CNSHAVMZRAMAPP.eydmz.net

- Ernst & Young Nederland LLP -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 49:f5:e9:45:30:58:48:5f:d3:c2:9a:6a:c6:f4:34:df was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ernst & Young Nederland LLP

Organization: Ernst & Young Nederland LLP
State / Province: Georgia
Locality: Alpharetta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 49:f5:e9:45:30:58:48:5f:d3:c2:9a:6a:c6:f4:34:df
Serial Number (int): 98310487705782763536052993219112482015
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: a8:ab:a2:c8:13:85:d6:c5:12:85:01:d4:3d:19:44:f4:53:b7:bb:d1
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 1a:34:d8:aa:1a:07:d9:d6:d0:37:1c:c3:cf:7e:5d:b2:94:f9:5d:65
Fingerprint (sha256): 44:2c:9b:28:ac:6e:8f:8b:05:22:26:dc:8d:f1:19:5b:81:14:ec:42:09:3b:fe:96:b2:b0:3c:aa:36:c7:15:58

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate CNSHAVMZRAMAPP.eydmz.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for CNSHAVMZRAMAPP.eydmz.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

CNSHAVMZRAMAPP.eydmz.net

Other certificates including the domain name eydmz.net

(limited to 100 certificates)
de01.eydmz.net
INHYDVMZCXSF001.eydmz.net
RelativityIdentityCertificate.eydmz.net
DERUSBMZTDMSQ91.eydmz.net
spotfire-hk.ey.com
cesa22.tpweb.ey.com
de41.ey.com
spotfire-sg.ey.com
ca.az.exportapi-eyi.ey.com
lan-yum-cn.ey.com
emeia6.tpweb.ey.com
tms-104.ey.com
eyengage-reports.eydmz.net
spdscproddmz.eydmz.net
DEFRNCMPTDMSQ01.eydmz.net
DEFRNCMZSQCE101.eydmz.net
eycanvasdoc-kz.eydmz.net
au29.ey.com
INHYDCMZNISQ001.eydmz.net
JPTOKVMPRSAMGR1.EYDMZ.NET
us6.tpweb.ey.com
cac12.tpweb.ey.com
us29.eydmz.net
smartdrafting.eydmz.net
singapore1.tpweb.ey.com
eycanvas-kr.ey.com
ait-990app.eydmz.net
tms-108.ey.com
SGSINCMZRELSQ02.eydmz.net
ampf.idaas.eydmz.net
tms-101.ey.com
DERUSBMZTDMSQ04.eydmz.net
aiopsprdemeia-data.eydmz.net
tms-106.ey.com
emeia6.tpweb.ey.com
cac13.tpweb.ey.com
SGSINCMZRNISQ01.eydmz.net
us3.tpweb.ey.com
tcg.ey.com
invoke-ext.ey.com
eycanvasdoc-az.eydmz.net
eycanvasapp-ca.eydmz.net
identity.VWHosting.eydmz.net
bmd.ey.com
pfic.ey.com
publish.tasdxportal.ey.com
eycanvas-au.ey.com
cnhonvmprsamgr2.eydmz.net
bmdmobile.ey.com
view.tasdxportalx.eydmz.net
eycanvas-th.ey.com
us.sts.ey.com
CNSHARMZLAWSQ01.eydmz.net
eygocs-prod.ey.com
USPILVMZSQCE031.eydmz.net
eycanvasclientportal-hk.ey.com.cn
gobt.ey.com
USSECBMZTDMSQ03.eydmz.net
cac20.tpweb.ey.com
us.api-tcp.eydmz.net
cn29.ey.com.cn
tce.ey.com
SGSINVLZOCRPX02.eydmz.net
paygenreports-new.eydmz.net
eycanvasclientportal-hk.ey.com.cn
CNSHAVMZRELWRK1.eydmz.net
de118ca.eydmz.net
picart-ext.ey.com
cn29.ey.com
eycanvas-ca.ey.com
DEFRNCMZGPPC01.EYDMZ.NET
CNSHAVMZRELAP02.eydmz.net
SGSINBMCSQZE201.eydmz.net
USSECBMZSQCE210.EYDMZ.NET
ereview-in-dataload02.eydmz.net
INHYDVMZRELTS04.eydmz.net
eycanvasdoc-kr.eydmz.net
gobi.ey.com
emeia5.tpweb.ey.com
gobtadmin.ey.com
eymaxx.eydmz.net
DEFRACMZEYSSQ02.eydmz.net
us41ca.eydmz.net
tms-100.ey.com
eycanvasdoc-jp.eydmz.net
defrnvmzspsq02.eydmz.net
cesa18.tpweb.ey.com
de.sts2.ey.com
eygocs-temp.ey.com
eycanvas-cn.ey.com
salarisweb.ey.com
DEFRNGMZINPSQ01.eydmz.net
derum-de41cav.eydmz.net
CNSHACMZRELSQ03.eydmz.net
CNSHAVMZRELAGT2.eydmz.net
ipt.ey.com
inheritancetax.eydmz.net
salarisweb-ext.ey.com
INHYDVMZCXISQ02.eydmz.net
SGSINVMZRELAGT5.eydmz.net

Certificate

The complete raw certificate details for CNSHAVMZRAMAPP.eydmz.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJKzOYwKUroxFmaiiRTt
ZAZIjATN8qWjrkJGaHockmMdMUexcYnSugszifA5UgjLATM7hDpAaxUuXghDp2dV
7xg8NrLO+ww06zjkeCy0xo/OT9clIpOPh61al4jbyyr+pQ9QYXOIEf4pAsub1CZN
egox47ehsn2/xSnwAjNSJxPMhMOqAJcayfSKOqa5uaz9oU4VJSNE4iaeGPidGUyK
YpECRbXNBbE6EHqUUmNCqTfcUly1Y3gYVLX5AMcEUK6+8WGteCUoG3eyw2fHhbP9
YOt7YcbS9D88tJa4SsJg2/Y4LAb8VHsb74GVPN1ObAUVhPwFDdFhKUJ7iMPSrZaH
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 98310487705782763536052993219112482015
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-17 05:00:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 05:00:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alpharetta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ernst & Young Nederland LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CNSHAVMZRAMAPP.eydmz.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22795235407814192610069550221058565905753401417571535698854249513784709577574113970887673891080073141970062124120012681519139285050033089173768553821772179292596240459361954415720263252985040083025027980531610379332070794703133394124566187355306336729619610771054397686497697262946709326614812109430302336700004190047686109054382267128350322370673278191147606463513350052677130071572491436901616713382447773142842558565316337877830269533093451055541972018019994303762145118558985977441471888103185626185912278925973178565221797577188969594384818760497596840926725366894758708709494633596194779459803706648214979905313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8aba2c81385d6c5128501d43d1944f453b7bbd1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CNSHAVMZRAMAPP.eydmz.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00d9818817fbccaa6861792a3adfe8b0a5947f40e217c81fe00c827bcb32cf9f2174d5d64ee4132207bda5192edb0b70f31959bb045890a0e7984c615a60721d6176b35433197f2a279bb585aefb89f0e8ffba72572374eb78318c73c04ea8b8792891bf507cde78b639137c7c80643534700c6fe02257c916d1979d8fd4f82c0dd8eb1f1dca2dd9367909cc3044ad7b5e190fa81b895c64192aa23f460e1b8c422c1759c119a48bf414d312048a611ecba114e9b590fac3c5a996e6390ca7f1687933e51598d165769b9450f14cc38cf73a73e28cd58b10bb775223ba6fa95b39842298adb3e32af52f837a61ac97bd8172ef9680e1ab7cec2c3ebe15c1020f44