393ccfec-674b-11ec-8255-325df4570091.ds.dlp.protect.broadcom.com

- Broadcom Inc -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:64:ba:90:ff:25:d9:98:01:0e:4b:72:47:38:12:e1 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Broadcom Inc

Organization: Broadcom Inc
State / Province: California
Locality: San Jose
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:64:ba:90:ff:25:d9:98:01:0e:4b:72:47:38:12:e1
Serial Number (int): 11156837668138926328123670693284418273
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f7:dc:fa:a1:1c:7a:e0:79:27:c5:1f:eb:e5:ba:64:66:e0:b2:98:3e
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): c9:27:d7:16:f9:f3:8f:5f:e1:fb:b3:bf:c2:a9:d7:33:30:62:d6:18
Fingerprint (sha256): 05:10:d3:b1:14:42:35:a9:55:0d:b5:c4:5b:e3:8f:06:d6:0a:24:aa:9b:76:ff:a5:83:16:32:24:44:f2:be:fd

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate 393ccfec-674b-11ec-8255-325df4570091.ds.dlp.protect.broadcom.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 393ccfec-674b-11ec-8255-325df4570091.ds.dlp.protect.broadcom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

393ccfec-674b-11ec-8255-325df4570091.ds.dlp.protect.broadcom.com
393ccfec-674b-11ec-8255-325df4570091.ds.dlp.protect.symantec.com

Other certificates including the domain name broadcom.com

(limited to 100 certificates)
clarity.status.broadcom.com
castorstatus.com
connectivity-status.pelion.com
modeln-dev.broadcom.com
cloud-marketplace.status.broadcom.com
reports-ptest.broadcom.com
advauth.layer7.broadcom.com
mobsync.broadcom.com
cloud-marketplace.status.broadcom.com
brcmagile.broadcom.com
mri.broadcom.com
6h60rqz7vjhj.stspg-customer.com.como3.pl
lpdvsmtp06.broadcom.com
*.gov.saas.broadcom.com
symantec.broadcom.com
servicenow.broadcom.com
bc.networkthinking.com
secure03.stage.lithium.com
admin7status.brinkpos.net
bpel-patch.broadcom.com
cipvpn1.broadcom.com
espdownloads-dev.broadcom.com
*.infra.ppm.cspca1.saas.broadcom.com
secure03.stage.lithium.com
bankjagostatus.mambu.com
standards.broadcom.com
bp890869.saagie.com
connectivity-status.pelion.com
fcln-webvpn.broadcom.com
*.aws.broadcom.com
theplan.broadcom.com
bc.networkthinking.com
endpoint-security.status.broadcom.com
cloud-marketplace.status.broadcom.com
endpoint-security.status.broadcom.com
myportal-stage.broadcom.com
*.infra.gpca1.saas.broadcom.com
searchjobs.broadcom.com
estn.broadcom.com
admin7status.brinkpos.net
lyncpoc-access.broadcom.com
medvpn.broadcom.com
bslstg.broadcom.com
cdd.status.broadcom.com
hydr-webvpn.broadcom.com
solutionsam.com
erp-stage.broadcom.com
asaguidev-bsn-01.gwd.broadcom.net
393ccfec-674b-11ec-8255-325df4570091.ds.dlp.protect.broadcom.com
email-security.status.broadcom.com
bc.networkthinking.com
myportal-stage.broadcom.com
www.broadcom.com
broadcom.com
qa-portal.broadcom.com
www.broadcom.com
tpea-webvpn.broadcom.com
ftpdev.broadcom.com
*.app.nightly-gce-okd.cnb.saasdev.broadcom.com
connectivity-status.pelion.com
reports-pstage.broadcom.com
melmvpn.broadcom.com
chipfab.broadcom.com
dbf0c03f-ab1e-42a5-bde5-9bb4fda20451.ds.dlp.protect.broadcom.com
csp-uat.broadcom.com
bbportal-qa.broadcom.com
riata-webvpn.broadcom.com
email-security.status.broadcom.com
jira-lvn-44.lvn.broadcom.net
admin7status.brinkpos.net
enterprise-software.broadcom.com
asm.status.broadcom.com
*.artifactory-bsn.broadcom.com
clarity.status.broadcom.com
portal.broadcom.com
atbstatus.mambu.com
identity-security.status.broadcom.com
eboks-status.reepay.com
*.layer7.broadcom.com
ccm-ibn-exwe1.broadcom.com
admin7status.brinkpos.net
videos.software.broadcom.com
identity-security.status.broadcom.com
bp890869.saagie.com
conf-lvnd-it-16.lvn.broadcom.net
secure03.stage.lithium.com
community.broadcom.com
atbstatus.mambu.com
email-security.status.broadcom.com
ccm-lvn-impp.broadcom.net
blue-status.myib.com
47ef51ee-a867-4182-816c-456b70db5399.ds.dlp.protect.broadcom.com
*.csgm01.saasgov.broadcom.com
lnpvwsweb04.broadcom.com
erp-pqa.broadcom.com
oemsupportportal.broadcom.com
secure06.lithium.com
bc.networkthinking.com
reports-test.broadcom.com
lpdvwblzeng.broadcom.com

