jss.verisign.com

- Verisign, Inc -

Issued by GeoTrust G5 TLS ECC P-384 SHA384 2022 CA2

About this certificate

This digital certificate with serial number 09:b7:54:d8:d0:c0:80:bd:9e:2b:7d:58:a3:2d:36:76 was issued on by DigiCert, Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Verisign, Inc

Organization: Verisign, Inc
State / Province: Virginia
Locality: Reston
Country: US

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:b7:54:d8:d0:c0:80:bd:9e:2b:7d:58:a3:2d:36:76
Serial Number (int): 12914963187471529894515437589001746038
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e1:fa:b1:b2:f4:8a:e4:54:ec:a6:c5:bd:72:aa:8e:66:d5:d8:6f:d2
AuthorityKeyId: 5a:82:89:5a:d8:c5:a4:a0:a6:e9:60:b1:dc:b5:57:e5:33:60:c7:e7

Fingerprint (sha1): 97:73:87:4c:0f:bf:5d:f2:d3:3d:33:24:ba:e5:c5:b8:0a:2e:fe:63
Fingerprint (sha256): 1c:b1:a0:1b:97:14:dd:4f:b0:70:90:ad:3a:d3:c0:cf:a0:9b:a6:d5:b5:79:bd:e7:8e:4a:cc:95:23:58:00:72

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustG5TLSECCP-384SHA3842022CA2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustG5TLSECCP-384SHA3842022CA2.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustG5TLSECCP-384SHA3842022CA2.crl

Check the revocation status for certificate jss.verisign.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jss.verisign.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jss.verisign.com
cash3lxjssp02.vcorp.ad.vrsn.com
ilg3lxjssp01.vcorp.ad.vrsn.com
jss.vrsn.com
ilg3lxjssp02.vcorp.ad.vrsn.com
cash3lxjssp01.vcorp.ad.vrsn.com

Other certificates including the domain name verisign.com

(limited to 100 certificates)
www.verisign.com
pilotsc-admin-enroll.verisign.com
ote-accounts-otp.verisign.com
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
namestudio.com
sc-admin-enroll.verisign.com
san-28-s12.tlsprovisioning.exacttarget.com
pilot-ocsp.verisign.com
sipaccess-dr.verisign.com
pilotonsite.verisign.com
qa.domainscope.verisign.com
mdm1.verisign.com
ipsapi.verisign.com
mem-lab.corparch.verisign.com
styleguide.verisign.com
connect.verisign.com
idprotect.vip.symantec.com
advocacy.verisign.com
ite-rdap.verisign.com
investor.verisign.com
pilot-pkiservices.verisign.com
ncilg1vacmpub.corparch.verisign.com
accountsdr-otp.verisign.com
knowledge.symantec.com
ssp.vip.symantec.com
www.tlab.verisign.com
user-apis.verisign.com
cofense-reporter.verisign.com
epki-admin.verisign.com
jamfdp.verisign.com
san-28-s12.tlsprovisioning.exacttarget.com
pkiservices.verisign.com
pilotonsite.verisign.com
ilg1vcsexpe.verisign.com
testdrive.verisign.com
mem-lab.corparch.verisign.com
testcr-payflow.verisign.com
Tun-r.verisign.com
pilot-certmanager.verisign.com
ua.verisign.com
eol-redirect.verisign.net
accounts.verisign.com
directservice.verisign.com
ote-accounts.verisign.com
san-28-s12.tlsprovisioning.exacttarget.com
manager.verisign.com
ua-portal.verisign.com
view.messages.verisign.com
seal.websecurity.norton.com
advocacy.verisign.com
ote-login.verisign.com
gp.verisign.com
sentinel.websecurity.symantec.com
publicdnsforum.verisign.com
pilotsc-admin-enroll.verisign.com
pilot-enterprise-ssl-admin.jp.websecurity.symantec.com
ssl-certificate-center-ncsa-ilg.verisign.net
mem.verisign.com
publicdnsforum.verisign.com
certmanager.websecurity.symantec.com
acano.vrsn.com
ias.verisign.com
pilot-ua.verisign.com
corpqa1uccxpub-ms.corparch.verisign.com
services-auth.vip.symantec.com
seal.websecurity.norton.com
support.verisign.com
neilg1lxsfm201.verisign.com
user-apisote.verisign.com
payments.verisign.com
userservices.vip.symantec.com
sc-admin-enroll.verisign.com
qa.verisigndns.com
verified-domains.verisign.com
pilotservicecenter.verisign.com
vendorportal.verisign.com
publicdnsforum.verisign.com
userservices.vip.symantec.com
gp-qa.verisign.com
lwas.verisign.com
click.messages.verisign.com
ssl-certificate-center.verisign.com
investor.verisign.com
pilot-epki-admin.verisign.com
os1-accounts-otp.verisign.com
accountsdr.verisign.com
startonline.verisign.com
sandboxkms.verisign.com
mdm1.verisign.com
vipdeveloper.verisign.com
www.verisign.com
ssl-tools.verisign.com
sealinfo.verisign.com
checkout.verisign.com
vidn.verisign.com
webmail.verisign.com
connect.verisign.com
seal.verisign.com
epki-admin.verisign.com
authentication.verisign.com

Certificate

The complete raw certificate details for jss.verisign.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXk2/76uO9O3+eye3xZ9
T8VCoEmIyu4FwpVtPn+HajAKS+Pc4G0lX0DsVZ+nMrm1B7k0ecvLOUODaMBgSj0J
zyVlo82HSXAJsr9ojyVKji7BDjpCo7Xiuwy0vi+oRB+3AXynLP++eq/WM9UJikya
2CyZfLSvaqG+nezZbUmKVYVRPTlpAS4H4MmTxt4DHm7iwwbOEWXJdRXtI5r1EmwW
IpnwSo74TCLWagTmSev8jrSy9uwDlZdpN/fs9KWJwH/JSxyUHPp9F+G6pSuKj8xV
29NGnx9iLSZmndtz3KMjze2NI7gLnrN2P3iJQFiD2yzUifpx0eFp7dBzpbqDKtk9
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12914963187471529894515437589001746038
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust G5 TLS ECC P-384 SHA384 2022 CA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verisign, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jss.verisign.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25938625783355443548716503123805262695623875675871067099267984188734596862152962007669382392140074614399501801120523841716762875725924342037989557504306795506889189781774014160405987342005708785894312437686471951961675086606513455768454545265164957245486851891020748947593255483566920570083324862984950563563201833239252627867570407292010362977600262407043075220257746298144094601035343024818916741847739755248414002006005314809425642038807371852955307565411195877210626025530408618646059645832853030811604424061841646613915380019727664732136769533789808631762949964544354508541222399183225162996312076616613649530323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5a82895ad8c5a4a0a6e960b1dcb557e53360c7e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1fab1b2f48ae454eca6c5bd72aa8e66d5d86fd2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jss.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cash3lxjssp02.vcorp.ad.vrsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilg3lxjssp01.vcorp.ad.vrsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jss.vrsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilg3lxjssp02.vcorp.ad.vrsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cash3lxjssp01.vcorp.ad.vrsn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustG5TLSECCP-384SHA3842022CA2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustG5TLSECCP-384SHA3842022CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustG5TLSECCP-384SHA3842022CA2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28745230478582630624179979043666728514701600082974121536345512559896525034280335457389373941448872745955656726567665
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 11784126548360921037955746593628278563486932849672874649389308498404740341681068322328224212369267697577417003295981