oscassets.latitudefinancial.com

- Latitude Financial Services Australia Holdings Pty Ltd -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:8a:3d:9f:85:d6:c1:89:31:4c:53:de:de:96:6b:52 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Latitude Financial Services Australia Holdings Pty Ltd

Organization: Latitude Financial Services Australia Holdings Pty Ltd
State / Province: Victoria
Locality: Docklands
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:8a:3d:9f:85:d6:c1:89:31:4c:53:de:de:96:6b:52
Serial Number (int): 19326978773151421332439908639462288210
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 88:9d:42:08:03:5f:a3:aa:fb:49:b0:ad:35:03:59:95:43:2b:27:68
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 00:ae:cf:ca:cd:33:41:a9:81:c5:cd:94:d4:5a:91:7b:2b:5b:a0:b4
Fingerprint (sha256): 1c:db:bb:20:e9:68:de:9b:ce:88:76:ae:56:da:85:81:50:2d:f4:55:88:d1:17:0c:3a:63:e4:b2:f0:e9:cf:1f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl

Check the revocation status for certificate oscassets.latitudefinancial.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oscassets.latitudefinancial.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oscassets.latitudefinancial.com

Other certificates including the domain name latitudefinancial.com

(limited to 100 certificates)
connect.latitudefinancial.com
quote.latitudefinancial.com.au
shopify.api-inactive.latitudefinancial.com
mobile.assets.test.latitudefinancial.com
private.api-inactive.latitudefinancial.com
api.sit.latitudefinancial.com
*.github.latitudefinancial.com
api.test.latitudefinancial.com
responsysassets.latitudefinancial.com
partner-auth.latitudefinancial.com
visa.api.latitudefinancial.com
di.latitudefinancial.com
shopify.api-inactive.test.latitudefinancial.com
merchanttraining.checkout.latitudefinancial.com
test-payments.latitudefinancial.com
incapsula.com
applyandbuy.latitudefinancial.com
mobile.assets.test.latitudefinancial.com
cards.latitudefinancial.com
imperva.com
imperva.com
auth.dev.latitudefinancial.com
imperva.com
rsa.api-inactive.latitudefinancial.com
latitudefinancial.com
assets.latitudefinancial.com
incapsula.com
pcc.api.dev.latitudefinancial.com
imperva.com
imperva.com
smetrics.latitudefinancial.com
rsa-enc.api.dev.latitudefinancial.com
orion.smartdochub.latitudefinancial.com
api-inactive.latitudefinancial.com
resources.latitudefinancial.com
imperva.com
sts.latitudefinancial.com
rsa.api-inactive.test.latitudefinancial.com
visa.api.dev.latitudefinancial.com
imperva.com
imperva.com
onlinepaymentintegration-sit.latitudefinancial.com
p.latitudefinancial.com
imperva.com
onlinepaymentintegration-sit.latitudefinancial.com
oscassets.latitudefinancial.com
*.orion-test.latitudefinancial.com
api.test.latitudefinancial.com
imperva.com
imperva.com
lsc.assets.latitudefinancial.com
imperva.com
p.latitudefinancial.com
imperva.com
api.test.latitudefinancial.com
imperva.com
merchanttraining.checkout.latitudefinancial.com
orion.coreadmin.latitudefinancial.com
api.test.checkout.latitudefinancial.com
api.latitudefinancial.com
imperva.com
responsysassets.latitudefinancial.com
latitudefinancial.com
p.latitudefinancial.com
connect.latitudefinancial.com
api.test.latitudefinancial.com
resources.latitudefinancial.com
oscassets.latitudefinancial.com
di.latitudefinancial.com
smetrics.latitudefinancial.com
eform.latitudefinancial.com
visa.api.test.latitudefinancial.com
incapsula.com
oscassets.latitudefinancial.com
imperva.com
statements.latitudefinancial.com
api-inactive.latitudefinancial.com
paymentportal.latitudefinancial.com
imperva.com
identity.latitudefinancial.com
checkout.latitudefinancial.com
mobile.assets.test.latitudefinancial.com
cards.latitudefinancial.com
partner-auth.test.latitudefinancial.com
mobile.assets.latitudefinancial.com
servicecentre.latitudefinancial.com
responsysassets.latitudefinancial.com
identity.latitudefinancial.com
imperva.com
imperva.com
cardapp-sandbox.latitudefinancial.com
assets.latitudefinancial.com
applyandbuy.latitudefinancial.com
cardapp.latitudefinancial.com
shopify.api.test.latitudefinancial.com
lsc.assets.latitudefinancial.com
api-inactive.test.latitudefinancial.com
privacy.latitudefinancial.com
pcc.api.dev.latitudefinancial.com
rsa.api-inactive.latitudefinancial.com

