*.managementcouncil.org

- Management Council of the Ohio Education Computer Network -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:3d:aa:39:cd:56:75:d2:93:37:cd:b6:0f:dc:5d:33 was issued on by DigiCert Inc.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Management Council of the Ohio Education Computer Network

Organization: Management Council of the Ohio Education Computer Network
State / Province: Ohio
Locality: Columbus
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:3d:aa:39:cd:56:75:d2:93:37:cd:b6:0f:dc:5d:33
Serial Number (int): 8295550672266954854968038556717309235
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e5:e5:c1:0b:33:9c:3f:64:fa:49:ed:6f:ae:81:95:37:d2:f4:4b:5a
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 60:33:17:f7:21:37:b4:28:57:46:ad:a3:59:1a:7c:f2:38:2f:57:f5
Fingerprint (sha256): 57:ee:ed:ad:b5:e5:74:ee:62:80:2e:ab:a1:98:6d:f3:2e:60:1e:30:a3:4e:9d:ad:2a:17:02:1f:fa:6d:63:bb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate *.managementcouncil.org

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.managementcouncil.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.managementcouncil.org
*.mcoecn.org
managementcouncil.org
mcoecn.org
mgcn-mcoecnad01.mcoecn.org
mgcn-mcoecnad01.managementcouncil.org
nsxt.mcoecn.org
nsxt1.mcoecn.org
nsxt2.mcoecn.org
nsxt3.mcoecn.org

Other certificates including the domain name managementcouncil.org

(limited to 100 certificates)
status.melodydns.com
irpstatus.streamlineit.ca
trust.ricardo.ch
irpstatus.streamlineit.ca
irpstatus.streamlineit.ca
irpstatus.streamlineit.ca
monitoring.sicktech.online
livetracker.one-box.co
overturstatus.allegion.com
irpstatus.streamlineit.ca
livetracker.one-box.co
status.uk.deptagency.com
*.managementcouncil.org
livetracker.one-box.co
status.savantx.io
*.managementcouncil.org
livetracker.one-box.co
monitor.yourcolo.com
irpstatus.streamlineit.ca
livetracker.one-box.co
status.managementcouncil.org
*.managementcouncil.org
livetracker.one-box.co
status.sclqld.org.au
livetracker.one-box.co
c5.ohio-k12.help
status.taggun.io
webstatus.engr.ucdavis.edu
irpstatus.streamlineit.ca
irpstatus.streamlineit.ca
livetracker.one-box.co
irpstatus.streamlineit.ca
partner-status.verify.interac-id.ca
status.fringesecure.com
livetracker.one-box.co
webstatus.engr.ucdavis.edu
livetracker.one-box.co
livetracker.one-box.co
status.madeinleander.com
livetracker.one-box.co
status.investisdigital.cloud
status.nettel.co.za
rim.vsupport.support
irpstatus.streamlineit.ca
*.managementcouncil.org
livetracker.one-box.co
livetracker.one-box.co
status.fringesecure.com
livetracker.one-box.co
livetracker.one-box.co
irpstatus.streamlineit.ca
livetracker.one-box.co
irpstatus.streamlineit.ca
status.managementcouncil.org
livetracker.one-box.co
status.medinsight.milliman.com
livetracker.one-box.co
webstatus.engr.ucdavis.edu
*.managementcouncil.org
webstatus.engr.ucdavis.edu
status.yapster.info
status.startlink.com.br
livetracker.one-box.co
livetracker.one-box.co
status.console.macrometa.io
livetracker.one-box.co
irpstatus.streamlineit.ca
xcellmon.cloudnanny.in
overturstatus.allegion.com
monitor.1902software.com
site24x7.elementsolutions.com
status.madeinleander.com
*.managementcouncil.org
status.simplyfind.com
status.metaserve.cloud
monitor.g7cr.in
livetracker.one-box.co
monitor.melsat.cl
*.managementcouncil.org
status.ahima.app
livetracker.one-box.co
status.docon.co.in
status.managementcouncil.org
livetracker.one-box.co
status.traliant.com
*.managementcouncil.org
*.managementcouncil.org
status.albania10.com.br
livetracker.one-box.co
c5.ohio-k12.help
*.managementcouncil.org
livetracker.one-box.co
irpstatus.streamlineit.ca
s247.vmox.com
livetracker.one-box.co
livetracker.one-box.co
status.import.io
livetracker.one-box.co
cibc.status.zcloudcentral.com
livetracker.one-box.co

Certificate

The complete raw certificate details for *.managementcouncil.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vp0iNy2A2K+B1srW4uS
YbMzKPGVq1SO1F1cLTnPBJDxgiMT1XiBhDb69rQSadNT2h6giOGK4x8ZlbmB3Eot
LzFZ1BONC4T+RFBUk9R5Be5y7EOQC80FWXW7/M/21bVlcRVUKTEt1ig13yJK2SoD
Y+bDTgPACkVZsFdaHWcW7pxc45V8ZAwbS/659lHxYKO9u/aUaZRXK8z0QSFKu3da
nppDKyXJXTbQYv76z/YB2yHHTPPnrAD5J7hT7LOhtSK1wXq+GmAF3pcjkCcijiFB
MRJFjtb27UKjS3Unc+ZIclfN0m9GdWfzlUlVjjRPRW8dOErec/HgU2BDEzG+ZL5Q
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8295550672266954854968038556717309235
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbus'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Management Council of the Ohio Education Computer Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.managementcouncil.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28148407771227930296131353086234511312278599622741878881756286301683589256312143576141971839073907007772190117691763176507782829154966303603148314422589355590213120175657793007209332512026455414042723179826696072985704135632798096940151044710168283194920975035315302038507132182352728415953510306109947812014815018811235035669303489934333309092858539555217704942822485748896321562291433008297401817834542899779268220723629672005044965496827605639654271223904069735443230870841575978833523515997002477023284578832825060967727144557316380947825039883238730280108497113298589086132273917400278079765359839755466457370673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5e5c10b339c3f64fa49ed6fae819537d2f44b5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.managementcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcoecn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managementcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcoecn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgcn-mcoecnad01.mcoecn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgcn-mcoecnad01.managementcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsxt.mcoecn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsxt1.mcoecn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsxt2.mcoecn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsxt3.mcoecn.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0028d9ccf2c8f9f11f17ef221bc23ea62a5ab35e29d9f894932cd3aea468d3599622e7d5c86a3351a3897c0306cd7e879493fa4ebc8dd198a9d74d5727dc63791ab383cbbbd6da4f0cb41a5d65d43256ac68486dec78d8150854997d0edd01701014edc0be755fba19022afe8428f98e73303308ab31b3e2e5c5f3b265f426714e1e4f4ae723a7230117511fc5b01327f715e3513c6488a68fcfcd28f80b8dce2afbc174309ca8bcf1bd5db5c6fa72a42f1dfe90e826bf274af5a951fc97d37c0256ecf4d6aa3f3f24821802ee38b41e94e0ad87eeeb68b4395beb16074dbda0275d23d044787bb59a9ed27ac3a4f7ef74fb29a08279b628b9773333e181bc691c