xspca08.hv.rr.com

- Charter Communications Operating, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:a3:05:bf:57:e6:b0:4c:1b:70:70:d6:ac:1a:66:1f was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Charter Communications Operating, LLC

Organization: Charter Communications Operating, LLC
Organization unit: TelOps
State / Province: Missouri
Locality: Saint Louis
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a3:05:bf:57:e6:b0:4c:1b:70:70:d6:ac:1a:66:1f
Serial Number (int): 4834144947127064338401616838105130527
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 5a:bf:d5:d7:6c:51:71:a6:6b:26:54:27:45:92:81:58:7b:38:9a:fc
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e8:94:ea:97:49:98:5d:5e:71:6c:bc:03:b6:31:3c:8b:20:3c:17:4a
Fingerprint (sha256): 12:d3:81:09:c6:fb:1f:6f:7e:d1:6e:58:d8:c9:71:91:d9:c9:c3:73:56:6f:91:9a:8b:46:d8:ae:c0:81:0a:c6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate xspca08.hv.rr.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xspca08.hv.rr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xspca08.spectrumbusiness.net
xspca.spectrumbusiness.net
xspca08.hv.rr.com

Other certificates including the domain name rr.com

(limited to 100 certificates)
cpe-98-15-211-172.hvc.res.rr.com
spt01aldlmi.aldl.mi.charter.com
quantum.rr.com
cpe-172-101-147-96.rochester.res.rr.com
eis-lb.cdptpa.rr.com
chrcnc-vcenter.hv.rr.com
pt.rr.com
sitesurvey.cdptpa.rr.com
cpe-67-10-167-106.satx.res.rr.com
cpe-107-184-87-120.socal.res.rr.com
tools.tampflrdc.rr.com
hrndva-starapp-orngca-01.hrndva.rr.com
cpe-173-89-35-101.wi.res.rr.com
mail.biz.rr.com
cpe-174-109-144-250.nc.res.rr.com
self-care.portals.spectrum.net
xspdm01.hv.rr.com
webmail.rgv.rr.com
acs-nbi.nelab.rr.com
webmail.stx.rr.com
intelligenthome.ih.voip-eng.rr.com
xspws02.hv.rr.com
cpe-24-166-12-11.cinci.res.rr.com
registration.rr.com
ccs.ims.rr.com
help.rr.com
mobile.splunk.vap.rr.com
ids.rr.com
spt01aldlmi.aldl.mi.charter.com
registration.rr.com
unified.ohiordc.rr.com
cpe-76-88-5-186.san.res.rr.com
spectrumtvchoice.com
tmpfl-starweb-01.tampflrdc.rr.com
webmail.ec.rr.com
cm-cmftp.rr.com
tools.peakview.rr.com
ipmt.rr.com
don.dtdns.net
portal.qa.rr.com
tools.ohiordc.rr.com
cpe-23-240-65-89.socal.res.rr.com
webmail.ne.rr.com
spectrumtvchoice.com
webmail.maine.rr.com
webmail.stx.rr.com
playgames.rr.com
unified.west.rr.com
unified-graph.nyc.rr.com
cpe-172-101-147-96.rochester.res.rr.com
spectrumtvchoice.com
cpe-98-15-211-172.hvc.res.rr.com
twcidp.eng.rr.com
registration.rr.com
as02.hv.rr.com
lerg-cmftp.rr.com
webmail.rochester.rr.com
cpe-72-231-203-72.buffalo.res.rr.com
mail.biz.rr.com
webmail.hvc.rr.com
login.timewarnercable.com
unified.southeast.rr.com
pres.ims.rr.com
xspca02.hv.rr.com
cpe-98-27-160-175.neo.res.rr.com
webmail.dc.rr.com
rrcs-67-79-168-12.se.biz.rr.com
tr-ssl.rr.com
ids.rr.com
webmail.woh.rr.com
ids-stable-01.eng.rr.com
tools.nyroc.rr.com
cpe-76-175-132-186.socal.res.rr.com
xspca02.hv.rr.com
rrcs-74-62-1-18.west.biz.rr.com
cpe-172-251-211-68.socal.res.rr.com
videostore.bhn.rr.com
cpe-69-201-73-35.twcny.res.rr.com
quantumcontrol.rr.com
cpe-67-11-127-171.satx.res.rr.com
mail.twc.com
webmail.nyc.rr.com
ids.rr.com
spectrumtvchoice.com
cpe-23-243-249-149.socal.res.rr.com
ewsutils-uat.eng.rr.com
techmobile-qa05.eng.rr.com
mail.biz.rr.com
spectrumtvchoice.com
sia-ui.vap.rr.com
relay.ih.voip-eng.rr.com
urt.rr.com
help.rr.com
techmobile-sit05.eng.rr.com
xspca08.hv.rr.com
solosyncsit.eng.rr.com
programming.rr.com
xspca02.hv.rr.com
xspws02.hv.rr.com
xspdm01.hv.rr.com

Certificate

The complete raw certificate details for xspca08.hv.rr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnryM+3j05Yru2DMwXhHM
zNjFMbzHAPdF+4q7NMMmrttV1AGTSI8jxw+x5FbJElemhtUffj8tJB0NfLCKODg2
3M1qsJG302I0CwwlyZgdANxH5qI4ev6QyrHF6VFR2a6ySLZ4VjRj/xvOKF1o9jC7
0x3EIhcH1JyBR2Az5Mmz0VoYUNB4AxAKth2vkkhcewNHkQGm4VyqCkvh91uBMdUY
DUpGKX7vs2vwK5oFtGC9Je+JtOnL5908lbNHkGNAF/IG1HjO57VSq0hobqQc5//R
JuxJ+jgU+DcmbnrXvoEmWGew5LGTYbOkAbTWzdTGKySmF0RDhkdIvbTjT/uILByH
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4834144947127064338401616838105130527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charter Communications Operating, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TelOps'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xspca08.hv.rr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20038630006136998762013457178798768884596543478818999849369409353377332423009020406920790562259695368491767928348239920920701449313793161319780896989083833947396558342417559479004727436338374303778139224365219068802099210829311590198184048866985246453096023259980540760570254553607324261204075861401806670688903769582552575479409940140708781911730763280446340901060635921476326164244025665504532816111393398585010415002532695100270069568209755397620699389315606846773266151646629122269062258224366072640082448321327939827281166187801708987954822098334154130034076687947694710274896570723640316290674907344439168763839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5abfd5d76c5171a66b265427459281587b389afc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xspca08.spectrumbusiness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xspca.spectrumbusiness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xspca08.hv.rr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00db204c096f80bb6e40c04cd2341d2061319a866f69e8c9623e2b2c8c79263e32555dae71ec63d6c9b3cd17b127a94abdb8a00eec9dd4ebc9ea1b425162c982dd2c9ea8238e9005f7eb44771a1b1b9b7355c27fdadf660bb57d777db1ad1102e02d392561878d42bcaab878cf8d2b9f008692dff4770baeb82d701a6b9680c8849f641a53b1524cc8a93a53c8a9d1e172f16c12623b3116d5ed1ac7cd7c24c8b5bb8855a49cd97e996c193302553d1597eebfa6c9ede67ccd87b15c0ce52c3682121c3d2bb829adddee75dd2367065088a85e193600f444587d9364487a705399bcd519c22d4c0c86bd122a7188bf9b03fc7274f4031092f220bc19e570b68aee