fedasil.be

- Fedasil -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0d:3c:42:a0:0e:45:7b:f2:19:ea:92:88:1f:e4:d7:83 was issued on by TERENA.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fedasil

Organization: Fedasil
Organization unit: FED
Locality: Bruxelles
Country: BE

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:3c:42:a0:0e:45:7b:f2:19:ea:92:88:1f:e4:d7:83
Serial Number (int): 17592853076672630634112482337135843203
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f1:cd:7d:fa:74:fa:f9:38:0a:b8:cf:87:c5:b6:13:04:26:fa:0b:38
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): e2:48:16:18:d4:9c:0f:cd:81:92:b4:39:b4:0a:84:66:30:9b:b9:2c
Fingerprint (sha256): fc:31:57:f3:f4:25:9f:44:ea:e8:5b:ec:e0:ad:c8:d3:7c:af:71:fc:06:46:6d:8a:4f:3a:98:ab:ae:26:7a:e6

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate fedasil.be

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fedasil.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fedasil.be
srv-dcb-file.fedasil.be
print-klk.fedasil.be
scan-klk.fedasil.be
home-klk.fedasil.be

Other certificates including the domain name fedasil.be

(limited to 100 certificates)
drupal7.vps001.fedasil.dgnus.net
fedasil.be
srv-str-file.fedasil.be
news.fedasil.be
sentry.fedasil.be
altesto.fedasil.be
matchit.fedasil.be
fedasil.be
srv-kap-file.fedasil.be
bamboo.fedasil.be
srv-noh-file.fedasil.be
appsentryprd.fedasil.be
nexus.fedasil.be
sysdoc.fedasil.be
sysdoc.fedasil.be
srv-poe-file.fedasil.be
int.ibz.matchit.fedasil.be
srv-fed-glpi.fedasil.be
srv-sug-file.fedasil.be
srv-fed-glpi.fedasil.be
easypay.fedasil.be
hrportal.test.fedasil.be
drupal7.vps001.fedasil.dgnus.net
srv-dca-rocketchat.fedasil.be
srv-dca-rocketchat.fedasil.be
fedasil.be
matchit.fedasil.be
fedasil.be
srv-flo-file.fedasil.be
srv-dca-rocketchat.fedasil.be
news.fedasil.be
srv-sug-file.fedasil.be
matchitint.fedasil.be
fedasil.be
srv-fed-toolsdev.fedasil.be
srv-are-file.fedasil.be
www.fedasil.be
traveler.fedasil.be
c-b2b.matchit.fedasil.be
fedasil.be
matchit.fedasil.be
mdm.fedasil.be
*.fedasil.be
appsentry.fedasil.be
docs.fedasil.be
fedasil.be
easypay.test.fedasil.be
sentrydev.fedasil.be
fedasil.be
fedasil.be
srv-bro-file.fedasil.be
traveler.fedasil.be
liveagent.fedasil.be
confluence.fedasil.be
matchitacc.fedasil.be
webmail.fedasil.be
news.fedasil.be
sentry.fedasil.be
srv-dca-file.fedasil.be
kanban.fedasil.be
jira.fedasil.be
fedasil-hosting.be
drupal7.vps001.fedasil.dgnus.net
c-b2b-acc.matchit.fedasil.be
srv-fed-fog.fedasil.be
srv-mlz-file.fedasil.be
www.matchit.be
news.fedasil.be
srv-dca-file.fedasil.be
sysdoc.fedasil.be
kanban.fedasil.be
fedasil-hosting.be
srv-dev-cacti.fedasil.be
qat.fedasil.be
fedasil.be
fedasil.be
webmail.fedasil.be
alfresco.fedasil.be
www.fedasil.be
news.fedasil.be
matchit.fedasil.be
docs.fedasil.be
bamboo.fedasil.be
drupal7.vps001.fedasil.dgnus.net
srv-poe-file.fedasil.be
srv-dca-file.fedasil.be
srv-fed-toolsacc.fedasil.be
matchit.fedasil.be
alfresco-dev.fedasil.be
srv-dca-rocketchat.fedasil.be
fedasil.be
sysdoc.fedasil.be
fedasil.be
drupal7.vps001.fedasil.dgnus.net
srv-cha-file.fedasil.be
srv-sug-file.fedasil.be
fedasil-hosting.be
photos.fedasil.be
jira.fedasil.be
hrportal.fedasil.be

Certificate

The complete raw certificate details for fedasil.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17592853076672630634112482337135843203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bruxelles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fedasil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fedasil.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765275945077335827089930217176100395560005613663483207266870764192295452014701682608702151866222757758130585669382142580136505398820171362515616879007275632947404100196354487619966705033607803388063302449766698997243477637940189426734429487524342700608684654439877146597437489553416283931788067426822053321503693118167981637937722042885128348839747883133996114047415954096332133380639418080052932753474603020578087878656237248663323784453445536469759661961334263126855863496657720034660344921199811742346232408097190290254948431054743019077497853944737809153561819071497777161291029338096403252616972083641299464255422760722445831884750402543637664402152290385042741630812840020667721054249050440368924039741058649894841798839553835701923812874947915599909810881917433019258821232792139217788037858712483013101060521526365153741827230930023620456825553483809963245519366335704783000340803530667157028308871773385172407133591654807039673421785009609024853550246301701211663621590847640074391128526801989462054333761564166591000817119140247861088466262697555303703463847984054360822747690142672983902589920349245027667488242656513939129053965669924671311369564615441382077837305543450101688145581832280447261982128609161431302556409851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1cd7dfa74faf9380ab8cf87c5b6130426fa0b38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fedasil.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv-dcb-file.fedasil.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print-klk.fedasil.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scan-klk.fedasil.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home-klk.fedasil.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0000e47b72785483b508bd5d86ca7396dc8ec1bd6e9c8ae662b2f729280ba714a1ade2db566668caf3c9bb6daf53b7b0bfbbbfc9dd5253f9f89ae107b8033c66307730181f90c174dc542af774bfba3d01f69df9162f7c546f818197bf613ba3636ca3f4f3e518f84fa7374ca2a2b94085c0ebfa0f260818c93c880caf68d85aa3e81cb0b18cddf470fa0daccd47eb60e321ef02c7cedcde0d9c16df0637f6736074d02da50af7c5255b5fe3d1b18bff1657290add3d40f1605bc10f58deef9b4402b0968899a1dee7db5edd71af6674d7e6557ebf797ae5955939ac799b7b2b32d1c818fa3da9de32e3a0cbcf2702bf7cecd2a9bd396bdfea134c6a4d4e0d17eb