livestream.map.fastly.net

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:69:67:a3:5d:b2:9d:ff:f2:6b:47:16:bd:30:d0:ea was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=livestream.map.fastly.net

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:69:67:a3:5d:b2:9d:ff:f2:6b:47:16:bd:30:d0:ea
Serial Number (int): 1876521197308779563242381946806915306
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d9:b2:f9:c0:f7:c5:35:f1:fe:8a:14:82:c8:3a:d1:97:ff:fa:90:e6
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): 33:b7:49:34:6d:9f:c6:93:5e:d3:da:49:02:ad:33:e4:de:01:cf:6d
Fingerprint (sha256): d1:93:22:02:cb:f4:4c:6a:07:b0:d3:61:7b:e0:01:dd:c4:3d:4a:1d:e0:d6:b1:27:bf:79:29:e5:87:0c:19:4f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate livestream.map.fastly.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for livestream.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

livestream.map.fastly.net

Other certificates including the domain name livestream.map.fastly.net

(limited to 100 certificates)
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
*.cdn.vimeo.tv
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net
livestream.map.fastly.net

Certificate

The complete raw certificate details for livestream.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdjCCBV6gAwIBAgIQAWlno12ynf/ya0cWvTDQ6jANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRMTAeFw0yMzAy
MDUyMjQ4MjhaFw0yNDAzMDgyMjQ4MjdaMCQxIjAgBgNVBAMMGWxpdmVzdHJlYW0u
bWFwLmZhc3RseS5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu
7QGDDPHNE4ilFv2EqBNPSk+laPsN7iBXGyw8TUpRiXOce0r7odBLkvprl0ctsKeP
0HUqRIZeJXVW4kUf/yulo/dqe6HLjvYxvbPb7WIeWcW+ZAeQ36uVyr+jSGOV/GVc
TRAX1H3/NkK3wjmFvRQDnDivmTtLlfdPYChOtb/br055H/xDgyDxN2QVckMSxoY6
1f31bnRBuyGxjxpsAOvgLfCQ6NkGOl7aInUTyfEkw30uX8+oJaOwKBeOrSoOZ/Nx
DGPET5znk08QqPgoPwtNLxQjdUM2ZjN7HC6EQ2iStWHlcRB0lBjbSolI0teDF35X
TD1uvEjHvasCGV4SH55XAgMBAAGjggNuMIIDajAkBgNVHREEHTAbghlsaXZlc3Ry
ZWFtLm1hcC5mYXN0bHkubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFNmy+cD3xTXx/ooUgsg60Zf/+pDm
MFcGA1UdIARQME4wCAYGZ4EMAQIBMEIGCisGAQQBoDIKAQMwNDAyBggrBgEFBQcC
ARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wDAYDVR0T
AQH/BAIwADCBngYIKwYBBQUHAQEEgZEwgY4wQAYIKwYBBQUHMAGGNGh0dHA6Ly9v
Y3NwLmdsb2JhbHNpZ24uY29tL2NhL2dzYXRsYXNyM2R2dGxzY2EyMDIzcTEwSgYI
KwYBBQUHMAKGPmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dz
YXRsYXNyM2R2dGxzY2EyMDIzcTEuY3J0MB8GA1UdIwQYMBaAFEruokdjQzs+ePO0
YYNyiHqd5L23MEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwuZ2xvYmFsc2ln
bi5jb20vY2EvZ3NhdGxhc3IzZHZ0bHNjYTIwMjNxMS5jcmwwggF/BgorBgEEAdZ5
AgQCBIIBbwSCAWsBaQB3AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0
AAABhiPEPYUAAAQDAEgwRgIhAP6RJkCubi/+dgXMaqAlP8Jq6wi07qEkYiqV+teF
gYj/AiEA/88mRgJN8Z2MB0x8Bea4YhxjuOrt8FYpPAV0Ti136lUAdgBz2Z6JG0yW
eKAgfUed5rLGHNBRXnEZKoxrgBB6wXdytQAAAYYjxD2rAAAEAwBHMEUCIDbygzB3
PfXT9WMrazQOny2Yj5BJXPsnHvRCF8Pf2expAiEAipybTq01Ens/E22Q/e81IYhF
