mail.tciserv.com

- TCI Fund Services LLP -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 08:56:7a:87:cb:63:62:f6:1d:83:ce:32:7f:7d:74:42 was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TCI Fund Services LLP

Organization: TCI Fund Services LLP
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:56:7a:87:cb:63:62:f6:1d:83:ce:32:7f:7d:74:42
Serial Number (int): 11082846708832515070577406622184600642
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3f:84:c4:0c:28:93:9d:6a:5b:ce:bc:7c:9c:40:80:59:01:4c:aa:1a
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 07:e4:2c:7a:db:57:b4:1c:ad:25:5c:aa:32:94:e0:9c:63:5c:60:a4
Fingerprint (sha256): b2:87:83:49:6f:bd:65:0d:8d:35:68:d5:d5:5f:9f:1b:18:80:c4:91:cf:ea:3f:d5:f7:73:da:88:31:3a:d8:b9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate mail.tciserv.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.tciserv.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.tciserv.com
autodiscover.tcifund.com
cavext.tcifund.com
autodiscover.tciserv.com
autodiscover.tcianalysts.com
investorday.tcifund.com
smc.tciserv.com

Other certificates including the domain name tciserv.com

(limited to 100 certificates)
customerportal.uk.rlb.com
support.homeinstead.ie
systems.squaredup.com
helpdesk.epsilonnet.gr
servicedesk.group-k.be
helpdesk.presto.se
support.homeinstead.ie
hub.theriderfirm.cc
itservicedesk.paradigmhousing.co.uk
servicedesk.esmsglobal.com
servicedesk.iquw.com
ithelpdesk.familycarers.ie
service.littlegarth.org
support.homeinstead.ie
soporte.inmocolonial.com
support.homeinstead.ie
helpdesk.scf-corporate.com
customerportal.uk.rlb.com
soporte.unirioja.es
itsupport.fhbrundle.co.uk
helpdesk.mlw.mw
helpdesk.itsligo.ie
soportecmi.toledo.es
servicedesk-meckenheim.pvs-europe.com
mail.tciserv.com
technologyhelpdesk.slimmingworld.co.uk
servicedesk.iquw.com
support.homeinstead.ie
support.homeinstead.ie
getsupport.superdry.com
servicedesk.alessi.com
support.homeinstead.ie
service.littlegarth.org
soporte.martinezabolafio.com
support.homeinstead.ie
support.homeinstead.ie
support.homeinstead.ie
technologyhelpdesk.slimmingworld.co.uk
servicedesk.coram.eu
ithelpdesk.gmmh.nhs.uk
support.homeinstead.ie
support.homeinstead.ie
sd.srk-zuerich.ch
servicedesk-meckenheim.pvs-europe.com
helpdesk.sunlight.gr
support.brill.com
helpdesk.danpearlman.com
support.homeinstead.ie
helpdesk.itwfasteners.com
support.homeinstead.ie
servicedesk.weber-ing.de
ithelpdesk.frederic-robinson.co.uk
soporte.unirioja.es
grouphelpdesk.oceanscan.co.uk
cavext.tcifund.com
cavext.tcifund.com
helpdesk.tciserv.com
itservicedesk.paradigmhousing.co.uk
helpdesk.itsligo.ie
servicedesk.prelectronics.com
esolportal.noatum.com
support.homeinstead.ie
smc.tciserv.com
support.homeinstead.ie
ithelpdesk.gmmh.nhs.uk
ithelpdesk.koinly.io
soportecmi.toledo.es
helpdesk.beauchamps.ie
customerportal.uk.rlb.com
helpdesk.sunlight.gr
helpdesk.beauchamps.ie
customerportal.uk.rlb.com
support.homeinstead.ie
mail.tciserv.com
servicedesk.prelectronics.com
*.tcifund.com
servicedesk.am-labor.de
support.homeinstead.ie
itsupport.nza.nl
support.homeinstead.ie
servicedesk.relyonnutec.com
it.rmk.ee
it.rmk.ee
itsupport.gnt-group.com
support.apc-overnight.com
systems.squaredup.com
servicedesk.medica.co.uk
customerportal.uk.rlb.com
itservicedesk.paradigmhousing.co.uk
getsupport.superdry.com
support.homeinstead.ie
servicedesk.alessi.com
servicedesk.group-k.be
servicedesk.christs.cam.ac.uk
helpdesk.epsilonnet.gr
mail.tciserv.com
helpdesk.atu.ie
smc.tciserv.com
customerportal.uk.rlb.com
support.homeinstead.ie

Certificate

The complete raw certificate details for mail.tciserv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmawjIDYPlYucwib9Wvss
r+KG+hv7ddYrU8LGUQ6BUs00afgehCbSSXtA5rIRNvigq6cQmn9meM5aaARa1boU
9R+4CQ2fIsh2XTLwvvz0fy8k1J+9Klk3L9hxBA9nN+TpHRDWT3WW1J2s1EPhp3G/
4cd3JyMwy1zoP8wIXLm1+6RuIJ7noVUUhMBoWInOF+jr84PPDCdf6IsC9/kk5J5q
xVWzRhwqNRuT4ifR6oxsFcGfeBSYY54gYtwN+JyYXYmfh4ZYK5J8i0voxWMFc8Yb
2v1IIB5Zzzliict0LdjpdPjwSpcttRnUN4fDKilj3XYJvA1d4FXyLKYfXWyVgKwR
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11082846708832515070577406622184600642
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TCI Fund Services LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.tciserv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19399344681853811330272125443346414591665457392147272225847485329918285064633564746869214047537174194284322205317981500168574328036481306154145743756195305015112690802876202239442508521385116004202805548627640975477151103836395223885000839832435753232450580997699220316666548216651249579299206174215222545940130449272120535304881318958246835330160693141429420957433781840902783518983925911999912144077326781790700281185090398179321507322491468913329730223852651465085841362121720578413035645819356574343582809334125540622455860814423056564607124887626778732550007757396194685563703536834108915115468501235154568352167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f84c40c28939d6a5bcebc7c9c408059014caa1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tciserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tcifund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavext.tcifund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tciserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tcianalysts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.tcifund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smc.tciserv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0044429f7ae103a080ea92816fda210a875e362bdc28272c8f15cf67320cc311776a61c4ab305b4bf54fbd5f758c16b76c0a7151eb2bed5efe86b7bebb0fd86e137fc7194d08c2284a2a0bb316c643cf88137edab6d99832c96895ffb3f29884a614f43e3858b1a5f3f721be024073cc5a3429a8e40a2610006002818e12d6220d83648a3bd6ff11a93a816799009469e8e590358843df9320dac4fcc07530579b34c18f45ec488454e0b06d02b441e222ac63122e81801a79e7d52a76886704c3a9904b6c98a57066b638aba5556e36641b8693bedc0f1b5bd50432f6a7f956bcb6114da42c58b9d655a6f7430a9e3cb79f3dfea081144ef519ed4f7c1042488d