identity-us.ihg.com

Issued by Amazon

About this certificate

This digital certificate with serial number 06:da:83:af:14:ab:5d:ae:3a:3c:70:58:4b:a9:45:32 was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=identity-us.ihg.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:da:83:af:14:ab:5d:ae:3a:3c:70:58:4b:a9:45:32
Serial Number (int): 9109959556853474931120837664730334514
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6b:26:d0:37:51:49:ac:8f:1a:80:33:71:c9:2f:a9:47:d1:80:da:40
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 88:c9:60:63:a6:5b:84:b5:b7:7b:5e:b3:4f:03:0d:d8:66:e9:3e:03
Fingerprint (sha256): 01:d1:32:7e:88:f8:97:b5:12:1c:30:73:7f:26:b4:8f:7b:e3:66:f2:3a:f6:8e:b6:00:a1:83:7e:ae:5e:a7:85

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate identity-us.ihg.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for identity-us.ihg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

identity-us.ihg.com
identity-us.evenhotels.com
identity-us.vocohotels.com
identity-us.holidayinnclubvacations.com
identity-us.ihgarmyhotels.com
identity-us.crowneplaza.com
identity-us.avidhotels.com
identity-us.kimptonhotels.com
identity-us.staybridge.com
identity-us.holidayinn.com
identity-us.regenthotels.com
identity-us.holidayinnresorts.com
identity-us.staybridgesuites.com
identity-us.candlewoodsuites.com
identity-us.hualuxe.com
identity-us.holidayinnexpress.com
identity-us.hiexpress.com
identity-us.ihg.com.cn
identity-us.hotelindigo.com
identity-us.intercontinental.com

Other certificates including the domain name ihg.com

(limited to 100 certificates)
innovationrollout.ihg.com
projecthorizon.ihg.com
rca-wb.ihgext.global
int.gamification.ihg.com
sbrp.ihg.com
secure.icare.contact.ihg.com
meetings.ihg.com
*.n.c1.ihg.com
www.ihg.com
miceasia.ihg.com
akamai-san108.exacttarget.com
dcad1-dev-rsp-gw.ihg.com
im.ihg.com
reef.ihg.com
identity-us.ihg.com
aliai.gccloudpms.ihg.com
remote.ihg.com
commerce-np.ihg.com
cmsqa.ihg.com
lcus.ihg.com
ihgapsuite.ihg.com
int.secure.icare.contact.ihg.com
finland.ihg.com
aliaz.gccloudpms.ihg.com
ldgw.ihg.com
m.ihg.com
hoteldevelopment.ihg.com
www.ihgmerlin.com
armyhotelsblog.ihg.com
secure4s.scene7.com
*.p.pi.microservices.ihg.com
misc-prod.ihg.com
qcprod.ihg.com
www.ihg.com
citrixhosting.ihg.com
ihgbusinessh2.lawcreative.co.uk
support.ihg.com
dev-sec-apis.ihg.com
dev.b2b.ihg.com
m.ihg.com
sso-qa.ihg.com
qa.www.ihg.com
securecn.scene7.com
dev02.guestapi.ihg.com
gmailsso-qa.ihg.com
redirect.ihg.com
givingforgood.ihg.com
qa.www.ihg.com
brincentive.ihg.com
mi.ihg.com
securecn.scene7.com
samlfederate.ihg.com
perf.www.ihg.com
www.globalcatalogue.ihg.com
qap.hcm.ihg.com
int.www.ihg.com
qap.www.ihg.com
staging.www.ihg.com
concur.ihg.com
es.development.ihg.com
misc-prod.ihg.com
qap.www.ihg.com
utc.secure.contact.ihg.com
MBWEBSERVICES.IHG.COM
apsuite.ihg.com
dcad1-dev-r08-sl-elb.ihg.com
misc-prod.ihg.com
stg-b2c-wb.ihgint.global
armyhotelsblog.ihg.com
cem.ihg.com
aliai.gccloudpms.ihg.com
m.ihg.com
meetings.ihg.com
cruise.ihg.com
qa.secure.icare.contact.ihg.com
dcad1-prd-f61-wb-merlin.p.ni.c.ihg.com
longviewqa.ihg.com
apigee-x-int.ihg.com
eprize.com
commerce-np.ihg.com
myid-stg1.ihg.com
apigee-x-int.ihg.com
secure.switchfly.com
www.ihg.com
misc-prod.ihg.com
escap.ihg.com
staging.www.ihg.com
secure.switchfly.com
www.ihg.com
akamai-san108.exacttarget.com
mysupport.ihg.com
dev-esbproxy.ihg.com
ssorest.ihg.com
www.ihg.com
securecn.scene7.com
qa.www.ihg.com
int.secure.icare.contact.ihg.com
securecn.scene7.com
flare.ihg.com
qap.www.ihg.com

