lsmtest.atocrsp.org

- ATOC LIMITED -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:56:91:59:99:18:24:2a:a3:08:4a:b6:b5:eb:85:b1 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ATOC LIMITED

Organization: ATOC LIMITED
Organization unit: LSM
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:91:59:99:18:24:2a:a3:08:4a:b6:b5:eb:85:b1
Serial Number (int): 4437169565268127570543464836707878321
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 6f:e0:a7:ed:a2:db:c1:aa:ee:31:83:03:36:3d:a1:e5:ce:84:00:6b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 93:be:93:ca:c2:08:c2:6c:e9:28:91:28:51:83:9c:15:92:f7:b4:5e
Fingerprint (sha256): 07:96:b8:ee:49:79:0f:e6:cb:6f:28:3a:20:00:83:9c:4f:1d:b6:02:0d:4d:4c:ca:74:b5:26:6c:97:d7:eb:94

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate lsmtest.atocrsp.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lsmtest.atocrsp.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lsmtest.atocrsp.org

Other certificates including the domain name atocrsp.org

(limited to 100 certificates)
lsmtest.atocrsp.org
esg.atocrsp.org
lsmtest.atocrsp.org
webdev.portal-env.atocrsp.org
opendj.uat01.portal-env.atocrsp.org
apioat.atocrsp.org
opendj.preprod01.portal-env.atocrsp.org
sso.atocrsp.org
ssouat.portal-env.atocrsp.org
elb-api.prod01.d4t-env.atocrsp.org
webval.portal-env.atocrsp.org
tmsapi.atocrsp.org
portalload.atocrsp.org
ssosystst.portal-env.atocrsp.org
support.test01.commonservices-env.atocrsp.org
tmsapiload.atocrsp.org
esgsystst.portal-env.atocrsp.org
webpreprod.portal-env.atocrsp.org
tms-flow-env2.atocrsp.org
lsmtest.atocrsp.org
ssovalpreprod.portal-env.atocrsp.org
web.atocrsp.org
portal.atocrsp.org
esguat.portal-env.atocrsp.org
ssoval.portal-env.atocrsp.org
ssolivetest.atocrsp.org
tmsapisecuremo3.atocrsp.org
ssovaldev.portal-env.atocrsp.org
ssouat.portal-env.atocrsp.org
support.test01.commonservices-env.atocrsp.org
esglivetest.atocrsp.org
tms-api-env2.atocrsp.org
ssopreprod.portal-env.atocrsp.org
weblivetest.atocrsp.org
ssouat.portal-env.atocrsp.org
lsm.atocrsp.org
esguat.portal-env.atocrsp.org
ssopreprod.portal-env.atocrsp.org
portal.atocrsp.org
ssosystst.portal-env.atocrsp.org
ssouat.portal-env.atocrsp.org
tmsapisecuremo3.atocrsp.org
tms-api-env2.atocrsp.org
*.atocrsp.org
mecportal.atocrsp.org
ssovaluat.portal-env.atocrsp.org
lsm.atocrsp.org
portal.atocrsp.org
tmsapi.atocrsp.org
*.atocrsp.org
webuat.portal-env.atocrsp.org
tmsapimo3-testing.sand.tms-env.atocrsp.org
portalload.atocrsp.org
opendj.dev01.portal-env.atocrsp.org
portal.atocrsp.org
esg.atocrsp.org
web.atocrsp.org
tmsapimo3-testing.atocrsp.org
webpreprod.portal-env.atocrsp.org
opendj.lvtst01.portal-env.atocrsp.org
webpreprod.portal-env.atocrsp.org
portalload.atocrsp.org
ssodev.portal-env.atocrsp.org
esgpreprod.portal-env.atocrsp.org
webvalpreprod.portal-env.atocrsp.org
esgsystst.portal-env.atocrsp.org
portal.mo3.iam-env.atocrsp.org
portalmo3.atocrsp.org
tmsapisand.atocrsp.org
apioat.atocrsp.org
tmsapi.atocrsp.org
weblivetest.atocrsp.org
opendj.prod01.portal-env.atocrsp.org
websystst.portal-env.atocrsp.org
portalload.atocrsp.org
opendj.uat01.portal-env.atocrsp.org
tmsapisand.atocrsp.org
lsmtest.atocrsp.org
web.prod01.d4t-env.atocrsp.org
esglivetest.atocrsp.org
webvalpreprod.portal-env.atocrsp.org
webpreprod.portal-env.atocrsp.org
webvalsystst.portal-env.atocrsp.org
webuat.portal-env.atocrsp.org
webvaldev.portal-env.atocrsp.org
sso.atocrsp.org
web.atocrsp.org
support.prod01.commonservices-env.atocrsp.org
lsm.atocrsp.org
tmsapi.sand.tms-env.atocrsp.org
esguat.portal-env.atocrsp.org
tmsapi.load.tms-env.atocrsp.org
portalload.atocrsp.org
esgsystst.portal-env.atocrsp.org
opendj.lvtst01.portal-env.atocrsp.org
ssovalsystst.portal-env.atocrsp.org
ssopreprod.portal-env.atocrsp.org
ssodev.portal-env.atocrsp.org
*.atocrsp.org
opendj.prod01.portal-env.atocrsp.org

