www.fitpregnancy.com

- Meredith Corporation -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 03:d8:b8:05:75:d0:80:85:29:33:e0:60:60:69:75:32 was issued on by DigiCert Inc.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Meredith Corporation

Organization: Meredith Corporation
State / Province: Iowa
Locality: Des Moines
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d8:b8:05:75:d0:80:85:29:33:e0:60:60:69:75:32
Serial Number (int): 5112952504767964504026650960911234354
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 56:d0:59:de:2a:2a:05:05:e6:c8:6c:e3:f1:47:ab:e6:e6:46:9d:59
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): ec:72:ec:ed:aa:15:ee:d8:01:31:20:ba:f5:7d:4b:f0:82:a9:47:50
Fingerprint (sha256): 50:b5:78:ec:35:84:c0:58:88:38:2c:e9:09:46:08:94:99:f1:d8:94:e6:cf:c9:87:97:d1:ba:2d:b6:29:a8:2c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g1.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g1.crl

Check the revocation status for certificate www.fitpregnancy.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fitpregnancy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fitpregnancy.com
fitpregnancy.com
www.poshcoloringstudio.com
poshcoloringstudio.com
poshcoloringstudio.mdpcdn.com
www.fitnessmagazine.com
fitnessmagazine.com
fitpregnancy.mdpcdn.com
fitnessmagazine.mdpcdn.com
shape.mdpcdn.com

Other certificates including the domain name fitpregnancy.com

(limited to 100 certificates)
qa4.ugc.marthastewart.com
*.secure.meredith.com
secure.meredith.com
my.meredith.com
qa4.ugc.marthastewart.com
fitpregnancy.com
*.agriculture.com
dev.fitpregnancy.com
dev.secure.meredith.com
secure.meredith.com
dev.fitpregnancy.com
mywedding.com
secure.meredith.com
mywedding.com
login.fitpregnancy.com
qa2.ugc.marthastewart.com
mdp.api.meredith.com
secure.meredith.com
fitpregnancy.com
admin.web.fitpregnancy.com
qa4.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com

dev.fitpregnancy.com
secure.meredith.com
qa3.ugc.marthastewart.com
ugc.marthastewart.com
test.secure.meredith.com
www.fitpregnancy.com
qa3.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com
*.secure.meredith.com
origin-dev.fitpregnancy.com
secure.meredith.com
fitpregnancy.com
qa3.ugc.marthastewart.com
origin-www.fitpregnancy.com
api.meredith.com
ugc.marthastewart.com
qa2.ugc.marthastewart.com
*.secure.meredith.com
origin-www.fitpregnancy.com
secure.meredith.com
fitpregnancy.com
ugc.marthastewart.com
my.meredith.com
qa3.ugc.marthastewart.com
my.woodmagazine.com
secure.meredith.com
qa3.ugc.marthastewart.com
www.fitpregnancy.com
secure.meredith.com
mywedding.com
*.agriculture.com
dev.fitpregnancy.com
qa2.ugc.marthastewart.com
qa2.ugc.marthastewart.com
*.secure.meredith.com
my.woodmagazine.com
ugc.marthastewart.com
qa3.ugc.marthastewart.com
secure.meredith.com
qa3.ugc.marthastewart.com
www.fitpregnancy.com
qa2.ugc.marthastewart.com
qa4.ugc.marthastewart.com
qa4.ugc.marthastewart.com
origin-www.fitpregnancy.com
my.meredith.com
*.secure.meredith.com
www.fitpregnancy.com
*.secure.meredith.com
www.fitpregnancy.com
secure.meredith.com
dev.secure.meredith.com
dev.my.meredith.com
my.woodmagazine.com
dev.fitpregnancy.com
qa3.ugc.marthastewart.com
qa4.ugc.marthastewart.com
secure.meredith.com
secure.meredith.com
qa2.ugc.marthastewart.com
ugc.marthastewart.com
qa2.ugc.marthastewart.com
test.secure.meredith.com
my.woodmagazine.com
*.secure.meredith.com
qa2.ugc.marthastewart.com
ugc.marthastewart.com
fitpregnancy.com
mywedding.com
*.secure.meredith.com
qa3.ugc.marthastewart.com
mywedding.com
origin-www.fitpregnancy.com
qa2.ugc.marthastewart.com
*.secure.meredith.com

Certificate

The complete raw certificate details for www.fitpregnancy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28zBqauRuYKmni/CY4Bh
X4qjSEDXQ+KMcklzbgKtz2vUNtMBm1H5rfId8kn06OlTQ0Y17HmvWnFPK2AUBt4P
YoXqJXQrSOrvAIiyN87iNfDux0DmcTggxq+/kwhOpU7DW64CjKmnl1faEOcu+2PP
LNwDtc6572x+d5RjDm2S1IbLq6Dn1jSOLOQXdqTD8Ut5Kdk7ksa8mrmCWqfXtZn0
1eTXdk3FQQWedSHCjj9mkWG3HsqEhQT2t/JBrUuQhL3+67QK7m0YY21Dh3hNLgmh
fSqg00MIs+AnPz4MjcMUQ5PxpB6oMNGjlTBEI14VO1ZlL7CGmJv0PYLuQOk+4SPG
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5112952504767964504026650960911234354
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Des Moines'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Meredith Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fitpregnancy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27747157978528997450733797078674643157494327981528125613353211487008001518082378822801305326024271008353096101182255909605382703231340251912479680742673762555921970747936532825031928328265627841907011264844190876487208787984031622893927708593955530789548658973209773352006468019359144747421158738006164691932285769743515282775588529163598116381128968762986654329911673966136970978023345687057527019435515934214776642434647379560176372434285494412538040699380511873610297109512276890534998707144101625090623404524017453218843340194710994123929592712243924393535767564940307627218030104559824487705217222305317340300953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56d059de2a2a0505e6c86ce3f147abe6e6469d59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fitpregnancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitpregnancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poshcoloringstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poshcoloringstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poshcoloringstudio.mdpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fitnessmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnessmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitpregnancy.mdpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnessmagazine.mdpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shape.mdpcdn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009caccfb9ccaa8ea2d44893ae9086905d611cff415095c56a0a7856153a6823339fbe4bb92817838d4b2a4f9ecb10d3ce9d645629ec0d0f0f83f9e957d192474398adf3458fc5884e0db3c87dc963a2c82603fc9e1e54d8630e8fb09166b9c54acddd4588635c42ba1f26aa1d14b4f899fab077a9183b78f33912509167e11d72690ff51c2fadeef9b11e7d5369195234c31bf8243c51d3fd712afb79e3ca7f34d13805397a160c19a8435db1f70659d88048a621faa69ce8623f10480c2e3ec95718a21b9c895672c331c823c5cb7a144aa2251f2b9ba20cdf29583dcf0258becdcd954059324c27bd20a3ef2790970cc95e67c34f9b0b9e6477ba0e21723eac