unicard.brighton.ac.uk

- University of Brighton -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 2b:fe:45:53:0e:c2:a8:84:2b:1f:6d:81:ee:a7:79:95:35:b3:e4:dc was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Brighton

Company registration number: Government Entity
Organization: University of Brighton
State / Province: East Sussex
Locality: BRIGHTON
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:fe:45:53:0e:c2:a8:84:2b:1f:6d:81:ee:a7:79:95:35:b3:e4:dc
Serial Number (int): 251157031436637539162707637097335296631948698844
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 73:47:2d:1e:69:33:6d:65:fb:eb:54:72:2c:7c:0d:ae:57:da:38:ec
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): 06:b4:39:7b:77:c3:1e:25:eb:7e:03:dc:e3:28:d5:0a:eb:e3:be:07
Fingerprint (sha256): 08:54:94:a0:31:ba:bc:59:13:cc:dd:a5:8d:32:f0:93:6d:64:dc:50:29:7c:72:02:25:f1:94:26:be:0a:5e:4a

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate unicard.brighton.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for unicard.brighton.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

unicard.brighton.ac.uk

Other certificates including the domain name brighton.ac.uk

(limited to 100 certificates)
email.brighton.ac.uk
dataviewdev.brighton.ac.uk
idp.brighton.ac.uk
id.dev.brighton.ac.uk
evsidv.brighton.ac.uk
www.inam.brighton.ac.uk
researchers.brighton.ac.uk
shop.brighton.ac.uk
wadslive.brighton.ac.uk
staffmail.dev.brighton.ac.uk
evsipr.brighton.ac.uk
www.brighton.ac.uk
authenticate.brighton.ac.uk
wattsmedia.brighton.ac.uk
prism.brighton.ac.uk
shs.brighton.ac.uk
arch.brighton.ac.uk
pay.brighton.ac.uk
timetable.brighton.ac.uk
tel-ms-pro01.university.brighton.ac.uk
lists.brighton.ac.uk
mailer.brighton.ac.uk
data4impact.brighton.ac.uk
mysite.brighton.ac.uk
ahs.brighton.ac.uk
prism.brighton.ac.uk
alumni.brighton.ac.uk
emea-san1.blackboard.com
eu-central-1-san1.blackboard.com
mimosa.brighton.ac.uk
alumni.brighton.ac.uk
alumni.brighton.ac.uk
studentfolio.brighton.ac.uk
socialwork.brighton.ac.uk
peri.brighton.ac.uk
screenarchive.brighton.ac.uk
lyncwsext.brighton.ac.uk
unicard.brighton.ac.uk
dataview.brighton.ac.uk
voicemail.brighton.ac.uk
idp-test.brighton.ac.uk
remote.brighton.ac.uk
extranet.brighton.ac.uk
evsipr.brighton.ac.uk
blogs.brighton.ac.uk
studentcentral.brighton.ac.uk
uni.brighton.ac.uk
unicardcentral.brighton.ac.uk
evsite.brighton.ac.uk
studentcentralsupport.brighton.ac.uk
autodiscover.brighton.ac.uk
check-mk.brighton.ac.uk
peri.brighton.ac.uk
eu-central-1-san1.blackboard.com
mailer.brighton.ac.uk
efin5.brighton.ac.uk
shs.brighton.ac.uk
about.brighton.ac.uk
emea-san1.blackboard.com
smtp.brighton.ac.uk
dataview.brighton.ac.uk
staffmaildev.brighton.ac.uk
remote.brighton.ac.uk
email.brighton.ac.uk
autodiscoverdev.brighton.ac.uk
student.brighton.ac.uk
resource.brighton.ac.uk
emea-san1.blackboard.com
www.inam.brighton.ac.uk
eu-central-1-san1.blackboard.com
studentfoliotest.brighton.ac.uk
holiday.brighton.ac.uk
idp-test.brighton.ac.uk
stsdev.brighton.ac.uk
security.brighton.ac.uk
pay.brighton.ac.uk
blogs.brighton.ac.uk
sclink.brighton.ac.uk
eu-central-1-san1.blackboard.com
confirm.brighton.ac.uk
shs.brighton.ac.uk
issd.brighton.ac.uk
issd-dev.brighton.ac.uk
socialwork.brighton.ac.uk
peri.brighton.ac.uk
www.brighton.ac.uk
emea-san1.blackboard.com
transport.brighton.ac.uk
shop.brighton.ac.uk
studentcentraltestsupport.brighton.ac.uk
eu-central-1-san1.blackboard.com
authgen.brighton.ac.uk
pcbookings.brighton.ac.uk
tel-krnl-pro01.university.brighton.ac.uk
*.brighton.ac.uk
springboard.brighton.ac.uk
sportbookings.brighton.ac.uk
moviesandmemories.brighton.ac.uk
alumni.brighton.ac.uk
myinfo.brighton.ac.uk

