pensioners.epo.org

- European Patent Office -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 1c:69:49:11:c8:13:62:54:28:0c:f2:08 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

European Patent Office

Company registration number: International Organisation
Organization: European Patent Office
Address: Bob-van-Benthem-Platz 1
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:69:49:11:c8:13:62:54:28:0c:f2:08
Serial Number (int): 8792862546822071670532796936
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 8f:6f:bb:3a:19:a9:e9:85:23:fe:66:8c:e8:8e:bd:94:c1:34:48:a4
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): 0d:59:b7:03:73:1b:60:ad:cb:df:20:a0:68:65:2d:8f:02:24:d1:c3
Fingerprint (sha256): 8a:f4:27:42:12:f2:e2:b2:5f:c7:9d:a0:40:7d:19:1d:1d:03:52:a5:99:50:a7:15:db:38:d8:af:60:18:90:d8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl

Check the revocation status for certificate pensioners.epo.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pensioners.epo.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pensioners.epo.org

Other certificates including the domain name epo.org

(limited to 100 certificates)
register.epo.org
hybrisapp-i.internal.epo.org
umprest-p.internal.epo.org
vhepop02ci.hec.epo.org
pthw-mn.epo.org
advanced-search-services.internal.epo.org
register.epo.org
gvw209.internal.epo.org
epomail.rsrc1.epo.org
vault-d.internal.epo.org
wmail02.epo.org
data.epo.org
ci.internal.epo.org
elk-p.internal.epo.org
ops-o.epo.org
besba01.rsrc1.epo.org
tools.epo.org
gvw049.dev1.test.epo.org
containerhub.internal.epo.org
ops.epo.org
umprest.epo.org
wcm.cooperativepatentclassification-d.internal.epo.org
gvw633.dev1.test.epo.org
nationaloffices.epo.org
GVW295.RSRC1.EPO.ORG
documents.epo.org
sapprodwd1.internal.epo.org
mvcsc01.internal.epo.org
gvmail03.epo.org
besba01.rsrc1.epo.org
register.epo.org
*.nautilus.internal.epo.org
translationportal-o.epo.org
sapprodcs1.internal.epo.org
mnw084.rsrc1.epo.org
tas-d.internal.epo.org
register-no-apigee.epo.org
gshahmp03.internal.epo.org
MNW352.dev3.test.epo.org
epo-appsentry.epo.org
webserv.epo.org
VDI.INTERNAL.EPO.ORG
GVW1119.INTERNAL.EPO.ORG
gvw438.dev3.test.epo.org
fileaccess.internal.epo.org
nationaloffices-o.epo.org
gshahmp02.internal.epo.org
blog.epo.org
gspstn01.rsrc1.epo.org
jira-o.internal.epo.org
remote.epo.org
ops.epo.org
hpa-mn.internal.epo.org
opd.epo.org
developers.epo.org
gvw697.rsrc1.epo.org
register-o.epo.org
vhepot02ci.hec.epo.org
data.epo.org
hybrisdh-d.internal.epo.org
mnw286.rsrc1.epo.org
register.epo.org
MIMDEV.DEV1.TEST.EPO.ORG
GVW1119.internal.epo.org
tcloudex.test.epo.org
infoclient-i-new.internal.epo.org
pensioners.epo.org
GVW1043.dev3.test.epo.org
haithhd01.internal.epo.org
medxfer.internal.epo.org
api-i.register.epo.org
cvc.epo.org
api.register.epo.org
register-i-no-apigee.epo.org
epoextsa.epo.org
fs1.sts.epo.org
bi4you-int.internal.epo.org
translationgateway.epo.org
admintools.internal.epo.org
*.register.epo.org
gvw566.dmz.epo.org
vhepoh02ci.hec.epo.org
translationportal-o.epo.org
haimnhd01.internal.epo.org
tools.epo.org
forms.epo.org
wcm.trilateral.internal.epo.org
epogateway-o.internal.epo.org
activesynct.epo.org
test.epo.org
saptrain.internal.epo.org
register-i.epo.org
ops-i.epo.org
gvw629.dev1.test.epo.org
mnw231.dmz.epo.org
forms.epo.org
translationportal-i.epo.org
vhepop02ci.hec.epo.org
pensioners-p.epo.org
gvw699.internal.epo.org

Certificate

The complete raw certificate details for pensioners.epo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLDC7/cal+3CbfniaX7b
ZnbCw8DV09BfCYRImu5LTKmk2gc/kkjUAuPBtbT5lUKyCktQM3Cfxq95EXhNywXr
0M1K6pKrtYB7f5q9/x4ZZYmZshEGWWbi4xQjrUIZY/XvZ52k+ae+rGkyL6BKtfjh
b2e7bwbLe1U3j3hq0+vhzsEZVlHrmCV5ROtxa98sTX9dpqWXnFEoswcgeZ0JpzNJ
YKgbGdxI/45wMbcKtqYbPlpibEY+maFmteWhUv9ogZsk28BYx8DdQII5cq9Y8Ian
mKeR98TLVNxg9MYfHRuc5AkqB+L3CJzu8YmeqD5HYJ09aVujb/cRGZfv8b7FhTBb
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8792862546822071670532796936
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-21 09:06:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Non-Commercial Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'International Organisation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bob-van-Benthem-Platz 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Patent Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pensioners.epo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16750620587047279719145973648691141142188901276706146157777713534449938529981158576694998145626236565735860221436510678223155766214346275780978923069149385731500250801309398680817943365600229848798119319495233233068011258214095911579154237425314401788155732230353488162374607117780269808562985412723794719828449714789420381902264719991704804147610444028698712323846517727601349795555205443100315304608566844927824345335732775671297999166759379598985346473865735148715458986933208161100270762372475443090492747435872358498455656376488130934642335428696125932304120072549712466592821629716738252284914772076285968538411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensioners.epo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f6fbb3a19a9e98523fe668ce88ebd94c13448a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002a2045b9208246101a6c9e570e5128980f84ea371d7bde8d22ae1445fc9f06cda72687a1815d2ba0cdd2791fc018f092f6883c4af66889fe0e334e1c10c26e1ac5113dbde7d62c3bc427b0fcdee523181d34b01f37b7692933fda301cf0ce462f058359ec3e6bd12a26ab2c2301f86ddf280f60b7f6633b0e735bdc6072aee612315f799f4521a950f0873001158ebeec4a70a63ca1d20720f7b24cf33791965c40105d93a68f48fbb3c40ee87afa2aec6e3e88de9cd46684d3756279a77ff514d8d9516b0472df034b672e10af7ebaf7531c01634d16e813e28dc7cb6f8fd470d3a3e7026400c372a13e5612f7ab55f04b4c2f2e3908f6bd16e85df0d0f44a5