spoa-int-2.bmwgroup.com

- Bayerische Motoren Werke AG -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 73:da:dc:5c:9f:5a:b4:25:6e:63:f4:99 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 73:da:dc:5c:9f:5a:b4:25:6e:63:f4:99
Serial Number (int): 35855362587340046439454864537
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 86:71:5b:a4:69:4d:c7:0c:90:c4:cc:cb:cb:1d:e9:6d:29:ca:b4:56
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 63:f8:e1:55:4a:b0:12:4b:e7:7c:86:d9:33:fc:57:30:c7:66:46:f3
Fingerprint (sha256): 00:60:5e:ef:56:d9:a6:5b:a5:fe:b9:15:48:14:64:48:d0:7a:bf:88:17:f7:73:ee:5b:1c:d6:77:9f:d4:9b:84

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate spoa-int-2.bmwgroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spoa-int-2.bmwgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spoa-int-2.bmwgroup.com

Other certificates including the domain name bmwgroup.com

(limited to 100 certificates)
cosy-int.bmwgroup.com
cuvedat.bmwgroup.com
bsi-service-wen.bmwgroup.com
ebest-gf5-int2.bmwgroup.com
spa-int.sfchina.bmw.com.cn
myair-bdr-us.bmwgroup.com
mein-test.bmwgroup.com
aftersales-configuration.bmwgroup.com
xpita-green.bmwgroup.com
air-int.bmwgroup.com
api.mobilitygraph.bmwgroup.com
e4ni3.bmwgroup.com
drift.bmwgroup.com
sgate2-int-apac.bmwgroup.com
p44-tracking-data-prod.bmwgroup.com
wissensfinder.bmwgroup.com
sparc-int.bmwgroup.com
e-180.com
df3test-bmwinfobahn.bmwgroup.com
lcs-int.bmwgroup.com
apisec.bmwgroup.com
srpmm-api-i.bmwgroup.com
ispanext-user-int-gf4.bmwgroup.com
rwebmeter.bmwgroup.com
aida-i.bmwgroup.com
nachhaltigkeit-newsletter.bmwgroup.com
dealerportalsg-int.bmwgroup.com
zadea-i.bmwgroup.com
spoa-int-2.bmwgroup.com
h5vco-bmw-test.bmwgroup.com
swg-mx.bmwgroup.com
uat-infobahn.bmwgroup.com
alscore-int.bmwgroup.com
dfegateway-i2.bmwgroup.com
csp-gft.bmwgroup.com
carver.bmwgroup.com
dealerservices-t.bmwgroup.com
tmsi-i.bmwgroup.com
osm-cloud-uat-kr.bmwgroup.com
vcs-gf4-t.bmwgroup.com
stabi.bmwgroup.com
h5vco.bmwgroup.com
plw-prod1.bmwgroup.com
h5vco-int.bmwgroup.com
osm-cloud-int-fed-eu.bmwgroup.com
eccza.bmwgroup.com
b2dua4.bmwgroup.com
conrecordtest.bmwgroup.com
srmza.bmwgroup.com
ilz-device-qa.bmwgroup.com
passworddev.bmwgroup.com
alclaims-test.bmwgroup.com
ispanext-user-prod-us-ig-weam.bmwgroup.com
zeus-neu.bmwgroup.com
ddaus-p-gf4.bmwgroup.com
cmscn-int.bmwgroup.com
kai-user-qa-eam.bmwgroup.com
topdrive-i.bmwgroup.com
mocu-int.bmwgroup.com
bch.eu-central-1.test.iis.connected.bmw
dealerservices-test.bmwgroup.com
oasis.bmwgroup.com
www.charging.bmwgroup.com
myc-profile-int.bmwgroup.com
dealercockpit-aos.bmwgroup.com
cargo-auth-ddr-int.bmwgroup.com
vcommus.bmwgroup.com
mediapool-i3.bmwgroup.com
alertnowpbf00.bmwgroup.com
acc-fa-be-alph.bmwgroup.com
prod-mybmw-auth.bmwgroup.com
msdcrm365-int.bmwgroup.com
noaifa.bmwgroup.com
eaina-wen-int.bmwgroup.com
infonet3.bmwgroup.com
test.mini-mx.bmwgroup.com
www.bmw.de
trz-device-qa-us.bmwgroup.com
www.bmw.com
fsconnect-int-next.bmwgroup.com
b2dua-int.bmwgroup.com
gqs-i.bmwgroup.com
air-services-qa1-wen-basic.bmwgroup.com
ispanext-device-qa-cn-weam.bmwgroup.com
pita-dev.bmwgroup.com
usp22-test.bmwgroup.com
myair-bdr-qa2.bmwgroup.com
ics.bmwgroup.com
ispanext-user-int-weam.bmwgroup.com
swg-mx.bmwgroup.com
apisec-i.bmwgroup.com
ispanext-user-qa-ig-weam.bmwgroup.com
vcsus-t.bmwgroup.com
uctemeasip02.bmwgroup.net
air-services-b2i-int.bmwgroup.com
crowd-innovation.bmwgroup.com
ivpbg-new.bmwgroup.com
ult-test.bmwgroup.com
cfs-ch-int2.bmwgroup.com
portalwe.bmwgroup.com

