www.bcuic.navitas.com

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 2f:d2:b0:ef:9b:9b:ed:cf:7f:a5:38:cc:dc:ba:b9:9c was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.bcuic.navitas.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:d2:b0:ef:9b:9b:ed:cf:7f:a5:38:cc:dc:ba:b9:9c
Serial Number (int): 63567686829963126484520672440258050460
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 1e:62:9c:1f:9c:51:c6:78:59:97:6d:92:79:07:67:1b:f0:5d:ec:2b
Fingerprint (sha256): 00:0a:c9:16:8d:1f:3b:66:89:6c:54:cb:b1:07:d9:a3:a8:40:69:1c:1d:f7:3e:36:ec:9e:01:2e:15:41:a9:72

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate www.bcuic.navitas.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bcuic.navitas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bcuic.navitas.com

Other certificates including the domain name navitas.com

(limited to 100 certificates)
www.bcuic.navitas.com
study.hibt.navitas.com
sdp.collinsfoods.com
s4-sni.cloudinary.com
access2.navitas.com
www.upic.navitas.com
s4-sni.cloudinary.com
www.unh.navitas.com
s4-sni.cloudinary.com
helpdesk.thescapegroup.com.au
moodle-sae-au.axis.navitas.com
s4-sni.cloudinary.com
moodle.icrgu.navitas.com
moodle.uml.navitas.com
study.wku.navitas.com
study.bcuic.navitas.com
marketing.navitas.com
www.icp.navitas.com
moodle-sae-au.axis.navitas.com
www.uml.navitas.com
moodle.unic.navitas.com
www.icp.navitas.com
study.puic.navitas.com
www.upic.navitas.com
support.canterbury.qld.edu.au
www.financesharedservices.navitas.com
cdn.navigate.navitas.com
theportal.horizons.govt.nz
study.puic.navitas.com
study.puic.navitas.com
moodle.ucc.navitas.com
study.icrgu.navitas.com
*.hic.navitas.com
study.umd.navitas.com
study.bcuic.navitas.com
s4-sni.cloudinary.com
mynavcareer.pep.navitas.com
icrgu.navitas.com
adfs.navitas.com
helpdesk.grv.org.au
www.umass.navitas.com
sslvpn.navitas.com
code.navitas.com
moodle.training.navitas.com
*.eic.navitas.com
code.navitas.com
moodle.libt.navitas.com
mynavcareer.pep.navitas.com
agents.navitas.com
moodle.libt.navitas.com
learning.uml.navitas.com
moodle.hic.navitas.com
wifi.navitas.com
*.navitas.com
www.cric.navitas.com
fdus-68.freshdesk.com
*.training.navitas.com
www.umb.navitas.com
pathways.navitas.com
study.icrgu.navitas.com
usa.navitas.com
www.qld.navitas.com
servicehub.austal.com
knowledge.navigate.navitas.com
study.icws.navitas.com
study.hic.navitas.com
atrea-support.macmillan-platform.com
www.fau.navitas.com
www.icws.navitas.com
s4-sni.cloudinary.com
www.icgru.navitas.com
fdus-68.freshdesk.com
sslvpn.navitas.com
adfs.navitas.com
usawiki.navitas.com
*.training.navitas.com
www.bcuic.navitas.com
*.navitas.com
*.uat.navitas.com
moodle-analytics.navitas.com
build.navitas.com
study.uml.navitas.com
www.icws.navitas.com
navigate.navitas.com
moodle-ucic.axis.navitas.com
www.icrgu.navitas.com
servicedesk.yooralla.com.au
study.libt.navitas.com
www.icp.navitas.com
fdus-68.freshdesk.com
atrea-support.macmillan-platform.com
helpdesk.phsa.com.au
moodle.icrgu.navitas.com
learning.fau.navitas.com
servicedesk.cockburn.wa.gov.au
www.icws.navitas.com
navigate.navitas.com
s4-sni.cloudinary.com
learning.libt.navitas.com
moodle.bcuic.navitas.com

