mainos.sanoma.fi

Issued by Amazon

About this certificate

This digital certificate with serial number 04:58:f6:5f:a4:bb:a0:95:82:9e:05:78:c8:f3:06:ad was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mainos.sanoma.fi

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:58:f6:5f:a4:bb:a0:95:82:9e:05:78:c8:f3:06:ad
Serial Number (int): 5778831157111034564544893668652418733
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4f:71:f8:6d:ff:a2:a1:5a:93:2e:a0:00:be:83:55:28:04:ff:d9:06
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f8:d1:d1:cd:0a:aa:ea:61:9a:90:1d:ca:eb:fc:b9:4d:f5:46:46:ee
Fingerprint (sha256): 45:fb:a3:ab:5a:10:c2:e9:0c:fe:34:92:1b:eb:96:f4:c6:8e:f8:fd:99:9a:04:e1:2f:34:f4:1f:78:d5:59:0c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate mainos.sanoma.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mainos.sanoma.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mainos.sanoma.fi
*.mainos.sanoma.fi

Other certificates including the domain name sanoma.fi

(limited to 100 certificates)
*.mainos.sanoma.fi
oma.sanoma.fi
papi.sanoma.fi
digilehdet.ap.richiefi.net
receiver.sanoma.fi
ratasdev.sanoma.fi
digilehdet.ap.richiefi.net
media.sanoma.prod.wunder.io
media.sanoma.fi
ratas.sanoma.fi
*.sanoma.fi
www2.media.sanoma.fi
ussr.sanoma.fi
analytics.sanoma.fi
artifactory.sanoma.fi
amonas.10kysymysta.fi
*.sanoma.fi
www2.media.sanoma.fi
www2.media.sanoma.fi
mainos.sanoma.fi
mobimail.sanoma.fi
media.sanoma.fi
mainos.sanoma.fi
*.sanoma.fi
*.sanoma.fi
sanoma.fi
*.mainos.sanoma.fi
*.sanoma.fi
sposti.sanoma.fi
ratas.sanoma.fi
sanoma.fi
digilehdet.ap.richiefi.net
digilehdet.sanomapaino.fi
ratasdev.sanoma.fi
sat.sanoma.fi
*.sanoma.fi
*.sanoma.fi
sanoma.fi
*.sanoma.fi
ussr.sanoma.fi
moderointi.sanoma.fi
digilehdet.ap.richiefi.net
artifactory.sanoma.fi
media.sanoma.fi
*.sanoma.fi
*.sanoma.fi
ratasdev.sanoma.fi
ratasdev.sanoma.fi
*.sanoma.fi
ussr-admin.sanoma.fi
tili.sanoma.fi
sat.sanoma.fi
mainos.sanoma.fi
media.sanoma.fi
ratas.sanoma.fi
*.sanoma.fi
tili.sanoma.fi
markkinoijalle.media.sanoma.fi
*.sanoma.fi
mainos.sanoma.fi
*.sanoma.fi
www.tilaa-staging.sanoma.fi
digilehdet-tutkimus.ap.richiefi.net
*.sanoma.fi
digilehdet-tutkimus.ap.richiefi.net
*.sanoma.fi
kauppa.etlehti.fi
*.sanoma.fi
ratas.sanoma.fi
sat.sanoma.fi
*.sanoma.fi
sanoma.fi
artifactory.sanoma.fi
www2.media.sanoma.fi
myprofile.sanoma.fi
digilehdet.ap.richiefi.net
digilehdet.ap.richiefi.net
dco-rtb.sanoma.fi
ilmoitusaineisto.sanoma.fi
*.sanoma.fi
sov.sanoma.fi
*.mainos.sanoma.fi
ratas.sanoma.fi
tili.sanoma.fi
mainos.sanoma.fi
media.sanoma.prod.wunder.io
media.sanoma.prod.wunder.io
mainos.sanoma.fi
sst.sanoma.fi
digilehdet.sanomapaino.fi
media.sanoma.fi
mainos.sanoma.fi
ratas.sanoma.fi
oma.sanoma.fi
sposti.sanoma.fi
static.arkku.datadesk.hs.fi
www2.media.sanoma.fi
analytics.sanoma.fi
digilehdet.sanomapaino.fi
oma.sanoma.fi

