www.txdot.gov

- Texas Department of Transportation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:ce:1d:ac:8e:2a:10:ef:9e:af:ce:1a:f0:7f:c4:8b was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Texas Department of Transportation

Organization: Texas Department of Transportation
State / Province: Texas
Locality: Austin
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:ce:1d:ac:8e:2a:10:ef:9e:af:ce:1a:f0:7f:c4:8b
Serial Number (int): 18350178959182265448260092896489751691
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2a:26:5e:84:85:be:23:5a:5e:c4:93:98:64:b8:85:5e:55:c4:09:c7
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e5:22:95:fd:1a:96:00:c2:0d:e4:b1:49:5d:83:8f:35:c9:c2:dc:eb
Fingerprint (sha256): 28:c6:58:73:94:a3:7a:6c:d1:bb:a4:78:de:aa:dc:a7:de:9a:98:dd:e3:63:02:7e:af:2c:8b:ea:1e:9b:c2:e0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate www.txdot.gov

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.txdot.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.txdot.gov
CSTAR.TXDOT.GOV
CSTARUAT.TXDOT.GOV
txdot.gov
a.txdot.gov
author.txdot.gov
preview.txdot.gov

Other certificates including the domain name txdot.gov

(limited to 100 certificates)
sb20pca.txdot.gov
testporta.txdot.gov
mppm.txdot.gov
edit.drivetexas.txdot.gov
txrtn.txdot.gov
crisdev.dot.state.tx.us
po.txdotconnect.txdot.gov
mppm.txdot.gov
webex-sso.txdot.gov
arcgis.mppm.txdot.gov
www.dot.state.tx.us
crisuat.dot.state.tx.us
ftp.txdot.gov
testmap.drivetexas.txdot.gov
ADFS.TXDOT.GOV
jaspere2eext.txdotconnect.txdot.gov
externalusers.txdot.gov
publicdocs.txdot.gov
mycitrixsf.txdot.gov
edit.drivetexas.txdot.gov
apps.dot.state.tx.us
cgust.txdot.gov
cgwuat.txdot.gov
hr.txdot.gov
editmap2.drivetexas.txdot.gov
dev.txdotconnect.txdot.gov
cris.dot.state.tx.us
hcmust.txdot.gov
remote.txdot.gov
apps2.dot.state.tx.us
contractsinternal.txdot.gov
txdot4sverpweb1.txdot.gov
txdotconnect.txdot.gov
cris.dot.state.tx.us
ecmmobile.txdot.gov
e2eext.txdotconnect.txdot.gov
ftp.txdot.gov
oc1.txdot.gov
www.txdot.gov
externalusers.txdot.gov
cris.dot.state.tx.us
uatext.txdotconnect.txdot.gov
mycitrixsf.TxDOT.gov
AVNMET.txdot.gov
avnmetfiles.txdot.gov
fbde.txdotconnect.txdot.gov
webex-sso.txdot.gov
externalusers.txdot.gov
mppm-ref.txdot.gov
qa2.txdotconnect.txdot.gov
dev.txdotconnect.txdot.gov
fin.txdot.gov
testportal.txdot.gov
ADFS.TXDOT.GOV
txdotconnect.txdot.gov
www.txdot.gov
citrix.txdot.gov
edit.drivetexas.txdot.gov
txdot4azitsmon1.dot.state.tx.us
ecmmobile.txdot.gov
AAHUAT.txdot.gov
last.mppm.txdot.gov
matsuat.txdot.gov
TXDOT4AZK2WPRD1.dot.state.tx.us
ftp.txdot.gov
remote.txdot.gov
adfs.txdot.gov
sb20pca.txdot.gov
crossroadsuat.txdot.gov
txdot-xenweb.dot.state.tx.us
enabler.txdotconnect.txdot.gov
ftp.txdot.gov
cris.dot.state.tx.us
txdot4sverpdlx1.txdot.gov
oc1.txdot.gov
editmap.drivetexas.txdot.gov
cgust.txdot.gov
apps2.dot.state.tx.us
elm.txdot.gov
editmap.drivetexas.txdot.gov
mycitrix.txdot.gov
finust.txdot.gov
avnmet.txdot.gov
apps2.dot.state.tx.us
TNTODAY.dot.state.tx.us
www.txdot.gov
testmap2.drivetexas.txdot.gov
mppm.txdot.gov
devarcgis.txdotconnect.txdot.gov
apps.dot.state.tx.us
externalusers.txdot.gov
reports.txdot.gov
*.mppm.txdot.gov
txrtn.txdot.gov
fbqa.txdotconnect.txdot.gov
edit.drivetexas.txdot.gov
vcsc1.txdot.gov
its.txdot.gov
fin.txdot.gov
trn.pmdis.txdot.gov

