bp2-vagwy-d001.otxlab.net

- Open Text Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 2c:7e:b0:58:30:41:04:95:6d:d4:92:f0:b3:e7:22:56 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Open Text Corporation

Organization: Open Text Corporation
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 2c:7e:b0:58:30:41:04:95:6d:d4:92:f0:b3:e7:22:56
Serial Number (int): 59143837909814112933863100802065179222
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: f1:03:91:4c:05:cf:6d:5a:a4:c6:2d:cc:4f:ee:d5:85:4a:a7:74:32
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 5f:4a:7c:c3:a7:84:3a:42:fd:f0:de:9d:4e:6e:ea:85:e5:05:dc:6a
Fingerprint (sha256): 13:35:24:30:e1:f0:98:ec:94:7d:36:98:25:0a:04:cd:55:17:ca:52:97:49:c4:86:b1:0d:5b:ac:cb:7a:8e:71

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate bp2-vagwy-d001.otxlab.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bp2-vagwy-d001.otxlab.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bp2-vagwy-d001.otxlab.net
www.bp2-vagwy-d001.otxlab.net

Other certificates including the domain name otxlab.net

(limited to 100 certificates)
bp2-tcserver-l002.otxlab.net
bp2-svnserver-l001.otxlab.net
bp2-bdprod-l001.otxlab.net
otxlab.net
ban-vcd02-l002.otxlab.net
tk2-vcdconsoleproxy02-l001.otxlab.net
archiveserver.otxlab.net
*.otxlab.net
bp2-bdprod-l001.otxlab.net
bp2-vagwy-d001.otxlab.net
ban-vcdconsoleproxy02-l001.otxlab.net
bp2-artprd01-l001.otxlab.net
otxlab.net
ban-vcd.otxlab.net
otxlab.net
*.cfcr-lab.bp-paas.otxlab.net
srinivas-dev.otxlab.net
ban-vcdconsoleproxy02-l001.otxlab.net
thalesrc.otxlab.net
*.cluster-1.otl-ps-coe-analytics-mbir.otxlab.net
perforce.otxlab.net
otxlab.net
dcsp2016.otxlab.net
bp2-vagwy-d001.otxlab.net
*.bp-paas-ci.otxlab.net
bp2-bdprod-l001.otxlab.net
tk2-vcd02-l002.otxlab.net
bp2-bdtest-l001.otxlab.net
tk2-vcd02-l002.otxlab.net
thalescs.otxlab.net
wlrbprod01.opentext.net
bp2-tcserver-l002.otxlab.net
bp2-tcserver-l001.otxlab.net
bp2-tcserver-l002.otxlab.net
otxlab.net
bp2-bdtest-l001.otxlab.net
wlrbprod01.opentext.net
mu2otmm18.otxlab.net
mu2otmm18.otxlab.net
win12r2sql12sp2.otxlab.net
ban-vcdconsoleproxy02-l002.otxlab.net
bp2-tcserver-l002.otxlab.net
tk2-vcdconsoleproxy02-l001.otxlab.net
dcsp2016.otxlab.net
lab.archive.de.otxlab.net
bp2-bdprod-l001.otxlab.net
otxlab.net
archiveserver.otxlab.net
win2016-std-001.otxlab.net
ban-vcd02-l001.otxlab.net
*.bp-paas.otxlab.net
cs242vm.otxlab.net
*.cluster-1.otl-ps-coe-analytics-mbir.otxlab.net
vmxecmsf2k19.otxlab.net
tk2-vcd02-l001.otxlab.net
*.bp-paas.otxlab.net
perforce.otxlab.net
*.otxlab.net
vmxecmsf2k19.otxlab.net
mb-rhel-test.otxlab.net
bp2tfiblis.otxlab.net
bp2tfiblis.otxlab.net
bp2-tcserver-l001.otxlab.net
ban-vcd.otxlab.net
*.cfcr-lab.bp-paas.otxlab.net
*.cfcr-lab.bp-paas.otxlab.net
ban-vcdconsoleproxy02-l001.otxlab.net
thalescs.otxlab.net
ban-vcdconsoleproxy02-l002.otxlab.net
thalesrc.otxlab.net
bp2-vagwy-q002.otxlab.net
ban-vcdconsoleproxy02-l001.otxlab.net
ban-vcd.otxlab.net
tk2-vcdconsoleproxy02-l002.otxlab.net
cs242vm.otxlab.net
bp2-artprd01-l001.otxlab.net
ban-vcdconsoleproxy02-l002.otxlab.net
win2016-std-001.otxlab.net
tk2-vcdconsoleproxy02-l002.otxlab.net
ban-vcdconsoleproxy02-l002.otxlab.net
tk2-vcd02-l001.otxlab.net
ban-vcd.otxlab.net
mb-rhel-test.otxlab.net
win12r2sql12sp2.otxlab.net
ban-vcd02-l002.otxlab.net
*.cfcr-lab.bp-paas.otxlab.net
snapntws19vm1.otxlab.net
snapntws19vm1.otxlab.net
bp2-svnserver-l001.otxlab.net
*.bp-paas.otxlab.net
ban-vcd02-l001.otxlab.net
tradinggrid.otxlab.net

