xnq.r.10086.cn

- 中国移动通信集团四川有限公司 -

Issued by GeoTrust RSA CN CA G2

About this certificate

This digital certificate with serial number 0b:0b:ca:16:6f:a8:5e:13:ac:d3:81:b5:ef:3d:40:4d was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

中国移动通信集团四川有限公司

Organization: 中国移动通信集团四川有限公司
State / Province: 四川省
Locality: 成都市
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:0b:ca:16:6f:a8:5e:13:ac:d3:81:b5:ef:3d:40:4d
Serial Number (int): 14682722043393850550352305015377182797
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1d:70:fa:e7:0d:d5:71:c2:8e:50:4e:55:9d:c9:3e:45:1c:e4:55:9b
AuthorityKeyId: 24:6f:91:3f:89:87:87:0e:32:c2:40:18:df:c5:4c:eb:4f:c8:49:32

Fingerprint (sha1): 10:d1:fe:4f:21:e9:76:61:26:5a:54:85:9b:8b:0b:e6:ac:48:4d:78
Fingerprint (sha256): 0b:4b:33:a4:4c:52:0f:73:44:2b:86:4e:03:ad:2f:33:79:93:e0:02:7b:ed:ef:9b:e9:f6:d2:a8:80:ae:d5:d9

Issuing Certificate URL: http://cacerts.digicert.cn/GeoTrustRSACNCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/GeoTrustRSACNCAG2.crl

Check the revocation status for certificate xnq.r.10086.cn

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xnq.r.10086.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xnq.r.10086.cn
xnq.config.rcs.chinamobile.com
xnq.ftcontentserver.rcs.mnc000.mcc460.pub.3gppnetwork.org
*.xnq.rcs.chinamobile.com
xnq.ftcontentserver.rcs.mnc002.mcc460.pub.3gppnetwork.org
xnq.ftcontentserver.rcs.mnc004.mcc460.pub.3gppnetwork.org
xnq.ftcontentserver.rcs.mnc007.mcc460.pub.3gppnetwork.org

Other certificates including the domain name 10086.cn

(limited to 100 certificates)
img1.shop.10086.cn
www.jl.10086.cn
*.zj.10086.cn
*.ecloud.10086.cn
uc.ipower.10086.cn
open.jf.10086.cn
img02.js.10086.cn
att2.edu.hl.10086.cn
p.10086.cn
www.sx.10086.cn
mas.ecloud.10086.cn
h5.bj.10086.cn
www.cq.10086.cn
hdh.10086.cn
www.edu.hl.10086.cn
wap.sc.10086.cn
znjs.hn.10086.cn
*.mail.10086.cn
caiyun.feixin.10086.cn
www.hn.10086.cn
mas.ecloud.10086.cn
b2bjoy.10086.cn
*.open.10086.cn
*.health.10086.cn
www.ha.10086.cn
wap.gd.10086.cn
*.jf.10086.cn
wap.he.10086.cn
*.open.10086.cn
img02.js.10086.cn
img02.js.10086.cn
weixin.he.10086.cn
wap.gd.10086.cn
cmii.10086.cn
img0.shop.10086.cn
wap.xj.10086.cn
m.jf.10086.cn
service.cq.10086.cn
*.edu.10086.cn
*.ac.10086.cn
www.edu.hl.10086.cn
www.sd.10086.cn
hdh.10086.cn
*.f.10086.cn
*.pnt.10086.cn
*.ecloud.10086.cn
open.jf.10086.cn
xnq.r.10086.cn
service.hb.10086.cn
www.hb.10086.cn
p.10086.cn
www.hc.10086.cn
rd.go.10086.cn
service.cq.10086.cn
iot.10086.cn
www.ln.10086.cn
www.sd.10086.cn
wap.hi.10086.cn
r.10086.cn
open.home.10086.cn
class.edu.hl.10086.cn
openapi.gd.10086.cn
push.it.10086.cn
*.clientaccess.10086.cn
*.ac.10086.cn
dev.10086.cn
www.he.10086.cn
wapmail.10086.cn
hbq.r.10086.cn
wap.gs.10086.cn
*.open.10086.cn
www.gx.10086.cn
service.cq.10086.cn
*.ac.10086.cn
wap.sc.10086.cn
wap.js.10086.cn
service.cq.10086.cn
b2bjoy.10086.cn
zhengqi.10086.cn
www.ha.10086.cn
p.10086.cn
www.he.10086.cn
poolaos.ecloud.10086.cn
auth.weibo.10086.cn
www.gx.10086.cn
open.iot.10086.cn
wap.sc.10086.cn
wap.sx.10086.cn
service.ha.10086.cn
*.clientaccess.10086.cn
www.gz.10086.cn
b2b.10086.cn
wap.jx.10086.cn
service.cq.10086.cn
m.sd.10086.cn
www.sh.10086.cn
es.b2b.10086.cn
zhengqi.10086.cn
wap.sc.10086.cn
logdownload.cmcdn.cdn.10086.cn

