dapa.gdoc.go.kr

- DAPA -

Issued by CA131100001

About this certificate

This digital certificate with serial number 27:b4:11:d5:72:e9:f5:b3:54:2c:ea:d9:41:8b:8a:fd:37:de:f2:1d was issued on by Government of Korea.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [KeyEncipherment DataEncipherment DigitalSignature ContentCommitment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

DAPA

Organization: DAPA
State / Province: Gyeonggi-do
Locality: Gwacheon-si
Country: KR

Government of Korea

Organization: Government of Korea
Organization unit: GPKI
Country: KR

This certificate will expire on

Certificate Details

Serial Number (hex): 27:b4:11:d5:72:e9:f5:b3:54:2c:ea:d9:41:8b:8a:fd:37:de:f2:1d
Serial Number (int): 226666327739617027780418802491812285609188192797
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 80:91:30:79:51:f5:0e:dc:f7:40:ef:d2:5d:83:38:e2:50:19:0c:2c
AuthorityKeyId: 92:a4:78:17:b1:aa:2f:19:d8:2b:3f:b9:b3:2b:23:15:83:d5:97:35

Fingerprint (sha1): 7a:58:68:9a:79:a2:13:6d:86:93:63:d8:80:e9:16:00:78:ed:81:db
Fingerprint (sha256): a0:99:eb:1c:47:3a:8f:0d:ab:fa:a1:90:0d:97:41:90:fd:f2:75:ee:49:8d:68:83:2a:20:83:02:49:c0:0f:62

Issuing Certificate URL: http://ssl-crl.gpki.go.kr/CA131100001.cer

Revocation information

OCSP Server: http://ssl-ocsp-gov.gpki.go.kr:8100
CRL Distribution Point: ldap://cen.dir.go.kr:389/cn=crl3p1dp11,cn=CA131100001,ou=GPKI,o=Government of Korea,c=KR?certificateRevocationList;binary
CRL Distribution Point: http://ssl-crl.gpki.go.kr/crl/CA131100001/crl3p1dp11.crl

Check the revocation status for certificate dapa.gdoc.go.kr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dapa.gdoc.go.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dapa.gdoc.go.kr

Other certificates including the domain name gdoc.go.kr

(limited to 100 certificates)
geumsan.chungnam.gdoc.go.kr
*.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
seocho.seoul.gdoc.go.kr
dongdaemun.seoul.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
wanju.jeonbuk.gdoc.go.kr
inje.gangwon.gdoc.go.kr
junggu.seoul.gdoc.go.kr
gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
distd.gdoc.go.kr
blkd.gdoc.go.kr
asan.chungnam.gdoc.go.kr
open.gdoc.go.kr
blkhd.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
extra2.gdoc.go.kr
blkd.gdoc.go.kr
blkhd.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
blkhs.gdoc.go.kr
dobong.seoul.gdoc.go.kr
center.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
hubd.gdoc.go.kr
extra2.gdoc.go.kr
distd.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
extra.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
mbox.gdoc.go.kr
www.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
seoul.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
esgate.gdoc.go.kr
daegu.daegu.gdoc.go.kr
extra2.gdoc.go.kr
www.nts.gdoc.go.kr
gangjin.jeonnam.gdoc.go.kr
blkd.gdoc.go.kr
kmsd.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
korus.gdoc.go.kr
seoul.gdoc.go.kr
www.gdoc.go.kr
red.gdoc.go.kr
open.gdoc.go.kr
rsgate.gdoc.go.kr
blks.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
res.gdoc.go.kr
haenam.jeonnam.gdoc.go.kr
red.gdoc.go.kr
center.gdoc.go.kr
blkhs.gdoc.go.kr
jungnang.seoul.gdoc.go.kr
open.gdoc.go.kr
*.gdoc.go.kr
rsgate.gdoc.go.kr
open.gdoc.go.kr
dobong.seoul.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
gunwi.gyeongbuk.gdoc.go.kr
sangju.gyeongbuk.gdoc.go.kr
dalseong.daegu.gdoc.go.kr
www.gdoc.go.kr
sangju.gyeongbuk.gdoc.go.kr
mntrng.gdoc.go.kr
www.gdoc.go.kr
jungnang.seoul.gdoc.go.kr
*.gdoc.go.kr
hubd.gdoc.go.kr
gokseong.jeonnam.gdoc.go.kr
res.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
sangju.gyeongbuk.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
dists.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
gangjin.jeonnam.gdoc.go.kr
daegu.daegu.gdoc.go.kr
gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
distd.gdoc.go.kr
dapa.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
gimpo.gyeonggi.gdoc.go.kr
gangdong.seoul.gdoc.go.kr
korus.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
open.gdoc.go.kr

Certificate

The complete raw certificate details for dapa.gdoc.go.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglhkclMcarBlg1Nu9Pkg
roW1bs0VrFbbadXigWiFcrJ2uN+uDDvdIZjQ2pwXP1hXftz1NviJTVvO+yFzQFEy
UDu8uuAI6TdDt/XqyCCsbpdv52hSlXIYt5IMBNBWZmugswN35qYw0n2eg3F8S9LB
P1m7iaHmzOEW0EerwJMwe6uai1h5nG6xzaUYNBPjk6Oe/Lb4RcftmRmO4K1kpEGD
IPqreq7R5nzHEXhAtBHJ3XSyURFD22W36pVlrrtz5N6g8ADmz5O9CQxxjid6RuO3
L9/WlWWKw++KxRLb53jhEWQEhBAsDlHPcOEFlPNYxBS95hIhQwGIkZoZy7folt5F
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 226666327739617027780418802491812285609188192797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government of Korea'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GPKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CA131100001'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 05:28:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-29 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gyeonggi-do'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gwacheon-si'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DAPA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dapa.gdoc.go.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16454567547509605724482047868799173129012064974879441275692063082426786440310456260063576159902057820288021937140524715155131132167378380786422119107675965177048181734737654501823897270970981992109491014586785782539295913387729084457275862489990806098749867499999771789179077632656639592986359023975153689022633136389665321357503411051266356853157449825985215806467097249987159105271574374732792166754152201316927624687090735939670206054334270712488033591865701702975463221999488862400664547812442824071491254654314713051389280335563457379566567032402474531332757451243656809248660837660968825752940408325667108570469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92a47817b1aa2f19d82b3fb9b32b231583d59735
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8091307951f50edcf740efd25d8338e250190c2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.410.100001.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.gpki.go.kr/cps.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dapa.gdoc.go.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://cen.dir.go.kr:389/cn=crl3p1dp11,cn=CA131100001,ou=GPKI,o=Government of Korea,c=KR?certificateRevocationList;binary'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-crl.gpki.go.kr/crl/CA131100001/crl3p1dp11.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-ocsp-gov.gpki.go.kr:8100'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-crl.gpki.go.kr/CA131100001.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008d85042c85c709ee6dc475edffb42d9a5e0eee64edf8ae67c5556b5b5aa4604f426dbade02b91366e0bea385d307bb44db3578891714042d70cb7614d9b1c636b685c1ce7c707d13a8181cd15ab84a586705ec615c5b56a782e657c990e10b0b5bb1e2eb95d9c55d38495db94747986c8b7a26d4e538dbdee28d848541afa95d35941949d7ad8326335dd3c063823b132f433f9c030af1940861622531ff906fcf29797639dda05f119833f61f137cccf3924d74a00638082a127d81e785055c83fb01245757af29bb5636f4fa15f34ff629159570a2161492e8adc4fcdb29e2ae553f9672b806d6faabf72fc752726ae6cd9ee8a9b98a69e9af38cbd7335d63