511681584861457684677142948644632275226977663720121240437602828304379044359260727833171222163878510817629070866701483796534645547414816104230848879067806663693732153676792446500753048841688533907692364718673483066020845966122890950122358268680496954253495133867712943491438180865688317476294511519408325307054704921943338744864412966845618951846050107805746506214924662816260549428581468356847853148732266226423193891781230282702599524161415790805885145196876712449481991295391136441191395498534614994669324430864504416560082823102444925848660855168512111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							244f7892d6c35b4ed7f5dae8efdd361f004df21e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfs-trans2.qa.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfs.qa.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bfs.qa.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bfs-trans2.qa.umd.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004da6161a46dd34e861bc7fed6133c3441d56c0d7d2cd3cf2223c70210932310725d87541c0cb0706272375665e92535ae149a891d7cc484cf3422bac704ebe8eeba82327d85f2dcf2e5cd39f469f8b3f04d5f8601171c588684155da4f2285bdcefc6e3b90f8f01505663d5f635114bf1b6666ccaab7342decadbadc0dcfb8b69d5a15d4ba358b1329387c1e9899bb9189d288bbaadeecc5ce53a3ff913082f8659a9020d20f3f181cefc37a3caaf1b4cea5bc82a52a9870489fee68eaf3daeef10ca65e54bff0c7c4ca1c9892bb9bb31f5da3dcb08d01b3db4aa54abee5f75c88a3d8f4bdd59db408e0d4525270910e4b942cd5089710f5da45dfbc393199e5