www.doris.at

- Land Oberösterreich -

Issued by TERENA SSL High Assurance CA 3

About this certificate

This digital certificate with serial number 05:8a:e0:07:ba:b2:e7:8e:f2:46:26:a0:df:16:04:78 was issued on by TERENA.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Land Oberösterreich

Company registration number: Government Entity
Organization: Land Oberösterreich
Organization unit: DORIS
Locality: Linz
Country: AT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 05:8a:e0:07:ba:b2:e7:8e:f2:46:26:a0:df:16:04:78
Serial Number (int): 7367220817531235277496042742565176440
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 02:3e:4e:5c:68:5c:65:aa:b2:45:5c:45:0b:88:75:dc:4d:a2:13:9f
AuthorityKeyId: c2:b8:85:d7:e1:b9:13:bd:d1:48:bc:fd:5e:dc:7d:90:42:7a:8a:a9

Fingerprint (sha1): a0:05:f1:da:5e:89:cb:b6:a5:2b:63:0e:99:7c:80:fa:0e:9d:26:de
Fingerprint (sha256): 5a:ee:d8:a0:aa:5d:20:5d:63:c8:74:f1:95:ea:e3:ea:f3:d4:c7:51:4a:d1:a0:d5:95:c1:3a:a9:09:39:18:c6

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl

Check the revocation status for certificate www.doris.at

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.doris.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.doris.at
doris.at
doris.ooe.gv.at
m.doris.at
maps.doris.at
srvc1.doris.at
srvc2.doris.at

Other certificates including the domain name doris.at

(limited to 100 certificates)
lxli01-150.ooe.gv.at
test.doris.at
www.gp.doris.at
lxli01-150.ooe.gv.at
www.doris.at
lxli01-150.ooe.gv.at
lxli01-150.ooe.gv.at
lxli01-150.ooe.gv.at
internet085.ooe.gv.at
www.doris.at
agsstage.doris.at
internet085.ooe.gv.at
www.doris.at
agsstage.doris.at
lxli01-022.ooe.gv.at
lxli01-150.ooe.gv.at
www.doris.at
lxli01-150.ooe.gv.at
lxli01-150.ooe.gv.at
agsstage.doris.at
www.doris.at
lxli01-150.ooe.gv.at
metadaten.doris.at
internet085.ooe.gv.at
www.doris.at
lxli01-150.ooe.gv.at
www.doris.at
test.doris.at
metadaten.doris.at
agsstage.doris.at
internet085.ooe.gv.at
test.doris.at
internet085.ooe.gv.at
lxli01-150.ooe.gv.at
www.doris.at
internet085.ooe.gv.at
test.doris.at

Certificate

The complete raw certificate details for www.doris.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmVxYjvUKgnzOzo7NCLJ
TN+ol3lMSwG5hUdses/qlGYASQOMiR5raMiPeBAdxdqMTHfU5DDRll793KlGI2UM
GpPtbcpBvTLSrw/iNkpNHdktsj7ZTvtPAFlc5SOO5lGVbK7Jn/U2MMm7d303TkG1
Dhdb7KNqo6D4isRygfiXnYNjYzdtIyP7Q12m5vEozuXQzv4ziQ706NdwYg+Ppt+v
ub1cjL4zZ3pvuZgbRv2y/TZ+t6CMReevtImRAsuZxArjH3b4/G00U90zN8GzSodH
jv0cBYrfxZ1jn4IUFLww7gD0WlzZ4PVmteKjXYuwE2yBbmlswZgE5N1Q0sH+bsH8
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7367220817531235277496042742565176440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL High Assurance CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Linz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Land Oberösterreich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DORIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.doris.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24035301304490308743211396023632528460171814963737545432516648662288643711456328135085634224211799619699882396633344614061367469471532542574551000815020120454254869114299422337010809752557937907828332624988184644597807154537106050040852648616335242374040716103065736891669363786075515899466679175779413983415233845413011915411755881423522912234775086238510839270089051040428715246355296704397679708995982226841548877365435634011126495592693965861168422188813597755239798844467389909441833813122943562459988821143218337961643595373153895143081772908445660531515474643712454433844922352067651295528470786660612320656471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c2b885d7e1b913bdd148bcfd5edc7d90427a8aa9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							023e4e5c685c65aab2455c450b8875dc4da2139f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doris.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doris.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doris.ooe.gv.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.doris.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.doris.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srvc1.doris.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srvc2.doris.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0059d98f247a0cfedbeddafcae5062a6e810e48fcbf7cae9700315adc461d334f0bcd6b8bed3c9c6675cf72df6eabab722307449fa187c2bb02b6a4dcea8d946b88fc9f8756094ac642acf43c7834e6416a0bdd286a0cc4c155c64ecceb633d0f5964ee1ce042a4c291b3f9d7830a40a27d3c5a12adb6e4e5a574c1279c4d63ffa0d53db101331f7cd0e4354525f37ea03ed7850319fce23111e13b93b83281f104e06c7b10a77bcc60ecf862e7caf7efc5befcb40fe6ce612d6f3f5043ab87def4b770bd63b28b8d028d6b742504dfae7b78f049b9d64309aaadb250c7c97d9a991962408d09d2e23dee73761e878c5dd52097a4cf363308a559b82328a9eaf8a