Certificate

The complete raw certificate details for bp2-vagwy-d001.otxlab.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoSgWJ+ma2jmPNJWYqTT
lQnp3Cj+v5WLvXN/nd/W/8kP8nOcLG6IYsqQYfjfdxVEqapO9CN4EMJigZeezf+r
LSfjofVL//2/rNcuDkPY8yTLVj1d7X7BjsZQamES15oa5ERk0SDRvCWYoLplJyv/
8VwBzkF8MtraMRzgj22omX3gw8/iGs3IX7+KXDgdQrdoDHG59b0jIsEz3pSj7JuP
ZkB5Adj2xM7ZEB+pwu4Sbazrkkb2kTw5Ovm9Tr/KYwEF9IVWBTaS8FZQPZN76kSl
wggjVC278+waC+NAssqoNxfXiAH5pL+w8ho/VzBK+CPrKfPCs8uPFcklCKVJg4KL
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 59143837909814112933863100802065179222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Open Text Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bp2-vagwy-d001.otxlab.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16476380137411197297538003159031109161173229836324642302297519302415734559680290786501170164546612692908484153517592652998237709445087016307138401362210029720313609832895229861950977433694035993330553943137855762121311157440176086447021419854400867250530104884855194824613740172757128965115834060647412637767890162229243247690830610527551020085913999744084372936544462402237507765001697059522544586347869849497026316137524901243600181356643939249639780718071015723881375286382950592588041387896374344867126475836553435009073276877215477064814222410330788557105286242487158904417830163536050142691371729446720294259649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f103914c05cf6d5aa4c62dcc4feed5854aa77432
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bp2-vagwy-d001.otxlab.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bp2-vagwy-d001.otxlab.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001f93e5310c86d7ec249cd80d7d67a73d00c1eafcf0ef47923906936dd2997c80811bbaf931e00f10b9a97e78caf05e131f6b80e537d9eba2b513d7c84b725209def9c9b21f1a276556b1e96ba3ad74d9ad3a2e2ab420c437e77a40f2a26e2eb0a1d1e58610d36365cd2a547ab55f08ccd1a906f5492f8a464f1afb4b47009b18eb10042377561f3d9f74545ac3d8a99271ab757e65c5369cde878178ef55f75018ae5d29adf242c4c3d8734fa4d4b0c3879b6eb8356ea20523f0dc4520999b3b3bd5cce0a40b74c564e572d2098e81e40bfcd7e7a45829a0875d53c52383ded8bd7b2394ac188ff49efe3dbc8b12727eaf7984724083e4fba607cdd7b23db690