avastportal.gendigital.com
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 45:b9:09:7d:d4:c7:e3:8f:0d:fc:26:59:bd:18:6b:4a was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=avastportal.gendigital.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 45:b9:09:7d:d4:c7:e3:8f:0d:fc:26:59:bd:18:6b:4aSerial Number (int): 92677499139047358426029046007344950090
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 86:08:f0:16:4e:cf:7c:6c:8e:13:4b:53:10:3c:92:cf:77:92:45:a8
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): cb:03:30:c5:d5:ef:46:f1:09:ee:94:21:9c:f5:36:d5:99:5a:dd:25
Fingerprint (sha256): f7:48:ff:aa:b2:d7:3c:e2:4b:ff:ee:87:da:5c:39:f3:ae:15:8d:11:d0:8c:fe:e8:b7:5d:e1:75:c4:d1:60:51
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/HGPGiG4BFacCRL Distribution Point: http://crls.pki.goog/gts1p5/ZLjfCcC0tzo.crl
Check the revocation status for certificate avastportal.gendigital.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for avastportal.gendigital.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
avastportal.gendigital.com
Other certificates including the domain name gendigital.com
(limited to 100 certificates)
biz.gendigital.com
nlok-guest.nortonlifelock.com
geo-preview.gendigital.com
bizblog.gendigital.com
dev.gendigital.com
avastemail.gendigital.com
gencentral-cms.gendigital.com
gencentral.gendigital.com
gendigital.com
gencentral.gendigital.com
gencentral-cms.gendigital.com
bizemail.gendigital.com
avastlanding.gendigital.com
bizblog.gendigital.com
prod.gendigital.com
as2p.gendigital.com
qa.gendigital.com
greenhopper.gendigital.com
gencentral.gendigital.com
guidelines.gendigital.com
mft.gendigital.com
gms-qa.nortonlifelock.com
checkoutuat.gendigital.com
pub.gendigital.com
guidelines.gendigital.com
checkoutuat.gendigital.com
checkoutuat.gendigital.com
avastinfo.gendigital.com
greenhopper.gendigital.com
avastblog.gendigital.com
bizblog.gendigital.com
bizemail.gendigital.com
checkout.gendigital.com
stg.gendigital.com
benefits.gendigital.com
ideabox.gendigital.com
gendigital.com
checkout.gendigital.com
prod2.gendigital.com
checkoutdev.nortonlifelock.com
mft.gendigital.com
avastblog.gendigital.com
avastlanding.gendigital.com
prod.gendigital.com
dev.gendigital.com
investor.gendigital.com
mft-stg.gendigital.com
checkoutdev.nortonlifelock.com
dr.gendigital.com
gencentral.gendigital.com
mft-dev.gendigital.com
gencentral-cms.gendigital.com
newsroom.gendigital.com
avastbusiness.gendigital.com
avastlanding.gendigital.com
mft-stg.gendigital.com
avastbusiness.gendigital.com
biz.gendigital.com
newsroom.gendigital.com
avastportal.gendigital.com
nlok-guest.nortonlifelock.com
geo-preview.gendigital.com
bizblog.gendigital.com
dev.gendigital.com
avastemail.gendigital.com
gencentral-cms.gendigital.com
gencentral.gendigital.com
gendigital.com
gencentral.gendigital.com
gencentral-cms.gendigital.com
bizemail.gendigital.com
avastlanding.gendigital.com
bizblog.gendigital.com
prod.gendigital.com
as2p.gendigital.com
qa.gendigital.com
greenhopper.gendigital.com
gencentral.gendigital.com
guidelines.gendigital.com
mft.gendigital.com
gms-qa.nortonlifelock.com
checkoutuat.gendigital.com
pub.gendigital.com
guidelines.gendigital.com
checkoutuat.gendigital.com
checkoutuat.gendigital.com
avastinfo.gendigital.com
greenhopper.gendigital.com
avastblog.gendigital.com
bizblog.gendigital.com
bizemail.gendigital.com
checkout.gendigital.com
stg.gendigital.com
benefits.gendigital.com
ideabox.gendigital.com
gendigital.com
checkout.gendigital.com
prod2.gendigital.com
checkoutdev.nortonlifelock.com
mft.gendigital.com
avastblog.gendigital.com
avastlanding.gendigital.com
prod.gendigital.com
dev.gendigital.com
investor.gendigital.com
mft-stg.gendigital.com
checkoutdev.nortonlifelock.com
dr.gendigital.com
gencentral.gendigital.com
mft-dev.gendigital.com
gencentral-cms.gendigital.com
newsroom.gendigital.com
avastbusiness.gendigital.com
avastlanding.gendigital.com
mft-stg.gendigital.com
avastbusiness.gendigital.com
biz.gendigital.com
newsroom.gendigital.com
avastportal.gendigital.com
Certificate
