auvpn1.johnsoncontrols.com

- Johnson Controls, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:5a:0b:e9:f0:cd:38:a8:65:2e:29:4c:02:68:a8:43 was issued on by DigiCert Inc.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Johnson Controls, Inc.

Organization: Johnson Controls, Inc.
State / Province: Wisconsin
Locality: Milwaukee
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:5a:0b:e9:f0:cd:38:a8:65:2e:29:4c:02:68:a8:43
Serial Number (int): 13759828316309298916581808799230765123
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7b:e0:a0:20:8d:12:32:e3:c6:18:49:af:99:8d:05:e6:18:cc:0d:3e
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 34:b8:aa:81:06:e5:6e:3f:1f:2d:49:59:96:cc:2b:68:ea:84:65:0b
Fingerprint (sha256): 00:5d:5f:87:99:d1:a9:d4:76:c0:31:f6:68:d7:0c:65:e1:0e:73:d3:4a:53:7a:48:74:3b:9b:1f:67:63:df:28

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate auvpn1.johnsoncontrols.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auvpn1.johnsoncontrols.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auvpn1.johnsoncontrols.com
nzvpn1.johnsoncontrols.com
jpvpn1.johnsoncontrols.com
jpvpn2.johnsoncontrols.com
apvpn1.johnsoncontrols.com
apvpn2.johnsoncontrols.com
invpn1.johnsoncontrols.com
invpn2.johnsoncontrols.com
cnvpn3.johnsoncontrols.cn
cnvpn4.johnsoncontrols.cn

Other certificates including the domain name johnsoncontrols.com

(limited to 100 certificates)
imperva.com
imperva.com
auvpn1.johnsoncontrols.com
imperva.com
samlssoc.johnsoncontrols.com
sm04-sdc.jci.com
csd.johnsoncontrols.com
imperva.com
be-ebusiness-support.eu.johnsoncontrols.com
incapsula.com
wwwqa.colps.johnsoncontrols.com
www.china.powersolutions.johnsoncontrols.com
incapsula.com
sts2.ga.johnsoncontrols.com
ssosamlqa.ga.johnsoncontrols.com
pa.johnsoncontrols.com
incapsula.com
mucntr.johnsoncontrols.com
bejih.com
ssoimqa.ga.johnsoncontrols.com
ocp1.pdc1.jci.ocp.johnsoncontrols.com
johnsoncontrols.com
myemail.johnsoncontrols.com
incapsula.com
incapsula.com
incapsula.com
cgeuapp13.johnsoncontrols.com
mx.clarios.com
ssoformxcpqa.ga.johnsoncontrols.com
imperva.com
mypanoptixdemo.johnsoncontrols.com
bejih.com
imperva.com
imperva.com
cgproducts.johnsoncontrols.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
ar1.johnsoncontrols.com
jobs.johnsoncontrols.com
incapsula.com
myappsdev.johnsoncontrols.com
imperva.com
imperva.com
imperva.com
meetings.johnsoncontrols.com
YUM-Brands.johnsoncontrols.com
incapsula.com
imperva.com
kantech.sterigenics.schaumburg.johnsoncontrols.com
sdt-sit.johnsoncontrols.com
CCCyberSchool.johnsoncontrols.com
incapsula.com
incapsula.com
pa2.eu.johnsoncontrols.com
elearning.johnsoncontrols.com
imperva.com
*.mypanoptixstaging.johnsoncontrols.com
bejih.com
easyparts.johnsoncontrols.com
rscadmin.johnsoncontrols.com
eidp.jci.com
aasdsloth.gsm.cornell.edu
imperva.com
incapsula.com
www.jcihost.com
incapsula.com
kantech.sterigenics.schaumburg.johnsoncontrols.com
johnsoncontrols.com
incapsula.com
incapsula.com
*.go.solutions.johnsoncontrols.com
imperva.com
incapsula.com
incapsula.com
www.mexico.powersolutions.johnsoncontrols.com
easyparts-support.johnsoncontrols.com
bejih.com
ssosaml.ga.johnsoncontrols.com
secure.cg.johnsoncontrols.com
incapsula.com
www.china.powersolutions.johnsoncontrols.com
investors.johnsoncontrols.com
incapsula.com
investors.johnsoncontrols.com
incapsula.com
skmtprod.johnsoncontrols.com
imperva.com
JohnsonControls.com
xnet.johnsoncontrols.com
imperva.com
www.battery.johnsoncontrols.com
incapsula.com
imperva.com
incapsula.com
B0324S03.Go.JohnsonControls.com
incapsula.com
incapsula.com
incapsula.com

Certificate

The complete raw certificate details for auvpn1.johnsoncontrols.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eIiU2RdeQs4C+aupQFv
+Xsu+kWohpqqsxbG7cM7sIDQt2La9zBwPZWmGcddHirWwiLdO2lj181Bxpf4tpKn
IMbOixyJzdC+CtyMMVO5az0M5SIdM9QcXb/1rk5tfO9Vf5m9aAXjZqKKC3WktOjV
aMLo3SwToHT07VmcrJe/B6TWQdaWqgxe/g2bLk8yYiHeoruEZcGvH7WGsHKMauq5
CXohI0642op9tpifSZ/04ih1CxKnyMKSEeLIM4Lm/itxjrHXj3igqoBZ/20YGGTx
banshQB/cRntN4bhD0rMCRRMGpb3pWC1aQkYDSUY15Oc1ns5qxJkyWEDLC/SidDT
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13759828316309298916581808799230765123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wisconsin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milwaukee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johnson Controls, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auvpn1.johnsoncontrols.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27000269831132276467959390896783085930933251131525581413072846220332997893738718478281433149515695521316270749317671139424363437650783429947713600702659399610993769184661575786070503196450777245116927530101087751426271993631499143353338924191860632314137934816197427837900089561491580351951765954388061241358029484758217154267498551241937765291080023128323410583355124147652231933273576561889939287306223309754403982352016161731491621266354976163190138241471697980689948668835826806992869545778370695602820121406447068991764363306834031396891830236468186827131864456303295985008933859859537519439697613461484167287753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7be0a0208d1232e3c61849af998d05e618cc0d3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (282 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auvpn1.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzvpn1.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpvpn1.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpvpn2.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvpn1.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvpn2.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invpn1.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invpn2.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnvpn3.johnsoncontrols.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnvpn4.johnsoncontrols.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189b03e4d470000040300463044022030bdfaf588c5002f9101a685710b11d733ac7867fdacf74fc0319d79041615b002200793df30fe99c4cae3e355a63d378786329082f06e303e2c9d64f000d8eb3f2600760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000189b03e4d810000040300473045022020bf376be018646300cea2e00968e2a802c3763d601a41fc23ccdb9802bfac8e022100dbc12d2338aedec4cd0d51e083ebb896dedc48b589b5e33534bc66f0dbd9566c007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189b03e4d4600000403004730450220590501549a787d0f986b528fc835274a26c9abeac15db1d2901cf5c8e06540e50221008d2c3d2577c29242c14b13acf4a7aac1b8570e38fd6c6bca9d7adad7f0ced5da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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