auth-dev.ciam.marksandspencer.com

- Marks and Spencer P.L.C. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:9e:5b:a3:26:43:b7:05:92:79:25:7c:27:c1:cf:e5 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Marks and Spencer P.L.C.

Organization: Marks and Spencer P.L.C.
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:9e:5b:a3:26:43:b7:05:92:79:25:7c:27:c1:cf:e5
Serial Number (int): 15443749482589292193325189727393009637
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 08:33:46:3b:8a:95:d5:a5:3f:30:b6:b9:24:22:86:c5:2e:49:d3:cd
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 8c:a8:40:da:11:03:5b:e4:15:89:38:dc:18:a9:c9:54:93:1e:32:12
Fingerprint (sha256): 11:9d:38:24:0e:34:80:c9:f4:28:eb:5b:86:1c:a7:5b:37:29:02:f1:2a:9c:8c:e4:42:bb:f9:7a:fe:17:f9:cc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate auth-dev.ciam.marksandspencer.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth-dev.ciam.marksandspencer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth-dev.ciam.marksandspencer.com
consent-dev.ciam.marksandspencer.com
bridge-dev.ciam.marksandspencer.com
auth-stage.ciam.marksandspencer.com
consent-stage.ciam.marksandspencer.com
bridge-stage.ciam.marksandspencer.com

Other certificates including the domain name marksandspencer.com

(limited to 100 certificates)
corporate.marksandspencer.com
va.marksandspencer.com
auth.ciam.marksandspencer.com
www7.marksandspencer.com
INDISSDIQA.MANDSINDIA.marksandspencer.com
p1escp21.unix.marksandspencer.com
flowersubscriptions.marksandspencer.com
help.marksandspencer.com
marksintime.marksandspencer.com
dev.comshub-msb.marksandspencer.com
adriatic.b2b.marksandspencer.com
msib-fileservice.marksandspencer.com
msib-fileservice.marksandspencer.com
webforms.marksandspencer.com
api-test.marksandspencer.com
dressipi-staging.marksandspencer.com
akamai-san7.exacttarget.com
stg1.dotcom.apps.mnscorpcate.net
sendgrid.trytuesday.com
msib-fileservice.marksandspencer.com
help.marksandspencer.com
dev.comshub-msb.marksandspencer.com
qa.dotcom.apps.mnscorpcate.net
mands.uk
alumni.marksandspencer.com
st.marksandspencer.com
foodmagazine.marksandspencer.com
suppliers.marksandspencer.com
www5.marksandspencer.com
esb.marksandspencer.com
corporder.marksandspencer.com
bra-fit-calculator-uat.marksandspencer.com
capture.marksandspencer.com
api-test.marksandspencer.com
api-sit1.marksandspencer.com
bra-fit-booking.marksandspencer.com
jobs.marksandspencer.com
auth-stage.ciam.marksandspencer.com
www7.marksandspencer.com
mci.bank.marksandspencer.com
cftobrochure.marksandspencer.com
jobs.marksandspencer.com
dev.comshub-msb.marksandspencer.com
comshub-msb.marksandspencer.com
api-stage.marksandspencer.com
alumni.marksandspencer.com
creditcardeligibilitycheck.marksandspencer.com
inforights.marksandspencer.com
webchat2.marksandspencer.com
sparkslive.marksandspencer.com
st.marksandspencer.com
auth-stage.ciam.marksandspencer.com
uat.comshub-msb.marksandspencer.com
sparkslive.marksandspencer.com
auth.ciam.marksandspencer.com
corporder.marksandspencer.com
mshsvn.marksandspencer.com
banklive.marksandspencer.com
supplierexchange1.marksandspencer.com
msib-fileservice.marksandspencer.com
hlxp00m0011.unix.marksandspencer.com
hkhmnshk2k8ftp1.marksandspencer.com
cdntm.marksandspencer.com
marksandspencer.app
flowersubscriptions.marksandspencer.com
flowersubscriptions.marksandspencer.com
mands.uk
www.vp.marksandspencer.com
www7.marksandspencer.com
archive.marksandspencer.com
dev.comshub-msb.marksandspencer.com
CSSMWPC.webapps.marksandspencer.com
akamai-san7.exacttarget.com
www.marksandspencer.com
bw-a-hbp.webapps.marksandspencer.com
partners.ruckusdev.ruckuswireless.com
dressipi-staging.marksandspencer.com
personalisedloanquote.marksandspencer.com
secure.scene7.com
marksandspencer.brandactif.com
mshfmmswebp0001.wintel.marksandspencer.com
BANK.MARKSANDSPENCER.COM
tracking.service.marksandspencer.com
personal-bank.marksandspencer.com
insuranceservicing.marksandspencer.com
stpaccess.marksandspencer.com
marksandspencer.app
personalised.marksandspencer.com
st.marksandspencer.com
mcp.dotcom.apps.mnscorpdev.net
lifeinsurance.marksandspencer.com
webforms.marksandspencer.com
auth-dev.ciam.marksandspencer.com
api-preprod.marksandspencer.com
prod1.dotcom.apps.mnscorp.net
alumni.marksandspencer.com
api.marksandspencer.com
www9.marksandspencer.com
mcp.dotcom.apps.mnscorp.net
bra-fit-booking.marksandspencer.com

