mail.deac.lv

Issued by GeoTrust DV SSL CA

About this certificate

This digital certificate with serial number 07:3e:06 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=Q/f8A1mC2nGT1ThUbW2WBdzjFf2yKR-y,CN=mail.deac.lv,OU=GT01539495+OU=See www.geotrust.com/resources/cps (c)13+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:3e:06
Serial Number (int): 474630
Serial Number lenght: 19 bits, 3 octets

SubjectKeyId: ec:6a:81:d5:3a:39:24:6d:1c:2a:78:da:7a:f9:39:05:d9:83:00:eb
AuthorityKeyId: 8c:f4:d9:93:0a:47:bc:00:a0:4a:ce:4b:75:6e:a0:b6:b0:b2:7e:fc

Fingerprint (sha1): 75:62:e1:7a:db:fd:2a:f1:25:71:c5:24:b7:02:8b:d8:da:45:94:a1
Fingerprint (sha256): 00:17:f8:35:c3:7b:42:6d:65:ec:ab:47:f3:11:6f:bd:2e:9f:a4:2c:15:09:45:30:00:27:a5:24:44:ff:b5:ea

Issuing Certificate URL: http://gtssldv-aia.geotrust.com/gtssldv.crt

Revocation information

OCSP Server: http://gtssldv-ocsp.geotrust.com
CRL Distribution Point: http://gtssldv-crl.geotrust.com/crls/gtssldv.crl

Check the revocation status for certificate mail.deac.lv

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.deac.lv

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.deac.lv

Other certificates including the domain name deac.lv

(limited to 100 certificates)
mail.deac.lv
webhost-11.deac.lv
*.deac.lv
*.deac.lv
*.deac.lv
webhost-11.deac.lv
sirowaclinic.com
mail.deac.lv
sirowaclinic.com
*.deac.lv
sirowaclinic.com
mail.deac.lv
webhost-11.deac.lv
sirowaclinic.com
sirowaclinic.com
*.deac.lv
mail.deac.lv
webhost-11.deac.lv
exchange.deac.lv
*.deac.lv
*.deac.lv
*.deac.lv
exchange.deac.lv
mailhub.deac.lv
*.deac.lv
mailhub.deac.lv
docs.deac.lv
*.deac.lv
helpdesk.deac.lv

