vnpay.vntopup.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e5:58:ce:8d:b5:77:2c:0a:18:1b:b7:7c:f4:6f:92:af:c0 was issued on by Let's Encrypt.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vnpay.vntopup.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e5:58:ce:8d:b5:77:2c:0a:18:1b:b7:7c:f4:6f:92:af:c0
Serial Number (int): 426491850302914758977455957292224410202048
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 46:d2:6d:98:8e:03:f4:ff:43:07:79:f0:8f:fe:8e:fd:af:43:5d:57
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e8:e2:ba:f6:18:e2:de:42:15:29:44:d3:ab:57:20:ae:5f:8f:d2:65
Fingerprint (sha256): 27:fd:96:52:06:3c:2d:b5:91:05:67:82:0a:b5:f9:12:90:62:e5:b8:75:8f:7c:8d:75:b2:3f:7d:be:f1:bc:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vnpay.vntopup.vn

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vnpay.vntopup.vn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abbank.vntopup.vn
agribank.vntopup.vn
bankweb.vntopup.vn
baovietbank.vntopup.vn
bidc.vntopup.vn
bidv.vntopup.vn
dongabank.vntopup.vn
eximbank.vntopup.vn
ficombank.vntopup.vn
gpbank.vntopup.vn
hdbank.vntopup.vn
indovinabank.vntopup.vn
lienvietpostbank.vntopup.vn
maritime.vntopup.vn
mb.vntopup.vn
namabank.vntopup.vn
namamobilebanking.vn
navibank.vntopup.vn
ncb.vntopup.vn
ocb.vntopup.vn
oceanbank.vntopup.vn
pgbank.vntopup.vn
sacombank.vntopup.vn
scb.vntopup.vn
seabank.vntopup.vn
shb.vntopup.vn
simdanang.vn
techcombank.vntopup.vn
tienphongbank.vntopup.vn
vcb.vntopup.vn
vib.vntopup.vn
vid.vntopup.vn
vietabank.vntopup.vn
vnpay.vntopup.vn
vnticket.vntopup.vn
vpbank.vntopup.vn

Other certificates including the domain name vntopup.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for vnpay.vntopup.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2P9fJsXQsTxkVnpBFCCU
8aQL1GXwz1Coxkd60S2MoeopOssJap5MXDvi1H4y6hnYRU5tEyTn0j0F6aJZso3h
+bqUgT7WueEb/FC7sIfVvdZ0twKj0gstPKXYUgPudGDtmXVQB3QYbhUDiTKJx0pk
gsoU0wZB0iSa14tMpPN78ntOKW+9uDyLIPgAk247GAHbFIjCJZELe9nsEjCmZV1Q
nfxZCtTE385dT2/UrfeZpdbtthRmbd+eNfPu/nVmS6Wk6tfTeEkfL5CcNfVtKkUF
rz1vmoq8QLJvx4Uo7TSCEQzQcDbne6RepVv7aJoJfqmM8wAdKmaiEll0TCgAC23u
VafxnjEz5BGl2sntJyQ9CQJB5DD6N9JUDxgn6dU3dCvHnf58ZQgsnnvlyVW9tI+v
3OWivwpPBwodQiLsemTxsncYOuvqnsLVEZFQNJlSSNOiEHqFNFqEeSZKgD+4VSdw
ImcRg37f9TUTruyyEqA1WxNk6hNznZ0AI8HHCywAQYEmnnluzOyqR6lVQUGBgJY+
yaXiqdIKvTgN7tiNtICoUeI50jWygweAzE7zz0snX+uxdTzWjryEvTxkLDkSmLo+
GcX93nr1VBpfGklPLkpPIcBuEoy6jVjSIu4h7XOFLH/0nNCn6IV7lt+IBkDlDVxE
YHSTMsyOqRq7ECwB+09zJ2ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426491850302914758977455957292224410202048
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-24 06:12:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-24 06:12:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vnpay.vntopup.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 885272749869609746602647354628183390032566888761564957387046728812031367120001425539460575091280019413510287327305954151396063790132321567136254706572078286567496022052776195000850796049681037017748986031819683784875457650414825824890317308693194536504414243263984415432129214092710838022319908596617080252208799492620523561112185326648468275921019479763733300353002444292268549560218996388667664835016419309846203703038956410090385315418823000680784300019411030120711488541072104559210313182699541387293385077352522145078274847731134443154225057296733323431653141063172661189988449952518909402638433713794101843694245686909125510622189506398402220575085700352216150226270675006969306653848301339711567151204298999706353652256092239092998462310885283634152012487789717707271271501599603149726844264819673621526777661862343162268829624718620341959450741662355673892572175343491071343728131822090248765242994336568521466970783469320138986308469751766469988654023209940826323134489916110658914723550938638991875711139776839787704542782710495962181548332780945991691851634830743592150794424869049270611406341583738893396593389696988840974596948924143992982960618696095086852220856621885772841521289074926777864238302484029155901359466337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46d26d988e03f4ff430779f08ffe8efdaf435d57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (718 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agribank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankweb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baovietbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidc.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidv.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dongabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eximbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ficombank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indovinabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lienvietpostbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritime.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namamobilebanking.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navibank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacombank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simdanang.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techcombank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tienphongbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vib.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vid.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnpay.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnticket.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpbank.vntopup.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001707609e21f00000403004730450221009f4048b3ef2940e972d18ebe792ca3283a2d64037bd4200fb6417135b0de28e50220495cb1834a25f50effec61ced62e1a3976ed0870e7445d7226872880443d328d007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001707609e21b000004030047304502203a2e60a820150ce3cdca44546f7a53f19b843e490e17e6216f721795fc07d83b022100d27d2fe32faab6c73c69e3caed52812c37f7dc3fd681b3745fb0fdd0afd24364
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0061b3da444c6b87017befe75e34c466fe94df22b670d12cf127316d46cf1efa8e3554cb5a8397d1a399b8ecb972fe7247d9de47a929c7239d9a61366bcf70ee8c304cdda9de7795d60854f7afa1940d3fd13d45ee4e07bb1950d2044708725168a33eb03c7a8910032313d0d37a2707bc89a419c835fb30126678f3a8566121fbb2a4d36bbfd3ba0b161b0e6591c26430dbde5f736e1947f34c6f5849f32a3244b3400351b51982a4b503b1e6c91f4ef865ca6012b9b7a8d8f0a5e28fa6049b3a2ae228937881092b29fd4f8e54a0850846a6dd959d34cbc09ec4cd2db8ccfdac89a2d10b5e001539efee50e51d7f07bce283a142662ecfde511f8b03887cef64