Certificate

The complete raw certificate details for auth-dev.ciam.marksandspencer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fEHRz6tiDN75PkMuAqo
9P2REZpPlCr2d0rrb5sumoaVtArN1IdDivVf6Bp2z5i2sG2hQyboK0wb5kEy4hM2
ydiVc/+7cNrj2xugue+qxr9//6OAQIZPuQkJRoN5VSp5hZx1huPZilednFI4DqcU
I0AKwPucTIWpkz7Id8mWtV7LnAOAjJEtskFedJuqS7l6lvO+XTcuzyYmG+XqUP95
tyzoILacmZPI2n4hZlVDl2RwkZweGj1+lwmPU4/QnwxLJcS2ukMmrFU6c0UBQ6ji
B1VO5g1RHW8ofR24i2p5lVS0Amh7XOS6eB3e73/2GDsGG18VhKoLG5e2LGOGNFN5
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15443749482589292193325189727393009637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Marks and Spencer P.L.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth-dev.ciam.marksandspencer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29027427386291426544990737172128618542875723497604062442843257019893817737206400689679503972613608720446412903371348453751244432673428004375966606028608732254512205365423996789562853253962566122965855666096625931447091437699970501257949498412095035240072472235948300533599744320579365121858207461471264852445566506565960028412180125805511184411682932143212307324316704851376740710527477229499548194902090041287697631161261427171975747151688213489612720729602736953269949527786576474088736442508964537407227812488567737870530360972722923916949693623060405895270202800225032305594010257411997471692193981653953025374469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0833463b8a95d5a53f30b6b9242286c52e49d3cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (229 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-dev.ciam.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent-dev.ciam.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge-dev.ciam.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-stage.ciam.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent-stage.ciam.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge-stage.ciam.marksandspencer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005305be4580f62f8e940f7e4bc32b3b9c33251c3e54913249bb75caa4aac3c9fd04659afaa9f983bddb718965e2d6b2f9e25ca5f28b9771ba169f955764da9b8461d1980032e6cd021faddbd909ade6c43ff0e58b755ad7ef823b8efc3f0c2e72d072767cb2d5f91382afc9f10275e60df3300c962776888198ba584286bfab3c15df58f5051b3e2fe845eed7a42f499e230df94897b250f4d3c1988ed1fa28da40f5efbf659ee326297be9c10a5b94fdcd30d458b787acbcf04803e0d093f3c0c0743eecb280dad58e7b2e02ece5a2c74c7f6833a3eb85f0b4ff61fafdef908cf3c0b9b58230e91da67dc80d41dd200c9ad11276a100258922ca8ce61745b2ba