innovativebiscuits.tlxmobility.com

- Microsoft Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:ee:db:4f:bf:3a:31:1f:45:89:2a:d0:74:d6:ec:1f was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:ee:db:4f:bf:3a:31:1f:45:89:2a:d0:74:d6:ec:1f
Serial Number (int): 10544810788735724974854288537726413855
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: cf:39:76:58:8f:68:f5:a9:e1:5a:ef:ec:71:8f:60:13:59:e7:d5:e2
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 1c:b4:15:a6:de:18:fc:83:34:4c:71:29:16:a3:99:96:be:0d:7a:d5
Fingerprint (sha256): 00:3b:39:bb:23:87:0e:65:4e:5c:a9:35:e8:28:8e:f2:d8:c9:5e:bf:59:9f:1c:cf:38:0a:80:1e:d2:55:9b:9d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate innovativebiscuits.tlxmobility.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for innovativebiscuits.tlxmobility.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

innovativebiscuits.tlxmobility.com

Other certificates including the domain name tlxmobility.com

(limited to 100 certificates)
cert00084-azurecdn.akamaized.net
cert00066-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
innovativebiscuits.tlxmobility.com
cert00080-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00076-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00080-azurecdn.akamaized.net
cert00063-azurecdn.akamaized.net
cert00094-azurecdn.akamaized.net
cert00066-azurecdn.akamaized.net
cert00019-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00094-azurecdn.akamaized.net
cert00066-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00066-azurecdn.akamaized.net
cert00066-azurecdn.akamaized.net
cert00089-azurecdn.akamaized.net
cert00063-azurecdn.akamaized.net
cert00019-azurecdn.akamaized.net
cert00080-azurecdn.akamaized.net
cert00077-azurecdn.akamaized.net
cert00080-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00066-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00081-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00066-azurecdn.akamaized.net
cert00066-azurecdn.akamaized.net
cert00055-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00077-azurecdn.akamaized.net
cert00094-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00077-azurecdn.akamaized.net
cert00089-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00019-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00076-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00066-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00070-azurecdn.akamaized.net
cert00061-azurecdn.akamaized.net
cert00080-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00066-azurecdn.akamaized.net
cert00066-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00076-azurecdn.akamaized.net
cert00076-azurecdn.akamaized.net
cert00063-azurecdn.akamaized.net
cert00080-azurecdn.akamaized.net
cert00055-azurecdn.akamaized.net
cert00072-azurecdn.akamaized.net
cert00080-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00077-azurecdn.akamaized.net
cert00055-azurecdn.akamaized.net
cert00089-azurecdn.akamaized.net
cert00077-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00049-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00077-azurecdn.akamaized.net
cert00094-azurecdn.akamaized.net
cert00080-azurecdn.akamaized.net
cert00061-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00077-azurecdn.akamaized.net
cert00081-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00019-azurecdn.akamaized.net
cert00080-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00038-azurecdn.akamaized.net
cert00070-azurecdn.akamaized.net
cert00089-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00066-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00081-azurecdn.akamaized.net
cert00055-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net

Certificate

The complete raw certificate details for innovativebiscuits.tlxmobility.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1aiF7qy83VEBR/R0elj
KQTz5OMJ0ULZEIdTS2FJFuQpRc5sMi4aX8PhIX8eug6kpsr0W5lZyc/TqIWBz8Zu
0aL1EKYsybGaSCm1mDfjx3mfGyUb6y+Zbf7IzSGC/EIJ42cMi5Sr9VGrdF3K/Iu7
WLyUrZ1R207N/5D95C3Dd86hxO++ztRkrGTCHOxOvHi22F0BYDc4UNYpg1kxiFGh
iN00urbbP+hAElRH+ojNBCMJzOUWA43BtBqwWbjLl+JBu3p5ICdMOyq66mm+ILql
q80YSH4wcOomcFs+W8oj+Y/LUmcUDucuqE2ngd3OyPighjfijRSrxwaoi2QU7F7e
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10544810788735724974854288537726413855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'innovativebiscuits.tlxmobility.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23649283439250004891226153969739047881807912281709922474744776212517972739175175400066458396698116018524246819371896898920583147113319819193108341826912083555381000403995605210141618463100474183075274344299345531606482115575236751644264395638671580122424292395530151953329048438007462138458471220216940967785106324576510238147445980195830312693703190465947721697466112944388431639182606440119774478953919373923906000348152085580589263095477134267142489954463138921081176887051456585437657524993253937630617771960881583970519236908501496810565838706276123574615145593967138787405058380039628012766824911059241379225309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf3976588f68f5a9e15aefec718f601359e7d5e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovativebiscuits.tlxmobility.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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