mail.tciserv.com

- TCI Fund Services LLP -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0c:cb:9b:e2:54:eb:64:2d:78:0c:5f:72:67:44:07:f5 was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TCI Fund Services LLP

Organization: TCI Fund Services LLP
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:cb:9b:e2:54:eb:64:2d:78:0c:5f:72:67:44:07:f5
Serial Number (int): 17007933917036166184097971282701977589
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 61:44:cb:6b:21:7b:96:8a:49:be:ed:d9:42:eb:d6:f6:1a:8a:ca:93
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 18:b2:ba:1b:f8:98:4f:b3:54:54:bd:74:e1:18:c2:7b:57:58:48:33
Fingerprint (sha256): 32:9e:76:78:92:e9:72:75:08:f2:a3:f4:16:91:d4:6d:c9:4a:54:4e:dc:b1:99:1c:b4:61:48:e7:09:96:89:d2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate mail.tciserv.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.tciserv.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.tciserv.com
autodiscover.tcifund.com
cavext.tcifund.com
autodiscover.tciserv.com
autodiscover.tcianalysts.com
investorday.tcifund.com
smc.tciserv.com

Other certificates including the domain name tciserv.com

(limited to 100 certificates)
customerportal.uk.rlb.com
support.homeinstead.ie
systems.squaredup.com
helpdesk.epsilonnet.gr
servicedesk.group-k.be
helpdesk.presto.se
support.homeinstead.ie
hub.theriderfirm.cc
itservicedesk.paradigmhousing.co.uk
servicedesk.esmsglobal.com
servicedesk.iquw.com
ithelpdesk.familycarers.ie
service.littlegarth.org
support.homeinstead.ie
soporte.inmocolonial.com
support.homeinstead.ie
helpdesk.scf-corporate.com
customerportal.uk.rlb.com
soporte.unirioja.es
itsupport.fhbrundle.co.uk
helpdesk.mlw.mw
helpdesk.itsligo.ie
soportecmi.toledo.es
servicedesk-meckenheim.pvs-europe.com
mail.tciserv.com
technologyhelpdesk.slimmingworld.co.uk
servicedesk.iquw.com
support.homeinstead.ie
support.homeinstead.ie
getsupport.superdry.com
servicedesk.alessi.com
support.homeinstead.ie
service.littlegarth.org
soporte.martinezabolafio.com
support.homeinstead.ie
support.homeinstead.ie
support.homeinstead.ie
technologyhelpdesk.slimmingworld.co.uk
servicedesk.coram.eu
ithelpdesk.gmmh.nhs.uk
support.homeinstead.ie
support.homeinstead.ie
sd.srk-zuerich.ch
servicedesk-meckenheim.pvs-europe.com
helpdesk.sunlight.gr
support.brill.com
helpdesk.danpearlman.com
support.homeinstead.ie
helpdesk.itwfasteners.com
support.homeinstead.ie
servicedesk.weber-ing.de
ithelpdesk.frederic-robinson.co.uk
soporte.unirioja.es
grouphelpdesk.oceanscan.co.uk
cavext.tcifund.com
cavext.tcifund.com
helpdesk.tciserv.com
itservicedesk.paradigmhousing.co.uk
helpdesk.itsligo.ie
servicedesk.prelectronics.com
esolportal.noatum.com
support.homeinstead.ie
smc.tciserv.com
support.homeinstead.ie
ithelpdesk.gmmh.nhs.uk
ithelpdesk.koinly.io
soportecmi.toledo.es
helpdesk.beauchamps.ie
customerportal.uk.rlb.com
helpdesk.sunlight.gr
helpdesk.beauchamps.ie
customerportal.uk.rlb.com
support.homeinstead.ie
mail.tciserv.com
servicedesk.prelectronics.com
*.tcifund.com
servicedesk.am-labor.de
support.homeinstead.ie
itsupport.nza.nl
support.homeinstead.ie
servicedesk.relyonnutec.com
it.rmk.ee
it.rmk.ee
itsupport.gnt-group.com
support.apc-overnight.com
systems.squaredup.com
servicedesk.medica.co.uk
customerportal.uk.rlb.com
itservicedesk.paradigmhousing.co.uk
getsupport.superdry.com
support.homeinstead.ie
servicedesk.alessi.com
servicedesk.group-k.be
servicedesk.christs.cam.ac.uk
helpdesk.epsilonnet.gr
mail.tciserv.com
helpdesk.atu.ie
smc.tciserv.com
customerportal.uk.rlb.com
support.homeinstead.ie

Certificate

The complete raw certificate details for mail.tciserv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwneE3dD3bLxxBvlylH6H
WDQy3iIn32pXZZixoWhB+Wz9gvbFWBvT83AzlkXY/VcAdQTzic6aLQ5z2pW/1HLk
VTrj8bDYk+eCjVWAl3lTjHayVvaBFioul/7YgNiyvsextfBHdTFXZsAaKpdn3Poq
8daGmlAELnJN4D6uelnHCtxsM/raWY36VOQJ9v3w6Sv0Z/5bYvLfbTtaIQKuT1zL
fCHbHSFexGKeDqLynV65foFD0hqBHs+AODrdxtkutPl2wYWZF/gSnE2OoSrvdfNK
AsxEaBAc7NqA5Idag0bWHkEJHn9UxcFvw3T4YjB4A8kRAovAYp5mjnoyR3fch+v5
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17007933917036166184097971282701977589
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TCI Fund Services LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.tciserv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24549168183685508851226587664262381854155992767979225194286033992292932558205408733660198698480999453701727319002585264736324568246049754824656893412306560805817802742681924133605763576793354021496162477698468324881351343197572676936470615715859310869643790970872141570430155532116367628518621441131685185125313795459093638064641548051232083603154474051701504737009788342596602353105180985204770535094538866629140169880272780173162206027114620429361381927857196593018539817489388773114228182390127344755421316735301525012487808540768675713711556906330761054578042004862871763341725455373903249072551785772218695022991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6144cb6b217b968a49beedd942ebd6f61a8aca93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tciserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tcifund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavext.tcifund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tciserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tcianalysts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.tcifund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smc.tciserv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b6109dce71e552514096a3d06fd8d401cc843f757f407ecc9bbcbd16b45d45e14ef96fb452e96aed99e367e076ab1196824bce73d9575f5014bf691611e3ec109fea95970b57032a9c08a4e10f8ffa104b15a77860079c58a74897f406b9a4483c40410d1afb83a44df66ba8009bd28991cbb910e7e20be432411a7d278b20a1c977e09e1f51997cd3c57a55b5460c19ce6cd9638c11c27aaaa6a369a959d1783dbe1a7999f9841914ea0d5afc15fa609321db3790560da0e4f29cc7c16606437ff3bf1d55295b86ac5cefd3ca42ee9486082c64f67eeed57dfa0f48d858e81cda428e3426b4bb56afe84bf1a8cc2192c83a1c1b7137a7090f8ad730eea4f138