itm1.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 37:7b:38:64:50:90:c6:4f was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=itm1.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 37:7b:38:64:50:90:c6:4f
Serial Number (int): 3997851097720997455
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 86:d8:f1:60:e3:9c:b7:95:dc:18:33:13:74:df:20:e2:9d:df:09:a9
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): c4:d0:01:a8:4c:37:30:4d:40:44:85:91:ed:23:e4:30:cf:64:4b:27
Fingerprint (sha256): a1:07:72:c8:bc:f6:50:05:3b:fb:4e:0a:df:26:9e:2b:eb:04:b6:fa:83:bc:44:fc:58:2b:03:fd:d9:68:38:7c

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6512.crl

Check the revocation status for certificate itm1.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itm1.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itm1.com

Other certificates including the domain name itm1.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for itm1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHdjCCBl6gAwIBAgIIN3s4ZFCQxk8wDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV
BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow
GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz
LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1
cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzAyMTI1MzAwWhcN
MjQwNzAyMTI1MzAwWjATMREwDwYDVQQDEwhpdG0xLmNvbTCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBALHgTo1lFRfb2VxbJfve/GRB2zn2OR0J8E3UeqAU
QOom/tcOXucNtuJwlEj67FinzpS4sXp7NyolTdw/n7GquZrGUUCNcv6ep6iAjmOt
qAwO4BV/5UAh/MgPeUYrD6XZ5g1KpG09Qj+bVo8MU7SrqLnoRY9rV/jFoBqGHjYn
dAbva4KKY17eegLCeg5KSmtNXA13M9KRdFgN3V1UnVeJN6EuNTkhIPfbCzhI4UNV
eNbEqwL8Dtzln9IFcXmvY4XVL3PzPwMR1ChofrwKmmJGD9LWcMHA+bFyH56oR83g
4cWy2+wsc2ICM65uSy+jsGptKJQrRVmz8cTpLOy7HCtyfCp6KSj4TWijpANbKEHq
aMXvhrFSpqrpZn7riRQ+CYFe2msCqghMvnoQLcAHyphluzCfmhNoG5eotsEf8rOu
n1lrGHRFoNnTUFOS3wltKmJo4NqIaTL7UHbvAZ5hVNaaNQ1e+Br387xwn/iw041u
07J/sYi64DB6CA6nMMkhvjhkQ+/N1G5PQFu5sGjJKp05OjerVmUcIaHKzzthc1xN
YvLh+XJlHEhsFdCWzU2vIarwd5VFmunqSSYfEDaEUJ/kkqd972BjTNG3uZ4aAoUa
GnDuMVGdzllrS1kn5oFhy/i5cIpGCpNuYkkHa0fu7nDBev4v06OnPCx5IafrxeBc
YoX/AgMBAAGjggMqMIIDJjAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwOAYDVR0fBDEwLzAtoCugKYYn
aHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGlnMnMxLTY1MTIuY3JsMF0GA1UdIARW
MFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRpZmlj
YXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYIKwYBBQUH
AQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8wQAYI
KwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3Np
dG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX+2yz8LQsgM4w
EwYDVR0RBAwwCoIIaXRtMS5jb20wHQYDVR0OBBYEFIbY8WDjnLeV3BgzE3TfIOKd
3wmpMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwDuzdBk1dsazsVct520zROi
ModGfLzs3sNRSFlGcR+1mwAAAYkWqegbAAAEAwBIMEYCIQCW5TiOC8n4VCIHHdWB
pQfmdkSodbyLgQ4m1AOHMTGVGgIhAImlo9/6tjVk2m36od31KGYE988uawT28exl
8YJQAMkTAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGJFqno
6wAABAMARzBFAiEA5LpP+EpXbJI/NbW79S5iLTFSMRIFCGq00er0jK8SM68CIBJp
afVFcB4V9pJRqijGDhi/E4fX5uSw2u/coL9Q+UyKAHYA2ra/az+1tiKfm8K7XGvo
cJFxbLtRhIU0vaQ9MEjX+6sAAAGJFqnpoAAABAMARzBFAiEA7ZNuPo7tgXEilAmX
h6ny7MESB3k2vUl4xRDsaXehjVMCICtI4QHptLyJtikPaKuSi9OaTDl3MzXiGyZw
5wAkysR9MA0GCSqGSIb3DQEBCwUAA4IBAQBY+6Ms0GiVdTPD0Mx83oUQtZuzZ4cY
iDJlhLSMv0G5/0cwBN5/a3D/pSlYU8YudkmP+dZr6gFVidqXaX3SLCdhoGvDiyqt
cULU0kLnTE7KvZoG3N9Un5XMTP84AtIxnUc/c3xds/rYLdH2XFK294SMDypqGXca
pgLypLodSRU3Ji8n5WWp5gGr3d0+/GcSJNTcqavq4JXvrEWvfnecHWs0/lkedIqo
39Wt59rZr4a+UGkc8WDIsR1Di6IGTcXH/d2cOPkFjOG8Z5wP4bIYvJX35KrDMYsC
9YEkQVHbP4CzAvvWJwtAzvMdGiyhlWmjNa2scunVeW6kWd6FZuxNBjoz
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3997851097720997455
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-02 12:53:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 12:53:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itm1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 725671578514869687707708178927923730883258597385676947432042170024788734951136768342262067029204836488474921973852766014754895977956488682843409269019590318987206941282598719191447274919254392675331981209453938707061004391121761139354926299933383281240926597733928481394492088130336975496119893538144323862540734516382837640020646438019233751505264669445770935206865345812723365966078345778481714851232710601225119439242915555503732954406938428627806818608190877246488302726702979418355210649848364760218917301368719308983259206173434861660119615542232670883938452176039392592308323115975454708334273019471793182490892019734473780516194102684087513304981648560005892512326259045008446340321048067976040695180647538318406147136027893271043272198323562747048952954110004020657208266434077079174893973396032809346861179456613880251050771743977874474422840429933868885287104257097357805537676831300999251597091792615251227466993254420957756985137576313652075829558085365214983128985590736871378545834487626808821025499328372729320793110049878836502588483909882281118253423464983888327031156830463820778072065279410207279946174584927847131186634250767853235432725881332045860962393368986064330540360905284151105419873231218380887992468991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6512.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itm1.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86d8f160e39cb795dc18331374df20e29ddf09a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0058fba32cd068957533c3d0cc7cde8510b59bb367871888326584b48cbf41b9ff473004de7f6b70ffa5295853c62e76498ff9d66bea015589da97697dd22c2761a06bc38b2aad7142d4d242e74c4ecabd9a06dcdf549f95cc4cff3802d2319d473f737c5db3fad82dd1f65c52b6f7848c0f2a6a19771aa602f2a4ba1d491537262f27e565a9e601abdddd3efc671224d4dca9abeae095efac45af7e779c1d6b34fe591e748aa8dfd5ade7dad9af86be50691cf160c8b11d438ba2064dc5c7fddd9c38f9058ce1bc679c0fe1b218bc95f7e4aac3318b02f581244151db3f80b302fbd6270b40cef31d1a2ca19569a335adac72e9d5796ea459de8566ec4d063a33