RLAbtfwQ43nYxYBRHdUAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1
mwAAAYYjxD2vAAAEAwBHMEUCIAR8gc5ibBfZ6vaTunlIN/rNN627+vCcUq6+xH6x
VQqQAiEAyVQgPFwMbNPG9byzibyvLCl8ZE4jg4Rmjg6vZWGpZlAwDQYJKoZIhvcN
AQELBQADggEBACQdoB7eQSmfBzLyI1/AUlZE40K4xFETX+dubcc5JvdMFF6YqxOF
xMGzyMBB6bN21bGuSLeFBiIoGVMocSb2+nnR1bDJbpwvt7giZu6kU4KWEw+omjt8
P6obqkdLUBFR8mJLr8o/V3Pa9GwcjFl1cULNMqj3Hv37jOSmwFoaCneRCUyqbSVz
40xeNBXjYOFUuJ3OqhKdM7xYrXliS53LNR7Ajk8Glhvbw7MVn1ugfNBhXh16sBpa
sXvY2zuWdoXp1sQfsWRcJWhgk85/GVvtUrhWCxKeoSTM76UkcPQRe6ZVoqJtMCXW
ZJTjnELJ09Anb05MEm6BErxhFtyTmLb6cHg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7u0BgwzxzROIpRb9hKgT
T0pPpWj7De4gVxssPE1KUYlznHtK+6HQS5L6a5dHLbCnj9B1KkSGXiV1VuJFH/8r
paP3anuhy472Mb2z2+1iHlnFvmQHkN+rlcq/o0hjlfxlXE0QF9R9/zZCt8I5hb0U
A5w4r5k7S5X3T2AoTrW/269OeR/8Q4Mg8TdkFXJDEsaGOtX99W50QbshsY8abADr
4C3wkOjZBjpe2iJ1E8nxJMN9Ll/PqCWjsCgXjq0qDmfzcQxjxE+c55NPEKj4KD8L
TS8UI3VDNmYzexwuhENokrVh5XEQdJQY20qJSNLXgxd+V0w9brxIx72rAhleEh+e
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1876521197308779563242381946806915306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-05 22:48:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-08 22:48:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'livestream.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30161588550010447333099534790102523070921473274342212918653114024415874332703223697273673716046168219207975240003141735721046377478257749823349560195252159285097976508022437022961038823808990726044062044949848405208885767867942767506600886661793201447172612415150888670591913872916849881394076059252157753197080401237401028341573731728826538451145162015939727643797031948660006061018876655587535946270244823880798268013823673500417606589558941724423572418351050195928923720541434421852700155793713306744517531708169396156292352019163008298694626973252303904361497618808270206699309265869399306955211713873147070488151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livestream.map.fastly.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9b2f9c0f7c535f1fe8a1482c83ad197fffa90e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:28|false] UniversalString '����V)<tN-w�U�v�sٞ�L�x� }G����Q^q*�k�z�wr����#�=����G0E 6�0w=���c+k4�-���I\�'�B����i'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 62695873138396641218630510618027843421054443439878969705315304549948767411669
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00241da01ede41299f0732f2235fc0525644e342b8c451135fe76e6dc73926f74c145e98ab1385c4c1b3c8c041e9b376d5b1ae48b7850622281953287126f6fa79d1d5b0c96e9c2fb7b82266eea4538296130fa89a3b7c3faa1baa474b501151f2624bafca3f5773daf46c1c8c59757142cd32a8f71efdfb8ce4a6c05a1a0a7791094caa6d2573e34c5e3415e360e154b89dceaa129d33bc58ad79624b9dcb351ec08e4f06961bdbc3b3159f5ba07cd0615e1d7ab01a5ab17bd8db3b967685e9d6c41fb1645c25686093ce7f195bed52b8560b129ea124ccefa52470f4117ba655a2a26d3025d66494e39c42c9d3d0276f4e4c126e8112bc6116dc9398b6fa7078