api.qa.pmi.spglobal.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 08:a5:7d:74:77:df:86:4d:0f:30:28:55:2c:18:5c:7b was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.qa.pmi.spglobal.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:a5:7d:74:77:df:86:4d:0f:30:28:55:2c:18:5c:7b
Serial Number (int): 11493097476703822500520685382103751803
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c8:53:8a:48:f7:f6:73:92:66:b9:5d:ff:a2:2d:03:e4:3d:f9:9c:ee
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 5e:51:f1:d5:12:a5:c0:36:80:c6:c6:f8:01:fe:ba:e2:ce:42:14:23
Fingerprint (sha256): 02:34:f7:a1:f4:77:be:1d:6e:58:06:d3:59:28:18:f2:5a:84:f6:d0:03:5e:f7:a0:46:af:36:b4:f4:f6:f1:e6

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate api.qa.pmi.spglobal.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.qa.pmi.spglobal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.qa.pmi.spglobal.com

Other certificates including the domain name spglobal.com

(limited to 100 certificates)
Lync2013EMEADRExt1.spglobal.com
accredible.tutor.com
*.jiveon.com
VA06MSG6003.spglobal.com
qa.np.ebb.spglobal.com
aonhrlearningcenter.credentials.aon.com
fdus-74.freshdesk.com
info.spglobal.com
academy-achievements.gong.io
sloft.spglobal.com
spglobal.com
nj09msg071.spglobal.com
*.module1-dev.micld.spglobal.com
stage2.www.spglobal.com
webmail.spglobal.com
leapfrog-ssl-1.gcs-web.com
api.qa.pmi.spglobal.com
academy-achievements.gong.io
*.module-dev.micld.spglobal.com
myreward.spglobal.com
*.jiveon.com
lync2013namdraccess.spglobal.com
*.spgi.spglobal.com
edx.standardandpoors.com
ew-aces.spglobal.com
cdn.spgi.spglobal.com
vgsathostedapps.taxsolutions.spglobal.com
webinspect.spglobal.com
rapcustomerportal.pde.spratingsvpc.com
public-davos.dev.capitalmarkets.spglobal.com
ratings.spglobal.com
sftp-qa.spglobal.com
aonhrlearningcenter.credentials.aon.com
*.xplore.spglobal.com
dcr.infomosaic.nrsdevops.spglobal.com
learning.spglobal.com
support.kot4x.com
api.prod.pmi.spglobal.com
*.aws-east-1.container.spglobal.com
sftp-qa.spglobal.com
nj12msg043.spglobal.com
*.spindices.com
webconf.spglobal.com
academy-achievements.gong.io
spglobal.com
learning.spglobal.com
*.marketintelligence.spglobal.com
uat.eventsplanner.spglobal.com
trial.marketintelligence.spglobal.com
sloft.spglobal.com
edxuat.standardandpoors.com
internal.qa.pmi.spglobal.com
aonhrlearningcenter.credentials.aon.com
razor.spglobal.com
spratingsvpc.com
interactive.spglobal.com
accredible.tutor.com
spindices.com
*.api.corp.spglobal.com
sso.spglobal.com
connect.spglobal.com
*.marketplacestage.spglobal.com
platform-b-prod-eu1.solprod.spglobal.com
*.mistagecld.spglobal.com
share.spglobal.com
academy-achievements.gong.io
stage.www.spglobal.com
*.internalstg.spglobal.com
myreward.spglobal.com
thehub.spglobal.com
*.platform.micld.spglobal.com
accredible.tutor.com
uconnect.spglobal.com
redirect.researchmanager.spglobal.com
www.marketintelligence.spglobal.com
*.pmc.spglobal.com
www.capitaliq.com
sloft.spglobal.com
share.spglobal.com
uk.ldap.spglobal.com
spkhett.spglobal.com
*.jet.spglobal.com
accredible.tutor.com
VA06MSG6006.spglobal.com
www.marketintelligence.spglobal.com
sso.spglobal.com
*.dev.spglobal.com
sf.spglobal.com
app.ratings.spglobal.com
stage.www.spglobal.com
*.api.marketintelligence.spglobal.com
*.marketintelligence.spglobal.com
fdus-74.freshdesk.com
recognition-cdn.spglobal.com
myreward.spglobal.com
*.marketplacestage.spglobal.com
*.stage-ash-w.container.spglobal.com
VA06MSG6004.spglobal.com
plattsreporting.spglobal.com
dw8apiint.taxsolutions.spglobal.com

