prod.opservices.hmhs.com

- HM Health Solutions -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number ac:12:91:9f:79:dd:ab:d2:00:00:00:00:50:f4:d5:03 was issued on by Entrust, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HM Health Solutions

Organization: HM Health Solutions
State / Province: Pennsylvania
Locality: Pittsburgh
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ac:12:91:9f:79:dd:ab:d2:00:00:00:00:50:f4:d5:03
Serial Number (int): 228723630202845196490011925580073981187
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 4e:aa:20:fd:4f:a4:2a:f1:b5:60:a1:ab:fa:e2:50:97:e0:bb:52:1b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): af:79:21:b3:7a:ca:72:3f:cb:91:4c:ec:ef:cd:78:50:de:60:f5:1a
Fingerprint (sha256): 46:7c:29:1a:8e:0b:5f:88:f3:15:70:21:15:ac:08:d0:0c:d7:1f:d4:a8:19:e2:5e:c4:6f:14:4e:7c:8d:d4:b8

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate prod.opservices.hmhs.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.opservices.hmhs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod.opservices.hmhs.com
jcs-penv.opservices.hmhs.com
soa-penv.opservices.hmhs.com
jcsftp-penv.opservices.hmhs.com
dg-penv.opservices.hmhs.com

Other certificates including the domain name hmhs.com

(limited to 100 certificates)
apiwebqa.hmhs.com
apiqa.hmhs.com
m-chemical.deepscholar.app
static.hmhs.com
apiportal.hmhs.com
statictest.hmhs.com
mbrcdn.hmhs.com
csportalutilities.hmhs.com
apianmqa-secured.hmhs.com
client.hmhs.com
partnerstest.hmhs.com
oauth.hmhs.com
api.hmhs.com
www.hmhealthsolutions.com
status.hmhs.com
cmsoauth.hmhs.com
jcs-tenv3.opservices.hmhs.com
mrfdata.hmhs.com
mftpwdreset.hmhs.com
www.hmhealthsolutions.com
myehsportal.hmhs.com
syncp-test.hmhs.com
ghptest.hmhs.com
apiweb.hmhs.com
myehsportaltenv2.hmhs.com
hmbrdsfp09.highmark.com
mft-test.hmhs.com
www.meinnovations.in
syncp-test.hmhs.com
apiportalqa.hmhs.com
ftp.highmark.com
apianmqa.hmhs.com
api.hmhs.com
myehsportalcontenttenv3.hmhs.com
hms-uat.hmhs.com
apiint.hmhs.com
test.status.hmhs.com
mft.hmhs.com
prod.opservices.hmhs.com
entrustapi.hmhs.com
csportalutilities.hmhs.com
hms-pve.hmhs.com
syncp-dev.hmhs.com
hhotest.hmhs.com
service.hmhs.com
mail.highmark.com
hho.hmhs.com
myehsportalcontent.hmhs.com
partners.hmhs.com
hhotest.hmhs.com
hho.hmhs.com
ghp.hmhs.com
syncp-dev.hmhs.com
service.hmhs.com
myehsportal.hmhs.com
mftpwdreset-test.hmhs.com
lyncwebextBR.hmhs.com
apimgrqa.hmhs.com
apiqa.hmhs.com
ftp.highmark.com
owa.hmhs.com
mrfdata.hmhs.com
dev.cdn.hmhs.com
wvfhtest.hmhs.com
myehsportaltenv3.hmhs.com
mail.hmhs.com
www.hmhealthsolutions.com
apimgr.hmhs.com
static.hmhs.com
apiintqa.hmhs.com
mrfdata.hmhs.com
ghptest.hmhs.com
owa.hmhs.com
myehsportal.hmhs.com
www.hmhealthsolutions.com
mail.hmhs.com
status.hmhs.com
owa.hmhs.com
syncp.hmhs.com
lyncaccess1.hmhs.com
apiportalqa-secured.hmhs.com
cmsoauthqa.hmhs.com
cmsapiportal.hmhs.com
oauthqa.hmhs.com
lyncwebextBR.hmhs.com
apiint.hmhs.com
client.hmhs.com
client.hmhs.com
sni.cloudflaressl.com
dev.cdn.hmhs.com
wvfh.hmhs.com
fedsvc4.hmhs.com
myehsportaltenvb.hmhs.com
wvfh.hmhs.com
static.hmhs.com
apiweb.hmhs.com
statictest.hmhs.com
static.hmhs.com
static.hmhs.com
ftp.highmark.com

Certificate

The complete raw certificate details for prod.opservices.hmhs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bg6qpn9Ljh0qk7h3eyu
mCX+/CJRkKl0mh6oo6jW/C3dG/YyBdDlGC74GZLS5PAKxjOZirG5dD01Fd3ay748
OnJc6hfHwFbQbzBeuZYEBSXT7arlM1lR2XcGKZZBePJu8Ctd1xiRxf7JpHffX6yf
Al91/lxgLnBHQrqhgtEAGA4268VueZQcQUnk74AOE9STnYMmGEf/WZhNytPgkhjg
wYdxXSJBAWCc4SWy3LIqo8IWuyYFYFkQ4a3xkARWt4N2xaYYSKKWsAYIgS/rvR+v
oHPukYUGorA+Hh1iBb3uJwqJeOmDZnkLrB0P4O40QR6lZqwfrfMIMz4hRek56hB0
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 228723630202845196490011925580073981187
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 12:39:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-23 13:09:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HM Health Solutions'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.opservices.hmhs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27989512184998252981500146573451767122530571781742026300711129631520052924464946850341325802206980397145388799161422696858465052643402271417519363236542419067969780295376359404952354347425750152320976153096544785225413670322376451639205158605519528800601928303211104146282253890711155780603899489797375596149591789299895992150822604813439248259003183007379012932662861810939562921564811689747164583950669879400580049423416511910341739878895305500627472447688630274135404047943483558507901301693047497417895004363013509755343904125876448330767103763708359941244722607303184655919291386645190613511278571777918541788237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.opservices.hmhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcs-penv.opservices.hmhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soa-penv.opservices.hmhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcsftp-penv.opservices.hmhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dg-penv.opservices.hmhs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4eaa20fd4fa42af1b560a1abfae25097e0bb521b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008fdd20ee1865d0580a6c6996559cca05d748eb5d5921254a0d8388967df25471870c5d81ffda30f14dbe64b787668908f98b774378a8a7dcaea36e68cdb0d2bf8dd9b5e08026bb306516f03a911e8bf5de306ea49580024cf548bde4eba75cdccba7983aa78302cee605fb14e8fff372719fc0b64b1e1e6089225af49e42a9fef22f2ae76bd517978388aec1e404aa4d8aa898902bc4175e900f24e64b7949cfa5ca67be8e74e518c51a80ef59aacd0722826052c2463fd0989fc952f2ebbccc0bea3e58027f385e7b33ca7be2ea4277e8f60d03787f8601d352197541aff2f26fda50aff190ac2aee327f951731c66246307f946b1a5816656677fe3eed7a54