userservices.vip.symantec.com

- Broadcom Inc -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:16:74:4a:54:4b:6f:da:57:86:8f:10:a2:a2:8b:6b was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Broadcom Inc

Organization: Broadcom Inc
State / Province: California
Locality: San Jose
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:16:74:4a:54:4b:6f:da:57:86:8f:10:a2:a2:8b:6b
Serial Number (int): 6762729158298333693517641214121380715
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9b:a0:37:b1:fc:12:85:3d:9e:9a:74:1a:5c:90:4a:a8:e7:c7:93:73
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 15:c6:b0:5d:76:58:2a:78:0f:a1:ca:12:46:2d:e6:f8:cb:15:7c:6c
Fingerprint (sha256): 01:0c:4a:81:2c:05:cd:96:ee:81:6f:47:26:61:5c:2d:03:81:8d:d2:c3:55:16:00:d8:d4:bc:d6:e2:a0:22:c2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate userservices.vip.symantec.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for userservices.vip.symantec.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

userservices.vip.symantec.com
passive.userservices.vip.symantec.com

Other certificates including the domain name symantec.com

(limited to 100 certificates)
787.Symantec.com
www.verisign.com
dub2comgwypin01.symc.symantec.com
amtrust.kinnser.com
statuspage.io
msl.ges.symantec.com
revprouat.symc.symantec.com
shasta-anti-spam-stats.symantec.com
tools.symc.symantec.com
cloudmarketplace.status.symantec.com
UAT-OIDU1.GES.SYMANTEC.COM
statuspage.io
symantec.com
kb-thawte.symantec.com
d78de818-a0eb-4260-806a-d56c49087402.ds.dlp.protect.symantec.com
cwp.status.symantec.com
IMWS-SYMWISE-QA.SYMC.SYMANTEC.COM
CPESLB1.GES.SYMANTEC.COM
statuspage.io
mssvpn.symantec.com
c6aea99a-29b8-4e5c-8305-294aeddce88d.ds.dlp.protect.symantec.com
status.accelitas.io
packages-mountainview.symc.symantec.com
cnniptccmpin13.net.symantec.com
asb1-mpi-ise-2.net.symantec.com
firewallendpoint.vip.symantec.com
AEMOKMANALYTICS-UAT.SYMC.SYMANTEC.COM
QLIKSENSEUAT.SYMANTEC.COM
statuspage.io
statuspage.io
cwp.status.symantec.com
ica.symantec.com
MVC1IPTEGWPIN01.NET.SYMANTEC.COM
eloqua-trustservices.symantec.com
statuspage.io
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
licensing.dmas.symantec.com
pgp.symantec.com
su1-staging.nbu.symantec.com
help.gitlinq.com
usea1.r3.securitycloud.symantec.com
statuspage.io
cons-support-jp1.symantec.com
vip.symantec.com
DEEPSIGHTADMIN.SYMANTEC.COM
mftint-nam.ges.symantec.com
content-symwise-app-west.symc.symantec.com
tus3tmsappdin01.symc.symantec.com
shasta-rrs-test.symantec.com
www-uat-west.symantec.com
swi-inv-admin-uat.symc.symantec.com
rundeck-tus3.ges.symantec.com
fusestatus.com
scmnet50qa.symc.symantec.com
www.symantec.com
telemetry.veritas.com
PARTNERNET-DEV.NBU.SYMANTEC.COM
ssltest-evsgc.jp.websecurity.symantec.com
94b36575-cdd1-4708-8061-e12bf9a11ad1.ds.dlp.protect.symantec.com
INTMPG-QA.SYMC.SYMANTEC.COM
cebealt-int2.norton.com
EMS-UAT-LICENSING.SYMANTEC.COM
sice.stage.enc.protect.symantec.com
contentauthor-uat1.symc.Symantec.com
loggeruat.cclab.symantec.com
ssltest-sha2fc.jp.websecurity.symantec.com
icdm.status.symantec.com
kb-thawte-de.symantec.com
csas.norton.com
dmshealth.dealertrack.com
SPR1IPTCUCPIN01.symc.symantec.com
analyzer.symantec.com
IMWS-SYMWISE-DEV-APP-TUS3.SYMC.SYMANTEC.COM
jira.ges.symantec.com
tus1csswebpin01.symc.symantec.com
appisolation.status.symantec.com
jenkins-stage-tus3.ges.symantec.com
tenant0-p01-smtp.na.dlp.protect.symantec.com
statuspage.io
ASB1VVCVCCPIN01.symc.symantec.com
shelladdin.symantec.com
userservices.vip.symantec.com
statuspage.io
products.websecurity.symantec.com
symdl.symc.symantec.com
6h60rqz7vjhj.stspg-customer.com.como3.pl
TUSVC-09.SYMC.SYMANTEC.COM
SYMPAY-QA22.GES.SYMANTEC.COM
SUPPORTPORTAL-WEST-STAGE.SYMANTEC.COM
maintenance.blackbaud.com
exftpp.symantec.com
tusvipapplpi01.symc.symantec.com
statuspage.io
tools-review.engba.symantec.com
ev1-0121.ev12311.Symantec.com
MFTBC.SYMANTEC.COM
statuspage.io
avs-avpg.crsi.symantec.com
haystatus.mambu.com
CUL1RFPSEPQIN23.symc.symantec.com

