DDNZ-0988-EXPE01.gnet.nz.dimensiondata.com

- Dimension Data New Zealand Limited -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 1b:59:e2:ce:f2:d1:bd:37:00:00:00:00:50:f3:df:74 was issued on by Entrust, Inc..

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Dimension Data New Zealand Limited

Organization: Dimension Data New Zealand Limited
Locality: Auckland
Country: NZ

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:59:e2:ce:f2:d1:bd:37:00:00:00:00:50:f3:df:74
Serial Number (int): 36355870527323162858212511696953794420
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: d2:ca:e4:d5:29:d8:0a:b9:c1:fc:dd:cb:62:57:64:a0:95:de:2a:59
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 2c:79:ed:e0:12:e4:cc:01:cf:ec:8d:48:98:1c:af:86:34:54:d1:d0
Fingerprint (sha256): 05:10:48:d0:2a:5d:57:8d:80:3c:42:58:6c:5b:76:ac:a2:21:f5:53:13:d0:54:04:6f:22:cf:0d:1a:d7:c6:bf

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate DDNZ-0988-EXPE01.gnet.nz.dimensiondata.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for DDNZ-0988-EXPE01.gnet.nz.dimensiondata.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

DDNZ-0988-EXPE01.gnet.nz.dimensiondata.com
expe.gnet.nz.dimensiondata.com
DDNZ-1005-EXPE01.gnet.nz.dimensiondata.com
DDNZ-0988-EXPE01.video.gnet.nz.dimensiondata.com
DDNZ-1005-EXPE01.video.gnet.nz.dimensiondata.com
video.gnet.nz.dimensiondata.com
webvideo.gnet.nz.dimensiondata.com

Other certificates including the domain name dimensiondata.com

(limited to 100 certificates)
amtrust.kinnser.com
statuspage.io
*.dimensiondata.com
statuspage.io
statuspage.io
*.dimensiondata.com
statuspage.io
WIRED.DIMENSIONDATA.COM
sni24ddcgl.wpc.edgecastcdn.net
nextemapi.dimensiondata.com
*.dimensiondata.com
DirectQA5.dimensiondata.com
amtrust.kinnser.com
000-1005-ACAN01.gnet.nz.dimensiondata.com
webmail.mea.dimensiondata.com
basecoat.dimensiondata.com
issquaredown.com
statuspage.io
amtrust.kinnser.com
sa14gl.wpc.edgecastcdn.net
sip.global.ntt
de.blog.dimensiondata.com
statuspage.io
*.dimensiondata.com
statuspage.io
users.connectivity.is
*.dimensiondata.com
directqa.dimensiondata.com
statuspage.io
*.dimensiondata.com
DIRECTQA2.DIMENSIONDATA.COM
cloud-status.dimensiondata.com
statuspage.io
statuspage.io
*.dimensiondata.com
statuspage.io
statuspage.io
statuspage.io
mc-admin.dimensiondata.com
wallboard.dimensiondata.com
statuspage.io
*.dimensiondata.com
*.dimensiondata.com
cloud-status.dimensiondata.com
EU6-control.objectstore.dimensiondata.com
oldmutual.uccanalytics.dimensiondata.com
*.dimensiondata.com
scm.dimensiondata.com
DDNZ-0988-EXPE01.gnet.nz.dimensiondata.com
cloud-status.dimensiondata.com
statuspage.io
*.dimensiondata.com
*.dimensiondata.com
statuspage.io
communication.dimensiondata.com
ndes.dimensiondata.com
*.dimensiondata.com
statuspage.io
blog.dimensiondata.com
meapool4.mea.dimensiondata.com
eap1.core.nz.dimensiondata.com
statuspage.io
101-0988-WLG-RP01.gnet.nz.dimensiondata.com
statuspage.io
statuspage.io
*.dimensiondata.com
*.dimensiondata.com
cloud-status.dimensiondata.com
*.dimensiondata.com
000-1005-WSUS01.core.nz.dimensiondata.com
statuspage.io
advtech.uccanalytics.dimensiondata.com
statuspage.io
nextem.dimensiondata.com
salesloft.dimensiondata.com
sa14gl.wpc.edgecastcdn.net
statuspage.io
clm.dimensiondata.com
cloud-status.dimensiondata.com
www.dimensiondata.com
amtrust.kinnser.com
*.dimensiondata.com
statuspage.io
statuspage.io
core.nz.dimensiondata.com
*.dimensiondata.com
*.aucsfme.dimensiondata.com
www.dimensiondata.com
*.emaas.dimensiondata.com
statuspage.io
info.nacloud.dimensiondata.com
statuspage.io
*.dimensiondata.com
sa14gl.wpc.edgecastcdn.net
*.dimensiondata.com
statuspage.io
statuspage.io
am-sip.dimensiondata.com
*.dimensiondata.com
statuspage.io

Certificate

The complete raw certificate details for DDNZ-0988-EXPE01.gnet.nz.dimensiondata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36355870527323162858212511696953794420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 01:07:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-04 01:37:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auckland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dimension Data New Zealand Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DDNZ-0988-EXPE01.gnet.nz.dimensiondata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 630120938955567150689013666880168658502625359386315891323547068945027827294971327947077171392924933495661884107921289939128532153121785676872278796610777818329387253135831252575400622209031893275554507125890997180889356097331502395949877588019766188493076441444744592949821312696979082376727295443095074941884880925975454551013035456957141518781615128135356956181484169222720515978653294647878891236462571424423086644639870204072332930606387129551485598314068472936051068343459599858972546268671991706324677932628741767121658963117924960775734549131026710783110507989886792319612730561421312257478145399405465731720414208217252062193970901454633589594214413384444591206317230160979177369044468168441897196863850500831738225147858144791420569344467769298943118816536109043317873237253610514279909112856994677786242087729753087782862423153541941106990793535102087479847078254132160277996717591729189177333582170785266470804202150689003064472173496080257963025758810188908378342571750722135370319987525745175175166614370607839672426282017172360809798870427121640580370309766625080477510830200607914644681900722948077445614697736420599691256358140480962289685644196195516791811942296612783012115839016573647499510064369147090133886844901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (293 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DDNZ-0988-EXPE01.gnet.nz.dimensiondata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expe.gnet.nz.dimensiondata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DDNZ-1005-EXPE01.gnet.nz.dimensiondata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DDNZ-0988-EXPE01.video.gnet.nz.dimensiondata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DDNZ-1005-EXPE01.video.gnet.nz.dimensiondata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.gnet.nz.dimensiondata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webvideo.gnet.nz.dimensiondata.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2cae4d529d80ab9c1fcddcb625764a095de2a59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00cdb72141b77d454b1716266a5460ba3569d55082fd0c0ffda4e1c7c2a81d89c5938c961b9334f5664c20cbaab323840dc1c3e81bc18fa7d133e797a421d802203e5593c89f83daf39b7496c75924f78e341b87723a3fedfb7ac08e218af9a3f254b629e05cde6f8c66861d53e8b4be709cb9a199aae892ba188bb3e2e32fb9462f2ce9dc5824866015e25dae3cf1704a75307e93a5a5e88d1b666140b6108d5cde69ae8afe0d0ad51b7ea0b28ccd7ed48fc8c5e48c461f834981dd854178da87d11bb0f5a571dd5095a6b590990aedb412f9a9c9c2bc861ac9c64500f73a817b9de56cdee1bd4bf7d00f3100cbdef9dcf50b57f0e0bed3e97d83f613d855710e