time.ngtv.io

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:23:af:ff:55:6c:99:6b:f2:e7:b7:91:25:18:f5:29 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=time.ngtv.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:23:af:ff:55:6c:99:6b:f2:e7:b7:91:25:18:f5:29
Serial Number (int): 13477579999197472212476281142942168361
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d7:77:57:a6:1f:30:c7:dc:97:99:b2:6d:ed:44:43:bc:71:9f:80:24
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 39:ff:37:24:65:61:6a:e0:0a:d5:d4:d6:29:dc:b0:08:e3:11:40:a0
Fingerprint (sha256): 35:c5:df:a7:4c:36:cf:cc:6a:cc:cc:cd:5d:9b:a5:7c:ff:12:0d:14:3b:bc:c7:d6:2c:cc:a3:c8:ff:b0:fa:fe

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate time.ngtv.io

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for time.ngtv.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

time.ngtv.io
*.time.ngtv.io
*.ref.time.ngtv.io
*.ite.time.ngtv.io
*.dev.time.ngtv.io

Other certificates including the domain name ngtv.io

(limited to 100 certificates)
turner.com
sdc.turner.com
sdc.turner.com
www.turner.com
dev.turner.com
www.turner.com
sdc.turner.com
cnn.ngtv.io
turner.com
www.turner.com
turner.com
www.turner.com
turner.com
www.turner.com
dev.turner.com
geo.ngtv.io
sdc.turner.com
accio.ngtv.io
token.ngtv.io
turner.com
turner.com
dev.turner.com
iteblackout.ngtv.io
api.tvemanager.ngtv.io
freeview.ngtv.io
sdc.turner.com
ref.freeview.ngtv.io
freeview.ngtv.io
dev.turner.com
www.turner.com
httpstream.ngtv.io
cnn.ngtv.io
time.cnn.ngtv.io
www.turner.com
dev.turner.com
www.turner.com
token-admin.ngtv.io
refmedium.ngtv.io
turner.com
corsifier.ngtv.io
devnull.ngtv.io
geo.ngtv.io
turner.com
sdc.turner.com
medium.ngtv.io
blackout.ngtv.io
time.ten.ngtv.io
sdc.turner.com
logz.ngtv.io
turner.com
dev.turner.com
iris.filmstruck.ngtv.io
www.turner.com
httpstream.ngtv.io
utv.ngtv.io
www.turner.com
manifestparser.ngtv.io
sdc.turner.com
aspen.ngtv.io
www.turner.com
dev.turner.com
turner.com
ite.library.ngtv.io
www.turner.com
sdc.turner.com
synapse.ngtv.io
www.turner.com
ite.token.ngtv.io
medium.ngtv.io
www.turner.com
time.cnn.ngtv.io
sdc.turner.com
timber.ngtv.io
ref.medium.ngtv.io
www.turner.com
turner.com
www.turner.com
sdc.turner.com
www.turner.com
turner.com
token.ngtv.io
geo.ngtv.io
sdc.turner.com
time.ngtv.io
dev.turner.com
sdc.turner.com
aspen.ngtv.io
blackout.ngtv.io
turner.com
time.ngtv.io
www.turner.com
*.synapse.ngtv.io
itetime.ten.ngtv.io
www.turner.com
token.ngtv.io
blackout.ngtv.io
onprem.admin.token.ngtv.io
ara.ngtv.io
*.tvemanager.ngtv.io
turner.com

