www.blackbird.societegenerale.com

- Societe Generale -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:c4:a3:89:56:b5:f0:27:5f:a1:11:de:3d:58:50:26 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Societe Generale

Organization: Societe Generale
Organization unit: HELIOS
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c4:a3:89:56:b5:f0:27:5f:a1:11:de:3d:58:50:26
Serial Number (int): 6337919081271809895556199170669301798
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 56:15:1f:7e:69:7c:6d:d0:3e:a8:b5:4e:e4:90:58:09:d1:3b:ef:d7
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 99:02:89:74:52:ce:35:17:23:de:ed:63:00:49:6f:36:4e:78:e7:df
Fingerprint (sha256): 04:88:6f:f8:10:de:9a:51:57:18:6f:fb:72:ca:3f:5d:24:e4:f3:40:f6:c7:88:8d:4b:aa:3e:48:7c:13:ce:c4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.blackbird.societegenerale.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.blackbird.societegenerale.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.blackbird.societegenerale.com
blackbird.societegenerale.com

Other certificates including the domain name societegenerale.com

(limited to 100 certificates)
h2-imap.societegenerale.com
partners-api.bsc.societegenerale.com
ceros3.map.fastly.net
warrantspushserver.societegenerale.com
parlons-auto.societegenerale.com
cash2business.factoring.societegenerale.com
infact.factoring.societegenerale.fr
jazz-ou-sobrio.societegenerale.com
demo-sgw.societegenerale.com
ceros3.map.fastly.net
ceros3.map.fastly.net
hsharinbox.societegenerale.com
itsat.societegenerale.com
taleo.exit.societegenerale.com
document-de-reference.societegenerale.com
pre1.ebanking.privatebanking.societegenerale.com
privatebanking.societegenerale.com
h-report.vip.equipmentfinance.societegenerale.com
sso-sogecashweb.societegenerale.com
chatbotrcf.assurances.societegenerale.com
gesop-subscribe.societegenerale.com
webclear.societegenerale.com
filetransfer.hpr.tomf.societegenerale.com
careers.socgen.com
sni.cloudflaressl.com
suite3.securitiesservices.societegenerale.com
homowebclear.societegenerale.com
hsharinbox.societegenerale.com
careers.societegenerale.com
unified-access.societegenerale.com
sgnews.societegenerale.com
san-004.ceros.com
sni.cloudflaressl.com
h-esign.societegenerale.com
coxetnel-oeuffactory.societegenerale.com
seasonsgreetings.societegenerale.com
linstantprive.privatebanking.societegenerale.com
assurances.societegenerale.com
www.equipmentfinance.societegenerale.com
factoring.societegenerale.com
h-taleo.exit.societegenerale.com
www.blackbird.societegenerale.com
ambassadorsday.societegenerale.com
assurances.societegenerale.com
homo.webadmin.societegenerale.com
h-partners-api.bsc.societegenerale.com
homowebsight.societegenerale.com
sni.cloudflaressl.com
*.pinterestceros.com
ceros3.map.fastly.net
sourcing-hub-reporting.societegenerale.com
h-lamatinale.societegenerale.com
san-004.ceros.com
monsieurmadame.societegenerale.com
san-004.ceros.com
hob-isis.societegenerale.com
netkin.eu
Nouveauxmodeles.societegenerale.com
sf-webtocase.societegenerale.com
sogecash-ebics.societegenerale.com
appliactionnaire.societegenerale.com
login.securitiesservices.societegenerale.com
ambassadorsday.societegenerale.com
portail-pca.factoring.societegenerale.com
infact.factoring.societegenerale.fr
san-004.ceros.com
swordphish.cert.societegenerale.com
apps.bsc.aws.societegenerale.com
www.scf-servicing-hom.societegenerale.com
h2-imap.societegenerale.com
immsituadmin.societegenerale.com
careers.socgen.com
getready.societegenerale.com
www.soactif.societegenerale.com
carte-bancaire-gratuite.societegenerale.com
cert.societegenerale.com
innovshare.societegenerale.com
ceros3.map.fastly.net
projects.societegenerale.com
www.scf-servicing.societegenerale.com
suite3.securitiesservices.societegenerale.com
sso-sogecashweb.societegenerale.com
live.societegenerale.com
homo-login.securitiesservices.societegenerale.com
h-unified-access.societegenerale.com
san-004.ceros.com
www.equipmentfinance.societegenerale.com
reglement.societegenerale.com
h-report.vip.equipmentfinance.societegenerale.com
h-report.vip.equipmentfinance.societegenerale.com
activation.caff.societegenerale.com
jazz-ou-sobrio.societegenerale.com
sni.cloudflaressl.com
dublinportal.societegenerale.com
boxallinclusive.societegenerale.com
ceros3.map.fastly.net
hfilegtw.societegenerale.com
ceros3.map.fastly.net
ceros3.map.fastly.net
seasonsgreetings.societegenerale.com