Certificate

The complete raw certificate details for userservices.vip.symantec.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdlGMjnooSEEI5CsoFEl
MHhfkjVSzNXaaP53zzUon+Dfuz7SWW6H01zXvXbXQgeyi3wbfcTHXOLV7nDvDTCn
wGaYOFYlVxiZ2llkyHj/bE0k7J5kNFDFxUakxYZ8eLdkRJtDU+AMl2Sg51796DeT
UdclxcEr2/y1CSFgE8xUcmj8BOZQ3VUcExvCWTNnepQ8tmjaZwKcxQl3aLgNHUIS
s3Z45P1QrdHT/mLpWSUvlS9ZyXDCHKM1ZEwiGUupLpzKEeRUMxaU4jt9oEjbhOAi
lHrlXdqrsVGa4vj5UOafqWiGqAcWAqKGMDXVfNPIGEGnmSR0zFnhNTx/ViriLlGq
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6762729158298333693517641214121380715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Broadcom Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'userservices.vip.symantec.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23966181541757188596835449236735955082560101198776217556093300572497478667980693563767428321281354260483566527421343660277626032160352240054026644836374410158422815743773863521741323678612366064774804303767382056668586351546480577366133858688794452741269351335051092395879144134266205760847864534057450911896178693075832044928987500142159420475313679609614375808619602422064455101073330316906089772015730013648234623464202433480807029293291578263381388322169193929506632611921237894643710004750667383602957592342805382681064798868466712463487173263180184124169859249312421454885887504304538485131357500556084100835981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ba037b1fc12853d9e9a741a5c904aa8e7c79373
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userservices.vip.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passive.userservices.vip.symantec.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001846cf527ea24ab057f63a23187180e0074ff754778ee18256d2d35cbbdd2a1c601d2227a66997f91167b268ae6ea2e3d93e26f16e67046599e5af590b2c465ea8dd2f27ad19642470ff82fa28fea74e8e4c736f6d4df4088eeb943075aec4c744e64ce2ad0a45b7e44e57cc3d71ba973a105d2bae833b4ecdd6b566e4263381906834af15511dab9db099b6c441832d9146df3a7aa8acbecb2f1c31198a654a829aa261753892d71e365353c39c59a8c3fbfc01650de6811b6700fdd7adc5b02243fd9781acd882276987c392fc59a43212bb41061d33d2cb85b52a8b011b25bd4240967ed4a0e307a72c28546e01e30829e1e4a80b63954bec09fe5a54d760