www.vwfsag.de

- Volkswagen Bank GmbH -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 08:92:2b:06:88:00:62:9d:46:df:3d:29:0b:3f:20:3c was issued on by Symantec Corporation.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Volkswagen Bank GmbH

Organization: Volkswagen Bank GmbH
Organization unit: IH-IOIN
State / Province: Niedersachsen
Locality: Braunschweig
Country: DE

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:92:2b:06:88:00:62:9d:46:df:3d:29:0b:3f:20:3c
Serial Number (int): 11392771968697770953274102132531732540
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 92:c1:de:d8:e4:0d:59:62:72:fe:3e:67:39:cb:08:25:3a:a9:07:02
Fingerprint (sha256): 10:45:a3:ca:22:b5:0a:be:c2:a4:3d:e4:4d:f6:47:9b:12:56:62:8a:1f:3c:c1:d6:7b:b1:c3:24:b4:d3:2c:54

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.vwfsag.de

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vwfsag.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

externalrelations.vwfs.com
governmentalrelations.vwfs.com
corporatecommunications.vwfs.com
fsnet.vwfs.com
fsweek.vwfs.com
generalmanagementconference.vwfs.com
www.vwfsag.de

Other certificates including the domain name vwfsag.de

(limited to 100 certificates)
services.vwfsag.de
www.vwfsag.de
auth.vwfs.com
evaluation.training.vwfsag.de
profin.vwfsag.de
mx1.vwfsag.de
www.vwfsag.de
marketingtoolbox.vwfsag.de
auth.vwfs.com
marketingtoolbox.vwfsag.de
gwcenter.vwfsag.de
vap2host.vwfsag.de
services.vwfsag.de
auth.vwfs.com
gwcenter.vwfsag.de
www.vwfsag.de
mimidev.vwfsag.de
kons.vwfsag.de
feedback.training.vwfsag.de
mx1.vwfsag.de
www.training.vwfsag.de
partner.vwfsag.de
partner.vwfsag.de
www.vwfsag.de
gwcenter.vwfsag.de
mx2.vwfsag.de
www.vwfsag.de
www.vwfsag.de
www.training.vwfsag.de
gwcenter.vwfsag.de
mx2.vwfsag.de
www.vwfsag.de
kons.vwfsag.de
webaccess.vwfsag.de
www.vwfsag.de
kons.vwfsag.de
presse-event.vwfsag.de
vwfs.com
vwfsag.com
www.training.vwfsag.de
profin.vwfsag.de
training.vwfsag.de
webaccess.vwfsag.de
www.vwfsag.com
feedback.training.vwfsag.de
evaluation.training.vwfsag.de
www.training.vwfsag.de
auth.vwfs.com
partner.vwfsag.de
www.vwfsag.de
mimiprod.vwfsag.de
partner.vwfsag.de
partner.vwfsag.de
www.vwfsag.de
vwfs.com
mx1.vwfsag.de
partner-kons.vwfsag.de
feedback.training.vwfsag.de
evaluation.training.vwfsag.de
www.vwfsag.de
partner.vwfsag.de
services.vwfsag.de
vap2host-k.vwfsag.de
marketingtoolbox.vwfsag.de
kons.vwfsag.de
gwcenter.vwfsag.de
partner.vwfsag.de
evaluation.training.vwfsag.de
mimikons.vwfsag.de
auth.vwfs.com
www.vwfsag.de
gwcenter.vwfsag.de
feedback.training.vwfsag.de
api.training.vwfsag.de
feedback.training.vwfsag.de
mimikons.vwfsag.de
kons.vwfsag.de
www.training.vwfsag.de
feedback.training.vwfsag.de
gwcenter.vwfsag.de
www.vwfsag.de
mimiprod.vwfsag.de
vap2host-i.vwfsag.de
partner.vwfsag.de
www.vwfsag.de
gwcenter.vwfsag.de
kons.vwfsag.de
marketingtoolbox.vwfsag.de
evaluation.training.vwfsag.de
webaccess.vwfsag.de
training.vwfsag.de
gwcenter.vwfsag.de
profin.vwfsag.de
mimiprod.vwfsag.de
partner-kons.vwfsag.de
www.training.vwfsag.de
www.vwfsag.de
profin.vwfsag.de
www.vwfsag.de

Certificate

The complete raw certificate details for www.vwfsag.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVuv5m/K8aELKdIWHheq
pnH1dfT72P1XkwL/oxVJ7R0CmYeh0SDLMf6t1WTcjc2YKNfHfj1SWnT+eg0nfJ9k
7q2rJ2VTUmB5NcY4x4h6Cex8tHva6E30hwBPfAERyAllTs8nNYKI967xDA9//cP+
hhjG5Ic6v7fW9EwVgS50/dW+4RDWJpt9jF0kDXaI1F84hItOSXDWEaXQia9bdWzT
vqbjUExbiBscQ3Qnx3uHDADHJ4YiP6EUrkLyVcws5ua5f6urlds+dvNsTpQsaguZ
Bo0Uv93lzJcWplFHRT6KTE7cvCsmXxCVbgoQdklxgbuY+eI24xQy0ny4gFHXI0Hi
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11392771968697770953274102132531732540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Braunschweig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Volkswagen Bank GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IH-IOIN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.vwfsag.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25419111897183299975878021082287078569702175873831894938939334024394185258207029190872391127101653154934391663666165112233899066148721311805076748725339502691882579836163505939394224934107301648599410574356325387459185217133076041649496966707217438568086738183809273885439436843673355927271566631337678970159988091461848917894490304497155947341446185996846886668250567540398036101888954733276314763839548922120128049770108068400391483854177457912753072517483233954896046458600921328151735054676250686183528966889652299225382942427811110861808095987281250850929013479024835086584628026004678279186744907237551253873311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (183 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'externalrelations.vwfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governmentalrelations.vwfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatecommunications.vwfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsnet.vwfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsweek.vwfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generalmanagementconference.vwfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vwfsag.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015da76435fa0000040300473045022100f28b14a7dc3814659ed88f6f3235ad103fbc07d42f6a4a2b202a7d9b89937a8302202d48e94599e5fa070fb800a6453d23243c816413f351585879ae927608ef75ff007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015da76436310000040300473045022100a22ea745f83bd5e223a6c58fb2bcf30e3dba3c5ec6d9de59ff75999f739431f502201c019360ed49ba9171d20b3b4a5bd8a7d6c71db3f5dede03bb397489ee5ff509
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002cad040f1ae2c77d47ef37bcff7f59978e9e26ce165f480950e517c5a93386d5e4a73bf95c0b19ba171708a6ff4d221f0811e5f12f2807c8f8e39f41bef4021fd75bc62d5d13819bf6070d78cc9c4a3ff0a1cca79c4e062f1eafdf7979bf7b9ed0d9293154561c8cfd37894ca58305e27003051c48e987ed1988f7a826e0f569556e3dd47b6137991db030dd928bf7d37df720f1a9655d91aed5be3e2ca3ce17b8ca2f60408f0fe8eebd6849bf3389ae1b4406b7396487d5dd6141638be69049188414742c2e52b99fef5332e44c71dd934e7b52d7410f2eb8c86f46ebea70c850e9d4d9abb92ade52e235b899e11342cfcdbf872030dc290a1eeb5a6d4a37bd