*.sdi.trendnet.org

- Trend Micro Inc. -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number 76:b4:9d:47:79:a8:ec:4f:00:00:00:00:58:09:50:40 was issued on by AffirmTrust.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Trend Micro Inc.

Organization: Trend Micro Inc.
State / Province: Texas
Locality: Irving
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): 76:b4:9d:47:79:a8:ec:4f:00:00:00:00:58:09:50:40
Serial Number (int): 157786706938315555462670001390263816256
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c0:8f:c7:d9:49:45:18:65:89:e6:c2:75:e1:9b:ca:fb:75:73:39:0e
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): 41:ea:63:13:f3:7e:ee:c5:12:15:b6:09:67:95:07:9b:e8:36:2d:10
Fingerprint (sha256): 1a:a9:19:27:88:5f:85:42:d4:d4:6a:a2:7f:a3:62:16:69:6d:e5:1e:bd:eb:d9:5b:aa:6f:6d:4c:b3:ce:08:b7

Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl

Check the revocation status for certificate *.sdi.trendnet.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sdi.trendnet.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sdi.trendnet.org
sdi.trendnet.org

Other certificates including the domain name trendnet.org

(limited to 100 certificates)
*.trendnet.org
liberalapi-tmp.sdi.trendnet.org
phvm-is-radius3.ph.trendnet.org
ca-ets-labvcenter.us.trendnet.org
phvm-gsd-sslaut.ph.trendnet.org
edc2kafkazk2.eu.trendnet.org
bizadmin-beta.trendnet.org
*.trendnet.org
*.trendnet.org
SJDC-NAV17WEBS2.us.trendnet.org
ie-lansweep-01.eu.trendnet.org
aws-billingapi.plsstg.trendmicro.com
edc2kafkaschema.eu.trendnet.org
SJDC-KAFKABK5.us.trendnet.org
*.trendnet.org
*.us.trendnet.org
jdc2-ise01.jp.trendnet.org
hubstg.trendmicro.com
sjc1-gfr-vip2.sdi.trendnet.org
itk8sd.tw.trendnet.org
us-ets-nexusproxystg.us.trendnet.org
PHVM-IS-AACTI.ph.trendnet.org
us-ets-fs01.us.trendnet.org
nj-594-rdgw.tw.trendnet.org
sjdc-infosec-arcmc.us.trendnet.org
horusapi-ibeta.sdi.trendnet.org
virtualsharesstg.trendnet.org
sjc1-tmus-ops.sdi.trendnet.org
virusRDP2.tw.trendnet.org
tw-ets-rgw06.tw.trendnet.org
ca-ot-yogi.us.trendnet.org
hrfoundation.trendnet.org
senna.aptinfra.tw.trendnet.org
nj-ets-labfs.tw.trendnet.org
*.terra-stg-vtr.vtr.trendnet.org
eunavposita.eu.trendnet.org
*.vtr.trendnet.org
infra.mars.trendmicro.com
minionapi-tmp.sdi.trendnet.org
de-ddwi-01.eu.trendnet.org
*.sdi.trendnet.org
kallitest.us.trendnet.org
*.us.trendnet.org
SJDC-KAFKAAPI1.us.trendnet.org
sjdc-scssoapp.us.trendnet.org
tw-ets-rgw08.tw.trendnet.org
virtualshares.trendnet.org
nj-ets-fs.tw.trendnet.org
SJDC-KAFKABK2.us.trendnet.org
tw-ets-rg03.tw.trendnet.org
kkbox.tw.trendnet.org
sjdc-nabuintapp.us.trendnet.org
cloudcntr.sdi.trendnet.org
OCSEG.TRENDNET.ORG
adc-lcmweb01.tw.trendnet.org
pr2g.baplsstg.trendmicro.com
EDC2VMNAVSITB18.eu.trendnet.org
nj-ets-labfs.tw.trendnet.org
regalpha.trendnet.org
apollo-reports.eu.trendnet.org
login-tmp.trendmicro.com
sjdckafkabk.us.trendnet.org
mybuddiy.us.trendnet.org
NJ-ETS-MSDN.TW.TRENDNET.ORG
ddan.tw.trendnet.org
SJDC-NAV17WEBS1.us.trendnet.org
tw-ets-vra.tw.trendnet.org
tw-ets-rg03.tw.trendnet.org
aws-iapi.plsbeta.trendmicro.com
phvm-gsd-sslaut.ph.trendnet.org
tw-ets-jksgw3.tw.trendnet.org
tw-magw.tw.trendnet.org
tw-ets-fs.tw.trendnet.org
aws-billingapi.plsprod.trendmicro.com
nj-ets-rgw.tw.trendnet.org
hrfoundation.trendmicro.com
aws-emsapi.plsprod.trendmicro.com
dozer.aptinfra.tw.trendnet.org
OCSEG.TRENDNET.ORG
submit.aptinfra.tw.trendnet.org
EDC2NAVSTG021.eu.trendnet.org
driapi-beta.sdi.trendnet.org
tw.trendnet.org
threatsearch.tw.trendnet.org
analyze.aptinfra.tw.trendnet.org
lmpi-beta.sdi.trendnet.org
edc2kafkazk5.eu.trendnet.org
TW-ETS-LABFS.tw.trendnet.org
tw-ets-ddwi.tw.trendnet.org
edc2kafkastream1.eu.trendnet.org
us-ets-nexusproxy.us.trendnet.org
aws-sdiadapter.plsbeta.trendmicro.com
edc2kafkazk4.eu.trendnet.org
tw-ds-labfs.tw.trendnet.org
SJDC-NABURADIUS.us.trendnet.org
www.vrli-sjdc.trendmicro.com
nj-rdsec-msdn.tw.trendnet.org
sjdc-gissmonjob.us.trendnet.org
SOA.trendmicro.com
sjdc-selenium.us.trendnet.org

