nedfox.fo.services.retail3000.net

Issued by Trust Provider B.V. TLS RSA CA G1

About this certificate

This digital certificate with serial number 0b:60:27:f6:22:00:5d:59:9f:2c:91:60:6f:00:f8:f2 was issued on by Trust Provider B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nedfox.fo.services.retail3000.net

Trust Provider B.V.

Organization: Trust Provider B.V.
Organization unit: Domain Validated SSL
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:60:27:f6:22:00:5d:59:9f:2c:91:60:6f:00:f8:f2
Serial Number (int): 15120778966678870145692951233469413618
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a1:21:3c:fc:52:7b:fe:e8:2b:1a:18:46:ff:6d:b7:5f:f3:b8:52:9f
AuthorityKeyId: f5:56:22:1f:d9:bf:6b:59:24:52:b0:e1:6a:cd:c0:e1:57:67:e9:e8

Fingerprint (sha1): 9a:dc:56:fd:ce:79:71:fb:b5:6c:0e:d8:b9:ab:03:8a:74:8e:15:16
Fingerprint (sha256): 8e:9f:9b:ca:bd:90:fb:ab:82:c7:29:25:b8:f9:cb:57:aa:41:0e:8c:c5:92:70:eb:9f:b5:07:30:0f:98:2c:ff

Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt

Revocation information

OCSP Server: http://statusd.digitalcertvalidation.com
CRL Distribution Point: http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl

Check the revocation status for certificate nedfox.fo.services.retail3000.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nedfox.fo.services.retail3000.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nedfox.fo.services.retail3000.net

Other certificates including the domain name retail3000.net

(limited to 100 certificates)
api.retail3000.net
proxy.api.retail3000.net
backup.fo.services.retail3000.net
nedfox.fo.services.retail3000.net
nedfox.fo.services.retail3000.net
proxy.api.retail3000.net
nedfox.fo.services.retail3000.net
backup.fo.services.retail3000.net
proxy.api.retail3000.net
api.retail3000.net
backup.fo.services.retail3000.net
test.proxy.api.retail3000.net
nedfox.fo.services.retail3000.net
nedfox.fo.services.retail3000.net
backup.fo.services.retail3000.net

