nsdlcas.nsdl.com

- National Securities Depository Limited -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 08:14:16:cb:9f:fb:ef:f0:81:c3:b4:ff:1f:1b:ff:47 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

National Securities Depository Limited

Organization: National Securities Depository Limited
State / Province: Maharashtra
Locality: Mumbai
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:14:16:cb:9f:fb:ef:f0:81:c3:b4:ff:1f:1b:ff:47
Serial Number (int): 10738132249290984292686562382550138695
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f1:42:89:22:53:82:cc:f8:f5:58:bd:85:5a:d2:0e:3d:f6:e2:3b:f4
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): cf:e4:f5:88:4e:44:cd:96:68:5d:93:c3:ac:1d:08:8a:5f:47:e0:00
Fingerprint (sha256): f3:9e:2a:d1:eb:d7:cc:95:74:50:a2:ca:57:f7:a3:f6:b6:c2:d4:9d:69:9f:24:75:17:a2:a8:86:b7:7d:f2:c1

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate nsdlcas.nsdl.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nsdlcas.nsdl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nsdlcas.nsdl.com
www.nsdlcas.nsdl.com
eservices.nsdl.com
issuer.nsdl.com
Lei-register.nsdl.co.in
api.nsdl.com

Other certificates including the domain name nsdl.com

(limited to 100 certificates)
www.edocs.nsdl.com
uat-api.nsdl.com
uatmobileservice.nsdl.com
qfi.nsdl.com
onlineservices.nsdl.com
care.koinx.com
tin.tin.nsdl.com
onlineservices.epayment.nsdl.com
qfi.nsdl.com
eservices.nsdl.com
ua.egov-nsdl.com
pandashboard.egov-nsdl.com
support.tpstech.in
www.epass.nsdl.com
uatmobileservice.nsdl.com
dpmshr.nsdl.com
eservices-test.nsdl.com
qfi.nsdl.com
tin.tin.nsdl.com
edpm.nsdl.com
egovcafservices.nsdl.com
www.evoting.nsdl.com
onlineservices.epayment.nsdl.com
www.evoting.nsdl.com
mynps.nsdl.com
support.ignitecinc.com
www.nsdlcas.nsdl.com
eapprovals.nsdl.com
uat-api.nsdl.com
pandashboard.egov-nsdl.com
aadhaar.nsdl.com
www.indiabondinfo.nsdl.com
eservices.nsdl.com
www.edocs.nsdl.com
steadyassist.nsdl.com
ua.egov-nsdl.com
steadyassist.nsdl.com
mynps.nps-proteantech.in
www.stagingportal.nsdl.com
egovmcaservices.nsdl.com
www.indiabondinfo.nsdl.com
onlineservices.tin.nsdl.com
www.fci.nsdl.com
support.alphacloudtech.com
edpm.nsdl.com
uatmobileservice.nsdl.com
onlineservices.epayment.nsdl.com
delivery.accessbankplc.com
dpmshr.nsdl.com
edpm.nsdl.com
nsdlcas.nsdl.com
www.fci.nsdl.com
dematgw.eservices.nsdl.com
ns1.savorganicproducts.store
uat-api.nsdl.com
www.fpi.nsdl.co.in
www.epass.nsdl.com
dpm.nsdl.com
tin.tin.nsdl.com
support.dnsraw.com
support.watchtower365.com
eNPS.nsdl.com
stagingmobileservice.nsdl.com
www.epass.nsdl.com
cradashboard.nsdl.com
www.edocs.nsdl.com
support.watchtower365.com
cradashboard.nsdl.com
eservices.nsdl.com
ua.egov-nsdl.com
qfi.nsdl.com
test.egovcafservices.nsdl.com
www.evoting.nsdl.com
edpm.nsdl.com
dematgw.nsdl.com
edpm.nsdl.com
tin.tin.nsdl.com
cbec.nsdl.com
dpmshr.nsdl.com
eservices.nsdl.com
nsdlca.nsdl.com
www.epass.nsdl.com
uatportal.nsdl.com
steadyassist.nsdl.com
uat-support.nsdl.com
onlineservices.epayment.nsdl.com
pandashboard.egov-nsdl.com
tin.tin.nsdl.com
eNPS.nsdl.com
onlineservices.epayment.nsdl.com
tin.tin.nsdl.com
eservices.nsdl.com
helpdesk.sidcorptech.com
www.DepositoryMeetings.nsdl.com
www.indiabondinfo.nsdl.com
edpm.nsdl.com
cbec.nsdl.com
edpm.nsdl.com
stagingportal.nsdl.com
stagingmobileservice.nsdl.com

Certificate

The complete raw certificate details for nsdlcas.nsdl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzXSj/LVn8ExgOqL19Fi
A+QDJ+xVBtmH0I28KOH3iUy1RZzc9C9BCreEwdHTolx5qVRul+Z9p78R6vw4VgMU
v77ij1RXIzARMt/9g/Aeaz4JjqmAGEHhUv8f8+e8b6451ufDSD+TNwPDNohidWdp
W2fksUgZZZ5uZ56PlXvmfrxV1NyD7SbMyXn/ZwsQ5sTCpH6aeIYaXCcyDCpioQly
hJAhd3tzuHFDHN/6etsR7JgNtO9iIjacQUqc7fFu2GCu7wOtO+zGKGKPJ4gPBsJJ
TrFD37/TwklHrCQgSfQRlsyBDPeSeS0oTU0NfBl2H9yDZqZOO3T2Kr+XiRm2E2Pg
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10738132249290984292686562382550138695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Securities Depository Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nsdlcas.nsdl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23633103897023153987497897898667652265075787629027718991912914898318968092581879634681352521862528041233128214055927765654622285972716146057487419755316390860054059488323541976667970877743844703602204457821947461719211464902564268551478013102339833976260428723721413348586592415250848844124637056525225845067741268157292591931303742829831014971035565078504346907166593270412756280468117350177536527773076854243614943763903709197780898878428045026558762849967113101793857814038714426096798570908324207910054969881250416903431729344655313195751806968501365219769661419521963711181770368473745514212493218016335375884361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f14289225382ccf8f558bd855ad20e3df6e23bf4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsdlcas.nsdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsdlcas.nsdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices.nsdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'issuer.nsdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lei-register.nsdl.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nsdl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:1|t:3|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 90045993015249614672741766919617093166741314951679745090747887787296743960084
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 59039772007105671657596166982881422434058262844034405946770063045391747048545
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0086daabc55c35ba2a2fdd86f3a738bf729bd3aa93cd0efc9fcbd8ad8347dd629f72f223cf715f96b4dd45a6688988ad08169971d1f6395ab8e7cb48cc433940a3e1a8d158606cdccce5226f15da336f802f7630c8640fd5ecbda4d996aa375c6883dc92e90f3cc5c2fa72afae3dbc139336de48e9898cd8783683cb00c621bedcbc462ad95bdc1c6245fb4002f593100772436376e306e1f75b691033e9f0e08c4b741dd3ca6da06fe72b4f17353c7f8606bd7dd625c185e9969c9856f9ec0c012c6c7abdf9920f26e2d8c83cacdcb1f8ed1395eda1c29f682ae2302590b6ed882cf3096ed464c940341ce5e00cb6fc69845a9634ce6d57956ac284055eaf72d5