Certificate

The complete raw certificate details for 393ccfec-674b-11ec-8255-325df4570091.ds.dlp.protect.broadcom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw2Vjzp8UMmBJWt1g4i/
l26Il5MVW7jDr08kmimdQ3KyehCkRiZrySBH1WUHruhiiYhwrAha+JZREe5c1Ox7
cJ0S9J8EJD7CeKldFEDsVyVLKbhwu492yKT+wD8DhPbgST5xrFE7sv/YN8FVxnq3
nNN92pqg4+3IGiCP/K7Rv/+jy7QaV75J0O63crU7qvhlG/WUwtIq3ibseNobzR3n
DIdcRZBRdJeq3CeddpUdu6XlqK3tCP716buJEOoPsllZGEyTOIHBIs6lLO8ZERhi
KI4BDn7+Wy4DT0walNa/xDyA5XBUShDQ5bXde19taWQDB4s7RpiTTqXDw0HVyw2I
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11156837668138926328123670693284418273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Broadcom Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '393ccfec-674b-11ec-8255-325df4570091.ds.dlp.protect.broadcom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23108308435725872069732525242394805081914987429341072405633493889721130919449067201102886996474104274271392248348722621427744921928346294434567683047250639607114060425532699343781401317444345723939181728448071972680019333952801745803127238107861383970869708422399840931786269700875822185358146318906227145082616801636897045968143111303920565634450651741931609457104186150298094507681212611349464721835790413777256967614138756494481248700303433516582082012521424627506758235607429688395231016103648813654452764224848507457625809573229267993064574155289382958626844282979070177595272085637386866211717643188119190472797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7dcfaa11c7ae07927c51febe5ba6466e0b2983e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '393ccfec-674b-11ec-8255-325df4570091.ds.dlp.protect.broadcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '393ccfec-674b-11ec-8255-325df4570091.ds.dlp.protect.symantec.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008314f2ba9aa97cd59c81b64bfd901cbfbd1cf03397193f8577c6de1274bcb26bec18757cd66aaf32fb527667b72048d7576cd491e5e374384a461ba6138819513a4831836dca43d1b0297d67c7cf67c6a1ca23225707cd1de2a82b074d10a311df67a8411e4205f8f013512a7be5380965d92f29871d11427a4f00eb538bc2e20d2db8bed1f9018ffb19b697b2a748d6b0d153a89037ed70cfc85e9a42f87f8a7f8cdbda3e5992d5b20f79c2d583a15fe279918bae587be79e08cb0fc29e90fb353907c30d95d9a38ef31f9fbaa22ebd5fee833bd387a720bdb06d81c041d680f794c6c253530bb1b91606c52a40c49159bdbfb808ee69d28d552cf176dc5be6