Certificate

The complete raw certificate details for www.blackbird.societegenerale.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscMmMLDLGNoRG0Yvb8Ly
l5J96PsiSPKnMjVTxbH4GfxXolhMjmJViUud6O3S8SXKfB/H55gvg0hk2Yyhg2Uz
5XxJwIPKnojZKq/U8Kp/HqSSJrGBXlvbHttBDabgkukfnxLj7dnhi/c42R56TzoC
f14eFmzR/E1rLi3DkYIvFQADydK65jWCnxKZdkxEuCwphjejoBHHLwOJHtLpKHSo
8tKUsg3+9tCzOrefSKxU9mXp5Q9MXpIgdz9vaYdlmH1JkGs0y8ipGruJiuA0bRTl
utZujJ+qQIWdpfZVbSMvEWeDt665N29OPQZQQz/BwzdExPHAVw24WhCoWfdTKuL9
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6337919081271809895556199170669301798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Societe Generale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HELIOS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.blackbird.societegenerale.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22440411626479613761680136450635052946023921438832241060192344123709533878198064700674289963270202021923078658116150017586986881491722642585110554563366793486601142875955582424948256323427490313806920664658377806119147349803772030245234052391951473129378550838769936673177613426633240502192056020706568251740904523857676015879420131712013789595368964094402787488672172080394682823668405210904490530927724567656286528959452885910762385302228751820556516166719021526054954171570375261627554768011519268124523258309048225342157266233747505508837632541307148981146241609143421546700518837966683742124652794652984632081861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56151f7e697c6dd03ea8b54ee4905809d13befd7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackbird.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackbird.societegenerale.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001641d77076d0000040300473045022100efbcc2b7aa8dfb55cb96582967119e340b0bee375bb2b9c2562ab822f95ab38f02202f07d251e834075c41cb4b7589f0e555895587bd05a5e559111327347493d21f0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001641d77083e000004030047304502200a464a950dc14bf56ac449eccc7774f5c032209ff14c545eecbefdae607ad7ec022100d860317fc430413cd766bb3ba3fd2368f520248f555b43b8d4425bc2585a340d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a30ec9540759a2ae3a7b93aea07f666180870f834048ff7a20b1323663376d46eacfdf28a38f58666395ac6161053b7267f8560545e2f3f90d15893a56b14847a32d218580fdcea8a1128eabc723197eba36469a7273cdad1f7e19837ce242998deef890dc631df398d6b71b1e0230318fcd9078cce22e199db5da9920973271a531cf56aae72343b59ffc0dacdf43df41dcd1912e7befb73eb435ac189f8e55dd79c012ba9c890dc7bb2b3c7f24b6326ebf2e9807eb0c16e6c9d3bdeff80dd0b8a3e46d563e069f399d7741eb0f2defd89b47269ee40799916f308fae85c712cca2a08710672ad4f6f4c61e12fd6198517632dfc09b12e414a307001539958e