Certificate

The complete raw certificate details for identity-us.ihg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrIxy9ZdWG1HP2qfdj+Z
NxS9IrzIYdmPXE4fmVJRqUHJEJ+KWNIx7GSuVi6FAL847e/zitRe0p61eTYSE3A2
jvrrd5W3CuMM/VcAXjrUDCquc9JhZNlJmTkfeI933s7jVovMe+r7/AOs6F/eekwL
sb+2f2O/Oo3x6sSdOkszg/5X0/POIdxO6OcG+4BFmAWQMnM1EF8JO3J+4Rp64aMZ
hEgpTx24Ele/lbl8WH+LaDcmsy5EfZCq/iNIlmJs7hJYEmZ+9bDIc+I6+Go80mcP
8Sb14NsYWQ+rKuOZ4rhMRTc/We95TOV1EsJYxg6NmA24Hj++qxoFiOw8AabD6vMi
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9109959556853474931120837664730334514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'identity-us.ihg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24073148934664207372311275225535366606473731923125129374151826173336550664821871693147550929230170727117470874912530814059448951044907765475016638297441322729665026662862509590827163816584050975853093200958239685999914176408690224728788628818188958701614972902418121430770398861238620668330104865225939314659520655984156016480666695350327360007976600904516770928278817061719396861756891037072650084659968284897190452548082905309026294613022827271114452054202262726636951933280939310717907288602105158007459701690200978132290244384888656282870808422062703038504685867969886961579262139941011349570336790389950111752733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b26d0375149ac8f1a803371c92fa947d180da40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.ihg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.evenhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.vocohotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.holidayinnclubvacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.ihgarmyhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.crowneplaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.avidhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.kimptonhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.staybridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.holidayinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.regenthotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.holidayinnresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.staybridgesuites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.candlewoodsuites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.hualuxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.holidayinnexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.hiexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.ihg.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.hotelindigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-us.intercontinental.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016cff11aba50000040300483046022100a1acd177742c02a94d2db95e7b085174666fd5649d412b2ccebbc91f9fd17c70022100aa467531c8fe1e90d874c8d838ed6f025ae36801c7323a13c157e6d08ad0e00f0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016cff11ac3000000403004730450220477d3ab846bdcb5d9b947d9f2d1be7ff01f4c72ab3df1db7952ae554b2a7974a022100a2142e537680886a2b2650dd9a8e62f6146a0dc72fe91dad965cfce7ca3a044c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002d19e3bd94318e0e731d59f25ba5b1c9356cf2a8f41f367f6d0cf9e8746f4d2229a2aea32abe555d045dac86f2755017d3a5d97034777015f8fe7b30f91bd94e2d6344ac61cdc1f46ecb11de76d2c9718b6bf92fcb80f4ae2bf76ccfb3b45d4e54bd107df1bb9e42ea66cecca0710cfdf595f56cce458a8fe9d8103172a3deb283e4761fa1432f3c75bba6851600d48bce284fd324a01d32c0b93ac1586abcec1e30348b79ad1a53b2a2049ca782468e000551c58d378fde40b5c085082704164b479f9984a1dd46b12f3a7db73b44540971cefb9849461c354a5945b4792b23388077032ac977f23322561fd880419046efe05a15a5803ff29e1c17e9c427dc