The complete raw certificate details for avastportal.gendigital.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIQRbkJfdTH448N/CZZvRhrSjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yMzA2MTYxMTM0NDVaFw0yMzA5MTQx MTM0NDRaMCUxIzAhBgNVBAMTGmF2YXN0cG9ydGFsLmdlbmRpZ2l0YWwuY29tMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsxKvROhSRMlKj44QQBaI+5v WmPuzYnnjDj3A2NobTLs2WTEJCHKIewoD5wgKDp/Tdgxjsd3F2w3OlVSZG373Xoj KYz4T4wxf6l265WIVuyHQIFxFe00WG3Mv4qPXZkEmPdN3ImiLoWEgYXZ6vw8P8WF o2LqWYzcoUpUiKKnJ8TXVTORa+qJsPYuu+MiXrnhcsZcQ1jt2wyieCUnDlNJNTuF HG6RVJwZTisfGdoSx+GJZB1lIyi+dzmOHN2j5Dt2jziL/EnKS9tfu7hLvznTtq5y RNDHV4QGaoq5nyXjuAhw4e9ybXCNLBZ5GQZiUirfHZPx30A1HeWvDHEy2N+LbwID AQABo4ICfzCCAnswDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMB MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIYI8BZOz3xsjhNLUxA8ks93kkWoMB8G A1UdIwQYMBaAFNX8ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1 BggrBgEFBQcwAYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvSEdQR2lH NEJGYWMwMQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0 czFwNS5kZXIwJQYDVR0RBB4wHIIaYXZhc3Rwb3J0YWwuZ2VuZGlnaXRhbC5jb20w IQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGg L6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxcDUvWkxqZkNjQzB0em8uY3Js MIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUAejKMVNi3LbYg6jjgUh7phBZwMhOF TTvSK8E6V6NS61IAAAGIxDNysgAABAMARjBEAiA1E2dyomcw35cnTKcUi94TXE// /v1BVi/mmtC9oxgiLAIgR2XEIsqTqdJJqjlMORsDQKsmUnqvytph3lzncLnYwo8A dQDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYjEM3GgAAAEAwBG MEQCIHtLLDNXuqD8rFZ6M2u7QljbiFi7BFFXewBEz+IbFXfdAiB06WUrXKWD2FcK hI0GA9ajlZlOAEq0su7oXSs/BPrxMDANBgkqhkiG9w0BAQsFAAOCAQEAFgD4FmEq ZZyV3grxSiLVlx1rssDiE4Qp74tPe/p+3VdrvfxX9XFvxF0bW0gbgbwvrYyUkG2j QM/dRFaUst8NjUGMHS98H3ey+ic8RQC2sW7kJDz1Yte/SiWazFeUJaScki6s+2le W/6IO/8BdF0m6CrytIlSGqFBeO5/aVVOtvqzX2HEZcrKRD4kx3qsWTzd2fh47FoC QVYpxHq44xSc+Ast0TBTllWBBp5FJ6VSdpo8hQcKICpZZz/fjn1oDqNz8URf4C4h NUgcv0DqAKrqFc3asD1N6Va6utc2etugJjApp8EfvR9krpDKQ8WcPKLvW4S91WLZ qavK2Rgmw20NaQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsxKvROhSRMlKj44QQBa I+5vWmPuzYnnjDj3A2NobTLs2WTEJCHKIewoD5wgKDp/Tdgxjsd3F2w3OlVSZG37 3XojKYz4T4wxf6l265WIVuyHQIFxFe00WG3Mv4qPXZkEmPdN3ImiLoWEgYXZ6vw8 P8WFo2LqWYzcoUpUiKKnJ8TXVTORa+qJsPYuu+MiXrnhcsZcQ1jt2wyieCUnDlNJ NTuFHG6RVJwZTisfGdoSx+GJZB1lIyi+dzmOHN2j5Dt2jziL/EnKS9tfu7hLvznT tq5yRNDHV4QGaoq5nyXjuAhw4e9ybXCNLBZ5GQZiUirfHZPx30A1HeWvDHEy2N+L bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 92677499139047358426029046007344950090 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-16 11:34:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-14 11:34:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avastportal.gendigital.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22066205178081943289703744882590145698145495191985560433941709040416680978276146872323027089682516971879778782667552744991935569262794494300063995654970503764317077600714771886654846461162002161034383122314011331524254815279201190178258872813044339418340846293580083380166443825865803191831437916480207189901014430954166971019487632774336029640946293319632610626185601139453356995551254857458061662181280444561119664326504922695222170724943594542077497189706669570748549850719034485123459568829920436754580245300425298622863678716909185581667761766927053839855730788581586102806701266567114457302903016755145461435247 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8608f0164ecf7c6c8e134b53103c92cf779245a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/HGPGiG4BFac' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avastportal.gendigital.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/ZLjfCcC0tzo.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188c43372b20000040300463044022035136772a26730df97274ca7148bde135c4ffffefd41562fe69ad0bda318222c02204765c422ca93a9d249aa394c391b0340ab26527aafcada61de5ce770b9d8c28f007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000188c43371a0000004030046304402207b4b2c3357baa0fcac567a336bbb4258db8858bb0451577b0044cfe21b1577dd022074e9652b5ca583d8570a848d0603d6a395994e004ab4b2eee85d2b3f04faf130 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001600f816612a659c95de0af14a22d5971d6bb2c0e2138429ef8b4f7bfa7edd576bbdfc57f5716fc45d1b5b481b81bc2fad8c94906da340cfdd445694b2df0d8d418c1d2f7c1f77b2fa273c4500b6b16ee4243cf562d7bf4a259acc579425a49c922eacfb695e5bfe883bff01745d26e82af2b489521aa14178ee7f69554eb6fab35f61c465caca443e24c77aac593cddd9f878ec5a02415629c47ab8e3149cf80b2dd13053965581069e4527a552769a3c85070a202a59673fdf8e7d680ea373f1445fe02e2135481cbf40ea00aaea15cddab03d4de956babad7367adba0263029a7c11fbd1f64ae90ca43c59c3ca2ef5b84bdd562d9a9abcad91826c36d0d69