itchat.seattle.gov

- City of Seattle -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 2d:cc:97:9b:58:ad:e4:58:b3:1a:ca:81:d8:7d:d4:03 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

City of Seattle

Organization: City of Seattle
State / Province: Washington
Locality: Seattle
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:cc:97:9b:58:ad:e4:58:b3:1a:ca:81:d8:7d:d4:03
Serial Number (int): 60877563321122563596947001999802356739
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 50:0f:70:52:57:5a:17:02:91:97:90:60:01:5d:04:4c:bc:f8:f4:12
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 06:7b:d1:6a:25:54:23:78:b9:5c:07:95:7c:f8:7e:96:d9:2f:02:4a
Fingerprint (sha256): 10:a3:2c:1c:46:08:7a:bb:5d:e1:47:94:a7:f4:99:ee:2b:60:2c:ee:83:77:a7:41:47:15:30:00:fb:e3:f1:29

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate itchat.seattle.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itchat.seattle.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itchat.seattle.gov

Other certificates including the domain name seattle.gov

(limited to 100 certificates)
acceladevextsvc.seattle.gov
tls.automattic.com
my.seattle.gov
vsrvcjisprod01.seattle.gov
housing.seattle.gov
alert.seattle.gov
atyourservice.seattle.gov
news.seattle.gov
welcoming.seattle.gov
www.spdblotter.seattle.gov
atyourservice.seattle.gov
murray.seattle.gov
gtechna-test.seattle.gov
powerlines.seattle.gov
techtalk.seattle.gov
harrell.seattle.gov
council.seattle.gov
spuconnect.seattle.gov
slice.seattle.gov
designreviewoutreach.seattle.gov
wald1.seattle.gov
login.seattle.gov
juarez.seattle.gov
homelessness.seattle.gov
communityconnector.seattle.gov
amwo.seattle.gov
www.seattle.gov
strauss.seattle.gov
cosip-api.seattle.gov
rainwise.seattle.gov
talk2.seattle.gov
cttab.seattle.gov
perspectives.seattle.gov
data.seattle.gov
citylight.seattle.gov
gisdata.seattle.gov
council.seattle.gov
herbold.seattle.gov
mobe.seattle.gov
inweb.seattle.gov
herbold.seattle.gov
council.seattle.gov
webeoc.seattle.gov
consultants.seattle.gov
slice.seattle.gov
centerspotlight.seattle.gov
mydpdservicesqa.seattle.gov
opengis.seattle.gov
centerspotlight.seattle.gov
email.seattle.gov
webqa6.seattle.gov
webqa7.seattle.gov
web1.seattle.gov
greenspace.seattle.gov
www.perspectives.seattle.gov
council.seattle.gov
seattlerdy.seattle.gov
bagshaw.seattle.gov
pgp.seattle.gov
www.frontporch.seattle.gov
gonzalez.seattle.gov
resupdates.seattle.gov
thebuyline.seattle.gov
housing.seattle.gov
maps.seattle.gov
slice.seattle.gov
parkways.seattle.gov
data.seattle.gov
connect.seattle.gov
data.seattle.gov
smcivrextqa.seattle.gov
capitalprojects.seattle.gov
obrien.seattle.gov
climatechange.seattle.gov
data.seattle.gov
frontporch.seattle.gov
cosip-api-stage.seattle.gov
www.seattle.gov
bagshaw.seattle.gov
spo.seattle.gov
civiform.seattle.gov
tls.automattic.com
connect.seattle.gov
email.seattle.gov
cosaccela.seattle.gov
itchat.seattle.gov
citylight.seattle.gov
accelaextsvc.seattle.gov
durkan.seattle.gov
news.seattle.gov
hrisapi.seattle.gov
sawant.seattle.gov
webqa6.seattle.gov
cos-stage-nlb.seattle.gov
www.thescoop.seattle.gov
married.seattle.gov
olp.seattle.gov
consultants.seattle.gov
web1.seattle.gov
durkan.seattle.gov

