us51ca.eyxstaging.net

- Ernst & Young Nederland LLP -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 61:8e:0a:88:fb:4e:4f:b2:47:92:9c:2a:52:a3:3d:c9 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ernst & Young Nederland LLP

Organization: Ernst & Young Nederland LLP
State / Province: Georgia
Locality: Alpharetta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 61:8e:0a:88:fb:4e:4f:b2:47:92:9c:2a:52:a3:3d:c9
Serial Number (int): 129672635421950333686292268897133608393
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 02:1d:57:51:ca:8d:6a:16:44:c8:cf:99:70:9a:fe:f7:92:49:86:50
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 23:48:58:75:25:a6:61:49:a3:45:8a:48:32:e9:7a:78:7c:80:b4:c0
Fingerprint (sha256): f4:78:51:7f:17:4b:bd:4f:a9:b8:63:67:17:a1:36:1c:ee:42:eb:a9:11:b0:f1:20:7d:84:a4:f5:ce:a4:6f:3e

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate us51ca.eyxstaging.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for us51ca.eyxstaging.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

us51ca.eyxstaging.net

Other certificates including the domain name eyxstaging.net

(limited to 100 certificates)
de63u.ey.com
tasdigitalexperience-uat.ey.com
identity.VWHosting.eyxstaging.net
publish.tasdxportal.eyxstaging.net
bomgar-poc.ey.com
derusvlxsphbe02.eyxstaging.net
de41ueyi.ey.com
app-k2u2.ey.com
SessionState-EYTC.eyxstaging.net
eygobi-emeia-stg.ey.com
publish.tasdxportal-uat.ey.com
de01u6.ey.com
gobtadmin-EMEIA-stg.ey.com
ussecvmxtdmsq02.eyxstaging.net
USSECVMSTCEAP02.eyxstaging.net
DERUSVMXGCRAP01.EYXSTAGING.NET
AIOpsLAM.eyxstaging.net
notify-eyiu2.eyxstaging.net
sfglobalanalytics-stg-core.eyxstaging.net
eycanvasuat2app-us.eyxstaging.net
adfstestpoc.ey.com
de.stsx.ey.com
cpt2rpt-int.eyxstaging.net
view.tasdxportalx.eyxstaging.net
exportapi-eyiu.ey.com
EY-BAC-SUT-APP-STG.EYXSTAGING.NET
taxprocesses-stg.eyxstaging.net
tpweb-stg-emeia1.ey.com
DEFRAVMSCPTSSR1.eyxstaging.net
tms1-stg.ey.com
eycanvasuat2apperp-de.eyxstaging.net
octopus.EYXSTAGING.NET
us.lsiac.eyxstaging.net
de51ueyi.ey.com
wotcapp.eyxstaging.net
us.wpapi-tcpu1.ey.com
globalaccess-ua.ey.com
us.ssas-tcpu2.eyxstaging.net
de63u.ey.com
eybridge-stg-emeia.ey.com
eybridge-stg-emeia.ey.com
mob-client-app-uat.eyxstaging.net
DEFRNCMXGPPC01.EYXSTAGING.NET
app-k2u2.ey.com
api-custtaxu.ey.com
identity.apprenda.eyxstaging.net
DERUSCMXRAMSQ01.eyxstaging.net
DEFRABMXOMSGW01.EYXSTAGING.NET
eycanvasuat3dataerp-de.eyxstaging.net
tms-105-stg.ey.com
picart-ext-stage.ey.com
ogs-EMEIA-stg.ey.com
taxprocesses-stg-temp.ey.com
de15ca.eyxstaging.net
DEFRNVMXBPRSQ01.eyxstaging.net
de01u7.eyxstaging.net
am-uatREP.eyxstaging.net
cbcr-stg-emeia1.ey.com
am-qa3.ey.com
ampf.idaasuat.eyxstaging.net
gcsec.eyxstaging.net
eycanvasuat3apperp-us.eyxstaging.net
am-uat.ey.com
sfglobalanalytics-stg-core2.eyxstaging.net
de01cau6.eyxstaging.net
gobtuat1.ey.com
DEFRNVMXPMTAP01.eyxstaging.net
DE02u6.eyxstaging.net
eygobi-uat.ey.com
de51ueyi.ey.com
filetransfer-stg.ey.com
tms1-stg.ey.com
eycanvasuatdoc-us.eyxstaging.net
eycanvasuat3erp-us.ey.com
us.stsx.ey.com
ogsuat1.ey.com
paygenreports.eyxstaging.net
globaloneadminuat1.ey.com
USSECCMSSQCSZ09.EYXSTAGING.NET
am-uatAPP.eyxstaging.net
DERUSBLXAPDC01.eyxstaging.net
globalaccess-qa.ey.com
DEFRNVMXGPPRS01.EYXSTAGING.NET
dewfmu6.eyxstaging.net
view.tasdxportalx-uat.ey.com
adfsdevpoc.ey.com
tms1-stg.ey.com
eymaxx-stg-us.eyxstaging.net
us29u.ey.com
eysphere-stg-db.eyxstaging.net
invoke-qa.ey.com
defracmssqcsz09.eyxstaging.net
am-qa3APP.eyxstaging.net
de51u.ey.com
de51ca.eyxstaging.net
USSECCMSSQZE201.eyxstaging.net
ws01.onespaceu2.eyxstaging.net
adfsdevpoc.ey.com
emeia1.staging.cbcrweb.ey.com
eycanvasuat2app-de.eyxstaging.net