Certificate

The complete raw certificate details for lsmtest.atocrsp.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0M6R4NuXPtnnHD0gTKn
+lECAGZkI2qFbbEnsOhuwpwLPHZH3wFZ+qEygssJwWHW6rBjZVmcBz6KofdBoMyt
G+bSqMvjjAtN2Yh8q9Gq2L4PqpWoAFZlxBw6MrCC+5swD/7LOKFhXRokOdeYy08n
QdD28x57a5nntcg9doWhM9pmjKtx/cClLD37BkmRwWMZ+Ka6S0ZSPl4vkX/GBrrf
hQ1zu/Lhnp1A6alXYlkNK11whij4v6f9QCws/7R4jfsXbNsneotN4fwYUnYg2MX/
NslIB60ED02hHostuGELHn25EtojEC5RtYiHAaiS6lqboxwAm1uiiBXSyelOfXSO
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4437169565268127570543464836707878321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ATOC LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LSM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lsmtest.atocrsp.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23134761000393938720690932626394074724267081229586346240873163880405406563631592300112040193703641255157957982888303514095692756018232515216157668970350721345160249645569305173781771305621532046033391820443074838545374511777514191144826845654594910690093113670051849876746412035832808673747955245053247474260694373197873192302479512754495687659932353192673884921104063423953120046852236935839113481269424314216667490927253136233586963702645707539802440821539196982588529538220821454751434742941640135027681321318596824102973933057710752775096116487251579758008334662140759037325541563910531500630543070166276845637159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6fe0a7eda2dbc1aaee318303363da1e5ce84006b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsmtest.atocrsp.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016fc8d3a9b10000040300463044022058f2d17f45c851b098cd409f03138357a08a106f1f5b1cd931df1d70979d537c02205cc64f16750b1fc33c95e6f91e94e402d87904dafce2b9bd8b8e971c7dfe72320076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016fc8d3a94b0000040300473045022100b8695761c6ee467129425d089a7e49d58c828f2b60d7401333710df32d91379c02204c03a8a8299e8efef604b0c987a26f81239d8c2d2c7bceb110a74e289cba6712
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00675e13ef9c5e04717d36c24725d0941a454e2ac35c6abe66487b5ef71f50902a38db17b9420e317f7157eda45db2477a2534f798604ac3df6dff6f987b30860475a0c71fa868d33137271a51d8ccac458717caadd5baad5099080fc9e813acfe6ea593a36e49f716d3f764ac054d0ea07afc58bd25765829676870e145c28d849a9f1ac37fc70edb8e8416f39a3e0ac1e6a3b87b88bc63238bdaa79c0aeb29117b68758dc3aa9cbe48edb77982f4eb1a1fc32f8a32a1b23028a5dcfa4d7e5e8652116ad9e961a9511ba1f7dd82c6d3e3d7c046940a7bfc763b7a7b3bc494d99f901dd06d363c14b9c726390c1396ae99782efb61d1cd811008e39344cce1d524