www-legacy-stage.oracle.com

- Oracle Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:bb:65:98:49:70:05:cc:3c:b9:ed:7b:f1:b7:02:4b was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oracle Corporation

Organization: Oracle Corporation
Organization unit: Content Management Services IT
State / Province: California
Locality: Redwood Shores
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:bb:65:98:49:70:05:cc:3c:b9:ed:7b:f1:b7:02:4b
Serial Number (int): 19582212042313338762179658047559238219
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f7:3d:b3:d9:4b:38:52:ad:ec:5a:ed:21:3c:3a:41:4d:29:b7:22:8b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 3a:62:84:f2:83:74:7e:82:ba:8d:af:87:74:25:60:d0:23:0e:af:88
Fingerprint (sha256): 01:11:81:c9:4f:b8:47:70:e3:01:3a:50:5f:f0:eb:e9:31:8d:66:c6:e2:d3:73:7c:bd:7e:ba:f0:f8:9b:b8:d5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www-legacy-stage.oracle.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-legacy-stage.oracle.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-legacy-stage.oracle.com
developer.cloud-stage.oracle.com

Other certificates including the domain name oracle.com

(limited to 100 certificates)
dockerhub-eloqua.us.oracle.com
uingv4001.us.oracle.com
wfivm01803.us.oracle.com
monacotest.us.oracle.com
cdpap.oracle.com
msp00adi.us.oracle.com
brmdc-ise-mg-3.aaa.oracle.com
aqaoraapp7.us.oracle.com
kkm00edj.in.oracle.com
den01xjs.us.oracle.com
www-stage.oracle.com
academy-stage.oraclecorp.com
hq-bps-staging-2.us.oracle.com
test.oracle.com
*.db.dc2.c9qaga.us.oracle.com
brmdc04-102-ja2500-1-vip.us.oracle.com
unifiermobile.in.oracle.com
wfdmzvm00629.us.oracle.com
opnec-vpn-us.oracle.com
slc17jyk.us.oracle.com
stg-cloud.oracle.com
championsnews.oracle.com
desktop-alt.osc.oracle.com
tyo-ips-2.jp.oracle.com
ilearningtest.oracle.com
adc-ips-11.us.oracle.com
appwfdmzvm00536.us.oracle.com
whq-ips-1.us.oracle.com
den02pil.us.oracle.com
lb-iad-peonetworking2-gxp-prod.oracle.com
llg00cej.uk.oracle.com
dev-project-log.us.oracle.com
leochat.us.oracle.com
download-secure.oracle.com
aqaoraapp16.us.oracle.com
gmp-dev.oraclecorp.com
pout.no.oracle.com
slc05cty.us.oracle.com
osnstaging-prod.oracle.com
msp52859.us.oracle.com
sgdsca.osc.oracle.com
den00sen.us.oracle.com
brmepoapp02.us.oracle.com
adcfodldap02.oracle.com
utiltw.tw.oracle.com
retailfortify.us.oracle.com
psfdr-prod11g.us.oracle.com
oecet.oracle.com
busgf1203.us.oracle.com
hidmp0761.us.oracle.com
ca-oltf-services-ps.us.oracle.com
den02mbg.us.oracle.com
gmp-dev.oraclecorp.com
utilhk.hk.oracle.com
llg-q2-ips-2.llg.oracle.com
auc02mgr.us.oracle.com
rodgwf02.oracle.com
ngcc-sit-integration.oracle.com
www-legacy-stage.oracle.com
aolesc34.us.oracle.com
odc-addthis-prod-01.oracle.com
jpidgv0001.jp.oracle.com
rws3270880.us.oracle.com
busgl0910.us.oracle.com
jiuhua.cn.oracle.com
*.us1.cloud.oracle.com
bma.us.oracle.com
den02azy.us.oracle.com
hdssimphony.uk.oracle.com
jpsh-expc-2b.jp.oracle.com
salescentral-dev.oraclecorp.com
slc01bgk.us.oracle.com
docs-uat2.us.oracle.com
den00lkj.us.oracle.com
msp00bcg.us.oracle.com
epdc01odgwe02.oracle.com
omm-stage.us.oracle.com
mandaprimavera.oraclecorp.com
dnovmlx44.us.oracle.com
pqa-stage.us.oracle.com
aserp2010.oracle.com
osnstaging.oracle.com
retriever.us.oracle.com
ospct.oracle.com
kkm00ckx.in.oracle.com
slc04yqt.us.oracle.com
mydesktop-mig.oraclecorp.com
championsnews.oracle.com
apex-ext-stg.appoci.oracle.com
rgbu-mfpeecs-qaedc01ab-ext.us.oracle.com
wfdmzvm00555.us.oracle.com
slc10akr.us.oracle.com
lb-drc-nonprod-int.oracle.com
utilus.us.oracle.com
den00gyi.us.oracle.com
userp2040c.us.oracle.com
slc040oodstor17.us.oracle.com
rws3270872.us.oracle.com
*.db.dc2.c9qaga.us.oracle.com
jdash.se.oracle.com

Certificate

The complete raw certificate details for www-legacy-stage.oracle.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVMXl3VmPvVq9m/woprU
8mUJAwDIU3g3G2vtZlIMCz2JjJrtaXUdXPJwo2HIkplUZPcrDUyhGr25Gd0/mnk4
iDqM2Enz2i6+wjmQjnScLfOf5G6x88RbgHVrBU2TZYhyNino9ZRN27Lq+ulms5Wl
Hh7jIUlpGR0Jf8uZ8neDcf8dDidSavbYxJydMBu4o1qKELjfqpLLDXc+GAh+41bv
uoCZp8ldOumchrq+XRnm9UZ/tUzHo0TUMHDSY/ndk0cFxyMrDA9aJoXpAZOv8Dji
2scvw8Sr1b3WMXh4eDfRppXigWcIF4QYdsz0demxZbKlrA18v+aVYUpqx+uJ0Dtu
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19582212042313338762179658047559238219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood Shores'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Content Management Services IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-legacy-stage.oracle.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23900013907261045109038085555796429894324456594684416016704222932509574894735807798343739035169319036470412516471750520982663458117594316970892114772522614479242648293778560770782178186407090793532462482196688938132162230771379432687717432244636479473284400688966233445490773767813291205173453998127581065343647805201173577057393986914368796503446153404470072305053219014982133783748795697589894388265189924836064159347792310391756806655877371956559120998914699549237484236907007469886637255441509761825489972337382475750824797468739106798228856332369437094998716671811121356980796136443537592016427595023600863375007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f73db3d94b3852adec5aed213c3a414d29b7228b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-legacy-stage.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.cloud-stage.oracle.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000aaf72bb5d7dfd44e5601f32efac0eb48a68c4a8056bd90e3c391b8e80592919f86203ed57c2b1202a988384069bb4c05dbc60da892922eb0d267bb4999351f62c14c9b5f213becd40a5a758c957b3650f7c8d982cd772ba67367e3d618104d74b476138e51b57631fe158149ebe66595d94727f0d17672663e0dfb8689bc88988b96818b23d5c563c29f5ef22720d1c84f42717d1ef39243a2f0fbfd063e88300366ae95db6054658fa7223478fec8cae692de72dbaafef2df9670044d5408def40a3d598a92cd9953675437c750a490543ef728463bd7b1fbf932fe03223e6a9e3b5150a4fdeda3d851b1e121c91f3b88d37d50f61ddd73644cc325f47654a