Certificate

The complete raw certificate details for itchat.seattle.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArqfAriPZxS/IV1f3WCTn
h15sQfIsMMoSY3f9XbSW7TvQYUn1xpdAcWB7rFTZryLV9BAC5hFHFRzQe9yjzJGo
2E3jNy4dyExSETC4jzDbVMAeAoRc4nMVbfWfHc0xU2kq1/DFEhRlZotbBVyw/WP2
yVsYFvcgGEf5+IPpHNx8oDzo5ukZ5sq0zx/Ha+NRIuNysqMU93Qp7qHOCLf0Ws0b
QKCk6Yj2AWPKwKg03fbpn5JEwBeCY+rUipq+64OsfoZyist8PkQ6bV0FM4i6YM3x
jX4nESIRbE3EGDKYw8GXgcSMbXnqxbWC0Gfbe8NDCBDmSSbvvz7hUS+ogZipRFgW
dAmN1a5rP9Lkm5719kV+2wPLD7Ihns0eUM2pDipBzyigUd+wD7AEHcTN32txC4Vb
9kT1ri0inPw4HOYgWTIXumHwhqjXRntlJsyQGaIhQVo5t5WWQ6tHDlMAJk7kC1u/
X24AJz1meTv9klXwGoMDi45WmhqC8f/lO2PzKXjtcxmsxWDDmMg8FR/SYUBVoqHp
SEyq58Nep3fuaC+KgW94ZKs5VSsHhqxIvBIe8fKWHmDfxuvcK+eY/+CcMmkUsdRv
NS5yeVhpWe9D/GmG0+85KTuAMXceNC5XHOZFz5J/MkC0DHfWrUT/averWLRPQKqg
FYYNWIlUcOqfHBY0UkxFSFcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 60877563321122563596947001999802356739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 18:58:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 18:58:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itchat.seattle.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712531392572621434463053391102201422964374433527261303636391965710569871269748525915086237752176612719521609483648662305791178072198493760037731234428391570572874603332180706118851488685317103560505837477804334484293928523107391478125354634409616803678331184291397243399202165933626817935655862109550520344906831941875815089097857830401325801945898390144763745866818419087467173187592946422656334469605320923302655483081839261460577103622952473911883114288609656915327968064555013919052818646059782219346769739779090357432064565634432456964463017107030265433057753883295336997820267849053772664042127045879483057416340194254221480723902857601185141731481021870110877380658254154493615983855829965766129565462093119000950539132639549849762121384653168595828043787636573242121814632592002630017744177822930753321947623863815435708182883621007459817669069442631742104515040391036206864527933690507881637875839784772713592800520639764170027983591692824403956430342110441082678789298344731358225070908886074418939828220349609096800878700181840543888912864777839151445123979991881890757460652627790935426516729388683746205770788688395886109560450575509149812011721931158839939251705080176124124559087794325562845501113269959607619810576471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							500f7052575a170291979060015d044cbcf8f412
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itchat.seattle.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c532b7ea48767b6a61c3d0f06cc37f3fd0ee7f1a645e7d4842d7378ed0dc396c748fed7ba459ac8b3cd168b3a06039ea21e71d9fc080cee137b9fa73acd6a65d4b93e9e7de2e4dc504f3a300365587beab07cf2adabeb070aede505713d61934546c53ea226c3bd0caf61efb0129b78eda33577e02caeb99536aec064b1be742c35028f8e39c8173b55dee64c01908ba2315fc4d23f6247ce59279b1b08522dab02dc616c87402ddad3cdbfac24d3b607a5e5e0e4a93e83a65632d2852930c9c585321451f8f247b0d3c4fb3c190902444b30e147e4cb3933064bdc3c66ed4c257df3e021a22b362b874027ff95ce521eb7ec59b4db2ac85e8e80f0959295a87