ess.mhi.ca

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 37:29:04:bf:e4:e1:cb:7f:1c:c0:4a:0b:2a:b0:5c:b2 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=ess.mhi.ca

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 37:29:04:bf:e4:e1:cb:7f:1c:c0:4a:0b:2a:b0:5c:b2
Serial Number (int): 73320520272423307307533539193878764722
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): 82:72:a8:ea:67:67:94:5e:32:80:77:8d:ce:d6:74:c9:c4:c8:f2:d1
Fingerprint (sha256): 51:cc:83:cb:52:b4:62:71:f6:38:a5:8c:b4:be:15:27:40:e3:40:06:d4:7c:8b:7a:e8:c3:00:e4:b0:01:b3:86

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate ess.mhi.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ess.mhi.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ess.mhi.ca

Other certificates including the domain name mhi.ca

(limited to 100 certificates)
ftps.mhi.ca
mhi.ca
inportal.mhi.ca
mhi.ca
mhi.ca
vpn.mhi.ca
mhi.ca
time.mhi.ca
mhi.ca
vpn.mhi.ca
mhi.ca
mhi.ca
mhi.ca
ess.mhi.ca
spam.mhi.ca
ess.mhi.ca
mhi.ca
ess.mhi.ca
spam.mhi.ca
vpn.mhi.ca
mhi.ca
portal.mhi.ca
mhi.ca
mhi.ca
portal.mhi.ca
spam.mhi.ca
hrms.mhi.ca
ftps.mhi.ca
inportal.mhi.ca
ess.mhi.ca
mhi.ca
mhi.ca
mhi.ca
spam.mhi.ca
vpn.mhi.ca
spam.mhi.ca
*.mhi.ca
training.mhi.ca
hvdc.ca
hvdc.ca
hrms.mhi.ca
vpn.mhi.ca
*.mhi.ca
mhi.ca
spam.mhi.ca
ftps.mhi.ca
mhi.ca
mhi.ca
mhi.ca
spam.mhi.ca
hrms.mhi.ca
mhi.ca
mhi.ca
mhi.ca
mhi.ca
training.mhi.ca
hrms.mhi.ca
vpn.mhi.ca
mhi.ca
mhi.ca
portal.mhi.ca
mhi.ca
mhi.ca
time.mhi.ca
mhi.ca
mhi.ca

