test.atos.net

- Atos -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number b9:f5:2b:2f:fa:f6:2d:ca:00:00:00:00:50:dc:5b:a4 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Atos

Organization: Atos
Organization unit: Atos
Locality: Bezons
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b9:f5:2b:2f:fa:f6:2d:ca:00:00:00:00:50:dc:5b:a4
Serial Number (int): 247180167895555928888141872363787279268
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a9:50:6d:a6:2f:ed:81:b1:de:83:54:4b:03:36:10:ee:ba:74:62:9f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 29:af:8e:94:13:cb:22:2e:50:88:08:39:58:ea:52:76:df:12:45:71
Fingerprint (sha256): 02:00:a9:4d:ea:2e:08:df:97:d5:65:18:d5:62:8e:28:bd:52:37:0d:6a:19:69:7f:5f:e9:7e:66:ea:c3:81:5e

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate test.atos.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test.atos.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test.atos.net

Other certificates including the domain name atos.net

(limited to 100 certificates)
*.it.atos.net
liv1-portail.pmu.aw.atos.net
nc1.saas.cloud.atos.net
liv.prg-396-ws-scv-client.aw.atos.net
saml.top.br.atos.net
ctms.it-solutions.atos.net
digitalevents.atos.net
stg-ssl-belux-lsf-renault-admin.aw.atos.net
uc-emea2.myatos.net
ura-eu.it-solutions.atos.net
edf-smartpush.aw.atos.net
rci-lux-ws.aw.atos.net
bpa-eu.atos.net
ssl-prd-bo-bnpp.ewallet.aw.atos.net
inss-mdm.ascs.uk.atos.net
wl-amr-client-acceptance-00020.aw.atos.net
hrit.atos.net
management.onprem.mdsp-infra.siemensmac.sg.mdsp.atos.net
stg-api-mcdofidelite.mcdo.aw.atos.net
globalsurveys-to.aw.atos.net
*.adminhosting.onprem.mdsp-infra.acc.mspas.atos.net
*.mev.atos.net
e-web.it-solutions.atos.net
bxn.click2procure.atos.net
qlf3-ws-mcdonalds-fr.aw.atos.net
cert00003-azurecdn.akamaized.net
VEES-EMSD-GOV.hk.atos.net
ssl-prd-fo-m2m-oob-saas.sea.aw.atos.net
wes-eviewing.aw.atos.net
events.nl.atos.net
enroll.pki.atos.net
rmttest.cloud.atos.net
awx.develop.dev-bm4gcp.agea.atos.net
ic.es.atos.net
aea.atos.net
enc-prd-paylib-p2p.ewallet.aw.atos.net
echangeqa-na.it-solutions.atos.net
Paylib-PROD-Signing-54251007.ewallet.aw.atos.net
hochtief.it-solutions.atos.net
www.sharepoint.atos.net
mantiscalipso.si.fr.atos.net
amobt-na.it-solutions.atos.net
uniqueid.pre.uid2020.mev.atos.net
portailmen.bs.fr.atos.net
tls-ecc-root-2021-pki-valid.atos.net
portail.pmu.aw.atos.net
apfws.atos.net
public.dev-mbnsei.aw.atos.net
nexus3.ic.es.atos.net
test.atos.net
*.adminhosting.onprem.mdsp-infra.siemensmac.sg.mdsp.atos.net
tls-ecc-root-2021-pki-valid.atos.net
zsa.egk-tsp.de.atos.net
lab.it-solutions.atos.net
nokia-epm.it-solutions.atos.net
smc-collaboration.atos.net
apps.fi.atos.net
ctms2.it-solutions.atos.net
mta.cpp.a3c.atos.net
xauth-fidm.access.it-solutions.atos.net
sap-web-totalsva-stg.aw.atos.net
ws-tnr-wiremock-stub-server.factory.fr.atos.net
sepaplug-sepamail-ced.aw.atos.net
ura-aa.it-solutions.atos.net
*.servicetrace.it-solutions.atos.net
ssl-tec-client-web-bo-m2m-wallmngt.germany.ewallet.aw.atos.net
qlf-gpp3-www-geoportail-wp-fr.aw.atos.net
mdr-poc.aisaac.atos.net
generic-portal.it-solutions.atos.net
gateway2.es.atos.net
ucloud.atos.net
qlfv2-www.auchandrive-fr.aw.atos.net
letsencrypt.qlf-dpsk.aw.atos.net
serv-handyline.it-solutions.atos.net
*.sdc.atos.net
dataviz.aw.atos.net
atf-srp.it-solutions.atos.net
SIRON-AML.SI.FR.ATOS.NET
mp.it-solutions.atos.net
ssl-prd-fo-mob-oob-saas.sea.aw.atos.net
smartpush-ihm.aw.atos.net
qlf-gpp3-www-geoportail-wp-fr.aw.atos.net
selfhelp-uat.ms.atos.net
bea.it-solutions.atos.net
cert00003-azurecdn.akamaized.net
www.e-travel-counter.it-solutions.atos.net
portal.onprem.mdsp-infra.siemensmac.sg.mdsp.atos.net
www.enduzd.com
liv-txm-h2h.cwi.aw.atos.net
gpp3-edito-geoportail-wp-fr.aw.atos.net
qlfv4-www.auchandrive-fr.aw.atos.net
cert00003-azurecdn.akamaized.net
gitlab.auregis.it-solutions.atos.net
qlf-lsm-mcdonalds-fr.aw.atos.net
netviewervs2.it-solutions.atos.net
cpo-lb.it-solutions.atos.net
obelix.atos.net
qlf3-www-mcdonalds-fr.aw.atos.net
skillbuilder.dcsdev.aws.atos.net
ref-fidm9.access.it-solutions.atos.net

