watch.tataplay.com

- TATA SKY LTD -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:7f:5b:55:8f:73:72:3d:b7:4f:92:02:59:3e:bc:f4 was issued on by DigiCert Inc.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TATA SKY LTD

Organization: TATA SKY LTD
State / Province: Maharashtra
Locality: Mumbai
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:7f:5b:55:8f:73:72:3d:b7:4f:92:02:59:3e:bc:f4
Serial Number (int): 17941238124301497832997539058015976692
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: eb:b1:cb:76:d2:10:55:95:38:ea:2c:6c:f0:99:a5:14:23:86:c1:27
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 75:63:26:2d:99:a7:77:b8:a4:48:3a:5d:b7:d0:7b:51:9c:7f:fd:2d
Fingerprint (sha256): 20:01:56:1b:51:1a:e9:fe:27:2b:fc:63:8a:c9:93:04:45:9a:b8:02:47:e5:43:43:81:62:c1:5c:c0:66:b6:bd

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate watch.tataplay.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for watch.tataplay.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

watch.tataplay.com
www.tataplaybinge.com
uat.tataplaybinge.com
uat-watch.tataplay.com
uat-mini.tataplaybinge.com
staging.tataplaybinge.com
staging-watch.tataplay.com
staging-mini.tataplaybinge.com
prime.tataplay.com
mini.tataplaybinge.com

Other certificates including the domain name tataplay.com

(limited to 100 certificates)
qa-secureapi.tataplay.com
intapigw.binge.tataplay.com
cdevdvr.tataplay.com
cloud-gitlab.tataplay.com
msales.tataplay.com
devmanageapps.tataplay.com
tataplay.com
training.tataplay.com
smpuat.tataplay.com
servicedesk.gainsight.com
clmuat.tataplay.com
gstms.tataplay.com
apigw.dbss.tataplay.com
mservicedev.tataplay.com
chat.tataplay.com
training.tataplay.com
idmgmt.tataplay.com
beta-portal.tataplay.com
pmt.dbss.tataplay.com
cuatmdu.tataplay.com
myprm.tataplay.com
victory.tataplay.com
mail.tataplay.com
*.tataplay.com
helpdesk.allinoneservices.in.net
safepulse1.tataplay.com
watch.tataplay.com
customer-sdpondemand.manageengine.in
partnerintq.tataplay.com
mservicedev.tataplay.com
aiuat.tataplay.com
tataplay.com
*.tataplay.com
help.tataplay.com
cuatdvr.tataplay.com
prodmduwoc.tataplay.com
uat-b2b.tataplay.com
devhelp.tataplay.com
dev.smp.dbss.tataplay.com
cdevgtg.tataplay.com
uatwawebhooks.tataplay.com
msales.tataplay.com
odaas.tataplay.com
ig.infogain.com
uat-portal.tataplay.com
uatwebhookbinge.tataplay.com
pre-portal.tataplay.com
uatmservice.tataplay.com
eventapiuat.tataplay.com
legatrix.tataplay.com
fsreports.tataplay.com
uatwawebhooks.tataplay.com
uat-bchatbot-dashboard.tataplay.com
uatwapwebhooks.tataplay.com
mservice.tataplay.com
help.tataplay.com
staging-watch.tataplay.com
dev-portal.tataplay.com
endpoint.manageengine.live
beta-manageapps.tataplay.com
servicedesk.vsoftconsulting.com
partner.tataplay.com
uatwaapi.tataplay.com
uatwapwebhooks.tataplay.com
dev-b2b.tataplay.com
hobsiras.tataplay.com
selfcare.tataplay.com
uatgstms.tataplay.com
ssohobsiras.tataplay.com
cuatdvr.tataplay.com
unifiedbotchat.tataplay.com
tataplay.com
servicedesk.decisionfoundry.com
uatevd.tataplay.com
prime.tataplay.com
uatwawebhooks.tataplay.com
care.spacematrix.com
ig.infogain.com
partner.tataplay.com
uatmservice.tataplay.com
trai.tataplay.com
humanresource.thepawscuers.life
services.mdu.tataplay.com
safepulse1.tataplay.com
*.tataplay.com
hobsiras.tataplay.com
watch.tataplay.com
vizcloud.tataplay.com
kpi.tataplay.com
beta-manageapps.tataplay.com
onedesk.tataplay.com
uat-portal.tataplay.com
services.mdu.tataplay.com
wawebapp.tataplay.com
roe.tataplay.com
servicedesk.celestialsys.com
uat-portal.tataplay.com
associates.tataplay.com
dev-portal.tataplay.com
onedesk.tataplay.com

Certificate

The complete raw certificate details for watch.tataplay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus2gO+DkW+/Je3y58FzL
ccUg72BXYc2JRSmJ2qrav79XyARjfVzrKS0FS7g8h57Nh4OwwYDrVrA4ankpyAm2
TzEjfQeRxLo+MnAt3HW7bRdoVF19hMUlZ37wcypcbWs+y/F74J/vPkTRIuSkcsbh
ZrfQL19NI/OF27tmiPlCUm2LXgtyaK6YE8NhV4Kuo62R7eDQmmVeDMrH+ekEysEu
fciLChR5SLz455bbNdZuSBGmnuaidmTEAM9I4ldrn1J9jTGPJjQoq2bOPNTEUiu/
oiDGf5KBKS9hZEc9wQJem36GZ8+rSGEiXsPP77iWuL8jt3Wr5Ck+Vi0REv//sKN3
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17941238124301497832997539058015976692
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TATA SKY LTD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'watch.tataplay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23581722640871268334385398340026251567182577753636375773653796607732536143978000014465165784845514903805721256463239989964601671512548321765156546044157208746741315459117230770936900721957314250538792637356947159348540614612662678752711988970410370994451936847275339215286820656734555517350834348453843495426667197781511789373519952852396001566032067216663354406612532149635803151932459681957085767098278771600497407832288910298463185406346437396829295350804586824980519336346522483298253229028678267125775918951816423334320980150850701826690215879208842546839420536450048449864442672868938848025979848513135279568853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebb1cb76d210559538ea2c6cf099a5142386c127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (252 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.tataplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tataplaybinge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tataplaybinge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-watch.tataplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-mini.tataplaybinge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.tataplaybinge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-watch.tataplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-mini.tataplaybinge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prime.tataplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mini.tataplaybinge.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ccc0f39009e0ab92b4d7a18066236869c8ebda68279e95d7f44579764aedf93ed18e4876a7558ef60958656c5a5501e1ca143699d39b520919064d424593133461373185e1cbc3788c2b777065253edbe626e989c8865a6436d37fad0ff36b45227488fa397b77efa180ce5a36f9b806a9e61911b28c88a5ce7258ccca441434bcf849f9029ba25a28221b77f13b1de9de8789276550aaeabdd87d8e06c09d6b5c77011b65837c95bfc0dc468da1860902e0efd2d5a70c06a826076db3844b2566d235abd41a9f34ef514c853fae111c75b09150411c8869e1913eb6d8f2b6bd7baea376d65a83ba5f53cd2ca5b45fa56239ba93d7a2b8e2a0afa526a8834e11