prod-membership-dome.cld.samsclub.com

- Walmart Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 3f:e1:db:01:35:57:d3:e9:d6:58:ff:20 was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Walmart Inc.

Organization: Walmart Inc.
State / Province: Arkansas
Locality: Bentonville
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 3f:e1:db:01:35:57:d3:e9:d6:58:ff:20
Serial Number (int): 19770598148708297228242452256
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: cf:9c:65:6c:25:42:a8:8c:2f:95:e2:98:23:a2:57:ca:ba:47:bb:44
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 22:6b:a9:df:dd:10:15:12:a1:1b:79:af:66:c5:07:82:e3:3b:8c:59
Fingerprint (sha256): 00:58:eb:4a:1b:e7:c8:67:a4:94:ad:48:ef:be:7d:d3:82:96:ec:5b:b1:74:f7:eb:26:d0:b7:41:e2:c7:cb:98

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate prod-membership-dome.cld.samsclub.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod-membership-dome.cld.samsclub.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod-membership-dome.cld.samsclub.com
prod-membership-dome-eus.cld.samsclub.com
prod-membership-dome-scus.cld.samsclub.com
prod-membership-dome-wus.cld.samsclub.com

Other certificates including the domain name samsclub.com

(limited to 100 certificates)
nonprod.samsclub.com
prod-membership-posgateway.cld.samsclub.com
catalog.samsclub.com
nonprod.samsclub.com
pfedcert.wal-mart.com
config-by-category.cld.samsclub.com
sams-labeling-api.prod.cld.samsclub.com
nonprod.samsclub.com
prod-membership-dome.cld.samsclub.com
epic-core-prod.cld.samsclub.com
hubmetrics.samsclub.com
prod-asksam-api.bots.cld.samsclub.com
backroom-delivery.dev.cld.samsclub.com
pc.ui.samsclub.prod.walmart.com
prod.samsclub.com
cf-nonprod2.walmart.com
wem-prod.walmart.com
links.samsclub.com
blog.photo.samsclub.com
gorollick.samsclub.com
smart-alerts.api.stg.eus.cld.samsclub.com
prod.samsclub.com
adlist-api.cld.samsclub.com
nep-stage.services.samsclub.com
stg-geode-linkage-services.cld.samsclub.com
www.samsclub.com
dev-sams-recurring-payments.cld.samsclub.com
photo.samsclub.com
nonprod-int.samsclub.com
ak-prod3.walmart.com
nonprod.samsclub.com
nonprod-intone.samsclub.com
prod-membership-subscription.cld.samsclub.com
*.samsclub.com
vip20-pravaha-qa-https-web-p-1.walmart.com
mbrxo-cpc-api-gateway-qa.cld.samsclub.com
sams-iot-api.cld.samsclub.com
nonprod-int.samsclub.com
supplier.samsclub.com
vip01-misc-qa-https-web-p-3.walmart.com
dev-fresh-inventory-audit-eus.cld.samsclub.com
prod-member-experience-sfclocation.cld.samsclub.com
npclubopsapim.cld.samsclub.com
pravaha.samsclub.com
stage-member-experience-storage.cld.samsclub.com
opinion.asda.com
click.em.samsclub.com
vision.cld.samsclub.com
SWOTrn01.wireless.samsclub.com
experiments.samsclub.com
stg2-tms-load.cld.samsclub.com
www7.samsclub.com
smart-alerts.api.dev.eus.cld.samsclub.com
nonprod.samsclub.com
beacon.walmart.com
payment.samsclub.com
event-horizon-info-eus.cld.samsclub.com
ent-backbone-api-gateway-stg.cld.samsclub.com
stage-membership-metadata.cld.samsclub.com
beacon.walmart.com
mth.api.dev.eus.cld.samsclub.com
fa-nonprod.walmart.com
dev-sams-two-factor-event-processor.cld.samsclub.com
akamai-san41.exacttarget.com
beacon.qa.walmart.com
hec.azsamssplunk.cld.samsclub.com
cf-nonprod2.walmart.com
vip01-misc-qa-https-web-p-6.walmart.com
stg-wallet-api.cld.samsclub.com
sim-dataacquisition-gdsn-takeaction-webapp.cld.samsclub.com
vip12-sams-qa-mobile-api-https-p-5.walmart.com
stg-membership-integration.cld.samsclub.com
cdn.corporate.walmart.com
pravaha-stage.samsclub.com
vip01-4-misc-qa-https-web-p-1.walmart.com
specialoffer.samsclub.com
vip01-misc-qa-https-web-p-2.walmart.com
ccservice-nonprod.walmart.com
pfedcert.wal-mart.com
corporate.walmart.com
nep-pqa.services.samsclub.com
cloud.em.samsclub.com
exports-stg.cld.samsclub.com
webservices.samsclub.com
pfedprod.wal-mart.com
stage-member-experience-search.cld.samsclub.com
dev-membership-subscription.cld.samsclub.com
event-horizon-eus.cld.samsclub.com
fimprodext.walmartbenefits.com
stage-member-experience-dispense.cld.samsclub.com
ak-nonprod3.walmart.com
vip01-misc-qa-https-web-p-1.walmart.com
document.wireless.walmart.com
exports-api-stg.cld.samsclub.com
prod-sams-twofactor.cld.samsclub.com
cf-nonprod2.walmart.com
prodcluboperationsapim.cld.samsclub.com
vip01-misc-qa-https-web-p-6.walmart.com
prod-membership-metadata.cld.samsclub.com
flights.serviceshub.samsclub.com

Certificate

The complete raw certificate details for prod-membership-dome.cld.samsclub.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19770598148708297228242452256
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 16:46:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-15 16:46:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arkansas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bentonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Walmart Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod-membership-dome.cld.samsclub.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 624303920361564208114753634204318579800505638187732755649138328349610206749988807202718226669264432019474600343014785120025547176281317104851156061703106528718480856075270961072447759715257793433841713438601618247646167537555674667851419832553346187911858785107003676094460445526540047098471886626017724323057661796680670139703189296302422064253060550140048506806379098442277059349816605752392960522521622165629016165888247392529926031814734762769258372254797463947183613882342136164183626101258397321185671055027491811879642181684997367014190464520360587539333307028309840064800652381410703176345093716999365222539494108175542107064687495209046763662888049265859301094522621192687425017505242314534586049116598262745437573172939883419589529775573640948475574877953313548057098477771720543016573782858838035952107388356041091606380560068392052586157781319281793277643026891404413510620486202072079819903020498114111469008323566763047041194626704001717853022439575078363375263197045830540575795991318806839127962351475258423328299130712280778578870683060913368636236049302985613865126495122819091195480893607127846051675522131835171820606290398628233301484816112436890995157066867188983456715531725893344346377649985822879594119101957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (172 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-membership-dome.cld.samsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-membership-dome-eus.cld.samsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-membership-dome-scus.cld.samsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-membership-dome-wus.cld.samsclub.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf9c656c2542a88c2f95e29823a257caba47bb44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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