Certificate

The complete raw certificate details for unicard.brighton.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IJJ0PGVemJdtN+VPLLg
RPum7tj+l9LIdOXb2Mh71sebQ+5qXdby08D3jWRPMG5bOF9djUbi6ZEJvT0IHE6z
JsIzphTWPkwwszTTIb9B1hYl+S26rvPX1/iFSJ1lvxR6zUwFTq3N16r4QrcmFrRm
Gwz92hA6r7fMDL+8SXtBWeJlxTNM+2ohMMxWH0wUUWALlfbJCs7SRmmjpvtQsLvE
60zSWx349FOFVYOALIcnynssAGlJs/LGCJTlJ7tWrDL52DDgWyUSoAo0utVX7MIO
gLU3PLLKtrH2KiEsnJ1Ugr9a1b37v2JG9DEL+8BeDr4YrpokPaP3Rqhp+5pk7iMJ
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 251157031436637539162707637097335296631948698844
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-14 13:47:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-14 13:57:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'East Sussex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BRIGHTON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Brighton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'unicard.brighton.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29856487549191757356924263622318405007936968572034101709351744191646040304531641587566475069738374942469200695113766503827420720561925376806546407925701299103931109452279455051750139901238873237557744470663265551286028749019143663043802152784218073407532025027038433028861741353932720543821090577302705175714243011792327707139537454992090757075439231459987306998273938507958242470502534211102681309907626620370280696334068632746601928942380494668393806158466394378732137436862758890957610320347548934627459832471147925188485409941891454617034422326602505294543253576286055243030529673672724424791601473492765242493369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicard.brighton.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73472d1e69336d65fbeb54722c7c0dae57da38ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00316b3ad5dfed4aebb0ed7d625796412fe2ee7e44397c056db1f0fc08419d0c9a630db3e133d7484118f2b9f6a6450c0b9ef5fa135a80fa0a268b50748154e7d08ee70cda1d656e6f10cffc4207845984b89524e31fa0de2ee8635bf6e87449da05bd0da5327d15d2ffb595e8ca0882c44b0d48f8f532d3e2319cb26ed5ca8b3ee27d904589c621b40c1b101bc92f2094c101208c93072d50ddaf3319352734114ce0c7a03e1c80e6b83c42506b14cbc472eba5ba699295a31e790d63f08447f041b590c2d2ef6e0e71e00749fdec57d19ecffcc580f374343fabd171a28f01f445822bc3cb8e0cebbe0331e26a2414dc544e2844930f68ea0fcc4d639e95995730039d3b80d1d1ba1a8648c8c245e263701d4e4139fbd3572c1c413c17de184bc09740b60226ca46a13cbb9c6b562ae04d92e506076398a665743eaa128d48d4ab0f67eae28b0b1825621aafc8985af4126c0d7339c8e8ce04b828f4542f6a5da051147276e64eb1f6e91f741888ffe73fd5c4e65a5f14d37601fd87e19429ac0261bcb85adb47e79761aa7a7623b867df335600932494339211c467327ffea0720bce9e268c564293fa78af12aa8991369ede32a20b99c45f926adaab59c96fb9cd6d37881443cfe541b5b7f74ad92e588f6930454014d492e0c5783b563ac2c2e938341144ba448d6e0156ad2b0d26bc3daafe2e698b3c21d4e267c35e0b52