Certificate

The complete raw certificate details for time.ngtv.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIQCiOv/1VsmWvy57eRJRj1KTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA5MDgwMDAwMDBaFw0yMDEwMDgx
MjAwMDBaMBcxFTATBgNVBAMTDHRpbWUubmd0di5pbzCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAMgCMCOfhC2beM/FkBWbyamjd1hlLja9JW6giVjMLzjb
q8YSf06xH1cUbljh1oRs4N1uNfHc2biDQar53bkREpP5ZTFCIA6/mzjoR3caCM46
K7qmlQl6boQaB5KHy5atpakSfI9pCCjmYERxb2Q32ss1Zr5MAly2Yrsxi1mJUcnK
zdwKwcBjRUtTSPyltWlIgUcYaax1FX1OiCF3LoB8EO3L0e0OnXW8JZTyept8/wDJ
u9uA9S/+Bo+027Z+wQBCUhHr7QHdaZYbPziJNNJphydbPOimVflXhiysfCEa/hJz
kXkR4RRzjeULQZs82gSKoSuJX2QMg+d/wxYWWLchQb0CAwEAAaOCAsQwggLAMB8G
A1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBTXd1emHzDH
3JeZsm3tREO8cZ+AJDBjBgNVHREEXDBaggx0aW1lLm5ndHYuaW+CDioudGltZS5u
Z3R2LmlvghIqLnJlZi50aW1lLm5ndHYuaW+CEiouaXRlLnRpbWUubmd0di5pb4IS
Ki5kZXYudGltZS5uZ3R2LmlvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5z
Y2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZI
AYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0
dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0
cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB
/wQCMAAwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgC72d+8H4pxtZOUI5eqkntH
OFeVCqtS6BqQlmQ2jh7RhQAAAW0TJD+4AAAEAwBHMEUCIFVJHlo22PRJRXPFF/qD
F1qUx32IczouMJxzGEBSveGTAiEA3Qq/0AqI9w7kBi1TsfDOmUAKF1cITmgveA5v
cvIjeCMAdgCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAW0TJEAi
AAAEAwBHMEUCIAQZNB89kYR6Wel3ucgMqtVznjwnGsh592IOQeeaLuY6AiEA4kyo
t34gUpR5UfcIKnLoy8C6LpaVhuJTUO2Y0sXELkcwDQYJKoZIhvcNAQELBQADggEB
AH3Dl+UFB/jiX2BGXOcqyGvrpVlM1WKdQpkMy4nnUVRAXzjxXyXhu+wfNaFRQWni
PGOxD5PFXCRWUPdnpQl+voFSmL9hUhP+1dBQhvElqf1SP5+GBvfweidXUsXwFqqB
iPAIvyVDkIFcWHyNYQtU1ZUwUXIb8rdQl2AhVA3ZrGNdopxoKdOWM2gtgxoQlA5W
aNzJXm9O9mQ6g6Rnu7NbFG9r7M9mOEbqlDbmKT+w5c1Kr+ZDEo/CL+LMpIcNZASq
7X7Q3wmcHQf/IiJRUYtmACoEBVoMBOua8Sd4Zm9yfZD63RZZ/zLrsjrJt6O3dbRk
4t85nu+Vu95wYTFIGLg6Py4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAIwI5+ELZt4z8WQFZvJ
qaN3WGUuNr0lbqCJWMwvONurxhJ/TrEfVxRuWOHWhGzg3W418dzZuINBqvnduRES
k/llMUIgDr+bOOhHdxoIzjoruqaVCXpuhBoHkofLlq2lqRJ8j2kIKOZgRHFvZDfa
yzVmvkwCXLZiuzGLWYlRycrN3ArBwGNFS1NI/KW1aUiBRxhprHUVfU6IIXcugHwQ
7cvR7Q6ddbwllPJ6m3z/AMm724D1L/4Gj7Tbtn7BAEJSEevtAd1plhs/OIk00mmH
J1s86KZV+VeGLKx8IRr+EnOReRHhFHON5QtBmzzaBIqhK4lfZAyD53/DFhZYtyFB
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13477579999197472212476281142942168361
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'time.ngtv.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25248739957707445169944245268362550938814385677689064485497093377600981702036207040836802993361644163398234383980604246074742154482870684226775953395255207740331999674956895765070122882383408788213776166832192330047130143420728345077477048076182147398613793636167271520256256944500880992631904251044865300406255293286531836237611023484054631476878105859161062695380355759216947811621651636567021786573594323626805439351872697116112118101814678272446530792074509835704979528645314480862517929406436058546106692857515745077099811462801022259606231239910429715477862912267428064689421176354152579173695672315817140240829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d77757a61f30c7dc9799b26ded4443bc719f8024
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.time.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ref.time.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ite.time.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.time.ngtv.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016d13243fb80000040300473045022055491e5a36d8f4494573c517fa83175a94c77d88733a2e309c73184052bde193022100dd0abfd00a88f70ee4062d53b1f0ce99400a1757084e682f780e6f72f22378230076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016d13244022000004030047304502200419341f3d91847a59e977b9c80caad5739e3c271ac879f7620e41e79a2ee63a022100e24ca8b77e2052947951f7082a72e8cbc0ba2e969586e25350ed98d2c5c42e47
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007dc397e50507f8e25f60465ce72ac86beba5594cd5629d42990ccb89e75154405f38f15f25e1bbec1f35a1514169e23c63b10f93c55c245650f767a5097ebe815298bf615213fed5d05086f125a9fd523f9f8606f7f07a275752c5f016aa8188f008bf254390815c587c8d610b54d5953051721bf2b750976021540dd9ac635da29c6829d39633682d831a10940e5668dcc95e6f4ef6643a83a467bbb35b146f6beccf663846ea9436e6293fb0e5cd4aafe643128fc22fe2cca4870d6404aaed7ed0df099c1d07ff222251518b66002a04055a0c04eb9af12778666f727d90fadd1659ff32ebb23ac9b7a3b775b464e2df399eef95bbde7061314818b83a3f2e