na1.bizapps.statestr.com

- State Street Corporation -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 05:4b:29:d7:0d:47:a2:57:fd:99:e3:47:7b:ad:7b:f9 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State Street Corporation

Organization: State Street Corporation
Organization unit: Internet Technology Services
State / Province: Massachusetts
Locality: Quincy
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:4b:29:d7:0d:47:a2:57:fd:99:e3:47:7b:ad:7b:f9
Serial Number (int): 7036410860273287229359757694616828921
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: be:0f:f9:87:b4:8f:47:2b:c7:66:a5:6e:d8:c3:e8:ad:36:67:06:ec
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): b4:9c:87:df:3b:ae:be:5a:be:31:87:a9:33:bd:bc:ec:1e:18:bf:79
Fingerprint (sha256): 00:55:42:9a:e9:7f:27:66:cc:8a:3a:7f:77:5a:83:7b:2a:0e:b0:46:9c:a9:14:ef:5f:13:0b:aa:a5:3c:86:ac

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate na1.bizapps.statestr.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for na1.bizapps.statestr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

na1.bizapps.statestr.com

Other certificates including the domain name statestr.com

(limited to 100 certificates)
corpldapemea.statestr.com
gtsoverview.statestr.com
rits-uat.ssga.statestr.com
dwms02q2.statestr.com
gdcpw5490.statestr.com
ehartt-clo2.statestr.com
kycplatform-preprod.statestr.com
wdcrlvg0015.ssga.statestr.com
na1.bizapps.statestr.com
arch-uat.ssga.statestr.com
amis.statestr.com
statestreetintranet.statestr.com
desjasper.ssga.statestr.com
gvpdfuat52.ssga.statestr.com
SFCPW3212.corp.statestr.com
fre.statestr.com
gvcrsprd67.ssga.statestr.com
gra.statestr.com
sld-preprod.statestr.com
IB4PW3257.corp.statestr.com
gdcvcscamer1.statestr.com
sfculvg0018.ssga.statestr.com
fre.statestr.com
gvcrsdvi67.ssga.statestr.com
ssgaitools-pfm.ssga.statestr.com
mqa2.statestr.com
acc.ssga.statestr.com
*.ssccqa.statestr.com
DEDPW3537.corp.statestr.com
jabhmgamer2.statestr.com
gem.statestr.com
pamanager.statestr.com
gvcrsdr67.ssga.statestr.com
myssc-dev-sg.statestr.com
areapm.statestr.com
crstools-uat.ssga.statestr.com
sfculvg0082.ssga.statestr.com
gvcrsuat68.ssga.statestr.com
jabdl3650.it.statestr.com
sf360.statestr.com
buat-recontmv.statestr.com
nsrdwfe-prd.ssga.statestr.com
gvjbsdr66.ssga.statestr.com
glspl3225.statestr.com
gvwlsuat58.ssga.statestr.com
gaxspapp-uat.ssga.statestr.com
wdcplvg0014.ssga.statestr.com
buat-tlmservice.statestr.com
gvjbsuat87.ssga.statestr.com
mmsg46.statestr.com
fixedincome.ssga.statestr.com
axdsprd.statestr.com
cashviews-dev.ssga.statestr.com
gdcdc50076.statestr.com
sfculvg0006.ssga.statestr.com
master1.devops.ssga.statestr.com
prod-fjw.statestr.com
ses-security.statestr.com
invop-newuat.ssga.statestr.com
cdrapp-dev.statestr.com
invop-uat.ssga.statestr.com
sailpoint.statestr.com
pda-uat-eft.statestr.com
sspr-int-ha.statestr.com
drs-buat.statestr.com
mdf.ssga.statestr.com
*.ssccqa.statestr.com
sfcplvg0123.ssga.statestr.com
PKPPW3201.corp.statestr.com
babelwfe-prd.ssga.statestr.com
nagus.statestreet.com
jabdw3279.corp.statestr.com
sfculvg0042.ssga.statestr.com
gdcuw3246.corp.statestr.com
dwms02q2.statestr.com
solrrequesthandler-uat.statestr.com
brtapp2-uat.ssga.statestr.com
gvcolprd51.ssga.statestr.com
babelwfe-dev.ssga.statestr.com
jabpw3410.statestr.com
wdcplvg0082.ssga.statestr.com
aedp38.statestr.com
ams-xmgbrk-mmsg44.statestr.com
gdcps2200.statestr.com
DEDPW3538.corp.statestr.com
DEDPW3732.corp.statestr.com
igbpw3261.corp.statestr.com
esf-uat.statestr.com
hpmweb.corp.statestr.com
gdcpl4119.statestr.com
LCPPW3560.corp.statestr.com
govapm.statestr.com
ehainq-clo2.statestr.com
gvcmsdr56.ssga.statestr.com
jira.dev.us-east-1.aws.galleon.c.statestr.com
sfcplvg0031.ssga.statestr.com
inss2007.corp.statestr.com
aofs08.statestr.com
aci.statestr.com
buat-fat.statestr.com

Certificate

The complete raw certificate details for na1.bizapps.statestr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E2o0qlEKZbb1o5HT6RM
Lx7wgloo9YmjprijqKdnCn27D8HIyD/BM5kM0brwXJE307Ln4FZ3Y2p2Ve4cK72S
td6kvqjopIxNc2kFx66A0BEhUC5V0TEwTnUhjqC3oOKu9tO/3pu3I2HKK/Am30Ew
qKdPvPPJ2dmJ1pd+7B975//T0+aap4JlBssuU2ZVRTIRrEj8s+L4LXBtET1a5kKp
3R2fX+gKcRK7VL7ZCmEfmMBihxeIEW7GSqDvotu3J0fgeHzU680uzJ4RcHMYq1uc
GivT82iPiB7BBEFio1Hf6P56gcGANEs6SbvI7BMx3ZUoG6u4nAiR0Dhr6gS+F5Qt
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7036410860273287229359757694616828921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quincy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Street Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet Technology Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'na1.bizapps.statestr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27810722401731396174115406272112737789356698999386445721405992778479702477987662805320313826020854192226438305813881916443393809330493140726566889209091133839307523473424131218854814830621800705310042890717975285543844377855526329402666634191394620833891998042405998675764003798231225415338677546007909652140337924671186762529616321064265934929437864772419687270070341432011139573632802709637248447123381754837670739600835508194793511541929894012249606072759782481967463596951423645394880806479719513699119071675127046506849595220776662482667160365855583535054025969431285005142626688056592416437755699681810397277607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be0ff987b48f472bc766a56ed8c3e8ad366706ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na1.bizapps.statestr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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