577023702256868311.500075.radius.meraki.direct

- Cisco Systems, Inc. -

Issued by HydrantID SSL ICA G2

About this certificate

This digital certificate with serial number 3f:a4:1f:6d:31:41:0c:1d:98:34:56:10:10:a7:60:b4:4d:11:c9:0f was issued on by HydrantID (Avalanche Cloud Corporation).

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Cisco Systems, Inc.

Organization: Cisco Systems, Inc.
State / Province: California
Locality: San Jose
Country: US

HydrantID (Avalanche Cloud Corporation)

Organization: HydrantID (Avalanche Cloud Corporation)
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:a4:1f:6d:31:41:0c:1d:98:34:56:10:10:a7:60:b4:4d:11:c9:0f
Serial Number (int): 363326478411572707994741075303885677310933846287
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 72:ac:ae:ee:0d:4a:7a:7c:3d:7d:ce:6f:25:cf:d7:a7:72:ab:f5:96
AuthorityKeyId: 98:6a:b6:2d:2e:bf:a7:aa:9f:f6:f7:d6:09:af:d5:8b:57:f9:8a:b7

Fingerprint (sha1): 57:98:8d:99:c1:71:50:e7:d8:e6:df:f9:d9:67:51:40:bc:66:4e:a1
Fingerprint (sha256): 00:05:c3:66:30:b7:cd:1c:e7:84:c5:1e:83:38:ea:bc:01:32:2e:7f:58:e7:5b:45:e6:c0:15:6b:5a:21:a9:52

Issuing Certificate URL: http://trust.quovadisglobal.com/hydsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/hydsslg2.crl

Check the revocation status for certificate 577023702256868311.500075.radius.meraki.direct

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 577023702256868311.500075.radius.meraki.direct

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
IPSEC End System
IPSEC Tunnel
IPSEC User
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

577023702256868311.500075.radius.meraki.direct

Other certificates including the domain name meraki.direct

(limited to 100 certificates)
scep.114598837484935.meraki.direct
scep.114598837484935.meraki.direct
scep.114598837484778.meraki.direct
scep.13725791029982.meraki.direct
*.ac17c8630708.devices.meraki.direct
scep.114598826213236.meraki.direct
*.e0553d848e34.devices.meraki.direct
*.3456fea31e48.devices.meraki.direct
scep.114598837484778.meraki.direct
scep.13725791029982.meraki.direct
scep.114598837484778.meraki.direct
scep.114598837484935.meraki.direct
scep.114598837484780.meraki.direct
*.ac17c8632e8c.devices.meraki.direct
scep.189218156438258.meraki.direct
scep.114598837484778.meraki.direct
scep.114598837484778.meraki.direct
scep.13725791029982.meraki.direct
*.3456fea3ad7f.devices.meraki.direct
scep.114598837484778.meraki.direct
scep.13725791029982.meraki.direct
*.3456fea35da2.devices.meraki.direct
*.ac17c863ba51.devices.meraki.direct
scep.251056543125083.meraki.direct
scep.13725791029982.meraki.direct
*.0c8ddb690ba7.devices.meraki.direct
scep.216425119930400.meraki.direct
scep.189218156438258.meraki.direct
scep.185021236924963.meraki.direct
scep.189218156438258.meraki.direct
scep.13725791029982.meraki.direct
scep.13725791029982.meraki.direct
scep.251056544941704.meraki.direct
*.ac17c80b2466.devices.meraki.direct
scep.185021236924963.meraki.direct
scep.185021236924963.meraki.direct
scep.114598837484780.meraki.direct
scep.189218156438258.meraki.direct
*.3456fea23255.devices.meraki.direct
scep.114598837484780.meraki.direct
scep.247165646065069.meraki.direct
scep.13725791029982.meraki.direct
scep.251056543175279.meraki.direct
3712091992860154513.1484456.radius.meraki.direct
scep.114598837484935.meraki.direct
scep.247165646065069.meraki.direct
scep.247165646060080.meraki.direct
scep.114598837484935.meraki.direct
scep.251056543227531.meraki.direct
scep.189218156438258.meraki.direct
scep.114598837484778.meraki.direct
*.3456fea38880.devices.meraki.direct
*.ac17c80b6927.devices.meraki.direct
720012990425877934.1000436.radius.meraki.direct
scep.114598837484780.meraki.direct
scep.114598837484780.meraki.direct
scep.13725791029982.meraki.direct
scep.114598837484778.meraki.direct
scep.13725791029982.meraki.direct
577023702256868311.500075.radius.meraki.direct
scep.114598837484780.meraki.direct
scep.114598837484780.meraki.direct
scep.251056544632537.meraki.direct
scep.189218156438258.meraki.direct
*.ac17c862020d.devices.meraki.direct
625437398251098132.1005861.radius.meraki.direct
*.ac17c8630684.devices.meraki.direct
*.e0cbbc0aac6e.devices.meraki.direct
scep.13725791029982.meraki.direct
scep.114598837484778.meraki.direct
scep.247165640521364.meraki.direct
scep.13725791029982.meraki.direct
scep.114598837484935.meraki.direct
727331339820342394.1251231.radius.meraki.direct
scep.13725791029982.meraki.direct
720012990425877765.1000436.radius.meraki.direct
scep.114598837484935.meraki.direct
scep.185021237787057.meraki.direct
*.3456fea25ce2.devices.meraki.direct
*.9818885092be.devices.meraki.direct
scep.189218156438258.meraki.direct
573646002536334965.94003.radius.meraki.direct
632192797692258860.536660.radius.meraki.direct
scep.114598837484780.meraki.direct
*.683a1e538c71.devices.meraki.direct
scep.114598837484778.meraki.direct
scep.189218156438258.meraki.direct
662029145223499009.873213.radius.meraki.direct
scep.57548246404608.meraki.direct
686235993220579769.646829496481088052.radius.meraki.direct
*.e0553d84abec.devices.meraki.direct
*.e0cbbc0ac0e5.devices.meraki.direct
scep.185021236933251.meraki.direct
scep.114598837484778.meraki.direct
scep.114598837484780.meraki.direct
*.3456fea44a0a.devices.meraki.direct
scep.114598837484780.meraki.direct
scep.251056543979318.meraki.direct
scep.251056544622967.meraki.direct
*.683a1effcb41.devices.meraki.direct