Certificate

The complete raw certificate details for test.atos.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iQkPjQsOeVu62nVJkIP
EeF29yQdyKHrbVDvL/w1PJKc1jFmqvT71awF5m8QV8TAQXP/ZG4/xOegRPOE/fRh
YTupEwdn4OIGpf2Pd2UvPFB1TNvIVfp2S09HoP94aPpbzPesDskLPlR8ANb8kGJO
VaOdYVPwNiTnt8/Om4jaPwo4vX5O31k9KtI3Zxu0dnnxdmXKWGFoxkJMHRIPr1gJ
pCH9wQJtEyckQAia5i6mFAkdN5i7Druh1Q7h3QxoGKEE4Jd2lKWUM6DnkMNujGWE
SxI2k3eld0pgY2iDyxjXig3piXx4mL+nGpQ9k4f29DGk1wwHetJRK6mv8Vfheiqt
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 247180167895555928888141872363787279268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-27 12:21:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-27 12:51:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bezons'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atos'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atos'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.atos.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26527866117325785161436654015433951229040320860191479135889320084083356935624310129675272129737442220953492768685213286276907669844117771391487066066275647942987035539330911561176732832429478053756180386333528704319927743567151333542565251661322838506912068512462475930814320940572336138475537599867636598770803782381835527074340437558429559571744710008732235484917301656018815168133191329234955540350620737447350427244940315784927198532103160599134123921897427025058456100053515899416516637872622400516474268129450822819076621928630704257010262536008472232856736498226758593179718202390239219661262796816993686826343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.atos.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9506da62fed81b1de83544b033610eeba74629f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006907ef2ea19cb67998b6b7babf51831d73d0e6789a9bd9ab2d7e56e8724ca1585b6a005da1dc51541f9c35f8b57830e77e0a736daaafdfcac6d33b2ff9042edaef3d4e46d0d574366512aa810e9e0bc1b2e4ba9bee0624bd17d06d9a579846ccfa90ccf30e94581939ff04b84b1a2a3c600b8eda0cb732010b4446954994e07466ff998d98752301ebadc8094427bceb465e0315a25a4c9f832d7ac6755bef9fb4201c5563ae7213feb68b625fe8957158dc9f67aef0c333548c1aa26a804326fe5019de4c4aca78d6d987e98a81c1eff05ffad0d887661ad13534d66d3ea07c98bd591ef40557b96ec8ed6c2202c224a6729521938be4df3bfe4753ececc4cf