datosabiertos.funcionpublica.gob.mx

- Secretaria De La Funcion Publica -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number 49:7e:97:cf:f4:0a:fa:84:00:00:00:00:58:08:6f:01 was issued on by AffirmTrust.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Secretaria De La Funcion Publica

Organization: Secretaria De La Funcion Publica
State / Province: Ciudad De Mexico
Locality: Ciudad De Mexico
Country: MX

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): 49:7e:97:cf:f4:0a:fa:84:00:00:00:00:58:08:6f:01
Serial Number (int): 97690952216081653539319934039523618561
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 58:d8:77:37:0c:ee:03:1d:42:ca:e3:ac:a0:a6:f3:fd:1b:61:93:9b
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): 8c:cb:e6:c4:81:2e:f1:b4:71:c4:e1:a8:f0:f6:02:53:62:86:38:47
Fingerprint (sha256): 5b:ec:58:e6:5e:b7:0d:1f:97:f1:b7:11:85:ba:ad:d1:9d:cf:34:20:2b:25:a4:ec:bb:83:18:19:dc:eb:c7:b5

Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl

Check the revocation status for certificate datosabiertos.funcionpublica.gob.mx

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for datosabiertos.funcionpublica.gob.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

datosabiertos.funcionpublica.gob.mx

Other certificates including the domain name funcionpublica.gob.mx

(limited to 100 certificates)
alertadorescontralacorrupcion.funcionpublica.gob.mx
le-507.dkla8s.funcionpublica.gob.mx
www01.funcionpublica.gob.mx
le-166.k8s.funcionpublica.gob.mx
le-166.apps.funcionpublica.gob.mx
controlinterno.funcionpublica.gob.mx
le-430.apps.funcionpublica.gob.mx
compranet.funcionpublica.gob.mx
storage.apps.funcionpublica.gob.mx
funcionpublica.gob.mx
le-232.k8s.funcionpublica.gob.mx
siac.funcionpublica.gob.mx
aga-gobierno-abierto.k8s.funcionpublica.gob.mx
sipmg.funcionpublica.gob.mx
genero.funcionpublica.gob.mx
cnet.funcionpublica.gob.mx
*.funcionpublica.gob.mx
le-358.dkla8s.funcionpublica.gob.mx
le-213.k8s.funcionpublica.gob.mx
sidec.funcionpublica.gob.mx
compras.funcionpublica.gob.mx
le-253.k8s.funcionpublica.gob.mx
le-322.k8s.funcionpublica.gob.mx
ssecoe.funcionpublica.gob.mx
alertadorescontralacorrupcion.funcionpublica.gob.mx
le-322.k8s.funcionpublica.gob.mx
cdn.k8s.funcionpublica.gob.mx
storage.apps.funcionpublica.gob.mx
storage.apps.funcionpublica.gob.mx
le-725.apps.funcionpublica.gob.mx
funcionpublica.gob.mx
le-325.k8s.funcionpublica.gob.mx
funcionpublica.gob.mx
le-299.k8s.funcionpublica.gob.mx
directoriosancionados.funcionpublica.gob.mx
siac.funcionpublica.gob.mx
le-166.apps.funcionpublica.gob.mx
convenciones.funcionpublica.gob.mx
declaranet.gob.mx
le-70.200.34.175.120.nip.io
le-213.k8s.funcionpublica.gob.mx
capacita.funcionpublica.gob.mx
le.k8s.funcionpublica.gob.mx
sideof.funcionpublica.gob.mx
correo.funcionpublica.gob.mx
compranet-test.funcionpublica.gob.mx
onboarding.capacitacion.apps.funcionpublica.gob.mx
capacita.funcionpublica.gob.mx
le-322.k8s.funcionpublica.gob.mx
compranet.funcionpublica.gob.mx
sidec.funcionpublica.gob.mx
le-70.200.34.175.120.nip.io
manifiesto.funcionpublica.gob.mx
le-1304.k8s.funcionpublica.gob.mx
compranet.funcionpublica.gob.mx
alertadores.funcionpublica.gob.mx
le-495.k8s.funcionpublica.gob.mx
le-1304.k8s.funcionpublica.gob.mx
le-322.k8s.funcionpublica.gob.mx
dns1.funcionpublica.gob.mx
siippg.funcionpublica.gob.mx
le-228.k8s.funcionpublica.gob.mx
sideof.funcionpublica.gob.mx
gitlab.funcionpublica.gob.mx
sonar.apps.funcionpublica.gob.mx
manifiesto.funcionpublica.gob.mx
le.k8s.funcionpublica.gob.mx
le-449.k8s.funcionpublica.gob.mx
le.k8s.funcionpublica.gob.mx
sfp-sharepoint.funcionpublica.gob.mx
le.k8s.funcionpublica.gob.mx
le-253.k8s.funcionpublica.gob.mx
servicios.apps.funcionpublica.gob.mx
le-36.200.34.175.120.nip.io
siippg.funcionpublica.gob.mx
cnet.funcionpublica.gob.mx
le-325.k8s.funcionpublica.gob.mx
funcionpublica.gob.mx
le-549.k8s.funcionpublica.gob.mx
capacita.funcionpublica.gob.mx
datosabiertos.funcionpublica.gob.mx
le-495.k8s.funcionpublica.gob.mx
siippg.funcionpublica.gob.mx
le-238.k8s.funcionpublica.gob.mx
storage.apps.funcionpublica.gob.mx
le-358.dkla8s.funcionpublica.gob.mx
le-299.k8s.funcionpublica.gob.mx
le-70.200.34.175.120.nip.io
siac.funcionpublica.gob.mx
cdn.k8s.funcionpublica.gob.mx
*.funcionpublica.gob.mx
le-400.k8s.funcionpublica.gob.mx
funcionpublica.gob.mx
sfpbpm01.funcionpublica.gob.mx
*.funcionpublica.gob.mx
sideof.funcionpublica.gob.mx
apps.funcionpublica.gob.mx
sira.funcionpublica.gob.mx
sfpwfbi.funcionpublica.gob.mx
sipmg.funcionpublica.gob.mx

