*.din15.teleflora.com

- Teleflora LLC -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 05:13:b2:d9:63:a1:65:4e:72:f6:96:eb:5d:60:c7:ed was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Teleflora LLC

Organization: Teleflora LLC
Organization unit: EBusiness
State / Province: California
Locality: Los Angeles
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:13:b2:d9:63:a1:65:4e:72:f6:96:eb:5d:60:c7:ed
Serial Number (int): 6748421111491588117573734328038377453
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 52:7b:8f:a0:e6:40:26:19:11:f8:5d:22:7f:dd:59:77:3d:e2:78:a8
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): a9:ef:74:b3:9a:78:db:d9:7c:1d:70:1c:09:e2:bb:26:ff:11:7f:62
Fingerprint (sha256): 03:e5:50:fd:6d:88:e4:6f:36:32:61:08:3d:3b:74:60:38:84:55:dd:43:4d:e6:fa:5d:fb:55:77:31:fc:32:93

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.din15.teleflora.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.din15.teleflora.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.din15.teleflora.com
*.efin.eflorist.com
*.efin.telefloristonline.com
*.integration.eflorist.com
*.integration.teleflora.com
*.integration.telefloristonline.com

Other certificates including the domain name teleflora.com

(limited to 100 certificates)
stg.orderinterface.teleflora.com
san.cloudinary.com
www.teleflora.com
m-dfs.teleflora.com
autodiscover.teleflora.com
san.cloudinary.com
altiris.teleflora.com
s5-san.cloudinary.com
*.teleflora.com
san.cloudinary.com
m-mkconnections.teleflora.com
*.din15.teleflora.com
m-savings.teleflora.com
*.dev.teleflora.com
cloudinary-pin-sni.map.fastly.net
stg.mydoveapp.teleflora.com
m-savings.teleflora.com
m-frontierairlines.teleflora.com
s5-san.cloudinary.com
s1-cloudinary-pin-sni.map.fastly.net
s1-sni.cloudinary.com
s5-san.cloudinary.com
*.teleflora.com
m-employeeorder.teleflora.com
estgweb.teleflora.com
estgweb.teleflora.com
www.teleflora.com
san.cloudinary.com
webmail.teleflora.com
assets.teleflora.com
assets.teleflora.com
s5-san.cloudinary.com
s5-cloudinary-pin.map.fastly.net
cloudinary-pin-sni.map.fastly.net
fr.teleflora.com
s5-san.cloudinary.com
blog.teleflora.com
s5-cloudinary-pin.map.fastly.net
m-amtrak.teleflora.com
cloudinary-pin-sni.map.fastly.net
san.cloudinary.com
www.teleflora.com
s5-cloudinary-pin.map.fastly.net
assets.teleflora.com
homemade.teleflora.com
tws.teleflora.com
e.p.teleflora.com
s5-cloudinary-pin.map.fastly.net
san.cloudinary.com
san.cloudinary.com
m-amtrak.teleflora.com
*.teleflora.com
twsstg.teleflora.com
s5-san.cloudinary.com
posimages.teleflora.com
cloudinary-pin-sni.map.fastly.net
s5-san.cloudinary.com
s5-san.cloudinary.com
assets.teleflora.com
cloudinary-pin-sni.map.fastly.net
posimages.teleflora.com
san.cloudinary.com
s1-cloudinary-pin-sni.map.fastly.net
m-perkopolis.teleflora.com
*.qa.teleflora.com
cloudinary-pin-sni.map.fastly.net
san.cloudinary.com
fr.teleflora.com
s1-cloudinary-pin-sni.map.fastly.net
cloudinary-pin-sni.map.fastly.net
cloudinary-pin-sni.map.fastly.net
s5-san.cloudinary.com
m-unionplus.teleflora.com
m-savings.teleflora.com
www.aafes.teleflora.com
blog.teleflora.com
s5-san.cloudinary.com
san.cloudinary.com
m-gettington.teleflora.com
cloudinary-pin-sni.map.fastly.net
s5-san.cloudinary.com
cloudinary-pin-sni.map.fastly.net
*.teleflora.com
omnistats.teleflora.com
m-jcpenney.teleflora.com
dvm03.dev.teleflora.com
s5-cloudinary-pin.map.fastly.net
san.cloudinary.com
san.cloudinary.com
san.cloudinary.com
estgweb.teleflora.com
san.cloudinary.com
stg.mobilesolutions.teleflora.com
fr.teleflora.com
m-hawaiianmiles.teleflora.com
san.cloudinary.com
m-perks.teleflora.com
www.teleflora.com
assets.teleflora.com
s5-san.cloudinary.com

Certificate

The complete raw certificate details for *.din15.teleflora.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmohng5rFZ/JdUFMxBVYJ
8dwU1EysG8wHi4pzl+ZjY9hMK+wR0OQeELrBp6LDf546J8h1JXolTJs4DFWrluDF
usPAF+JtFAas+lYNMbrTJNYQnMyBiHM+OBdoG3+ZJ0tfgQij7Gg6wM9afKTpHFys
KMBd2ozvrTB/im2EsaXdj5r0S4v9Y14xfYdWCh5zbbGhDN4oHIJkT/pbuGj510FL
hF04DwMWSwdlOMoOKPe0q5RZ+wGQDZDEaPmsjJEAdqbdV0JEkMS1D5sv5Bmriv5i
DPMrTCXb7af5G/3C9XHsyisz5Xca3vqBXRz0YFGfuP3Pth23AnCI22eTDz7FaocC
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6748421111491588117573734328038377453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Los Angeles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Teleflora LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EBusiness'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.din15.teleflora.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19507962457628012952427445031371170290673928060162672935853019203942411882420326086597451608923224482458066838211200750436585078138404055698598400607970507244694501215278133327017857634483088137154762454757403148936863960979537476564003753324330919113829155458581324611477543442348490904545828706095553734408362253177057342318753935562368538815071791079448651020608485007063158025314263342738013545307002469461516179716079968097746224958567417039320687501029573107473524325544475404983853839647744952411853576482055313988111952592051543127517267171440093284911503721083847608736297611075124587422580591312001439302223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							527b8fa0e640261911f85d227fdd59773de278a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.din15.teleflora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efin.eflorist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efin.telefloristonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.eflorist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.teleflora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.telefloristonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00050872f6a10d2a90c68fa52106815ebed875153530aa7ef1e3d9174f77413f15ba18161f2420113b06e5a747073f7bfc189a395eb6d28dbd24a443f660861691e606d9301e2e283a134f0d7e145b5c997082d29a1fdfd553671b46874129b8f29cac08ce1d74726578802803d563b088657c8bca1104a123935f2430edffc8fe9232ce44c6fc004311b61ca0a01fc08e7e6fd7cd90f67bd566bcf8d8ea5128211f7b14ce498f8672274f939bcf3d6580f29b6efc479ed22688c1252b8ec3d009472bd7e78715b4f979c640f7fcc221cc0181716b8aa3cc4b8fa20473f10e6c2c4231c42a5557221d42d2004da8b66acfe28d5d6a3efdafc183997d6c0947cf80