Certificate

The complete raw certificate details for oscassets.latitudefinancial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qEIRMvD1Mc4fBxpleBQ
VArU8+OrGdM67NIhuj4hZR2sP5HjbqNDKGrn0OuJvfrGSTVVb9CKW8YxFNqqoLJC
iRvnZkIfp20yvcLh2JPhm/c64B7447t38u1BCWMnBEcY6867S6YDX3+CdEsvAZ8K
E8PA+wAaTh3b8K+M1bmqwy/gkejbZjV2QvlcknsqLQAxHftnmkEC7LRu5GqxrrZK
knu0eJ8eplq/OK4/TAKiZrr1+yC50FxQSmMMjnmcgW+UV+erCIw0qMSj2MA8+yQB
PuOmyaA5KuHE0g37Fq9LmXvdNw0hVc0xWR5SPS3Km/V7Y94NWlyVs/XZfgxpeWxc
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19326978773151421332439908639462288210
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Docklands'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Latitude Financial Services Australia Holdings Pty Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oscassets.latitudefinancial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27094405249316005791634972864600708389089751753781562935229057542196301839888708155825149469895953566170494892203704240106796852367098695119658033829278785768102161786731166004020384824587464834915817221008680567435797168271309724240277336379933374462743162246036956131177369646481536388837015971794021069639293125360196252750919462840569426763805574736909428726388793919958226195300340720492982353635408879422223494959828512813405369182072171116805474044425129764372658821897641631016030553767333251659372151768103708546745344460394129702615221725509308338213445466313626663342275395023202136778343118525598043757819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							889d4208035fa3aafb49b0ad35035995432b2768
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscassets.latitudefinancial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000176ff5a91880000040300483046022100c901f164281aad2c37342ebc5ec675ab091c313d9c584bfb4fcd9b54928099fd022100864ab6fe1a7110f2c298c4fa5b7ad01e8d231c9408ee4124c72e6024d685558f0076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f0200000176ff5a91e10000040300473045022038b281276a1c031c01bcd24476fe62c78b1b697f86023cfb80077119c771236d022100dbaa338fa4abb57f46d7c805f9d79ea4d17e35aa98a2c8ac6f98505a5bd4ecb4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009cdda13cf3ea3a0ece30d54cdc2eb01b2a57e41701919af852e87a7b73e5d879b41f901f99fc8edd055b1bcded1cbd7ca0c313b6110f516e9adf37bca7dfba9afe8954a0b8b62980546179ed75f2382525cbbb4589db4b8b6e37b6d37ea450055cc98fc83dbbade45fed56099f0b15601ea6d96dd0bbe1496ce6f9a09e03f1be083426e03dbf019792122874ba9c698a32e50007acad20583a7bf4e3adf0aa5dadf91ee8052d45ba4a8cbdc8efda98705840f1a4701968850b2c2b2e0b076176dae746bc7dbed6d9b410e39d85ff7f825049b23937114be990b6a73c67e089b8fb95cc6f0c8347f2be00dc64598d04bd131a2810ec5f3890e713ab27b93d18c9