prod-membership-metadata.cld.samsclub.com

- Walmart Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 3d:29:83:5d:1b:bb:a1:9e:95:47:71:f0 was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Walmart Inc.

Organization: Walmart Inc.
State / Province: Arkansas
Locality: Bentonville
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 3d:29:83:5d:1b:bb:a1:9e:95:47:71:f0
Serial Number (int): 18928771905261072329036231152
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: e9:a6:b6:03:db:8c:62:af:22:83:46:9c:d0:f2:1d:e2:8b:36:14:a3
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 80:25:04:a1:b9:f4:55:df:72:8e:14:9d:a9:87:9d:ad:22:32:69:a3
Fingerprint (sha256): 07:0a:b1:1a:50:f1:c2:bf:2d:9e:d0:94:f7:e0:f5:4a:ed:24:be:1e:5f:ec:3c:3d:85:19:2e:d6:48:f5:d6:6b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate prod-membership-metadata.cld.samsclub.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod-membership-metadata.cld.samsclub.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod-membership-metadata.cld.samsclub.com
prod-membership-metadata-eus.cld.samsclub.com
prod-membership-metadata-scus.cld.samsclub.com
prod-membership-metadata-wus.cld.samsclub.com

Other certificates including the domain name samsclub.com

(limited to 100 certificates)
nonprod.samsclub.com
prod-membership-posgateway.cld.samsclub.com
catalog.samsclub.com
nonprod.samsclub.com
pfedcert.wal-mart.com
config-by-category.cld.samsclub.com
sams-labeling-api.prod.cld.samsclub.com
nonprod.samsclub.com
prod-membership-dome.cld.samsclub.com
epic-core-prod.cld.samsclub.com
hubmetrics.samsclub.com
prod-asksam-api.bots.cld.samsclub.com
backroom-delivery.dev.cld.samsclub.com
pc.ui.samsclub.prod.walmart.com
prod.samsclub.com
cf-nonprod2.walmart.com
wem-prod.walmart.com
links.samsclub.com
blog.photo.samsclub.com
gorollick.samsclub.com
smart-alerts.api.stg.eus.cld.samsclub.com
prod.samsclub.com
adlist-api.cld.samsclub.com
nep-stage.services.samsclub.com
stg-geode-linkage-services.cld.samsclub.com
www.samsclub.com
dev-sams-recurring-payments.cld.samsclub.com
photo.samsclub.com
nonprod-int.samsclub.com
ak-prod3.walmart.com
nonprod.samsclub.com
nonprod-intone.samsclub.com
prod-membership-subscription.cld.samsclub.com
*.samsclub.com
vip20-pravaha-qa-https-web-p-1.walmart.com
mbrxo-cpc-api-gateway-qa.cld.samsclub.com
sams-iot-api.cld.samsclub.com
nonprod-int.samsclub.com
supplier.samsclub.com
vip01-misc-qa-https-web-p-3.walmart.com
dev-fresh-inventory-audit-eus.cld.samsclub.com
prod-member-experience-sfclocation.cld.samsclub.com
npclubopsapim.cld.samsclub.com
pravaha.samsclub.com
stage-member-experience-storage.cld.samsclub.com
opinion.asda.com
click.em.samsclub.com
vision.cld.samsclub.com
SWOTrn01.wireless.samsclub.com
experiments.samsclub.com
stg2-tms-load.cld.samsclub.com
www7.samsclub.com
smart-alerts.api.dev.eus.cld.samsclub.com
nonprod.samsclub.com
beacon.walmart.com
payment.samsclub.com
event-horizon-info-eus.cld.samsclub.com
ent-backbone-api-gateway-stg.cld.samsclub.com
stage-membership-metadata.cld.samsclub.com
beacon.walmart.com
mth.api.dev.eus.cld.samsclub.com
fa-nonprod.walmart.com
dev-sams-two-factor-event-processor.cld.samsclub.com
akamai-san41.exacttarget.com
beacon.qa.walmart.com
hec.azsamssplunk.cld.samsclub.com
cf-nonprod2.walmart.com
vip01-misc-qa-https-web-p-6.walmart.com
stg-wallet-api.cld.samsclub.com
sim-dataacquisition-gdsn-takeaction-webapp.cld.samsclub.com
vip12-sams-qa-mobile-api-https-p-5.walmart.com
stg-membership-integration.cld.samsclub.com
cdn.corporate.walmart.com
pravaha-stage.samsclub.com
vip01-4-misc-qa-https-web-p-1.walmart.com
specialoffer.samsclub.com
vip01-misc-qa-https-web-p-2.walmart.com
ccservice-nonprod.walmart.com
pfedcert.wal-mart.com
corporate.walmart.com
nep-pqa.services.samsclub.com
cloud.em.samsclub.com
exports-stg.cld.samsclub.com
webservices.samsclub.com
pfedprod.wal-mart.com
stage-member-experience-search.cld.samsclub.com
dev-membership-subscription.cld.samsclub.com
event-horizon-eus.cld.samsclub.com
fimprodext.walmartbenefits.com
stage-member-experience-dispense.cld.samsclub.com
ak-nonprod3.walmart.com
vip01-misc-qa-https-web-p-1.walmart.com
document.wireless.walmart.com
exports-api-stg.cld.samsclub.com
prod-sams-twofactor.cld.samsclub.com
cf-nonprod2.walmart.com
prodcluboperationsapim.cld.samsclub.com
vip01-misc-qa-https-web-p-6.walmart.com
prod-membership-metadata.cld.samsclub.com
flights.serviceshub.samsclub.com

