*.granicus.com

- Granicus, Inc. -

Issued by Starfield Secure Certification Authority

About this certificate

This digital certificate with serial number 04:1f:6a:f5:4e:94:02 was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • RawSubject attr oid 2.5.4.3 encoded PrintableString contained illegal characters PrintableString type's alphabet only includes a-z, A-Z, 0-9, and 11 special characters (RFC 5280: Appendix B. ASN.1 Notes)

Granicus, Inc.

Organization: Granicus, Inc.
Organization unit: Granicus, Inc.
State / Province: CA
Locality: San Francisco
Country: US

Starfield Technologies, Inc.

Company registration number: 10688435
Organization: Starfield Technologies, Inc.
Organization unit: http://certificates.starfieldtech.com/repository
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1f:6a:f5:4e:94:02
Serial Number (int): 1160444149404674
Serial Number lenght: 51 bits, 7 octets

SubjectKeyId: 22:70:eb:d3:c8:af:cd:61:82:48:37:76:ec:fe:e6:cd:40:8f:68:5a
AuthorityKeyId: 49:4b:52:27:d1:1b:bc:f2:a1:21:6a:62:7b:51:42:7a:8a:d7:d5:56

Fingerprint (sha1): 8e:f0:83:62:81:a4:ee:a5:21:bf:49:66:0f:11:6b:14:56:4d:79:80
Fingerprint (sha256): 05:84:87:f0:f7:a5:f3:d0:b0:4f:fe:6d:98:23:17:76:4a:27:40:33:a9:e8:cd:9f:10:e3:8d:10:eb:41:ca:85

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sf_intermediate.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfs2-0.crl

Check the revocation status for certificate *.granicus.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.granicus.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.granicus.com
granicus.com

Other certificates including the domain name granicus.com

(limited to 100 certificates)
eu1-status.mulesoft.com
jira-stage.granicus.com
5718998062727168-fe2.pantheonsite.io
secure01.lithium.com
eu1-status.mulesoft.com
secure02.stage.lithium.com
*.ca.granicus.com
5718998062727168-fe2.pantheonsite.io
int.granicus.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
*.granicus.com
5645056174194688-fe3.pantheonsite.io
govdelivery.co.uk
eu1-status.mulesoft.com
granicus.com
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
5718998062727168-fe2.pantheonsite.io
support.granicus.com
corphelpdesk.granicus.com
vpn-prod.granicus.com
5645056174194688-fe3.pantheonsite.io
*.ca.granicus.com
*.granicus.com
*.dev.granicus.com
go.granicus.com
about.govdelivery.com
vpn2-ap-southeast-2.granicus.com
5645056174194688-fe3.pantheonsite.io
jira-stage.granicus.com
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
eu1-status.mulesoft.com
secure01.lithium.com
go.granicus.com
eu1-status.mulesoft.com
5718998062727168-fe2.pantheonsite.io
ceros.map.fastly.net
5714142736416768-fe4.pantheonsite.io
info.granicus.com
www.granicus.com
san-1-s12.tlsprovisioning.exacttarget.com
secure01.lithium.com
5714142736416768-fe4.pantheonsite.io
click.granicus.com
istatus.edgenuity.net
*.granicus.com
secure02.stage.lithium.com
int.granicus.com
secure01.lithium.com
san-1-s12.tlsprovisioning.exacttarget.com
*.ca.granicus.com
secure01.lithium.com
view.ceros.com
ceros.map.fastly.net
view.ceros.com
5718998062727168-fe2.pantheonsite.io
eu1-status.mulesoft.com
secure02.stage.lithium.com
secure01.lithium.com
2fsupport.govdelivery.com
5645056174194688-fe3.pantheonsite.io
vpn2-eu-west-2.granicus.com
secure01.lithium.com
eu1-status.mulesoft.com
ceros.map.fastly.net
5714142736416768-fe4.pantheonsite.io
image.20210419.test1.s12.et.yellsatcloud.com
5645056174194688-fe3.pantheonsite.io
5718998062727168-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
govdelivery.co.uk
secure02.stage.lithium.com
ceros.map.fastly.net
secure01.lithium.com
eu1-status.mulesoft.com
secure02.stage.lithium.com
eu1-status.mulesoft.com
istatus.edgenuity.net
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
secure02.stage.lithium.com
5714142736416768-fe4.pantheonsite.io
secure01.lithium.com
5690091590647808-fe2.pantheonsite.io
eu1-status.mulesoft.com
5690091590647808-fe2.pantheonsite.io
secure02.stage.lithium.com
ceros.map.fastly.net
eu1-status.mulesoft.com
view.ceros.com
secure01.lithium.com
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
eu1-status.mulesoft.com
5714142736416768-fe4.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5718998062727168-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io

Certificate

The complete raw certificate details for *.granicus.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1160444149404674
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certificates.starfieldtech.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10688435'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-06-30 15:56:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-07-10 20:46:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Granicus, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Granicus, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '*.granicus.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 982693239121945905515991209807814917742761335952855746420897510217741375976232123560723238667155011036055080335704369105523950632319841805344596120775728423472679276575888732525796630245417087209662921809036077866167730479804766840447826870443286412082008607719927240314465952918358435170770618460684658127047569259609178660021435588477174790454324353733228817103372617796159671576363297317439960216935986570401065911616193678995067174212691844639640575121818397177077506170403613403672774158179671182026968345409861008796007408233132030589333254673951745193285035602927519442376868221115870677944887358202224459721012041286478837326943148701896636925938821157069180547182493933329410946619081085640568725083092513946339748495679085758534819130332795018236500443243968620739932252023337310320877016915597695504981603632232814344307624110969515542943929996031103704166930874391322531020025441438649582321924983166432739621488261912206236254550792858914564098745126420106153322724167268816019307702365955037109693857416006231723786217958310350748376537867630269935724658539932884698553263483139999766769281343268507653567928867025651116360476825835373492022979472926945018531786105406622781290668545434297905706038319631996673833162059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN false
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfs2-0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sf_intermediate.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 494b5227d11bbcf2a1216a627b51427a8ad7d556
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.granicus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granicus.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2270ebd3c8afcd6182483776ecfee6cd408f685a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00651878a28b35b82bec30d43b65903dab8d66c37f1499ddfb5dfcdb52a91433ee0b78d8d85b5556b9b7343bc7729c75b753cb94c861543071e506ab1629af2b0411c41b953d25c748376c29869909c67fb5cedab9a512cfbc7579d4bedfd7786bec852818b60a13d9ca12b6c905197841bfd6fb679fb9a75ad36f652fcb3a2f29b0c913a4d054e09733059d59abe3df2da11b4645f0814402667d96a18ff282ddebe9b7a7da0743c14ae0fe2381d8233853aa098266ec435f601caea4998d51ec366310a16b5c5c5b3a6f0b3b6f050a7bb4349e120bd27ec587d1c442e77e811a148c1c7bb5204c46aa1b5e1f52e7cea803bb3bf58d926c039d5c635d78d996f6