Certificate

The complete raw certificate details for datosabiertos.funcionpublica.gob.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM6krEy2bGXZuwjs4bX+
S/CVVQo5zMKjbi/3ruxS8YIhlntEEULzAjXO1MULNVGN5WrEYDkdpmwbap+qRmRt
mut6Y7cgqlE4W/mRqA9/MYr3ItGAHdpCSpNaU0V/BkT3CMZYfA9kjHznV2nIcTSi
K1PttobIp7HFKajVg/AuEQeetviiZzSVfhkPcMZQLki4mi1S7sm/olbOTjfoNryE
b0dfe3dJ5N7TlEu0fsAY2ZjmbHOOjnmF7uJ9ambLpjFhyOdSPweSXyE7JCb3lRKY
puQJGzPq6hUqUjKav/Z6CHEXv88hyTnFmqxRrjaLF0El39Rbp/vQuNTQjfoGxGfJ
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 97690952216081653539319934039523618561
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-18 20:03:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-18 20:33:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ciudad De Mexico'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ciudad De Mexico'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secretaria De La Funcion Publica'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'datosabiertos.funcionpublica.gob.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23329747700193275172157682744426320215757651208997517803298088216517124523605475992894707257901475491308900049682774379166889715810740354698942078636769535754978932337955829874268096009647014969208563630555710364433412536249071919777503192512822129155991980754520039445471822099723003722695770595902801071803391389191583508333699213699135469871501045833164527447384956060087264285140484316014878219155430415679602097331665152238570122449907745453523865703902027914383967367253537377900841295512761123516794422156267862478922725628994585925639826015802288654179450997946056354495946562335414785929661011634838965832169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datosabiertos.funcionpublica.gob.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58d877370cee031d42cae3aca0a6f3fd1b61939b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0057a850669db7d15e3702438b953826b575c4bfce203419bdfd609d5219fbfeb42699e82ca89ae39783523f20a5a9fc968cef0f6c21c990689514a46be757aec8e3e85ffe226cad628bbb34469dc121bf2968ff91fb4b2fe37113ae7e413ee5d9215675fb59c6aa102856bda9d0ba7878a144983fdfff1d89b8fb552683d1c016edeeaefd0f8fa4373e5962dc373097147850f832c9e8aed49adcbde6f19e697fdd6586eac77fb15b6716f7f5cbb2bab3ac8ceebf810285dcd90e509015e71f07b18507497c9f91dbaba9499fa9825403923518ee161b0bbf40c513ad222e9a5519b86d5ff68a31dc33c685536304d9733cef7b93c3356a37e80b598d7e3aa8db