Certificate

The complete raw certificate details for ess.mhi.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGmzCCBYOgAwIBAgIQNykEv+Thy38cwEoLKrBcsjANBgkqhkiG9w0BAQsFADBm
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UECxMU
RG9tYWluIFZhbGlkYXRlZCBTU0wxIDAeBgNVBAMTF0dlb1RydXN0IERWIFNTTCBD
QSAtIEczMB4XDTE2MTIyMjAwMDAwMFoXDTE5MTIyMjIzNTk1OVowFTETMBEGA1UE
AwwKZXNzLm1oaS5jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKhP
p8jgU7EHJ/37TZtVXwnaWWj+mV7J50VVKTTnTeh8u/77aGwWIVPv4c2td+GIt9l/
0j8V+d6ECgEOVUI8CFj08FKNV7aakqtV1QJfs9Fi7TG8oSbrmHpOVPCtLFsT8P/S
OD8JYWKf1Z0qaZrCuwlTZzUBQoNQLaazJ1LNtygyYPJ7p7gy8O1mpkkWydBwmd68
KLMm6Ypx1844bis0x/u9cMEc1FNSTUiRVIjijCI+gfmr2TD/qBsL/h+GkBJJQuDa
dlptjYbK0wINrdp3SJHths1YUTlGzU5PwILANMvyoLvwbQQ7iOQ/Rpc8li+f//kq
oJ1PpdVphYwAJxLCpHkCAwEAAaOCA5QwggOQMBUGA1UdEQQOMAyCCmVzcy5taGku
Y2EwCQYDVR0TBAIwADArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ3Quc3ltY2Iu
Y29tL2d0LmNybDCBnQYDVR0gBIGVMIGSMIGPBgZngQwBAgEwgYQwPwYIKwYBBQUH
AgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9y
eS9sZWdhbDBBBggrBgEFBQcCAjA1DDNodHRwczovL3d3dy5nZW90cnVzdC5jb20v
cmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwHwYDVR0jBBgwFoAUrWUihZDQO+Oh
SYs3+fELHV8XoHcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9n
dC5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9ndC5zeW1jYi5jb20vZ3Qu
Y3J0MIIB9AYKKwYBBAHWeQIEAgSCAeQEggHgAd4AdgDd6x0reg1PpiCLga2BaHB+
Lo6dAdVciI09EcTNtuy+zAAAAVknihD3AAAEAwBHMEUCIQDgqRn42W1KZsAaxTPh
2g1tGuoZmvu2M/JK5rLx3v1H7wIgXk+Z5orQF2FOku1eeLhDYW4iDtv3xMkpltds
fq+95nwAdQDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAVknihFF
AAAEAwBGMEQCIAR5SgueI6pXxHJEdESSRpk5NczQk428MvzIc5CwGs7gAiB5fxV9
CQ81S5ADKdS3RoRlaSFzFWotA2wxn2ILQ+N/1wB1ALx44d/F9jxoRkkzTaEPoV8J
eWkgCcCBtPP2kX8+2bilAAABWSeKEfIAAAQDAEYwRAIgNLq/ySwYt0tFUuZW+3/C
H9GUKFdLQPS3/8ZaXMA0qZcCIGDWHG/kr+YBSFwHb0jTnDYIHh0D4Tb/uVYuKav0
2bJHAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFZJ4oRHQAA
BAMARzBFAiBE85kAevvMNevr1n2WTuAZBDSYNsSudfRGdy1PthkMVQIhAKZ+SvRX
xcy7z8QRc2C7XNaot8r+TEvYx42mCLvcfHjVMA0GCSqGSIb3DQEBCwUAA4IBAQBL
EQ+JraZLT3QQlypeTu4kb8QVKiwu2IB74GHwxYFPIfYL25yxWyR5rfEtW163QMDI
X5/ciwLl9i5NhNemSjXcWi/OlBVOH4hDDM/7/Z+qUSeIyPp3KRxN5yucnMk6Ky/H
5vAi3FdzNC16KuBQcE++zGYHO/Tv3nJVuVVExcczRrcrOIe3NQ9xd2dxyLrbiEdg
KmiJmrGYwAd0EbQsrb7TGHXVLhtv+mFbgaADCKcLgzLO0EYqBXjhvVBqKWWm66o9
eTV6Ya4IS8fMhzBfGVojVnQAThniNJ2SyoIFoqLf9rJ1TZA50JBesATXUfYVCT7L
VRceKO4vYH6OIH/TTSbT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE+nyOBTsQcn/ftNm1Vf
CdpZaP6ZXsnnRVUpNOdN6Hy7/vtobBYhU+/hza134Yi32X/SPxX53oQKAQ5VQjwI
WPTwUo1XtpqSq1XVAl+z0WLtMbyhJuuYek5U8K0sWxPw/9I4PwlhYp/VnSppmsK7
CVNnNQFCg1AtprMnUs23KDJg8nunuDLw7WamSRbJ0HCZ3rwosybpinHXzjhuKzTH
+71wwRzUU1JNSJFUiOKMIj6B+avZMP+oGwv+H4aQEklC4Np2Wm2NhsrTAg2t2ndI
ke2GzVhROUbNTk/AgsA0y/Kgu/BtBDuI5D9GlzyWL5//+SqgnU+l1WmFjAAnEsKk
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73320520272423307307533539193878764722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ess.mhi.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21247314780384685776694474218072855358299705878651854086721659706667618279612764497616376498299518953396290816029362807186611811377423567574920239867665603447598779190279797970029772628741987711165926625605063900107731857323698678472327920673467170767295634143942992220475526221763527545461763771576253408204643703701200785615184478643668137340707185255064740179241054157444121239634060798862823447202577664623686444053349842029509228183602210727182142771513217055580827348514982863974943861866107137653774025097316755768636579783214421719076700664187561367636225696253172849553800353564086922181955162179495977460857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ess.mhi.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004b110f89ada64b4f7410972a5e4eee246fc4152a2c2ed8807be061f0c5814f21f60bdb9cb15b2479adf12d5b5eb740c0c85f9fdc8b02e5f62e4d84d7a64a35dc5a2fce94154e1f88430ccffbfd9faa512788c8fa77291c4de72b9c9cc93a2b2fc7e6f022dc5773342d7a2ae050704fbecc66073bf4efde7255b95544c5c73346b72b3887b7350f71776771c8badb8847602a68899ab198c0077411b42cadbed31875d52e1b6ffa615b81a00308a70b8332ced0462a0578e1bd506a2965a6ebaa3d79357a61ae084bc7cc87305f195a235674004e19e2349d92ca8205a2a2dff6b2754d9039d0905eb004d751f615093ecb55171e28ee2f607e8e207fd34d26d3