Certificate

The complete raw certificate details for mail.deac.lv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIDBz4GMA0GCSqGSIb3DQEBBQUAMGExCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQLExREb21haW4gVmFsaWRh
dGVkIFNTTDEbMBkGA1UEAxMSR2VvVHJ1c3QgRFYgU1NMIENBMB4XDTEzMDgwODA1
NDIzMloXDTE1MTEwOTA5MTI1NFowgcMxKTAnBgNVBAUTIFEvZjhBMW1DMm5HVDFU
aFViVzJXQmR6akZmMnlLUi15MRMwEQYDVQQLEwpHVDAxNTM5NDk1MTEwLwYDVQQL
EyhTZWUgd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzIChjKTEzMTcwNQYD
VQQLEy5Eb21haW4gQ29udHJvbCBWYWxpZGF0ZWQgLSBRdWlja1NTTChSKSBQcmVt
aXVtMRUwEwYDVQQDEwxtYWlsLmRlYWMubHYwggIiMA0GCSqGSIb3DQEBAQUAA4IC
DwAwggIKAoICAQChc7BZ8xj7eBmJN/wRt9MbCjowA6zuMyUUa1wPS04qAzACS6gx
PYz1LwtQgUX90cY1Rkdm3bAG7l0ch7sJr3bykopF+8Np6GJvY30B6EKJHDBkzL/Y
cHhFRRWdGtnWl+F3bdqBN7UIZboPbdu1xfTnLqB+ir3XGqIVM6mDK8HCTarCiUPr
PyBT2qh7yRUa2yRR3yeP/l/+YgkENVlrhj9DEoysOwjRgdPIl4p/JqFcHBUQxnBE
oO3NwmactKOzX9qGJG7ns4IeYBNif7H4IrDsP2uxpI8+iWBUpMVje4u4StS/bxPe
tPDBRIGa4ayZFjJYeTzHoy6uEKvO+Nrf72u/Ma+QLx+lq8BVHS+EqsNNKglNXYlt
L4KA3o2ckTz0lykZOXq9+Elwm1dBQt85z3MpQp1vF1DWyuJ5nAfUxPPAXC+RKdRP
x9PMmUS1iLYiITOlFQww+pNHwEGfnBwH0rViYMX3O2M+H/Z3HORBZazGbyeMJMUA
hCLYcMwvBo9pfvhC6CJ1Kip+ptAkIuEWdzkV415ZBv3lusQOEVfNiQx30r+H/02D
F4g3JlcscHpqVFqdkLeayRCnzuA0s//OB7ZGQNzxJ6cfC6i4MWuLlom6TXkhbwYi
QVgAujOaOPZ3FcUcW2aTes3WdfHnm7faDjVLiMAgPmvf4Sfy/tb47aiIuQIDAQAB
o4IBojCCAZ4wHwYDVR0jBBgwFoAUjPTZkwpHvACgSs5LdW6gtrCyfvwwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAXBgNVHREE
EDAOggxtYWlsLmRlYWMubHYwQQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2d0c3Ns
ZHYtY3JsLmdlb3RydXN0LmNvbS9jcmxzL2d0c3NsZHYuY3JsMB0GA1UdDgQWBBTs
aoHVOjkkbRwqeNp6+TkF2YMA6zAMBgNVHRMBAf8EAjAAMHUGCCsGAQUFBwEBBGkw
ZzAsBggrBgEFBQcwAYYgaHR0cDovL2d0c3NsZHYtb2NzcC5nZW90cnVzdC5jb20w
NwYIKwYBBQUHMAKGK2h0dHA6Ly9ndHNzbGR2LWFpYS5nZW90cnVzdC5jb20vZ3Rz
c2xkdi5jcnQwTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEW
JWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwDQYJKoZIhvcN
AQEFBQADggEBAGTplv9Rg7q6VK2gpQE+zNsaL4HcHJodDFAdOGal96rt1Sk62+Mi
0JrNXHCUxH269Q4/orhL4lDaML1G55wJ6HsfyMTT9ru+kjA1ixHmBQECx2eNafrv
awfJAO7rH2h+wL69LBV+mTW6ERiMfDOneFux3ZfaGWQISgBNeprM7HMyK0QazmLv
Z1N9uF0p7Jtdgc/9q5CkJ3Eu+JlOsbmvm3q0fQooFmst9yRDK1K1JOAAZSYVfhNL
X2Ofa3H0urKzxFVoy+G+lbed4IjknO95nYClb4Gd7I+ZE7+Mve9zu89xrOyKLPMp
FTBcNAvYX4uiFQyOaGL5qrUnRak3khb62zA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 474630
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-08 05:42:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-09 09:12:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Q/f8A1mC2nGT1ThUbW2WBdzjFf2yKR-y'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT01539495'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.deac.lv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 658666325507959972102894655217097259463260593223369994814912056102478925717198707757185262055863115231032151448169482010101681848955167933410868245388754936532640591786579396239742041619783387099947756572748302113260463920695674950614569170135870848229202103552954274617840789085878867366982841929198294755282812752887896765314171338452198263812418372607124271283835458267495768038095500572568589533468408784555279866820006163745382607796153720634082221821122041706508379899381239803558145030093730226309619992809375682743589083134623835611245743903905664909195977963025715485555344978460943306425261034631571252391237193176706335147222084319021783136612919141504130261072224225976064476693378476496071283554915851663244100401095236329683240226805475813000595440464145963186213844215379695211808555444176970221258090504055110951332885638985179949291507193746382146068592199788240020150034683756096294677668630089565370118192600781536558098131854842718874005872380996319855880892553930650360181110685213824578454112920215290549942610805169669061163538425881694483811987761854539281808496883690433273809228649526017627811921155691779894940115047277615481725366379402774559889055400674668016642815358943689138771214666882332252007073977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8cf4d9930a47bc00a04ace4b756ea0b6b0b27efc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.deac.lv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-crl.geotrust.com/crls/gtssldv.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec6a81d53a39246d1c2a78da7af93905d98300eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-aia.geotrust.com/gtssldv.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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