Certificate

The complete raw certificate details for api.qa.pmi.spglobal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIQCKV9dHffhk0PMChVLBhcezANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMDgzMDAwMDAwMFoXDTI0MDkyNzIzNTk1OVowIjEg
MB4GA1UEAxMXYXBpLnFhLnBtaS5zcGdsb2JhbC5jb20wggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQCT7u6FJ95g/lhYOG7cyVla7dQ7cv0/z8rPABPGQZh2
+rs6q6puCM1X2OvOu0exX1I2AQSOEsh8cHidMQtNaFZ/0uKqHl1FJHq1HIpKTSPt
lsYaLqSzpTU1bT6V+cnHQC/yh9Bhg0WobarJUmua+M20jUTdmKrV4ebdmMl5RQiX
6tje9uzS3DikuirinF9duP7NhUfthFFkZf2DuBfBOKg97ol+slRgVIbtPq3ojdX6
PEJgy4SGYF7lZv2oZ7tkWADfo7p+ELjDasV7EiiB6OBNu7i/OlFIOY3gpIoWpEl+
mz/wWtyOgu3t4nbUODrzkuBqLLYjgChlJeW1WrMsyQoVAgMBAAGjggLwMIIC7DAf
BgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUyFOKSPf2
c5JmuV3/oi0D5D35nO4wIgYDVR0RBBswGYIXYXBpLnFhLnBtaS5zcGdsb2JhbC5j
b20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0
LmNvbS9yMm0wMy5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEE
aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250cnVzdC5j
b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1c3QuY29t
L3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFq
AWgAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYpFlEA2AAAE
AwBHMEUCIQCQzkmyvkCTiCAbzJRTXd77pVOpMGVquXEH5HB8etfVJQIgLpyWBouE
yomy+3IqBAGIvHc0KQmvhgSHh+yV7AI18cwAdgBIsONr2qZHNA/lagL6nTDrHFIB
y1bdLIHZu7+rOdiEcwAAAYpFlD52AAAEAwBHMEUCIQCL3KMNiT4O+2VU74O1s2qk
EegAQ1rWs5ScdPcQjM5w5AIgJy16ulHHGQdB8ChjBwj5HAcl32JQrbrKaCnIO46h
MCMAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYpFlD6LAAAE
AwBHMEUCIQDJLuGCEHXH8nCFgUxP8cwkMB+ET+CQeoA4HqQsbok1HQIgclp8jjci
X9wxvM2ekuGGolegKQHGLtEkBIzex+3/rkUwDQYJKoZIhvcNAQELBQADggEBABAx
tBOeaws4nqex1BlJjebP4ywQP7Xf1mYHjIMW6R2xvqC7gr/AYmXeG9rZiZ8li0vk
hDDTkE+Q0qLEkYPLD6HmWde707zki7vBUxUoIBIePn9zEopqheK8DP0F+AhyFZN1
cprkyx2bwxtc7yzHXBbviOOOrFFT3GvMYTSehyT9XQl+HXcu/g+ltFz9HbDEle/H
PbQtUzi27HD7DyxLyO3yO1mt2W3EWWfM9xfZPbuVz8o1TBElJ21ZLGG4VF0iu/7A
miH+mWK1u17ysFq+K3LaHsJWjr2z0A6OCZPGcKVH6NTbAV5OElYDE7SnWdBWJDGo
0IytKzlgJwIUOyVdT2M=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+7uhSfeYP5YWDhu3MlZ
Wu3UO3L9P8/KzwATxkGYdvq7OquqbgjNV9jrzrtHsV9SNgEEjhLIfHB4nTELTWhW
f9Liqh5dRSR6tRyKSk0j7ZbGGi6ks6U1NW0+lfnJx0Av8ofQYYNFqG2qyVJrmvjN
tI1E3Ziq1eHm3ZjJeUUIl+rY3vbs0tw4pLoq4pxfXbj+zYVH7YRRZGX9g7gXwTio
Pe6JfrJUYFSG7T6t6I3V+jxCYMuEhmBe5Wb9qGe7ZFgA36O6fhC4w2rFexIogejg
Tbu4vzpRSDmN4KSKFqRJfps/8FrcjoLt7eJ21Dg685Lgaiy2I4AoZSXltVqzLMkK
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11493097476703822500520685382103751803
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.qa.pmi.spglobal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18674852452067122095066901980973292661718410695281866050781261420475834916103067134181275328437686549775255055375348195464650242019597364008386371274749323541711415494903435683952797966723030036724369906506698158912687807896792427675028387583628499700800910086870300639470621780647320559631360188642854761941947183846718147006046665495377260923675815731683488296104906917421650541162762588362095870713115862779195410760218470897758126001369378703890072842395956842336958702159041984449300840130632821616680181867756819850272762401128804298353187925710094235258758065835093256353799088073479562707197521301207784163861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8538a48f7f6739266b95dffa22d03e43df99cee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.qa.pmi.spglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001031b4139e6b0b389ea7b1d419498de6cfe32c103fb5dfd666078c8316e91db1bea0bb82bfc06265de1bdad9899f258b4be48430d3904f90d2a2c49183cb0fa1e659d7bbd3bce48bbbc153152820121e3e7f73128a6a85e2bc0cfd05f80872159375729ae4cb1d9bc31b5cef2cc75c16ef88e38eac5153dc6bcc61349e8724fd5d097e1d772efe0fa5b45cfd1db0c495efc73db42d5338b6ec70fb0f2c4bc8edf23b59add96dc45967ccf717d93dbb95cfca354c1125276d592c61b8545d22bbfec09a21fe9962b5bb5ef2b05abe2b72da1ec2568ebdb3d00e8e0993c670a547e8d4db015e4e12560313b4a759d0562431a8d08cad2b39602702143b255d4f63