Certificate

The complete raw certificate details for www.bcuic.navitas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgIQL9Kw75ub7c9/pTjM3Lq5nDANBgkqhkiG9w0BAQsFADBC
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS
UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE3MDYxNTAwMDAwMFoXDTE4MDkxNDIzNTk1
OVowIDEeMBwGA1UEAwwVd3d3LmJjdWljLm5hdml0YXMuY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxYmw1+nkL94gT2707bVbHr+fe+Js8uGmWgu
RUagphWG1C8nbtZF+bn/PcbLk1mgY5guRCuqRraaa4na38ekQ5FpGXGSXRoyUXSn
AhdINrQ4qzbLPnj3VNZgPHTFhnVsN3phim3CKIWWgR7Jpv3AFBFWHd51Wti2FFoV
4uFMuUe3kHnrDOz3B+SLLoCcJ/mHSCJh94XkWpCj38jtoFbsVn3vXS2rzLlj+yXh
51KdbGOKhFCLSDBC5A/7qcSDzX/LGXGPYZjW2dYGzNyjPla+j78wnHSV7dIlm8Z3
ebGNzkMen9WtRARlC1zpsvwnuoRQfcyod8xyInYxW2vZnwfLZQIDAQABo4IC+DCC
AvQwIAYDVR0RBBkwF4IVd3d3LmJjdWljLm5hdml0YXMuY29tMAkGA1UdEwQCMAAw
KwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2dwLnN5bWNiLmNvbS9ncC5jcmwwbwYD
VR0gBGgwZjBkBgZngQwBAgEwWjAqBggrBgEFBQcCARYeaHR0cHM6Ly93d3cucmFw
aWRzc2wuY29tL2xlZ2FsMCwGCCsGAQUFBwICMCAMHmh0dHBzOi8vd3d3LnJhcGlk
c3NsLmNvbS9sZWdhbDAfBgNVHSMEGDAWgBSXwidQnsLJ7AyIMsh8reKmAU/abzAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcG
CCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2dwLnN5bWNkLmNvbTAm
BggrBgEFBQcwAoYaaHR0cDovL2dwLnN5bWNiLmNvbS9ncC5jcnQwggF8BgorBgEE
AdZ5AgQCBIIBbASCAWgBZgB1AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM22
7L7MAAABXKpuc2cAAAQDAEYwRAIgasIOl58npcoFtF+rEvUltw0pYgUpcWtzDxdP
y0iH/BgCIFFHr5319VWAB2zSSOpK1Nixrm3E9uFOPuN28OmVON1OAHYApLkJkLQY
WBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFcqm5zmAAABAMARzBFAiATOzvw
1eJCF+OOyFBzfKjl7DMGQ5Dj5mbUAP3sburLyAIhAOzJAdCNmFWKTtL3juadHNbg
SzaEjqL7LTEcFCjtRasOAHUA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo
/csAAAFcqm51XQAABAMARjBEAiAURJZqHjzvcsaBfj0tbCiSFfaBOCi4PtNt5MrE
WrHlQwIgEBg/w+JZAvGmzC1GqeAiYH7o+IxN7Ur4Fqx+hufVqm8wDQYJKoZIhvcN
AQELBQADggEBAIZuxoK2y7t0ujKXp8ZyhSVJIRuAUO3z/YDWFnQynMcJYTg7LVE6
uPQsZqVGnqn5qwSeiuOlqYn1SREhwq2cMfLtScNIVvAniAYaxWA/2oo42sNipyXS
eljEzP2wlidoH6mhOm2Y1S7PLxzxhId5aSbnBfXnOyk0KAsi4mqZqIN1uwlMGMnb
xhQdnSiQc/eEWCe0ur8TUiMYuXnbFhUAkkI4FYXL/bGcYNDE2iEnQGFjtS1gQo37
lAYS4QctC1aBTT/nKAbhaEWVfhLkDNtxB4VPzk99uSfDniyGk5wXX3pBGoLwvOLw
n2FY4JNsW7Igf0ps17cpnZJgslcAR4HVcXY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxYmw1+nkL94gT2707bV
bHr+fe+Js8uGmWguRUagphWG1C8nbtZF+bn/PcbLk1mgY5guRCuqRraaa4na38ek
Q5FpGXGSXRoyUXSnAhdINrQ4qzbLPnj3VNZgPHTFhnVsN3phim3CKIWWgR7Jpv3A
FBFWHd51Wti2FFoV4uFMuUe3kHnrDOz3B+SLLoCcJ/mHSCJh94XkWpCj38jtoFbs
Vn3vXS2rzLlj+yXh51KdbGOKhFCLSDBC5A/7qcSDzX/LGXGPYZjW2dYGzNyjPla+
j78wnHSV7dIlm8Z3ebGNzkMen9WtRARlC1zpsvwnuoRQfcyod8xyInYxW2vZnwfL
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 63567686829963126484520672440258050460
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.bcuic.navitas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23112533080448508592524644126051649716269798826305273663830609715083784456445125072608995776543948002936026047770039847365025700682819364706728121688265893897375749425695637668160593698527496266104540471099074953291673037580831858065800540329107340050112586133378418787777812393536362024092259297561937765796938052445360412755796094419198352253252699949242332331909235294688978372195152832190796013648481191702079629056410543787371304862664083116004523165010093993959105248484910967481839779986221592577914831811662430806073437874803322122062473150314939339287549469290886412853098439727544660601809783260765437283173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcuic.navitas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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