sinus-demo.pcss.pl

- Instytut Chemii Bioorganicznej Polskiej Akademii Nauk -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0c:a2:29:f6:34:90:ec:b6:80:da:aa:5f:a4:f3:8c:28 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Instytut Chemii Bioorganicznej Polskiej Akademii Nauk

Organization: Instytut Chemii Bioorganicznej Polskiej Akademii Nauk
Organization unit: Poznańskie Centrum Superkomputerowo-Sieciowe, DISU
Locality: Poznań
Country: PL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:a2:29:f6:34:90:ec:b6:80:da:aa:5f:a4:f3:8c:28
Serial Number (int): 16792739125691784451998804713611168808
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e5:eb:51:b0:d9:dd:5a:da:9f:b4:37:0f:79:ac:5d:c7:9f:be:76:a8
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 31:9f:52:54:f7:3a:62:77:64:5f:25:11:58:32:ee:5b:81:6f:98:fc
Fingerprint (sha256): 8a:60:32:a1:91:5c:06:8a:b1:57:58:fe:5b:0b:db:11:25:be:94:ad:0a:f2:e3:8c:f2:6b:6f:31:b4:2f:56:83

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate sinus-demo.pcss.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sinus-demo.pcss.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sinus-demo.pcss.pl
www.sinus-demo.pcss.pl

Other certificates including the domain name pcss.pl

(limited to 100 certificates)
nabor.pcss.pl
sinus-demo.pcss.pl
www.pcss.pl
beta.agrobank.pcss.pl
up2u.pcss.pl
swan.edulab.pcss.pl
wroclaw.informator.demo.test.nabor.pcss.pl
www.wlin.pl
nabor.pcss.pl
oswiata.pcss.pl
manus-demo.pcss.pl
kmd.pcss.pl
www.pogoda.man.poznan.pl
pay.psnc.pl
eddio.edulab.pcss.pl
piwik.man.poznan.pl
gitlab.pcss.pl
up2u.pcss.pl
chat.pcss.pl
piwik.man.poznan.pl
support.pcss.pl
nabor.pcss.pl
support.pcss.pl
www.pcss.pl
gitlab.pcss.pl
pogoda.man.poznan.pl
guzyslinianek.pcss.pl
chat.pcss.pl
nabor.pcss.pl
docs.psnc.pl
support.pcss.pl
swan.edulab.pcss.pl
mail.pcss.pl
*.test.nabor.pcss.pl
www.pcss.pl
tablica.pcss.pl
support.pcss.pl
nabor.pcss.pl
wlt.pcss.pl
mobizoo.pcss.pl
oswiata.pcss.pl
test.informator.test2.nabor.pcss.pl
iks-kbase.synat.pcss.pl
mbpl.dlibra.pcss.pl
wroclaw.informator.demo.test.nabor.pcss.pl
piwik.man.poznan.pl
bocian.pcss.pl
nabor.pcss.pl
szkolenia.operator.test2.nabor.pcss.pl
epodreczniki.pcss.pl
praca.pcss.pl
nabor.pcss.pl
cmwl.dlibra.pcss.pl
gitlab.pcss.pl
webesac.pcss.pl
epodreczniki.pcss.pl
openproject.pcss.pl
nabor.pcss.pl
nabor.pcss.pl
guzyslinianek.pcss.pl
*.test.nabor.pcss.pl
up2u.pcss.pl
www.pcss.pl
horyzontarium.pl
up2u.pcss.pl
eddio.edulab.pcss.pl
nabor.pcss.pl
sinus-demo.pcss.pl
guzyslinianek.pcss.pl
*.operator.test.nabor.pcss.pl
login.id.dev.pozid.pcss.pl
akademia-ai.pcss.pl
support.pcss.pl
nabor.pcss.pl
wlt-beta.synat.pcss.pl
koderjunior.pcss.pl
www.wlin.pl
kmd.pcss.pl
nabor.pcss.pl
www.pogoda.man.poznan.pl
wlt-website.synat.pcss.pl
wlt.pcss.pl
wlt.synat.pcss.pl
www.edulab.psnc.pl
guzyslinianek.pcss.pl
wlt-beta.synat.pcss.pl
www.pcss.pl
*.epodreczniki.pcss.pl
wroclaw.operator.demo.test.nabor.pcss.pl
szkolenia.informator.test2.nabor.pcss.pl
test.operator.test2.nabor.pcss.pl
mobizoo.pcss.pl
wlt.pcss.pl
oswiata.pcss.pl
eddio.edulab.pcss.pl
www.pogoda.man.poznan.pl
epodreczniki.pcss.pl
guzyslinianek.pcss.pl
ci.epodreczniki.pcss.pl
docs.psnc.pl

Certificate

The complete raw certificate details for sinus-demo.pcss.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16792739125691784451998804713611168808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Poznań'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Instytut Chemii Bioorganicznej Polskiej Akademii Nauk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Poznańskie Centrum Superkomputerowo-Sieciowe, DISU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sinus-demo.pcss.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678453487917705775703425444641024209938067677063264748284406327293281176685485869067948643322001606415468057836220177526466526132359537269940441161153648876598406815302781141104104885893335017071210429250961547609666738759372592163069326795872046821687276546309736508353678867696951472643406408232915468424425319739005166565613632890848227342726836937322591864607455008891228519999180558333260975716550792744542783384266864022470274886165085922023309431865646971834591315551601392917586427094741975553301201630550728796981391665597114245245836289001443929661621030175353074133893915137361272216383202686582919275304377764101429218944201987756518596571523315533593928035914130274018524010017970554365353595290604627351029197714215374511776186886130352401336479803315617656186819211705215429192284027518042163554361331436358237234918726107442524334843442504138596851679373614335184413229664738408188287774962282816593749443330783639855674471195155739674388110705379572884921279479659170341767083768275139039617701178924470803835811505794238068940995497370162065044021171745883948646451575963192281540614671034039307192858122501617741383465982585889028871437103222608771951357061646818539617917793791679877478482632374240698947554608351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5eb51b0d9dd5ada9fb4370f79ac5dc79fbe76a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinus-demo.pcss.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sinus-demo.pcss.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0007828752883a82c41c023d87fb4aef5eb9071b9aed6bcfbbf2eb4445bd4f1d6907ee3255f916076adca1cd3fc7be046796bef7c66e0860ac34c796cdcdb029e147bf3873c44e312923536cbd96ca0c97f6484c7c6afb5dd4fd46565ceb85437afee0d4e1621f1d524f1913c7461d614474468f77660cfb5c0ffb0cfa259d6699c709fcf7c72b9dfab1838dd127bd1928cdcdb31a82d3e32e15dd29e901b27a4fa48d89c8be683a702b5b5d5f2bf89796d8db7d89584b71d95b4647bf64d2cbd3f817b0bb70e4f6fc09aa0314fc76b512ae2e37a7f6ff3a1b83380dd1b0359b8fbbe39c435189f67770494b109e700b1618f952790213321f31a67cc355d72e20