Certificate

The complete raw certificate details for spoa-int-2.bmwgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfYcBVsZcszGMJ8ZKwXk
GQGvfHrTcbiTEEFXuGfTvczDj/dIYGo7RlFw7pc9TCzIxvjqEkVUNrrkveMQbyw3
sUATT9pUPna9IeOxf7Z9FUo+y2CRhVCPDg/OY/TZDLK5tRUlSeLKefjjdp9PUK0i
Kd7Q6iYxhWsYv4ksDrE7b3GzLXRCfvHmROwNlWd150/jdTWyCUrfq5L+MMf6nzyv
p/PhATptI1Xv6aIpN1ir7f8i1U4/nrKtF9CAkHcoAO138YC94oTuLjmSdS9Qs34Q
0/vSHblQE3FDtCseFSxKjJLYC6sxiVDkL3iptszQFHSQf0HKbEps/pPdrr9FthZb
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35855362587340046439454864537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-22 22:06:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-22 22:06:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spoa-int-2.bmwgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24485353954749868128549822233814230837131554927719080621793735805019668670944281509411947448680520622444466516830543023942334018717221049256567381536737987754499918292417058442870081573621254209154667413132129741039275319487534313426791992503300574180207723370018832645226115235963906660945912886540413013058094871730253633977847794066926214474218695661335072370301766932098650602886744770778781397908138600153524903965840051560902554618502751640715892396552508728981033630367459453552831527835938794990698535637256935200402238398476705066761958605886400793019860595604927500160475690321579599183026093124725958400791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spoa-int-2.bmwgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86715ba4694dc70c90c4cccbcb1de96d29cab456
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e9527242a0000040300463044022035f55d9d755ca03b297c2567f99546ec51b8b5170df9b5b4c4912f3e283729ca022042197b9cad0afc9096e0ce074cd03b6082865a30a2482fca367ea99eaee0fc88007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016e95272422000004030047304502206edc5ae8ac7bf3f32b3037f7a81f07b5b12ad8df0e01e28406ee7f510db43ac3022100ea736d416bac3875a0d420a2fc2cdeb539b8b7e883efa2524864b119159ea091
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b7c7500e506e5d84579d04c3d691648ee9e387882b56bacee5f39a6de9bdc6df4de3975e1356d1920264f75c519c59887e5480dd10a063d944d3512c292b31a273a5df24a18ec5978d55da8e6f401172e0857158b6ebd79a713fa2c9696647d256dae3f3ec0624895a6a882b2316da72c6d40fb6bc7bf2ca8ab36a7bb454973d4e7b249076063a910d07edac6e2a85d0562f0ade988f169258560f3dee0d21d3b7d5da094b82223286822e65f9f6500f8ef6091d38d3d2c2be0818d2d5d8b5595b9c0551d721f1c849f358e545f22b8e27295e6688ddb3071518ba3e5ca7dc692d0ac391f3b5f649160e3dc029a485bc7cb38d27e4eb9a48b9bac8a28bd0bfbb