ui-mgr-qa.halo.vzbuilders.com

- Oath Holdings Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 07:33:2d:f9:fc:dd:22:c6:86:33:2c:e5:1a:fd:6c:18 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oath Holdings Inc.

Organization: Oath Holdings Inc.
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:33:2d:f9:fc:dd:22:c6:86:33:2c:e5:1a:fd:6c:18
Serial Number (int): 9570335624781877000070499869594053656
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9f:23:c2:07:3a:12:54:69:71:e7:2f:11:10:6e:99:08:c4:87:f0:4a
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 65:ce:7e:23:e6:f0:18:69:71:fc:44:1f:c4:f9:dd:72:59:08:57:40
Fingerprint (sha256): 27:22:82:d9:73:7f:9e:59:86:62:75:57:69:f8:08:3a:c7:0f:c6:3b:76:bb:19:0c:3f:ea:59:66:b5:cf:e7:3e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate ui-mgr-qa.halo.vzbuilders.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ui-mgr-qa.halo.vzbuilders.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ui-mgr-qa.halo.vzbuilders.com
ui-mgr-qa.halo.ouryahoo.com

Other certificates including the domain name vzbuilders.com

(limited to 100 certificates)
vertex.fin.vzbuilders.com
notify.halo.vzbuilders.com
beta.buildr.vzbuilders.com
esm.vzbuilders.com
memberpulse.ouryahoo.com
erptst.fin.vzbuilders.com
mmgmt.vzbuilders.com
*.media.yahoo.com
tls-log.vzbuilders.com
vertexuat.fin.vzbuilders.com
console.vespa.vzbuilders.com
src5.yahoo.com
cyberark-uat.vzbuilders.com
esm.vzbuilders.com
billing.fin.vzbuilders.com
erpfin1.fin.vzbuilders.com
erpdev.fin.vzbuilders.com
src1.yahoo.com
vertexdev.fin.vzbuilders.com
src1.yahoo.com
src1.yahoo.com
yoda.vzbuilders.com
outsystemstest.fin.vzbuilders.com
*.yahoo.com
vertex.fin.vzbuilders.com
ldap1.tp2.uat.sshca.vzbuilders.com
identityiq-qa.vzbuilders.com
om-dev.brandsite.vzbuilders.com
godoc.vzbuilders.com
identityiq-dev.vzbuilders.com
rpaproxy.vzbuilders.com
src1.yahoo.com
store.ouryahoo.com
store-qa.vzbuilders.com
productmaster.vzbuilders.com
*.media.yahoo.com
*.yahoo.com
*.yahoo.com
src2.yahoo.com
*.media.yahoo.com
vertexuat.fin.vzbuilders.com
src1.yahoo.com
*.yahoo.com
*.media.yahoo.com
src1.yahoo.com
src1.yahoo.com
src6.yahoo.com
stage.smp.verizonmedia.com
tls-log.vzbuilders.com
ecp.vzbuilders.com
go.ouryahoo.com
dctools.ops.yahoo.com
elide01.carbon.stg.vznet.gq2.yahoo.com
ecptest.ouryahoo.com
prodops-portal-test.ops.corp.bf1.yahoo.com
src2.yahoo.com
sshra.tp2.dev.sshca.vzbuilders.com
src6.yahoo.com
*.canary1-bf1.media.yahoo.com
erprev1.fin.vzbuilders.com
cubdev1.fin.vzbuilders.com
cubstage.fin.vzbuilders.com
notify.halo.vzbuilders.com
cubdev1.fin.vzbuilders.com
erp-reporting.fin.vzbuilders.com
moog.vzbuilders.com
sandbox.jira.vzbuilders.com
dcworkflow.vzbuilders.com
nonprod-ums.calypso.vzbuilders.com
sshra.ops.yahoo.com
revsysstage.fin.vzbuilders.com
mbo.fin.vzbuilders.com
brand.vzbuilders.com
productmaster.vzbuilders.com
erpscm1.fin.vzbuilders.com
ghe-webhook.tetradio.vzbuilders.com
api.scm.vzbuilders.com
src6.yahoo.com
om-dev.brand.vzbuilders.com
src1.yahoo.com
git.ouroath.com
sandbox-index.jira.vzbuilders.com
stage.launchcalendar.vzbuilders.com
brand.vzbuilders.com
src6.yahoo.com
notify-qa.halo.vzbuilders.com
launchcalendar.vzbuilders.com
*.media.corp.yahoo.com
trap-test.paranoids.vzbuilders.com
itportal.vzbuilders.com
plus.digits.vzbuilders.com
mbo.fin.vzbuilders.com
ui.halo.vzbuilders.com
mulertfdev.vzbuilders.com
procuretopayportal.fin.vzbuilders.com
tls-log.vzbuilders.com
ican.fin.vzbuilders.com
outsystemsdev.fin.vzbuilders.com
vertex.fin.vzbuilders.com
git.ouroath.com

Certificate

The complete raw certificate details for ui-mgr-qa.halo.vzbuilders.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs6LmQOa8F6pJYrY/sqB
xtjeoTMnf4FZUQ/GcbXId9RL8EOlnh0EZbz7GVCHNvjtM6Eng8ceXF3anpydPHxN
Vb++s6Tx5LvhfhqCthzFfFQoeq4pq08EuqPbKKt9iZ9SgLkqXnDgXgBg/doc5UVh
Ti0mU8XMm8cxGMYVjccYVAyZMGKh/qKjJQVk+KA82NKcrVDD+2ZUoUz0E8I7nEYQ
Raapv4M7D1l/3I5/NhpIAewsbROjKGqnmvC10YFbLqo/JNmTpeM7a9McknbzSDaQ
GjkhYaHSeDaMcIswRZofCg0o7i4BHRvoJhsjppvIlIGuMW0+s+LQLtawVdUcnKrp
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9570335624781877000070499869594053656
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Holdings Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ui-mgr-qa.halo.vzbuilders.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21562363129464597956711465680836275834608441087407395955783933967053480808735539689153954339923718607493361181739986352284813664247530509343200545919856409400995728954835696082206090004477574739452045434039042313337425893351043427337598099313839239035438618775793901901489998884109381401831869204361118259961098407886243854283135763558928544286845330470245816115444111850933798342334178977555966147547662660041887978982500655151721376635997726259833910714771667302176158712012462478460276935233153937478764489762287009928216503388448417988691136246855673657763601356575346953568006294790426991456591469053785626306969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f23c2073a12546971e72f11106e9908c487f04a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ui-mgr-qa.halo.vzbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ui-mgr-qa.halo.ouryahoo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0010f2b34c5f5e3aefa5cbb5ae88e2d75622c244a4859cada12244316becc9764227e411cdff1084e8ca7b6d37bf53c950bf91a875705b20cc1057b8646687972ea4aaf6d30cbbeda71298cea7b2e6f27c0e3ffbecaaee5de8acc2f2c0caacd65120a3b3b185ca8b4b73a463cba4be458e2d67b7ad0a546ca6da0608c40c49831e284b3d922a2e064a744c488e2dc6f3039ac4e599526f9065861b826f8a252db77d48471cdb821c9370a08c459ee80af07e90da8dc469525c5ce595a5b4a9bba8e56e437f2ec4a0399112ba422275781f3461226696bd2085280f8561812aed76acf0cf291981d5d3cfb3bdb24ee9192a44b4363aed696eccdfb496dcafe0a41e