Certificate

The complete raw certificate details for *.sdi.trendnet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZf1WGHQqZq+BSudrlvX
XPPM1JHB+HOZL0Y9GxF9MgzHY4E3Br0mh4kiRkykkaVHP1XpAiGotWJvsH7N2iyQ
dhF/DoTkuO3ZLdaqfYlYMW9f9Ppv6xI4N6aOsjwuh95PFu4vObOQw4HX+K/lj8fa
s+DLYAfY2C8B5rtfbr8QQf4PY3GYa2I+fEOUWhPlrW6RC0GOpOWVCTgxgBndBj82
9qxKk/Y6H7sS1PBSBBuaDFkqzF5JhJdHuvgSlDAIg9FGdcp02jlem/6eMFjzX0fC
+bCNm+XXrvL7BCn4ceH4+yIJywsqrsVpVzTYJPUPo4wi3nFuog6EpmyeMWFL81Pp
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 157786706938315555462670001390263816256
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-13 02:48:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-14 03:18:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irving'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trend Micro Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sdi.trendnet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25953785987956532827984959446773712252321543253742166437672880247836516387983911664154615324876017799166009456832352841571829572830716824668508225340123139967953764975592849986647814936776949306967760326988365107653293254218674693369067139487757335626949162397367927161326495060281231963364773496310700950613303982801881679383144396615782901262831230336650404956463800219307043436979334095076371465301142640533313790677001022420450159015115238221718346851966935489781288778711937373300970853893171203560900671594677363676627849544700920577509984595130075069267643735232424615104564861657022208311403200142705681492301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sdi.trendnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdi.trendnet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c08fc7d94945186589e6c275e19bcafb7573390e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006cd946ed138dab9923b287b58ba73934d32ffc035761307459180a89d4c8e0dc4738c90a111000100af23e262af2cc0ce506a2f12cc81df0dc66d5d0369ed0af3ccbb82f53a7e14c2e9fd1c441cdf859127c852369352c0b8030253c965e27f24500f2ea38e9792605ce61973310a4f8a206c4b9c60c54a1834c0803291d95cb33a3c84a69a7714f2d76b3c6864c0e24fed50ec6da150aec5e2eda2dd38b3420fab6222d10453ea46668c9582e187ac6f261d852f4c46370bfd147d3f8db9b26515e14f955d7522806c545cce8c1acdbb45aa65681027e3afff3f2ef19a2346c6c1ecec466ec1967a33585126244843956e494510d179ea0f6845b7684eb4708