solrrequesthandler-uat.statestr.com

- State Street Corporation -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0f:a0:2e:55:fe:42:a3:44:25:78:1a:2a:b7:38:32:3b was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State Street Corporation

Organization: State Street Corporation
Organization unit: Internet Technology Services
State / Province: Massachusetts
Locality: Quincy
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:a0:2e:55:fe:42:a3:44:25:78:1a:2a:b7:38:32:3b
Serial Number (int): 20770127238064644804961636835093131835
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 14:8c:21:3c:33:77:05:5f:54:7c:c5:e6:84:a9:5a:fe:21:0c:1d:64
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): c7:4d:21:0d:17:10:b7:19:00:c2:f1:25:46:6c:5b:1f:34:83:1e:b6
Fingerprint (sha256): 04:84:d8:df:d7:5c:03:9b:c5:e3:c7:0a:73:a0:39:1f:04:1d:0e:98:41:bf:6a:0d:4c:d4:fd:44:4e:32:5b:4e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate solrrequesthandler-uat.statestr.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for solrrequesthandler-uat.statestr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

solrrequesthandler-uat.statestr.com

Other certificates including the domain name statestr.com

(limited to 100 certificates)
corpldapemea.statestr.com
gtsoverview.statestr.com
rits-uat.ssga.statestr.com
dwms02q2.statestr.com
gdcpw5490.statestr.com
ehartt-clo2.statestr.com
kycplatform-preprod.statestr.com
wdcrlvg0015.ssga.statestr.com
na1.bizapps.statestr.com
arch-uat.ssga.statestr.com
amis.statestr.com
statestreetintranet.statestr.com
desjasper.ssga.statestr.com
gvpdfuat52.ssga.statestr.com
SFCPW3212.corp.statestr.com
fre.statestr.com
gvcrsprd67.ssga.statestr.com
gra.statestr.com
sld-preprod.statestr.com
IB4PW3257.corp.statestr.com
gdcvcscamer1.statestr.com
sfculvg0018.ssga.statestr.com
fre.statestr.com
gvcrsdvi67.ssga.statestr.com
ssgaitools-pfm.ssga.statestr.com
mqa2.statestr.com
acc.ssga.statestr.com
*.ssccqa.statestr.com
DEDPW3537.corp.statestr.com
jabhmgamer2.statestr.com
gem.statestr.com
pamanager.statestr.com
gvcrsdr67.ssga.statestr.com
myssc-dev-sg.statestr.com
areapm.statestr.com
crstools-uat.ssga.statestr.com
sfculvg0082.ssga.statestr.com
gvcrsuat68.ssga.statestr.com
jabdl3650.it.statestr.com
sf360.statestr.com
buat-recontmv.statestr.com
nsrdwfe-prd.ssga.statestr.com
gvjbsdr66.ssga.statestr.com
glspl3225.statestr.com
gvwlsuat58.ssga.statestr.com
gaxspapp-uat.ssga.statestr.com
wdcplvg0014.ssga.statestr.com
buat-tlmservice.statestr.com
gvjbsuat87.ssga.statestr.com
mmsg46.statestr.com
fixedincome.ssga.statestr.com
axdsprd.statestr.com
cashviews-dev.ssga.statestr.com
gdcdc50076.statestr.com
sfculvg0006.ssga.statestr.com
master1.devops.ssga.statestr.com
prod-fjw.statestr.com
ses-security.statestr.com
invop-newuat.ssga.statestr.com
cdrapp-dev.statestr.com
invop-uat.ssga.statestr.com
sailpoint.statestr.com
pda-uat-eft.statestr.com
sspr-int-ha.statestr.com
drs-buat.statestr.com
mdf.ssga.statestr.com
*.ssccqa.statestr.com
sfcplvg0123.ssga.statestr.com
PKPPW3201.corp.statestr.com
babelwfe-prd.ssga.statestr.com
nagus.statestreet.com
jabdw3279.corp.statestr.com
sfculvg0042.ssga.statestr.com
gdcuw3246.corp.statestr.com
dwms02q2.statestr.com
solrrequesthandler-uat.statestr.com
brtapp2-uat.ssga.statestr.com
gvcolprd51.ssga.statestr.com
babelwfe-dev.ssga.statestr.com
jabpw3410.statestr.com
wdcplvg0082.ssga.statestr.com
aedp38.statestr.com
ams-xmgbrk-mmsg44.statestr.com
gdcps2200.statestr.com
DEDPW3538.corp.statestr.com
DEDPW3732.corp.statestr.com
igbpw3261.corp.statestr.com
esf-uat.statestr.com
hpmweb.corp.statestr.com
gdcpl4119.statestr.com
LCPPW3560.corp.statestr.com
govapm.statestr.com
ehainq-clo2.statestr.com
gvcmsdr56.ssga.statestr.com
jira.dev.us-east-1.aws.galleon.c.statestr.com
sfcplvg0031.ssga.statestr.com
inss2007.corp.statestr.com
aofs08.statestr.com
aci.statestr.com
buat-fat.statestr.com

Certificate

The complete raw certificate details for solrrequesthandler-uat.statestr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1Q1sdDuMpTJL5n67K/1
B0fP+LRCsAMDwB0ssIidmeE+OhM20iqjuPZ4hz6grVJJZThRbtxxpckZoXsj1gKr
m+YlMnI2NeAZFEwzshWJklodJMECyCKhrek9o0RcbLxP92/3NAyWkUNkZ6AZH42U
k6TYtIBDjqvvQHsGIJoTZ4oyFiQjo0+MW8cdmxUsEfXqEvL2WqupKg9fRDbrXTTH
ry5eDiG5Tmv63IOQMbRZ8+7fy6oDFlNHCoB+CgSrfPPxW+mSwTjCmI49JKC/84hZ
nX2WYCrMnDPBM6pjOPfYvz7O6RU1Xe3b6WyDk26pTJfvYKmo8dUyBwECt5Z8u3m3
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20770127238064644804961636835093131835
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quincy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Street Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet Technology Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'solrrequesthandler-uat.statestr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21628275521885192846038888950288988668459276459919295888053262023132660178849030385754883973063631704162133484399513351417056806763433913257649092136246025260638155176882353852747947643972446877086151998924153404146351971347563623048440221012908830909269482485543038256206621395777557982790691103964724794558362006251949089628058039319935006629228347935811230851525872397507464979717848763575327547056981906712541369559764693181885251284699142800180719467582663284840910466032524822992746393046920409411787406959441630323076728734768632624120896836421044711986861867709929063086314546998669675241240558360479917520799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							148c213c3377055f547cc5e684a95afe210c1d64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solrrequesthandler-uat.statestr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002ce77385de73abdf2b6a61df301618c5f25a195456ec01ddfa3a1306483074afee239f13ffa4dd08b8f9ac410ed5ec53bacf5d117ce3ff5ed4676e3678ac2ffe1d670c7037045109d2eed8d9bfd718de67a29b112b10a8cf3c954148918c84942801e79b683fd49e7cb955ebc232505450b826e7c3fa4a349abc93a2fcf24b3d818513ae7485f865c9bee3b32ce476e8ee13c05da90f81dabbc3ae502841e8445465d9fa2c10d1a75d92f10cd0893301bd010f8aff471783f24a681ac7f33f674bc338bfe587961af1ca0edc3efd9685b3443878c84dc03bece8143438e04f0d10882c78fb7d19a904b3cb326ad5c0eb4e01811faa320e55a18fc70467d59ff6