matilda.unimelb.edu.au

- University of Melbourne -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:27:da:fa:da:5d:20:16:ad:e5:15:d2:10:1c:5e:83 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

University of Melbourne

Organization: University of Melbourne
State / Province: Victoria
Locality: Carlton
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:27:da:fa:da:5d:20:16:ad:e5:15:d2:10:1c:5e:83
Serial Number (int): 14828448971031471286055038382384111235
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6e:a8:2c:d2:b8:b0:1b:98:33:12:83:7b:2f:3d:29:3e:e7:7c:44:ea
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 93:4d:0b:1d:ae:8f:d4:53:38:19:af:d5:f6:c1:be:23:5c:4d:84:ef
Fingerprint (sha256): 05:9b:52:18:09:95:21:1c:92:6f:0c:50:f2:36:68:c4:28:b9:53:6c:40:c9:85:ee:ca:e2:3a:5d:6e:1a:a5:34

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate matilda.unimelb.edu.au

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for matilda.unimelb.edu.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

matilda.unimelb.edu.au
matilda.ms.unimelb.edu.au
formula.its.unimelb.edu.au

Other certificates including the domain name unimelb.edu.au

(limited to 100 certificates)
000s-dc-stu-qs4.student.unimelb.edu.au
experts-pool.its.unimelb.edu.au
mail.unicol.unimelb.edu.au
msd.unimelb.edu.au
5682747733442560-fe3.pantheonsite.io
ctxnsg01.trinity.unimelb.edu.au
your.unimelb.edu.au
my.jch.unimelb.edu.au
trials.cera.unimelb.edu.au
resourcebooker.unimelb.edu.au
www.highq.com
puppet.unimelb.edu.au
stmarys.unimelb.edu.au
pictures.staff.unimelb.edu.au
ags42.atlas.unimelb.edu.au
esp.commercial.unimelb.edu.au
www.highq.com
wiki-test.cloud.unimelb.edu.au
research.finearts-music.unimelb.edu.au
mail.unicol.unimelb.edu.au
www.shop.unimelb.edu.au
art-museum.unimelb.edu.au
www.unimelb.edu.au
ci.h.eresearch.unimelb.edu.au
huntlab.science.unimelb.edu.au
resetpw.ormond.unimelb.edu.au
www.fbe.unimelb.edu.au
www.highq.com
abrahams.chemistry.unimelb.edu.au
www.queens.unimelb.edu.au
jch.unimelb.edu.au
web.unimelb.edu.au
melbournemodel.unimelb.edu.au
5682747733442560-fe3.pantheonsite.io
identity.unimelb.edu.au
ags31.atlas.unimelb.edu.au
apps.eng.unimelb.edu.au
nexusmse.unimelb.edu.au
5682747733442560-fe3.pantheonsite.io
queen.its.unimelb.edu.au
www.highq.com
webapp-hosting.eresearch.unimelb.edu.au
melbournepollen.nixdev.unimelb.edu.au
eresearch.unimelb.edu.au
shop.trinity.unimelb.edu.au
uomwfmp01meld.acc.unimelb.edu.au
owa.shepmed.unimelb.edu.au
covid19.science.unimelb.edu.au
quality.its.unimelb.edu.au
indicatortracking.iehu.unimelb.edu.au
www.archives.unimelb.edu.au
5682747733442560-fe3.pantheonsite.io
www.highq.com
podcasts.unimelb.edu.au
agargus.atlas.unimelb.edu.au
ut.ormond.unimelb.edu.au
ecommerce.unimelb.edu.au
housing.unimelb.edu.au
casper02.trinity.unimelb.edu.au
www.highq.com
ags27.atlas.unimelb.edu.au
www.highq.com
annualreport.about.unimelb.edu.au
ulpa.edu.au
cogtale-staging.eresearch.unimelb.edu.au
matilda.unimelb.edu.au
*.vet.unimelb.edu.au
www.highq.com
tower-dev.its.unimelb.edu.au
ameb.unimelb.edu.au
mail.whitley.unimelb.edu.au
vm-115-146-91-92.rc.cloud.unimelb.edu.au
paintrainer.org
research.finearts-music.unimelb.edu.au
*.le.unimelb.edu.au
5682747733442560-fe3.pantheonsite.io
sysdoc.its.unimelb.edu.au
www.highq.com
shop.unimelb.edu.au
bpg.unimelb.edu.au
searchmuseums.mdhs.unimelb.edu.au
ewormald.ws.queens.unimelb.edu.au
*.fbe.unimelb.edu.au
www.highq.com
identity.unimelb.edu.au
nexusengfuturestudents.unimelb.edu.au
www.highq.com
ctac.esrc.aws.uom.cloud
mobile.my.unimelb.edu.au
edtech.le.unimelb.edu.au
www.highq.com
www.highq.com
www.highq.com
www.braembl.org.au
ecommerce.unimelb.edu.au
nexus.ihouse.unimelb.edu.au
icatmon.its.unimelb.edu.au
ldap.trinity.edu.au
forms.ormond.unimelb.edu.au
ev.unimelb.edu.au

Certificate

The complete raw certificate details for matilda.unimelb.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8hXyKWe2Jl5mNYAjfSf
4ufyGvpr9BXV5ph8kPM0sHp+mpm3c6dfNdRJ+NQsNQpohJhnwzkGbgGcZKVShHEL
6I3rrKC20NEZIhnC7U+yuUdaCvfVjTrGuT0kJJ2IVecowLi09BOCny82ifq21C6x
85nOhO5q268/5N6xl84ij7ls004AjUP9SzGMGi2Ea7Dun1/pA7Oee8l7c38aHbny
BwUIGVUY52ukfcYOKPKmT6PyrtUF4Uak7VBOGafTtmkGYwY/3c0zEdWznRgTNyzF
RMXs39I/a5LG7Im2cdl+eEdU/wdU3GMBBCHsFNWpIxjJNAANNryW2jXrx7nDj95U
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14828448971031471286055038382384111235
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Carlton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'matilda.unimelb.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26230121896673711045528142486642951118027281830087912877379966753597553852385418612037996666088218441481457089878139944537773513825399709983018519280989719875080655014929320621583080220390528104674479354392300233881455361120714212942883776316256776697586451728285825145826095442384380070895178487087648792198107897892058393561142133844957963692144723988912839999773031013200324862347544427540160644957410264170578560819533577687328845760841906834974384950554342738369144394410241245983706695269446420271292025914715066476234288720099375140669591435771396782761729322992697670976148824096050567157010058477425374680143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ea82cd2b8b01b983312837b2f3d293ee77c44ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matilda.unimelb.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matilda.ms.unimelb.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formula.its.unimelb.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007d13ee7f51487dc791486365e00d90ba72bc9efbae698d7163c6804c859a1023a1ebddae2df90a67ef1576136eb83bfe2df5dd511422f356800ff3f2fe07281c9105702900d3b2fbd2e055e4530e276e697f7ffe95d5129d5927d5588fdd76d377e20f551eae50cf6b0bd04d121cd3d2be4429dec3b47dc22df986d37ec9574290a033a295a19e94b9359ac6124ee7940e5efe89628889eea9a2f8b252f7e912a26ee7b2ce7f246445bc1161b2040b736944aed40609a5a9bc640fe8fe096426862b5ff3d74d01097c3ad84889e483ca13056e034b005857360f1569401d352d91764ed36dbd9e52c6d3f3eac2a9bc8b034c29a8cf5c2e22a6b659079ffa28e4