Certificate

The complete raw certificate details for prod-membership-metadata.cld.samsclub.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18928771905261072329036231152
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 18:02:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-18 18:02:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arkansas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bentonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Walmart Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod-membership-metadata.cld.samsclub.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830020757119818349845332845099080677505504913003493911267679445311376651858263810348838874100574252512800239327424577283969018208391577465380508052173276038205800092985653628038629741015047775638995857489725255164734116550418444656981529260529610383923137350938186820283463342958970640789761172736830020946433813085537730790348538210989242738740779653563791101480288430524566975079551726100504698452749781624442410763107419875743877207946389607981218043211470955882957267081978526542665705465092780053768111752562354860279707406407795397454239389097207874858633288425392264945562088470538596215417123725800153869757675735956043839126692431463694373278348215662691452051742756877474480544222093088695603118070099195605439809413364056338068083585945939248405254923864481671245470213376359751253108510608097551759961884295552336955669008227608617562077619371742803303598463737949245112031146636856526371700118084645107491886740488054882320814913313600977910988465163360231634229314286303444835586586787944051931516204190707085884130777168648145447675322333908776100126179615700584957850381958679228068074710393388644019479804447331298753987845065126645612295406851126982916274260668948653156019724069524567846816185926673673680502639217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (188 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-membership-metadata.cld.samsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-membership-metadata-eus.cld.samsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-membership-metadata-scus.cld.samsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-membership-metadata-wus.cld.samsclub.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9a6b603db8c62af2283469cd0f21de28b3614a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00766492ca9efa266449cbbab58628c9d3f0b21bdbfe7988af4dae918f1011f5d10d51aa46fe9d8dfb1553e7e3cd23639d85940653a309228e1f384a8e4c271da0717630909f656d537b689f96aaf5e5c6953383f20a18585b4808ada5caa8b17fcc41133405e6f6830754cbc331a9003f1578763fed78a46e8f94db999513fe72aba576f26a3086b355f8d297d7061bc2b79b2b118a8c05d07f55611d664c586a4d97c797b5a2e0553df89832d509f6d70a2d6a8ffbdeece24507c60688a1586268e607662b7407923929ff87bfe253703d2bea7a2ee037d5a70739b2e5e3d2830034716a6ed0c0462fc81d435a335e5623f8e7adaba006bd552f04065dc75c0d