Certificate

The complete raw certificate details for mainos.sanoma.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIQBFj2X6S7oJWCngV4yPMGrTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA0MzAwMDAwMDBaFw0xOTA1MzAx
MjAwMDBaMBsxGTAXBgNVBAMTEG1haW5vcy5zYW5vbWEuZmkwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDZx+PjTCWkoa4Q8vxunJIDM2/YQBhHxBVuDQeR
Mv6RF5suG4DfelFeAXkOJQx28RG1OUddvymGwE7P97wgOVqKOlp1stmTW8ZKk5XG
1Wz9SNqWnRTJMc+G8aNujJr4xiEkRRLN5qr17cnNj566I6j2vZO8h4ywW+eoemlH
R4DCcuFrKA3ntkOtcHge7rV+H/IaZGKCdK32d9R/iVZWJt5qVJ90ntQrnhPIuq10
m/IuCcHNYGpLabVEbSsqv+0x0ONzVuD8fuJtAUK8XmubL2Obq1f7DpcYVTj1c60f
PO3YFHA+5V4BONxfHBnLXMlEtjsnAjoNotZPDjXh/rgGDizNAgMBAAGjggKPMIIC
izAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUT3H4
bf+ioVqTLqAAvoNVKAT/2QYwLwYDVR0RBCgwJoIQbWFpbm9zLnNhbm9tYS5maYIS
Ki5tYWlub3Muc2Fub21hLmZpMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5z
Y2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZI
AYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0
dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0
cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB
/wQCMAAwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQCkuQmQtBhYFIe7E6LMZ3AK
PDWYBPkb37jjd80OyA3cEAAAAWMVmV+BAAAEAwBGMEQCIG2sBDHfNe5Xrv5tMymN
ZywUP6BjpWhB9JpanPtVt9IbAiB8Ndj9oUA8YnJj8IrZeGZHLwXqV0L4LQnnbS8l
q9tI0gB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABYxWZYGoA
AAQDAEcwRQIgDVSwWkuOqnaySLNZnvQVF4Ijj+mM1ofyNXu81Py0NLkCIQDl++Ht
lZipwR2eev6Hdrm5+ExWJbd4NlsSggDID05ZPzANBgkqhkiG9w0BAQsFAAOCAQEA
uXorE5tZdbVsJzOx7LdP3nqxnXV3lOekCxJIRBA2jbDduocIT6cEujJ+knuuAi33
ZRIlPn8hltjzWCNUZ93gqBksPbiaLfgIYa+KUCH5X2+r1I6L6QmWfUQhnZlh+owP
YSXj86tv1ruhtrjt4Kqm36xMUgF+Nk/jsaB3I+S5H9s0Lh+UbATZjSXxiGlB5UvI
6vI2pAUhsXZ8EPUf53EZRjL5Kc9kjtw2Ul8DHpnRn5CYdiLFqQXNNCA+HXIICQUj
HAy8SKINL0fV83Ouu2ntavX2gAk+V0amrYPtz6UMK9XrvF8CCvFzjpxTrZqn7Zeq
hLwgN5xQJGNjqRlvUUTiiw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cfj40wlpKGuEPL8bpyS
AzNv2EAYR8QVbg0HkTL+kRebLhuA33pRXgF5DiUMdvERtTlHXb8phsBOz/e8IDla
ijpadbLZk1vGSpOVxtVs/Ujalp0UyTHPhvGjboya+MYhJEUSzeaq9e3JzY+euiOo
9r2TvIeMsFvnqHppR0eAwnLhaygN57ZDrXB4Hu61fh/yGmRignSt9nfUf4lWVibe
alSfdJ7UK54TyLqtdJvyLgnBzWBqS2m1RG0rKr/tMdDjc1bg/H7ibQFCvF5rmy9j
m6tX+w6XGFU49XOtHzzt2BRwPuVeATjcXxwZy1zJRLY7JwI6DaLWTw414f64Bg4s
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5778831157111034564544893668652418733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mainos.sanoma.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27492281702597610548859046735086218338224354490243478561588676330153488134780516220722427761346170125908956970360973711631553736161694933189658365493608037041728622993079070086800929499760011443682478477005603997439310214220584432177388416257902510548828003333578925772095376525604176402670093530348490579909971781229748461272891305239590363158874642032917128699471637187477532467867963923424334325510003544290176118510793332057709749157517313383070008450196941456363242663838773768652871370127195953360600296108945083595794206867376394279578840118329345208781245251691548373153887894629279219538034877483882281577677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f71f86dffa2a15a932ea000be83552804ffd906
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainos.sanoma.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mainos.sanoma.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016315995f81000004030046304402206dac0431df35ee57aefe6d33298d672c143fa063a56841f49a5a9cfb55b7d21b02207c35d8fda1403c627263f08ad97866472f05ea5742f82d09e76d2f25abdb48d20076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001631599606a000004030047304502200d54b05a4b8eaa76b248b3599ef4151782238fe98cd687f2357bbcd4fcb434b9022100e5fbe1ed9598a9c11d9e7afe8776b9b9f84c5625b778365b128200c80f4e593f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b97a2b139b5975b56c2733b1ecb74fde7ab19d757794e7a40b12484410368db0ddba87084fa704ba327e927bae022df76512253e7f2196d8f358235467dde0a8192c3db89a2df80861af8a5021f95f6fabd48e8be909967d44219d9961fa8c0f6125e3f3ab6fd6bba1b6b8ede0aaa6dfac4c52017e364fe3b1a07723e4b91fdb342e1f946c04d98d25f1886941e54bc8eaf236a40521b1767c10f51fe771194632f929cf648edc36525f031e99d19f90987622c5a905cd34203e1d72080905231c0cbc48a20d2f47d5f373aebb69ed6af5f680093e5746a6ad83edcfa50c2bd5ebbc5f020af1738e9c53ad9aa7ed97aa84bc20379c50246363a9196f5144e28b