Certificate

The complete raw certificate details for nedfox.fo.services.retail3000.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHFjCCBf6gAwIBAgIQC2An9iIAXVmfLJFgbwD48jANBgkqhkiG9w0BAQsFADB2
MQswCQYDVQQGEwJOTDEcMBoGA1UEChMTVHJ1c3QgUHJvdmlkZXIgQi5WLjEdMBsG
A1UECxMURG9tYWluIFZhbGlkYXRlZCBTU0wxKjAoBgNVBAMTIVRydXN0IFByb3Zp
ZGVyIEIuVi4gVExTIFJTQSBDQSBHMTAeFw0xODAyMDUwMDAwMDBaFw0yMTAzMDYx
MjAwMDBaMCwxKjAoBgNVBAMTIW5lZGZveC5mby5zZXJ2aWNlcy5yZXRhaWwzMDAw
Lm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKziE1ZLSFSgyHuc
TSm4ByUDYsCxUYl9BF38pLEMEHeIm+u363+xr5g25t2YYVud22zGSU0Q8p9/0f6u
yBeT5N0R/shjBxxg8zYwtyZQahrytKACLeDd7s0Bu06th2A/PSfsH3R4pZxh1LMi
AcHhfpMsZFvfKmqJ2tkmZX5fkarPitNCzFyWQYwLmCFENrNVjETH5FK5B5KmKaEX
KQzRSeMQP3nmVnXnQrXSjhzq/3pUuhNdBosbjjK8wPWbupOxTmvZcIrLTg1H2FrY
mUFGIhDcwhbtp3Lqw/GOHH84K3SswDLtRCqNtjkr3Y2QJSxXYOYsZnrye7JwPA5S
htTY30kCAwEAAaOCA+gwggPkMB8GA1UdIwQYMBaAFPVWIh/Zv2tZJFKw4WrNwOFX
Z+noMB0GA1UdDgQWBBShITz8Unv+6CsaGEb/bbdf87hSnzAsBgNVHREEJTAjgiFu
ZWRmb3guZm8uc2VydmljZXMucmV0YWlsMzAwMC5uZXQwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBUBgNVHR8ETTBLMEmgR6BF
hkNodHRwOi8vY2RwZC5kaWdpdGFsY2VydHZhbGlkYXRpb24uY29tL1RydXN0UHJv
dmlkZXJCVlRMU1JTQUNBRzEuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAECMCow
KAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EM
AQIBMIGaBggrBgEFBQcBAQSBjTCBijA0BggrBgEFBQcwAYYoaHR0cDovL3N0YXR1
c2QuZGlnaXRhbGNlcnR2YWxpZGF0aW9uLmNvbTBSBggrBgEFBQcwAoZGaHR0cDov
L2NhY2VydHMuZGlnaXRhbGNlcnR2YWxpZGF0aW9uLmNvbS9UcnVzdFByb3ZpZGVy
QlZUTFNSU0FDQUcxLmNydDAJBgNVHRMEAjAAMIIB9wYKKwYBBAHWeQIEAgSCAecE
ggHjAeEAdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWFmDDx+
AAAEAwBIMEYCIQCAWz1dvnUJez711KlmqC8rmGJSKj/wd3ESEp0kSGRtiQIhAJe5
SfQoyRMIU3rM9jF+4i4EAvebhA5TDGMFXY+T+9EeAHUAh3W/51l8+IxDmV+9827/
Vo1HVjb/SrVgwbTq/16ggw8AAAFhZgw9KQAABAMARjBEAiBl7JkCBMN5mIONLZ6s
AdHGAOA1sNw4wSjmmsPVQ8tqyAIgCbeBfzXU3DVwsMTrvUvRQR0krHdIi8NSRNg0
+xcSafgAdgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWFmDDz9
AAAEAwBHMEUCIQCTrY+h6OiolLuSs91GrbS5j+aTQxNh5QSjUU0rvhNcaQIgAMgc
XvRU5O47slaPjrMzGpNTk2co3hhjz41dIrqdloUAdwBvU3asMfAxGdiZAKRRFf93
FRwR2QLBACkGjbIImjfZEwAAAWFmDD9QAAAEAwBIMEYCIQD3xRjdkh4FGKT2qT2Y
sFGMdyiu/7sXebwaxtV71sY+wAIhAJgbQJ3enuCZCnSLxHgfSlgteVRTgPLWT1UP
/oG7OassMA0GCSqGSIb3DQEBCwUAA4IBAQB+KHiGOVOu6FFCqWKOi13N9GkjzOxC
9vY1+95DHh6W+JQXVZruxq0xQ5NHGHUPd+rEueuSNGWye2fho1hxILYPv8nECnPV
xS8AYwcdBBF3RfXQxzCSWbG8P8bKurfWbGVaBYVsTU8/OeXFUhaqkEnF6+E9Ng8L
TwQvxmQoJZNc7fExsoS7Vg5GvU4Yr1AfST2TkF/zrmZmCL4BEyGvs5NaEK/8E8Hw
WD2rtkBzSfLxiGxq8Q0QdZg1oQ3COyk9NRYnaYyscTHxTYe1+4fyk9MANqghhbSe
fTwAe6nrFDtl1yr1N4aVmjsfEzprKU8k6QqsE+m6v/2kBCIjbFdh/ne/
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOITVktIVKDIe5xNKbgH
JQNiwLFRiX0EXfyksQwQd4ib67frf7GvmDbm3ZhhW53bbMZJTRDyn3/R/q7IF5Pk
3RH+yGMHHGDzNjC3JlBqGvK0oAIt4N3uzQG7Tq2HYD89J+wfdHilnGHUsyIBweF+
kyxkW98qaona2SZlfl+Rqs+K00LMXJZBjAuYIUQ2s1WMRMfkUrkHkqYpoRcpDNFJ
4xA/eeZWdedCtdKOHOr/elS6E10GixuOMrzA9Zu6k7FOa9lwistODUfYWtiZQUYi
ENzCFu2ncurD8Y4cfzgrdKzAMu1EKo22OSvdjZAlLFdg5ixmevJ7snA8DlKG1Njf
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15120778966678870145692951233469413618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V. TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nedfox.fo.services.retail3000.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21824470455704803607591982982729011305781684270754119609711762994105015825786132908882011703608904586291429073725925802499277633032048633216933040966190500189568009719784908208123299097600943243144384053051193304923488189788344345691320819564047129477504155452060438710367469570691574117198491874465182351359877429703173248629825908314505440205821928531137337738025630032160413841388814592039792178785967589541298271516591117292212260686980095693446265677157340935717508463585589211370636802890871185131902384031474248087602248764043657044558262505283828627844163279184011744790985726034006882950668309185192019943241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f556221fd9bf6b592452b0e16acdc0e15767e9e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1213cfc527bfee82b1a1846ff6db75ff3b8529f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nedfox.fo.services.retail3000.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statusd.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007e2878863953aee85142a9628e8b5dcdf46923ccec42f6f635fbde431e1e96f89417559aeec6ad3143934718750f77eac4b9eb923465b27b67e1a3587120b60fbfc9c40a73d5c52f0063071d04117745f5d0c7309259b1bc3fc6cabab7d66c655a05856c4d4f3f39e5c55216aa9049c5ebe13d360f0b4f042fc6642825935cedf131b284bb560e46bd4e18af501f493d93905ff3ae666608be011321afb3935a10affc13c1f0583dabb6407349f2f1886c6af10d10759835a10dc23b293d351627698cac7131f14d87b5fb87f293d30036a82185b49e7d3c007ba9eb143b65d72af53786959a3b1f133a6b294f24e90aac13e9babffda40422236c5761fe77bf