corpldapemea.statestr.com

- State Street Corporation -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 73:9d:8c:c8:ed:cb:dd:6f:ff:f6:48:e9:9b:ed:da:9d was issued on by Symantec Corporation.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

State Street Corporation

Organization: State Street Corporation
Organization unit: Internet Technology Services
State / Province: Massachusetts
Locality: Quincy
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 73:9d:8c:c8:ed:cb:dd:6f:ff:f6:48:e9:9b:ed:da:9d
Serial Number (int): 153679265578626712386409838055611292317
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 15:8b:1f:e0:07:b2:a0:1d:be:a9:65:af:c8:b3:65:f2:d7:a1:0c:39
Fingerprint (sha256): 00:00:4e:9c:e8:58:11:bd:ed:bb:27:55:bf:52:4b:64:39:70:28:1b:a9:ed:83:76:61:a6:01:94:fc:77:f1:6a

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate corpldapemea.statestr.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for corpldapemea.statestr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

corpldapemea.statestr.com
corpldapemea1.statestr.com
corpldapemea2.statestr.com
corpldapapac.statestr.com
corpldapapac1.statestr.com
corpldapapac2.statestr.com

Other certificates including the domain name statestr.com

(limited to 100 certificates)
corpldapemea.statestr.com
gtsoverview.statestr.com
rits-uat.ssga.statestr.com
dwms02q2.statestr.com
gdcpw5490.statestr.com
ehartt-clo2.statestr.com
kycplatform-preprod.statestr.com
wdcrlvg0015.ssga.statestr.com
na1.bizapps.statestr.com
arch-uat.ssga.statestr.com
amis.statestr.com
statestreetintranet.statestr.com
desjasper.ssga.statestr.com
gvpdfuat52.ssga.statestr.com
SFCPW3212.corp.statestr.com
fre.statestr.com
gvcrsprd67.ssga.statestr.com
gra.statestr.com
sld-preprod.statestr.com
IB4PW3257.corp.statestr.com
gdcvcscamer1.statestr.com
sfculvg0018.ssga.statestr.com
fre.statestr.com
gvcrsdvi67.ssga.statestr.com
ssgaitools-pfm.ssga.statestr.com
mqa2.statestr.com
acc.ssga.statestr.com
*.ssccqa.statestr.com
DEDPW3537.corp.statestr.com
jabhmgamer2.statestr.com
gem.statestr.com
pamanager.statestr.com
gvcrsdr67.ssga.statestr.com
myssc-dev-sg.statestr.com
areapm.statestr.com
crstools-uat.ssga.statestr.com
sfculvg0082.ssga.statestr.com
gvcrsuat68.ssga.statestr.com
jabdl3650.it.statestr.com
sf360.statestr.com
buat-recontmv.statestr.com
nsrdwfe-prd.ssga.statestr.com
gvjbsdr66.ssga.statestr.com
glspl3225.statestr.com
gvwlsuat58.ssga.statestr.com
gaxspapp-uat.ssga.statestr.com
wdcplvg0014.ssga.statestr.com
buat-tlmservice.statestr.com
gvjbsuat87.ssga.statestr.com
mmsg46.statestr.com
fixedincome.ssga.statestr.com
axdsprd.statestr.com
cashviews-dev.ssga.statestr.com
gdcdc50076.statestr.com
sfculvg0006.ssga.statestr.com
master1.devops.ssga.statestr.com
prod-fjw.statestr.com
ses-security.statestr.com
invop-newuat.ssga.statestr.com
cdrapp-dev.statestr.com
invop-uat.ssga.statestr.com
sailpoint.statestr.com
pda-uat-eft.statestr.com
sspr-int-ha.statestr.com
drs-buat.statestr.com
mdf.ssga.statestr.com
*.ssccqa.statestr.com
sfcplvg0123.ssga.statestr.com
PKPPW3201.corp.statestr.com
babelwfe-prd.ssga.statestr.com
nagus.statestreet.com
jabdw3279.corp.statestr.com
sfculvg0042.ssga.statestr.com
gdcuw3246.corp.statestr.com
dwms02q2.statestr.com
solrrequesthandler-uat.statestr.com
brtapp2-uat.ssga.statestr.com
gvcolprd51.ssga.statestr.com
babelwfe-dev.ssga.statestr.com
jabpw3410.statestr.com
wdcplvg0082.ssga.statestr.com
aedp38.statestr.com
ams-xmgbrk-mmsg44.statestr.com
gdcps2200.statestr.com
DEDPW3538.corp.statestr.com
DEDPW3732.corp.statestr.com
igbpw3261.corp.statestr.com
esf-uat.statestr.com
hpmweb.corp.statestr.com
gdcpl4119.statestr.com
LCPPW3560.corp.statestr.com
govapm.statestr.com
ehainq-clo2.statestr.com
gvcmsdr56.ssga.statestr.com
jira.dev.us-east-1.aws.galleon.c.statestr.com
sfcplvg0031.ssga.statestr.com
inss2007.corp.statestr.com
aofs08.statestr.com
aci.statestr.com
buat-fat.statestr.com

Certificate

The complete raw certificate details for corpldapemea.statestr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtzEJSnvhY7Wq8Kr7aid
505SyD63NMyiaQaxCrPq0hNwEsKmHPFNWY4uCRALhO4wXGTMsEOk0TdiDPdyiNUC
SPy4UUnlnzJ+4dOmJTKdyoYwHuYAHJdQxwpjz4fQf1+2xS3aVUn7DlfyaiT22vA1
c1CuDvaRsYPUYziwtvW1hWMCJ0cO67rJSao4ndD4vS3u7HF4uf0ZijqYa2PDVPJH
llXEHFgu1YgQSXdZOsS/7wDg6YGKeI/of29LtZVFgezVzjuJOeVfkv1VX8Mewjs4
PungF8jTz/mhgBPSkpWzeQzOM8ee2t4IW3ocOwdG51vmiuNTN1huNo84ShXMpa3H
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 153679265578626712386409838055611292317
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Quincy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'State Street Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Internet Technology Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'corpldapemea.statestr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24094141810275076656840754030233573439021057193063395783411405492260337006618937513404128920407888973626542270727490003496692175220083961591944684195308601982369144695864387065626617854106323309140955591479745527462081006631945864785589043217682633350918427684711900954638692314401559223867367095851451472069157060143790595942902218596337900870323579364202212554594781623523700490058361727800340564891012144645891036781650222762242465006642721537789804691308964878207888379561391812060338407573124746292128249563598975743758684607776641448316165239309474426609389387857621855268400981599262685660220534305115083753253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpldapemea.statestr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpldapemea1.statestr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpldapemea2.statestr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpldapapac.statestr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpldapapac1.statestr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpldapapac2.statestr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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