customers.childsupport.dhss.delaware.gov

- State of Delaware -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 8b:47:99:2d:d1:61:8e:ed:00:00:00:00:50:f6:38:df was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Delaware

Organization: State of Delaware
Organization unit: Delaware Health and Social Services
State / Province: Delaware
Locality: Dover
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8b:47:99:2d:d1:61:8e:ed:00:00:00:00:50:f6:38:df
Serial Number (int): 185134451329796258747807553610835179743
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b6:6b:33:97:84:c0:28:e3:7b:2d:b2:a5:a9:be:e6:63:de:73:43:aa
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 21:de:09:5a:1c:cf:bf:25:4b:ef:d5:2a:ca:fc:d2:7d:78:cc:0a:a2
Fingerprint (sha256): 0f:d1:39:53:1a:2f:69:84:4b:43:91:d6:9d:1c:04:21:31:8b:ce:af:da:a4:42:98:96:07:f2:ab:bd:86:e5:a1

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate customers.childsupport.dhss.delaware.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for customers.childsupport.dhss.delaware.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

customers.childsupport.dhss.delaware.gov
www.customers.childsupport.dhss.delaware.gov

Other certificates including the domain name delaware.gov

(limited to 100 certificates)
certLink.delaware.gov
eapps.erp.delaware.gov
ddaproductreg.dda.delaware.gov
GROSSRECEIPTSTAX.DELAWARE.GOV
dewow.dhss.delaware.gov
ws.delaware.gov
lims.dda.delaware.gov
apinursery.nilatst.delaware.gov
thisdayadmin.archives.delaware.gov
publicmeetings.delaware.gov
opencheckbook.delaware.gov
na21-1.cdn.salesforce-communities.com
sdsh-test.dhss.delaware.gov
www.geowp.delaware.gov
cfrs.elections.delaware.gov
arden.delaware.gov
signup.assistselfservice.dhss.delaware.gov
schoolclosings.delaware.gov
bids.delaware.gov
foodprogram.delaware.gov
jurorkent.courts.delaware.gov
medicaid.dhss.delaware.gov
imobiletst.dda.delaware.gov
iso.delaware.gov
fsb-dev.budget.delaware.gov
ssoqa.dti.delaware.gov
imobiletst.dda.delaware.gov
myhealthycommunity.dhss.delaware.gov
msds.dhss.delaware.gov
delecorp.delaware.gov
*.test.dnrec.delaware.gov
egov.delaware.gov
dtisupport.delaware.gov
dewow.dhss.delaware.gov
search3.delaware.gov
www.police.middletown.delaware.gov
eapps.erp.delaware.gov
animalservices.delaware.gov
incapsula.com
search3.delaware.gov
sso.delaware.gov
ssl363635.cloudflaressl.com
limstst.dda.delaware.gov
firstmap.delaware.gov
pvs.dti.delaware.gov
fsb-dev.budget.delaware.gov
newhire.dhss.delaware.gov
dtisupport.state.de.us
incapsula.com
pubsrv.deljis.delaware.gov
demaeoc.dema.delaware.gov
assist-test.dhss.delaware.gov
dtisupport.state.de.us
*.delaware.gov
dateadmin.delaware.gov
devtrends.stateplanning.delaware.gov
na21-1.cdn.salesforce-communities.com
grossreceiptstax.delaware.gov
access.delaware.gov
shop.delaware.gov
eflex.courts.delaware.gov
rp.dti.delaware.gov
delafile.delaware.gov
insapp.delaware.gov
*.delaware.gov
rp.dti.delaware.gov
schoolclosingsadmin.delaware.gov
w9.accounting.delaware.gov
devtrends.stateplanning.delaware.gov
search3.delaware.gov
egov.dnrec.delaware.gov
registertovote.elections.delaware.gov
ecris.erp.delaware.gov
dol.delaware.gov
wap.dnrec.delaware.gov
nursenavigator.dhss.delaware.gov
grossreceiptstax.delaware.gov
rp.dti.delaware.gov
snow.dot.delaware.gov
foodprogram.delaware.gov
www.education.delaware.gov
pubsrv.deljis.delaware.gov
dsbservice.delaware.gov
census.delaware.gov
clf.dti.delaware.gov
esupplierqa.erp.delaware.gov
plus.stateplanning.delaware.gov
customers.childsupport.dhss.delaware.gov
ias-test.dhss.delaware.gov
unclaimedproperty.delaware.gov
education.delaware.gov
unclaimedproperty.delaware.gov
dcisappuat.corp.delaware.gov
delafile.delaware.gov
clf.dti.delaware.gov
ssoqa.dti.delaware.gov
vawa.deljis.delaware.gov
msds.dhss.delaware.gov
arden.delaware.gov
rp.dti.delaware.gov

Certificate

The complete raw certificate details for customers.childsupport.dhss.delaware.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuViUJxaloJGKtEWQ4vlX
FV3hug3NGlTpMVvRtY69LkkwiaYdhEnlWpceMfwR+BLrA2FrHmDYnhznyRMUpld5
UIjVu2nK0TbjMRp7DKIReU82uH6mi6VwZ0wQ1zbmreUov+bYlPuzw8cKwWLUrNuH
RNcv+5VRlTbOpr2smqCPJK2VAf0G9vzlxHksbOuiP18jXSuANnBdbzPyGDuBkz53
cRVhXDd7lharFSQoWIaw+PySoML0irwmwuUhl5c7N9OJFLGXPSY0lN5Yv9znVyM0
rrZkYfn9X100nJ1s5xNfiXoXCtnIn208l2J6B3n8b9vi4UGz8hWzy1J4kRQufLsW
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 185134451329796258747807553610835179743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 16:02:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-31 16:32:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware Health and Social Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'customers.childsupport.dhss.delaware.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23397766214232483331623095757435369125834429502709616930936635727595836086786961075867730471564712165897866089817549828575497631768348364778312896206218569367353639350828525490181877255949705971648438682419381379074912687554855001751356715026051929761672438098012901669391855091931930583830498354971688127922732672049916776223453770509962024354942296086530750531451215206563201061727217763718340615039980736080840651819378583638781697631424525417181753174957492833899024079693328462248442268795872819888916594855598372038986278943509388618525665585912943824710390744231093579258060045412152687065361713280938881521291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.childsupport.dhss.delaware.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customers.childsupport.dhss.delaware.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b66b339784c028e37b2db2a5a9bee663de7343aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0023d00002d51fde918f136b39c20dc11aaec39db4f6c674542b17b4ad43d2eb1bb2619af987dd9719a738645d0dd38c94265dde7b103bc113dd9873256ad7ffe40308d4d05f71c49a91d86797d9dd0b57c1dba9f2c6457b6dc6e8b3e87879085f98aede25091b879ce3493fe5fb5cf691e5f20d34180353c709b6756cf47f150061fcae9057fd9e823d6f1c7e94bcc3d828d79c46f6380003d0a6ff363216ac3c8321fdc6a9d66fa35f5837047a22d6c366a27a7eb8331d85baa217e3ceb44991f581869bff75ce0417cc68c7d91d13fa203e41f6bae12fddf8aedc07c0edb2cd467409d35c0d599e2317753a57af5bc7a23f921c1337c0a02695134c0b45f1b9