www.dgsapps.dgs.ca.gov

- Department of General Services -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:d1:64:2c:dd:2a:83:cb:20:79:d6:75:3b:08:83:50 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Department of General Services

Organization: Department of General Services
State / Province: California
Locality: West Sacramento
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:d1:64:2c:dd:2a:83:cb:20:79:d6:75:3b:08:83:50
Serial Number (int): 2416449834665795073919444414611620688
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 90:0c:f3:a3:58:3c:ab:95:ae:a4:43:78:05:d1:64:cf:cb:91:3e:1d
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 6e:83:fe:7d:62:e1:75:d9:6f:4d:d7:67:20:fe:0e:3d:e0:14:39:9b
Fingerprint (sha256): 00:20:83:c8:bb:8f:8d:40:50:39:f2:f0:41:ff:56:53:1e:2d:ef:1d:22:f1:1d:96:ad:34:74:08:bd:4a:22:d9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.dgsapps.dgs.ca.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dgsapps.dgs.ca.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dgsapps.dgs.ca.gov

Other certificates including the domain name ca.gov

(limited to 100 certificates)
tomalescsd.ca.gov
calbar.ca.gov
cbdmpdcs.cdph.ca.gov
test.cnips.ca.gov
eams.dwc.ca.gov
incapsula.com
staging3.rcpa.ca.gov
5671617594130432-fe3.pantheonsite.io
cases.oehha.ca.gov
google.ftb.ca.gov
incapsula.com
jobstraining.ca.gov
test-web-lws.edu.help
test.cairhub-vic-api.cdph.ca.gov
*.fire.ca.gov
www.dgsapps.dgs.ca.gov
*.cammis-mod-sit.dhcs.ca.gov
carpepm.almonds.com
*.dmhc.ca.gov
familieschange.ca.gov
incapsula.com
accountportalstg.cdph.ca.gov
cert00091-azurecdn.akamaized.net
supedocs.jud.ca.gov
pes.post.ca.gov
espssrs.oshpd.ca.gov
assist.dsh.ca.gov
cert00025-azurecdn.akamaized.net
test-www.ots.ca.gov
www.privacy.ca.gov
passwordreset.stg.courts.ca.gov
tnm.ftb.ca.gov
cert00080-azurecdn.akamaized.net
cert00025-azurecdn.akamaized.net
www.scout.ca.gov
brdcvpnb.net.ca.gov
californiasolarstatistics.ca.gov
ecr1.si.odi.cdt.ca.gov
imperva.com
cert00060-azurecdn.akamaized.net
performance.medi-cal.ca.gov
sdiom.edd.ca.gov
caleprocure.ca.gov
incapsula.com
wca.ca.gov
portal.ncric.ca.gov
dtsc.ca.gov
tahoe.ca.gov
*.ctc.ca.gov
incapsula.com
cert00078-azurecdn.akamaized.net
imperva.com
cert00091-azurecdn.akamaized.net
*.sos.ca.gov
pas.familieschange.ca.gov
calgold.ca.gov
*.kern.courts.ca.gov
saltoncsd.ca.gov
cert00078-azurecdn.akamaized.net
incapsula.com
www.sonoma.courts.ca.gov
www.cba.ca.gov
cert00078-azurecdn.akamaized.net
cert00092-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
incapsula.com
*.sdcourt.ca.gov
incapsula.com
cert00052-azurecdn.akamaized.net
healthstrategicplan.sonomacounty.ca.gov
incapsula.com
apps.calbar.ca.gov
nartc.fcm.arizona.edu
www.yuba.courts.ca.gov
*.library.ca.gov
stanct.org
capiaa.ca.gov
cws.access.ca.gov
bboard.technology.ca.gov
SIS2STAGING.CDPH.CA.GOV
author.chhsa.ca.gov
5675267779461120-fe4.pantheonsite.io
grants.ca.gov
accepttest.medi-cal.ca.gov
calendar.sdzsafaripark.org
phnsdcounty.us
listserv.sco.ca.gov
pass.cdcr.ca.gov
www.casgem.water.ca.gov
mail.buttecourt.ca.gov
cert00068-azurecdn.akamaized.net
cert00098-azurecdn.akamaized.net
cert00025-azurecdn.akamaized.net
incapsula.com
sip.fiscal.ca.gov
panorama.epanet.ca.gov
SVGCALCDRM.ct.dot.ca.gov
incapsula.com
vpn1.dhcs.ca.gov
Info.fresno.courts.ca.gov

Certificate

The complete raw certificate details for www.dgsapps.dgs.ca.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZMX6KMy0vG4sqw7ojJ4
Cy63FqqR45U8vKFtPLrqUeUeExdLsomx7HRhqyZ1VD7r4GQ3D52Mtd9/qYbykhOW
RLhe5aMkw19VfiG8gzaBxmeHgmHiDuNTETkQCDaQHSdHdkfYq7ni5RGP/9RO7bVV
852Dg7+Hfpc8oK73/hHQ5eaMtqE4F9LIk0WY77SBhgzFYQVwVY+zUms+lyuD4nHD
XMPXSfZBM8DMtZRmVmBJsd267mSO5CiXP35AVyDAmW+Rhlt9i/X1Q5v/WSnV0w3n
b8ZQgHP+RIfhd0VTWpl6VLPSOEdc05bC+7TZW5lxhqwq/cgfkhRgxKysnex2zs/F
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2416449834665795073919444414611620688
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Sacramento'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of General Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dgsapps.dgs.ca.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21406807995003057404704246659533595680145512261871274735154565401685767045496089944500657686510307088117434050452021657419792802266276602606663044766170835129185388321308492731992254499657128378693267611729132954085359459719678497419996683367977210338452568125833889481814509411622598656559707144403639597833054318015738496153022419037412520157070835726112872481738385521018179765748133118910175719065329409297049467973402229026971201850336788377998302433650222153317194824572207444712450027494443906016115975121397915769308585747270556242168763586629896231772830214867240111645464991204338826016956917368932428399983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							900cf3a3583cab95aea4437805d164cfcb913e1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dgsapps.dgs.ca.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c5b7fd247000004030046304402207770beb378375194c7336a1f0a860c35cb1b780be47f390eff3bd736fd077df502205881c7242a65d6ee6e61c91a1f2da47a55576140ebdbb449369df989bd682c2900770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5b7fd2680000040300483046022100eacaabae13f8777a9c8c4f1437c42ac35bdda0f2f46a578513bee710bf81ec9a022100b71d921c817ce7a161c0f4255af34f6575f26cc9c62da5b0dc1a82f5a49c6ed5007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c5b7fd2590000040300463044022036ff2b3867261ac69ba2169c42449bfe8082ef1ccf466729f5ba57a1815c41f402201f19f84cf48075594ed5a5f762799ca3be4624058fbc750277456651814bf72e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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