onescm.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:c2:a9:52:22:75:9c:88:d5:aa:a6:79:e9:b6:0a:73 was issued on by Amazon.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=onescm.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:c2:a9:52:22:75:9c:88:d5:aa:a6:79:e9:b6:0a:73
Serial Number (int): 4998423812507521348769134182678268531
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: e3:52:1b:ce:80:ab:e8:a9:e2:f4:7c:4c:3a:ce:44:bc:55:1c:ba:03
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): a0:8f:8f:2f:7f:cd:f8:fb:bd:b1:c5:d6:22:79:c7:d1:82:74:8f:60
Fingerprint (sha256): f3:ad:b9:b7:c1:a4:eb:53:63:0d:21:0a:c8:c1:d9:f2:21:3a:dc:be:08:59:de:35:f7:dc:c6:fe:22:21:2b:c3

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate onescm.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onescm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onescm.com
*.sensage.com
*.clearorbit.net
*.verdiem.com
*.1scm.com
*.cardinalmark.net
cardinal-mark.com
clearorbit.com
*.bpainc.com
*.olivesoftware.com
right90.com
supplychainlabels.com
triactive.com
verdiem.com
1scm.com
*.1scm.net
*.telescopeondemand.com
streetsmartmobile.com
*.clearorbit.com
smartformdesign.com
*.triactive.com
*.purchasingnet.com
*.onescm.net
purchasingnet.com
cardinalmark.net
onescm.net
*.streetsmartmobile.com
sensage.com
bpainc.com
*.smartformdesign.com
clearorbit.net
*.right90.com
*.supplychainlabels.com
telescopeondemand.com
1scm.net
*.geminiseries.com
geminiseries.com
olivesoftware.com
*.cardinal-mark.com

Other certificates including the domain name onescm.com

(limited to 100 certificates)
www.onescm.com
support.engineyard.com
status.biznessapps.com
classichelp.kayako.com
support.engineyard.com
support.cardinal-mark.com
status.accept360.com
support.engineyard.com
onescm.com
imports.versata.com
www.onescm.com
support.crossover.com
onescm.com
*.onescm.com
support.infinio.com
www.onescm.com
*.onescm.com
*.onescm.com
demo.onescm.com
WWW.ONESCM.COM
support.engineyard.com
onescm.com
classichelp.kayako.com
classichelp.kayako.com
onescm.com
demo.onescm.com
classichelp.kayako.com
www.onescm.com
status.biznessapps.com
imports.versata.com
support.cardinal-mark.com
avolin.com
support.engineyard.com
dnnsupport.dnnsoftware.com
classichelp.kayako.com
support.engineyard.com
*.onescm.com
demo.onescm.com
*.onescm.com
support.cardinal-mark.com
WWW.ONESCM.COM
classichelp.kayako.com
*.onescm.com
avolin.com
onescm.com
onescm.com
imports.versata.com
status.biznessapps.com
classichelp.kayako.com
www.onescm.com
support.cardinal-mark.com
support.cardinal-mark.com
onescm.com
www.onescm.com
imports.versata.com
support.engineyard.com
www.onescm.com
support.engineyard.com
status.biznessapps.com
classichelp.kayako.com
support.engineyard.com
WWW.ONESCM.COM
imports.versata.com
avolin.com
demo.onescm.com
copilot.onescm.com
classichelp.kayako.com
imports.versata.com
*.onescm.com
status.accept360.com
classichelp.kayako.com
avolin.com
demo.onescm.com
support.engineyard.com
*.onescm.com
classichelp.kayako.com
onescm.com
www.onescm.com
status.accept360.com
*.onescm.com
*.onescm.com
imports.versata.com
support.engineyard.com
support.cardinal-mark.com
onescm.com
objectstore.com
support.engineyard.com
onescm.com
onescm.com
status.biznessapps.com
support.engineyard.com
WWW.ONESCM.COM
onescm.com
*.onescm.com
WWW.ONESCM.COM

Certificate

The complete raw certificate details for onescm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2PlPgtq6b5yMbWYBLQY
pY4/0dBV6mtdK3m/GtRVqvWq/Sx/lkt2zCK13r7sTNCnahGzyQ5193r4T3A7M6MB
x3ZmTORIPyNUILUS5mlZRJdejQ3V18GWmGU+G6wT9JFraVGcotSUgV4iHvpu6C3O
+z05wGph75lIFCpJ/90wBEaVi+RNROBebUYqZS8YZRpoa8OFyv+BZobb/3rI3lBr
QqYtjBhsg/zKpWU0Dx/YOeMYJPMYiQAN6l1TNVTsUN3akEO8W175W9La/5g+BTYx
k9YZjY4g5OavYv9ckOoiy4hu/Si5KMhDynWB/1MRR1NdC7d26GOFLZvsaJ+0vz8J
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4998423812507521348769134182678268531
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onescm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25170682984391747938296720521508535450794941450903524594527382577191163923462988392620924796427281468067920106531710930422180591895373353133092958760793158738402492225979673064502945114084931122415686986641285442541799298758504863172983981935217107786347736179005956942606002889519735029890703756913478421055363386425953057035340277041038766140286937763261286137376540186670113413572089158845743958788455386536069350293395815505358983340451329671592478259630204380430251589029823561986515039436455451598329149581271082526389433463855035336170575415263164073514961570449515031240653421667711361740965236034017026836873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3521bce80abe8a9e2f47c4c3ace44bc551cba03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (680 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onescm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sensage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clearorbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verdiem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1scm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardinalmark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinal-mark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearorbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bpainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olivesoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'right90.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplychainlabels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triactive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verdiem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1scm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1scm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telescopeondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetsmartmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clearorbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartformdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triactive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purchasingnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onescm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchasingnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalmark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onescm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streetsmartmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sensage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartformdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearorbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.right90.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supplychainlabels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telescopeondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1scm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geminiseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geminiseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olivesoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardinal-mark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000188c7a5ac340000040300473045022100a804430a29ca2bb781109280f1c8879deeeb33526a170aafd90eae400606ea98022040bdce4f012a467389427e78a0affe579d3d1c15e8ec01fe39ff546d1a035fb700750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000188c7a5ac4500000403004630440220645c2b7ad54bd6c4ef52dec90ac4f6121024661f32cbe3e3076889b6f72a2d9a0220370dbd6eb8e0150a50a0a87968d03ce3a95cc2aab60ed53e6b6e9bfbf3c5d01e007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000188c7a5abe9000004030046304402202e708cb14f0b03ca9197c283cd659b6a5f28c8cf2683050d02db0b09a9c31b5702204f0b8bb0303613ae6a6028a32ba6b30f45c9c85ff0a2c3f7064ecd41b95e7776
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0002537a20e1b9dcbc9cc5a3865d929e83a443f23d90f6379a1b46be36c757a91a621926fa43a3c7f118c7ba9dadfc2839e6d2b237c9de54c8b5c6c6f305e0733770a760c6d98ceb9e93470cd7dc3f0b1f12eafb8744a881ca2e99eea90ca5680618a2be2488abf8a04770f8e6c42d6b0bb8e184b66b48ad391466effdb105551ad38a70ab781af55826f8a5b9d3b91d0b3029090ef26de6057ad78b59b8142397507866b90774579833b884fef946b558e521e0890b03e4d3f1571e49c63cea566f84c2eb5a6251ebdf566c077eea2d2740a3560acc527640c07f16f6ee0f421aedff10b8ee33bc71ba139a0e55b0a0e04fbf7d120daf33a3321c5a9dbae5f4cf