Certificate

The complete raw certificate details for www.txdot.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsHlWP/wU7O6PW5U4EUr
mvMLlZd18t5M75YHgAlYvtdnGsirjacakPN6gvQkSAcwHdiELiSAmK266CIQNe/6
prsYOb7rYeVx/ps8++2EUk2C9IjEEeL2R3CAwqNqXUK09MOgFh2q1i5YRpVpaI1u
Iy5pUj/VvQxlWBPeIvBmSXDGOuA0OBVwdmJHIUvkvT9cIPCNhgvusXdm3iFJN1qa
6yl7RG2LWKoxBt1zrZz/5d2OvZ2u2o82/hfii9NaNcXJTqu+Vwsq0Yd/w+dx/eOG
UoA/Ln0qLe/RNs85929ITQPRS1kIlNMUjDOCLM23px+tmq1nb5VOrR1cSaTYyEsk
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18350178959182265448260092896489751691
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Austin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas Department of Transportation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.txdot.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25090798009851537638892600603680312105947655076601509267601888822516430242594636082638285379729790421074386970646466221155989150908502396404018682593377176476694606380163613028769730478872206165968532630118717470448563014195465208675654546274433039510952710816968487963567460351237771829106624516978619288927189142984818571931242926452737577252778152060983133840410782811730765426035146439138694976769192055763035286623058566492550370652921057422276856510777806547401138998346158682664947123787636525933151290763904681106432075668405431993866640278421050963355765740184605729026676612410102224851283218630155686323411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a265e8485be235a5ec4939864b8855e55c409c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.txdot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CSTAR.TXDOT.GOV'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CSTARUAT.TXDOT.GOV'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txdot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.txdot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.txdot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.txdot.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000175339f541e0000040300463044022026cb589643335ddc861e189aa805b862b3f7da23c4725f255137e04da4a010140220256ab6fedc308384220a99876ceb77431f294af86d312bf04f0a325496de8f890075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000175339f5467000004030046304402207745253dd2173e6b0f6389c3cbf7a1e61adcea74599909e560c7892fb98f11c6022064444aa62d5162961dde06454d3804fee02dfa4a5f74f91484a5f0639f2abcd6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009ae83d16fa81697075f92e0bbe2ce308fc476d428c398aaf7025cd438b9896ee5149af35af41c67699266152dccd999753085b9c4bc21f830cbfe1351247806e08eb80d939caeff21cf33d94079d0169229f3497a05ae1dd1cdac840f259e954a86ee9c846bf23f32093fc5d5e8922e07bb46cd1c0e361863e77df2560aed430bab9348cf69c941592e6f7332dc0b5c1eb8a4f044a2cf66511445e788bd53d77a18a37b84fe1140508ac902c87e525f6f283fdc20b73ef0276720cea8a0068070d869477487dbabd532d3732387a0493d61667f5b43e2a0c03eea4cb80f3bfa0a2d58cfabbfe3fdfbe6bf16b8c5ac9f5ff08f961aed3a8ce908ee09b755231fa