Certificate

The complete raw certificate details for us51ca.eyxstaging.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2vJ2iZ+7u29WbhF6C4A
V/WLvCw/Syu/tRoGAEyEEOFooNzaRdKCOveszJmbn6V/ZWfSxc5dF5s/AjxJ8gLl
tjdz+Vz+GtlXxF2hUxU1J7YIvZIFcmlJ03gw3iocHpUiskTh18f96ucNTnnhOwx2
YQJMoB4zdSMUr7lMCrT/+1SA7z3MLXdc9UxjZDsBrfmhCEaySfk9cRR14hd7Zig1
CSc4IHOzMUAnwF5HrxDyoGWCyIOObu3weohIw+G3/N/C6ZNO0h3HUEHisE1hGsS2
zCjI0XDucZ1nqy6+UeaPvGRmZ/ZTaK4OuViqxG1QSW055dSSAqxw4Vp4qxLyGS2r
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 129672635421950333686292268897133608393
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-17 05:00:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 05:00:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alpharetta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ernst & Young Nederland LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us51ca.eyxstaging.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24164668731471411075282761853877168838458974155520622274175164154627704071956122866906486209243682371223615372525971508575588991534304033070167549141596531339866529171960530503506188810359987849554675070779301667760923219518751086614009492080462368982129153142094638391433117367174471134226353795085502605895994535800067201630150248406183243702369082717606995188593153382829672011215858537689138110248980951899570264658349585718237492306722254620673354308854353595248695328133295631025917342218865468743350758807018108863146734167620151379103410310704417313150122926353169645070913050123050417185546400783257836563301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							021d5751ca8d6a1644c8cf99709afef792498650
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us51ca.eyxstaging.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00af18cfbddb9d737deb8d95db4df6d94065aff8d9c4a0f5700b5cfdd7b169e64d4a3e0a4d495c1666901d3d75e778bde271023989e92980d44c559aabc69cbdb95d6d58a44aebda6bf02026e7a36545e8ad2f78a83d6cd78b46f5d1a481d2871d13fc8d148ddf34ff553a2d82c9fb5e004e178b97a1a180d5b1a65166519c2612d58fb9dad4ebe87f7190672962e826edefd02db9681ff8c10265645514b80d3c23d36ddc248aeea11196ff132a05ae79df778f808506a0abad1ac882c61ba9289bcb1f427de2a10456c79e57b9aa209b76c250319aacb36acf82857e0e1fd5addd9d11208243eb595151ca00994db4aea024ec6e695ea47843fc34fb0c8b412f