Certificate

The complete raw certificate details for xnq.r.10086.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi6Y0JYJ3ePL8lccL+AM
laEAukyafXjonS0wX2Ec1V7J6PF+u6y0xzchb+Jx+4QO+C9gPVx6rdWm8jLuvwwO
AW7M/aabLqmWI9T9OfM5w4p4sZttC3CI8HbYOH+c71FDCA5nhHTfFeH4HsT4aOOb
bdvMq70OUbY9RDRIrAc967jKNsSqRVeiVppMgWVR45FYk09zA++QdKVoleudOGK4
i5u3mM4FIBNGsWtGCzgHcnXSujXZxZjVJljBDRxq1codkzTA4WSL8SwFIfQgIU+o
Z6HzrEHTZotxxqwROBf2JDBzbrWOgPPJD6z5Zv8MbxbYNwIneaO25acW0bXW2yVG
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14682722043393850550352305015377182797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CN CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '四川省'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '成都市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '中国移动通信集团四川有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xnq.r.10086.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24513208967359292452035891240693270072132275967575999386952260095168630270824588151129811678671347689157513377169985105858324225236218809642937573493001122739423144185148200079450735687918914796558255848548211362189243454879227146742611128744381372424586243509923372168087229557869900820541524148449996706996534782834553857665915932141508089636764569032074526913136061455573335195744163304101898332101188862012013042675715958008709398720688623580044110962474099353752202057362467143064811197605692491811431883733102217532810832487619726382209836283730237390518927782960864249254762665143960683077572377781280023332571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246f913f8987870e32c24018dfc54ceb4fc84932
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d70fae70dd571c28e504e559dc93e451ce4559b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (315 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xnq.r.10086.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xnq.config.rcs.chinamobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xnq.ftcontentserver.rcs.mnc000.mcc460.pub.3gppnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xnq.rcs.chinamobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xnq.ftcontentserver.rcs.mnc002.mcc460.pub.3gppnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xnq.ftcontentserver.rcs.mnc004.mcc460.pub.3gppnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xnq.ftcontentserver.rcs.mnc007.mcc460.pub.3gppnetwork.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/GeoTrustRSACNCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/GeoTrustRSACNCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183137ecbea0000040300483046022100f76970556e1c33bb7b08f25d2a42d449242415a78e82ea341b4e175d272873af022100df56d83e00e7cd67b4eb3747339df90b57e02255519c0f7a25217d74c61bf2a100760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c00000183137ecc220000040300473045022074bac18997a9f7e6f9a2bbb44d8d6bc00610b0b987cdec1f12f042ebf651c798022100fd4f6d04e5b48a4fb248c3eb18872cc3970073ca0918b977883cf1e39fe426c7007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183137ecc2d0000040300463044022035f26bb97ac6843efbf9b59964a4d8042eef6492071b758c6d14daf7e5aa0727022002b0cb51fd41c42abc5546738afebfded491f1870e481858fd5571db4e06d54b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000e779be9ab46d55bc40d6487f67a2245828bb975ec13fdf118e3f0f9a5678e3bbdf65796612f88ba91a35d865da923242762b5425d732771be34d17e99a68411d551af518fb939f615cc3dc978ac141207755a9a39008890d7108a626d758a79d402aab91bcb643ec636a4d1d8052a31fabcd6b0dabd01afe39cd62b66e9c8810e3a0cac35466f62931a9b85b61b025af16f629eba4eb78c573fbbe38e0a9f04566706aeea2ca1c1897d707eb7f0cc2cfb5b5e50ddb046b63167262f7628691dcdb983271a82e5ffafd90477b3bd0ba767fea5bf855068ba7fc89a22ee392e1a014cd94859aae6e653ac0a741233cf310f1af980c997dd146c4765cc1a923743