*.api.figureone.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 07:fb:47:ad:61:70:a3:4b:21:1c:32:42:05:6d:85:3b was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.api.figureone.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:fb:47:ad:61:70:a3:4b:21:1c:32:42:05:6d:85:3bSerial Number (int): 10609316269696843857513968514538243387
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 55:bf:ae:ed:d9:53:7d:29:82:7c:50:a0:94:56:d6:64:59:77:2e:10
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): b3:46:8e:4e:7b:9d:18:6f:b9:ec:9e:bb:85:32:b9:bb:2f:42:b9:2d
Fingerprint (sha256): 70:43:19:78:28:06:73:83:b5:98:25:56:1b:44:22:47:1a:8f:f4:f1:0b:30:fe:c5:c9:98:67:d6:b1:05:f4:16
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate *.api.figureone.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.api.figureone.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.api.figureone.com
api.figureone.com
api.figureone.com
Other certificates including the domain name figureone.com
(limited to 100 certificates)
appstatus.figureone.com
*.api.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
*.api.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
*.api.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.api.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.api.figureone.com
*.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.api.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
*.api.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
*.api.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.api.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.api.figureone.com
*.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
*.figureone.com
*.figureone.com
appstatus.figureone.com
appstatus.figureone.com
appstatus.figureone.com
Certificate
The complete raw certificate details for *.api.figureone.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEeDCCA2CgAwIBAgIQB/tHrWFwo0shHDJCBW2FOzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDUyNTAwMDAwMFoXDTI0MDYyMjIzNTk1OVowHjEc MBoGA1UEAwwTKi5hcGkuZmlndXJlb25lLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMndt3YPLDd6/TjKgsWeAH7mc4DzBWlqQnzRkCCjy1Px2Pse IwfMJC3kWH8OyMbSJur3P46mgY6fMlPSllC4vk3cZ4Pls15j3RqB82HyPXW4r1Du E2kyP7u0fuwBtEktstXwNOkNezdJJN7Pbxwh2d4Kq9zSYJ9ij1IhpSzRABOOIOW3 pIYZFREornuzeQ3+H5qmFkPkLhQc3ogJSs7FCumA0PR+F4t+zs7s5p2K3TIFUYE3 J9o+VmFhJdK30H2Ibd1Geo10ZK6zkvZ2YTLHBTeV63dRc7th2I30dBSOapthVHth BzL1xy6gawdpK7+mnc3Tf8kOghXyFsgbuBPBJQMCAwEAAaOCAZIwggGOMB8GA1Ud IwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBRVv67t2VN9KYJ8 UKCUVtZkWXcuEDAxBgNVHREEKjAoghMqLmFwaS5maWd1cmVvbmUuY29tghFhcGku ZmlndXJlb25lLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDEu YW1hem9udHJ1c3QuY29tL3IybTAxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1 BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAxLmFt YXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMS5hbWF6 b250cnVzdC5jb20vcjJtMDEuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIE AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAIbfpRp40sndWE59Bk931bt1mbTi +M758oiqF6DsJ3ItfgkruKzKMLNsV8kofHKy9lH9RCUeNGuopbrTLwL8Q191ty2u eYi8hXEk6K/FtRf6m4JFsOgMHFMzqEJxMncOBhKl9ywaxTbfFzxvikMkeTIZQ/Vh OFbWujBh6xIL48C60LRCmMFAh8TtpdVY/BC2Yc8DsFRqRCV8K5byUJ8OW//dfJKq T2RFiSy8wfSg2Rt0juhmka/IjiZUjByCPlYiW8tPXwGVoTbq2TAgP9GQcjBHObZz NEUs4y5xKjAiJovfG3f7Ft3wfEkiXk9oK0DYQRajVf34yx5Q3u6CqJ6spYM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd23dg8sN3r9OMqCxZ4A fuZzgPMFaWpCfNGQIKPLU/HY+x4jB8wkLeRYfw7IxtIm6vc/jqaBjp8yU9KWULi+ Tdxng+WzXmPdGoHzYfI9dbivUO4TaTI/u7R+7AG0SS2y1fA06Q17N0kk3s9vHCHZ 3gqr3NJgn2KPUiGlLNEAE44g5bekhhkVESiue7N5Df4fmqYWQ+QuFBzeiAlKzsUK 6YDQ9H4Xi37OzuzmnYrdMgVRgTcn2j5WYWEl0rfQfYht3UZ6jXRkrrOS9nZhMscF N5Xrd1Fzu2HYjfR0FI5qm2FUe2EHMvXHLqBrB2krv6adzdN/yQ6CFfIWyBu4E8El AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10609316269696843857513968514538243387 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-22 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.api.figureone.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25483231850801739000318820536349466366619031312948424607048380482881129556353632626732452348037360242512758744004676262441051199357559437834658531302857143731968606555083087168482192944900673525952097484691738445830445485605718420803389532749932685039718116480927967062271517518714880770626060117498427012323955338941851852938792474356887527586748159839726229600896060720918909187505689207102910935104971372103124573773867379163276001451396569638617090348852720777232173278597191561085808284979969239401514280976757928211025058307145614520588776775215667407622951409364642335437595515929197131690611918917140773676291 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 55bfaeedd9537d29827c50a09456d66459772e10 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.figureone.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.figureone.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0086dfa51a78d2c9dd584e7d064f77d5bb7599b4e2f8cef9f288aa17a0ec27722d7e092bb8acca30b36c57c9287c72b2f651fd44251e346ba8a5bad32f02fc435f75b72dae7988bc857124e8afc5b517fa9b8245b0e80c1c5333a8427132770e0612a5f72c1ac536df173c6f8a432479321943f5613856d6ba3061eb120be3c0bad0b44298c14087c4eda5d558fc10b661cf03b0546a44257c2b96f2509f0e5bffdd7c92aa4f6445892cbcc1f4a0d91b748ee86691afc88e26548c1c823e56225bcb4f5f0195a136ead930203fd19072304739b67334452ce32e712a3022268bdf1b77fb16ddf07c49225e4f682b40d84116a355fdf8cb1e50deee82a89eaca583