Certificate

The complete raw certificate details for 577023702256868311.500075.radius.meraki.direct in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wNsX+cyeT+fddn5hNL6
/yDXe465ne3hhtR9RWVXhlVu7SxgkDgCQh0w/xAhsR4aKwk+e5lHe36ipsPlKp+1
0E/vpQN95/sq2wvoGXgdAABuwZ/NJpg5PLmwv9k1RWNilXS4HwTa0Bnbb4knNxPY
VNhat/8Wf11heg1DyCmONUHApYsISctPz3L4q5NLwBNN1k/2UFRHAxtWHWfzxjYM
I9ZdyNIl2Z5NXaP1z8tztKCAmfH8ssCqLHkkXSUlVInf0aci5eiLYJb08SyqMBA7
twpoOIfrr92CvU1uMLFI073OCiXEBnMWA9eDwd1Mis5UaCPTpCnCJMHUYqk0BNat
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363326478411572707994741075303885677310933846287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID (Avalanche Cloud Corporation)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 18:58:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-11 19:08:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cisco Systems, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '577023702256868311.500075.radius.meraki.direct'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27142923678767336471556550646860145871994620379636002973730359954512141133844354023098320852436746233870401591895631052334468695361914094914345499982972766359623547535318836310912731626500969542533285226975944843072126218434148577351783614477503352176109690660521148889489300549849321029278510979109690145836591408198795437647665798976085775715675473264586158513520677432204756090924990522081946290032452107153885653199980731184975089494555473779767672507839408571343283271706801984982145524729422255377745490785506492825614939443203171271528545045756677085788526106483574218648415243445714816716420552627855251910013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 986ab62d2ebfa7aa9ff6f7d609afd58b57f98ab7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/hydsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '577023702256868311.500075.radius.meraki.direct'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.3.900.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.hydrantid.com/support/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.5 (ipsecEndSystem)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.6 (ipsecTunnel)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.7 (ipsecUser)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/hydsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72acaeee0d4a7a7c3d7dce6f25cfd7a772abf596
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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