static.adobesigncdnstage.com

- Adobe Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:ce:27:4c:18:54:c0:43:ce:f7:6e:b1:6b:c7:1c:32 was issued on by DigiCert Inc.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Adobe Inc.

Organization: Adobe Inc.
State / Province: California
Locality: San Jose
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:ce:27:4c:18:54:c0:43:ce:f7:6e:b1:6b:c7:1c:32
Serial Number (int): 14362690153552324669521528708611382322
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 69:e2:4c:42:1e:1e:ba:b9:d8:a4:93:b4:b3:97:32:c2:7a:24:76:a3
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): ef:96:91:ce:a3:70:57:5f:17:e0:ae:75:a3:f0:f1:9c:6c:fa:bb:84
Fingerprint (sha256): a9:0c:b8:ae:ff:c5:08:2a:30:8e:fc:f6:84:e1:47:6d:8f:d0:91:c6:3d:df:56:3a:0e:eb:31:e8:af:ce:5e:0d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate static.adobesigncdnstage.com

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for static.adobesigncdnstage.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

static.adobesigncdnstage.com
stage.acrobatservices.adobe.com
sharepointonline.adobesignstage.com
dc.dev.dexilab.acrobat.com
sharepointonline.echosignstage.com
static.echocdnawspreview.com
dc-dev.documentcloudtest.com
dev.acrobat.adobe.com
static.adobesigncdnpreview.us
dev.documentservices.adobe.com
dev.acrobatservices.adobe.com
stage.documentservices.adobe.com
static.adobesigncdnstage.us
static.adobesigncdnpreview.com
static.echocdnstage.com
get.devdc.adobe.com
dc-stage.documentcloudtest.com
get.dev.adobe.com
dc.stage.acrobat.com
stage-dc.acrobat.adobe.com
stage.acrobat.adobe.com
sharepointonline.adobesignpreview.com
get.stage.adobe.com
get.stagedc.adobe.com
sharepointonline.echosignawspreview.com

Other certificates including the domain name adobesigncdnstage.com

(limited to 100 certificates)
assets-cdn.stage.adobe.com
static.adobesigncdnstage.com
assets-cdn.adobe.com
assets-cdn.adobe.com
secure.echosignstage.com
assets-cdn.adobe.com
assets-cdn.stage.adobe.com
ssl.adobe.com
assets-cdn.adobe.com
secure.echosignstage.com
static.adobesigncdnstage.com
static.adobesigncdnstage.com
assets-cdn.adobe.com
ssl.adobe.com
secure.echosignstage.com
static.adobesigncdnstage.com
secure.echosignstage.com
assets-cdn.adobe.com
assets-cdn.stage.adobe.com
assets-cdn.adobe.com
ssl.adobe.com
assets-cdn.stage.adobe.com
assets-cdn.stage.adobe.com
static.adobesigncdnstage.com
assets-cdn.adobe.com
secure.echosignstage.com
static.adobesigncdnstage.com
static.adobesigncdnstage.com
assets-cdn.adobe.com
assets-cdn.adobe.com
assets-cdn.adobe.com
static.adobesigncdnstage.com
assets-cdn.stage.adobe.com
assets-cdn.adobe.com
assets-cdn.stage.adobe.com
static.adobesigncdnstage.com
secure.echosignstage.com
assets-cdn.adobe.com

Certificate

The complete raw certificate details for static.adobesigncdnstage.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEpsVg+Mo2aNO7xnJLccp+goK7abx9
jN1SctPXlC8SV7gGVCiZMBCDH0cAWLp6n9+K8M7ihWPv03gtHGKzkX4VIw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14362690153552324669521528708611382322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adobe Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'static.adobesigncdnstage.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004a6c560f8ca3668d3bbc6724b71ca7e8282bb69bc7d8cdd5272d3d7942f1257b8065428993010831f470058ba7a9fdf8af0cee28563efd3782d1c62b3917e1523
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69e24c421e1ebab9d8a493b4b39732c27a2476a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (736 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.adobesigncdnstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.acrobatservices.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepointonline.adobesignstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.dev.dexilab.acrobat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepointonline.echosignstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.echocdnawspreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc-dev.documentcloudtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.acrobat.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.adobesigncdnpreview.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.documentservices.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.acrobatservices.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.documentservices.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.adobesigncdnstage.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.adobesigncdnpreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.echocdnstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.devdc.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc-stage.documentcloudtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.dev.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.stage.acrobat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-dc.acrobat.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.acrobat.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepointonline.adobesignpreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.stage.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.stagedc.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepointonline.echosignawspreview.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018d36d22dac000004030047304502210089419452c55d9bd88480c5de0c84f1c529b87c07f1b4f92e56776008f096ff4a0220052c7a09002c750677cef7d5f39488faca660b0e4fe8c10424be2dee05e94fce0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018d36d22dc80000040300483046022100d6a911b6888d1de7d4e2fdc8b1a5fef405446e37cc36076bd486448780bbf5d7022100879d9ca6cb32f0ea792a36ee644910c6ca9921f2b11cc398f2f8c43f5b0fcdba0075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018d36d22d520000040300463044022070cbf45c5a841a4b30838c8c33b15c8e7cbb0a3a0eeabe8dd7da7266c6dab63202201ab25735f849e16e7ccb21b6bf888ba89cac043b80c40040c5c9885dde1f6e0f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008bbde745d43145c44f9f131d567a7b366b09b510c87807c217ac632b0c13d123af65915eda31234bc762baeac6493c200338fbb7bafdac2ff7cde6754c8506e63a626fbc3b5c464555e5577bc1b8906e4c2c4ab5d1bc13b66f9546f173d8636222ce0c4effdb140cf2e21fbac2c7824bf21c0f716e8296231a7ac0df03085e9dfacdc1e854f940371a1a563937f1691aa0a9d9dd94e3d8b43274990063467f58ac09e67666ae21749a884718fcffc84a9c99612c04ad1f23983b6a2896e01e6a88f54a87f782a40e9a234d8ece59db9945f7bfdc448a299fcceb886ecf54f57c56c42a335e0b8afd74da97309d43d1cb7669565f9ece502f7f826d528ed4eff8