api.donegalgroup.com

- Donegal Insurance Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 3f:56:60:93:3f:92:0d:13:cc:4f:b8:c8:7a:50:58:6b was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Donegal Insurance Group

Organization: Donegal Insurance Group
State / Province: Pennsylvania
Locality: Marietta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 3f:56:60:93:3f:92:0d:13:cc:4f:b8:c8:7a:50:58:6b
Serial Number (int): 84189860041819655870594871442178857067
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: f9:73:7c:a9:13:83:81:d9:a7:22:e2:1c:7a:b8:35:c8:8f:91:58:f1
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): aa:3c:d3:fe:0a:3d:60:d7:8d:0e:22:b7:c3:33:db:50:cb:b1:dd:ac
Fingerprint (sha256): 96:8a:b2:8b:75:67:25:76:9e:c7:f1:a2:50:64:4a:9c:ac:03:75:1b:e1:76:04:f7:e5:c1:fd:64:ff:1a:bf:db

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate api.donegalgroup.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.donegalgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.donegalgroup.com
www.api.donegalgroup.com

Other certificates including the domain name donegalgroup.com

(limited to 100 certificates)
qa-user.donegalgroup.com
test-gw-lem-iso.donegalgroup.com
www.donegalgroup.com
test-www.donegalgroup.com
test-qtest-jira.donegalgroup.com
test-cdn.donegalgroup.com
esig.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
selfservice.donegalgroup.com
pilotprod-writebiz.donegalgroup.com
test-www.donegalgroup.com
test-external-ws.donegalgroup.com
sharepoint.donegalgroup.com
test-vueapp2.donegalgroup.com
test-qtest-jira.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
guestportal.donegalgroup.com
qa-external-ws.donegalgroup.com
www.donegalgroup.com
ts-test.donegalgroup.com
test-mobile.donegalgroup.com
mobile.donegalgroup.com
qa-user.donegalgroup.com
test-www.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
test-vueapp.donegalgroup.com
writebiz.donegalgroup.com
test-www.donegalgroup.com
my.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
test-wsag.donegalgroup.com
nautilus.donegalgroup.com
dmi-frw-barracuda.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
qa-www.donegalgroup.com
writebiz.donegalgroup.com
qa-cdn.donegalgroup.com
test-www.donegalgroup.com
test-digportal.donegalgroup.com
vue.donegalgroup.com
api.donegalgroup.com
api.donegalgroup.com
vpn-dr.donegalgroup.com
qa-www.donegalgroup.com
pas.donegalgroup.com
test-user.donegalgroup.com
pas.donegalgroup.com
sso.donegalgroup.com
writebiz.donegalgroup.com
expressway1pri.donegalgroup.com
qa-external-ws.donegalgroup.com
test-writepro.donegalgroup.com
prod-qtest-jira.donegalgroup.com
test-external-ws.donegalgroup.com
esig.donegalgroup.com
qa-user.donegalgroup.com
test-writebiz.donegalgroup.com
test-wbportal.donegalgroup.com
qa-cdn.donegalgroup.com
qa-www.donegalgroup.com
mergers.donegalgroup.com
wbportal.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
teradiciconsole.donegalgroup.com
remotedesktop.donegalgroup.com
smtp.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
wb-portal.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
cdn.donegalgroup.com
test-user.donegalgroup.com
www.donegalgroup.com
isosearchtst.donegalgroup.com
ts-test.donegalgroup.com
expressway1sec.donegalgroup.com
test-vue.donegalgroup.com
test-gw-symbility.donegalgroup.com
perf-vueapp2.donegalgroup.com
qa-user.donegalgroup.com
writepro.donegalgroup.com
www.donegalgroup.com
perf-www.donegalgroup.com
test-user.donegalgroup.com
losscontrol.donegalgroup.com
director.donegalgroup.com
test-wsag.donegalgroup.com
losscontrol.donegalgroup.com
cdn.donegalgroup.com
seg.donegalgroup.com
ts-prod.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
external-ws.donegalgroup.com
www.donegalgroup.com
test-vue2.donegalgroup.com
writebizqa.donegalgroup.com
cdn.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
writepro.donegalgroup.com
user.donegalgroup.com
www.donegalgroup.com

Certificate

The complete raw certificate details for api.donegalgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Brq81FwDn9EAA1TONdQ
PVE+/FeJ0KgaFnT8ohS3IYIeq2YNiURI8kk2dBmsDqpt/4LEAAKgEvDcFfDhMwq+
cPJoUnbcRlptHDyGWcCAgZbehHuuoJRnu3qTxPeKo9PsXWXLqzzwDwG5nevDRUr9
wTJrDVCiClfMq8P+RsdBShG3CEsT7anQBUZ1bVwmTI9BHnM4wXv0uXR8q90KbwLU
mSMppkz1sfuzEZtNH3qnyqUt3TGe3GHk9D5LjIqdVgxJbcaqI03jmWeBwlBcdkkf
+9k3ZJ7hPCxiqoZcnW0vtO65EGBkjexVX6RNpO4ARlPRmzqUdDCWJcUhIETiMG+r
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84189860041819655870594871442178857067
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 17:51:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-03 17:51:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Marietta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Donegal Insurance Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.donegalgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27280747522355110784129643933772384403700558943034328069309491530419200008656467900794609618730661260694634524973674733622543315521914616003738124057414159409626553369229064719457471445963638352212402112586711861352173330259063443378749400531961922319678564944255413467345442077850540036096104197012702179851422275477350874992477832225121236593086788540036394236756397811075518266482888771416981106749639586890098623673994602508115056737450311550335763903635108527880354577928520274639491565835326881759836182203672742059021994536962543177865857763395340815277748074773627866561564987579417830066333639867850162154379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9737ca9138381d9a722e21c7ab835c88f9158f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.donegalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.donegalgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189bc8642070000040300483046022100cca07da969f5e8ca793dc1630326b2e5a43b140c94a35e6822933b40662878f90221008ae1dc8e12a84b0cb2104f17d1a5e62868468657d7cab1194de642ac899089db0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e00000189bc8642540000040300473045022100f09123731a7b6854e10b365e99d8ed27dc04b1e5bb87b347caa727c0731bd398022000b64d8f3be21acc013c6c59ed037a40ff9d915e2831200e5fe6cd109bc38609007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189bc8642450000040300483046022100fd9482569bb2699cd65f5622bffccfa9dbcc254413b1e7e61f8627ea0a732b8a02210097c40301752e11c19af8d5ad5ec6d6ee37a8296b3f611b597e9d4da62ca5bbd8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00984445281d1aaada75d8d023169ff1135de5522bcaa91668d330801b99f102ed93c9265c2f6605429127b031596bf3b490efc6d3b4bf93213c33fd5132b975ebe8e0ab96183d648eac661045a3306dfc5687851881576b386f2a193f640810d59df0aa2afaed45264ef03e0053b003d00e4105940a5a3131c62a4c96f9f1044594f3cffccc02d635e28a70c2555c3ddb137cb231b5bfcb375d3d764325a698b475460dec31ccc21cfeebd548352f2f46fc054ea993c9dc02081e4493d1ac7570c13a44b97c750e13f4336ef524cd712595d9c4f112869864938fdc0fd946c26063411d4e641082b6ad24c1f9fdbb7745010e6570071adae367610ba91f10e293