eaz1eamppp10p.aetna.com

- Aetna Inc. -

Issued by Aetna Inc. Secure CA2

About this certificate

This digital certificate with serial number 0a:a7:f5:cc:b9:67:71:4f:44:6a:a3:0b:e9:1a:3d:af was issued on by Aetna Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aetna Inc.

Organization: Aetna Inc.
State / Province: Connecticut
Locality: Hartford
Country: US

Aetna Inc

Organization: Aetna Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:a7:f5:cc:b9:67:71:4f:44:6a:a3:0b:e9:1a:3d:af
Serial Number (int): 14164378943502303778185822275018309039
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8c:d6:db:32:ef:72:f8:2e:43:83:9d:74:bd:21:aa:d9:80:84:2c:9c
AuthorityKeyId: b9:ab:44:7a:fc:da:62:1b:09:1f:cf:3b:af:10:4b:89:81:14:63:23

Fingerprint (sha1): 84:92:76:50:ee:42:78:eb:c0:3e:7e:7a:96:1e:69:cb:50:eb:24:d5
Fingerprint (sha256): 00:65:d5:6c:9c:08:2e:64:90:27:f5:95:d5:3c:91:00:5f:2c:59:36:ff:2a:14:6f:aa:91:81:44:66:c5:62:5f

Issuing Certificate URL: http://cacerts.digicert.com/AetnaIncSecureCA2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/AetnaIncSecureCA2.crl
CRL Distribution Point: http://crl4.digicert.com/AetnaIncSecureCA2.crl

Check the revocation status for certificate eaz1eamppp10p.aetna.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eaz1eamppp10p.aetna.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eaz1eamppp10p.aetna.com
eaz1eamppp10p.corp.cvscaremark.com
eaz1eamppp10p-oba.corp.cvscaremark.com

Other certificates including the domain name aetna.com

(limited to 100 certificates)
hyprprod.aetna.com
leapfrog-ssl-5.gcs-web.com
xrsconm3p.aetna.com
mvmpsccmcmp01.aeth.aetna.com
marketing-healthinsurance.aetna.com
leapfrog-ssl-5.gcs-web.com
DLPTestDevOps017.aetna.com
simplestepslife.aetna.com
prod.MQP591.aetna.com
cbhrcwss.aetna.com
stressapih6.aetna.com
dlptest020619.aetna.com
cats.ws.aetna.com
www.weaselect.aetna.com
client-v3wire.relaystaging.com
deviis117.aetna.com
test.MQT490.aetna.com
proddynamocm.aetna.com
test.MQT577.aetna.com
apipm.aetna.com
accessupgrade.art.aetna.com
www.bmshc.aetna.com
xaclddatapwr3q.aetna.com
eaz1eamppp10p.aetna.com
HFD-WC-VDC-2N.aetna.com
test.MQX023.aetna.com
obor-tpam.dev.ws.aetna.com
IndvRestIdMntSvc.ws.qa.aetna.com
MVMQAHHBEIS01.aeth.aetna.com
prod.MQP302.aetna.com
aebsqa2.aetna.com
lb2iib-sslhc-nonprod.aetna.com
webstats.aetna.com
test.MQS416.aetna.com
devstarsprovider.aetna.com
qa3ratebor.aetna.com
devdocs.aetna.com
api.aetna.com
qaintlweb.aetna.com
nab-az-vc02.aetna.com
WVMPQUMUVNEAP02.aeth.aetna.com
prod2ntlmauth.aetna.com
apih3.aetna.com
0628test-a.aetna.com
nice-ahm.aetna.com
agrc.aetna.com
ae94.aetna.com
sqacxt5-ws-pdloader.aetna.com
AHHBIDev.aetna.com
xaclddatapwr1d.aetna.com
vidg-m5qmgt.aetna.com
test.MQS570.aetna.com
WVMPQMXVSATAP01.aeth.aetna.com
amazon.aetna.com
transmitqa.aetna.com
mvmtcgaautoap01.aeth.aetna.com
federation.aetna.com
WVMPQMXVSAAAP05.aeth.aetna.com
wvmqqmxvimsap02.aeth.aetna.com
devbawwc.aetna.com
ot.aetna.com
devappdynamics.aetna.com
prod.MQP425.aetna.com
xhadrepm2d.aetna.com
win-acs-wlan2-1.aetna.com
mvmpqmxvimsap02.aeth.aetna.com
teotest3.aetna.com
simplestepslife.aetna.com
devext.aetna.com
cloud.art.aetna.com
hepayorpreprod.aetna.com
www.aetna.com
salesforce.qapath3a.api.aetna.com
mvmpqmint20ap01.aeth.aetna.com
midpqmapsis02.aeth.aetna.com
MIDE-GSLBE-001-mgmt.aetna.com
prdyncm.aetna.com
trgvoluntary.aetna.com
qamember.aetna.com
test.MQQ341.aetna.com
prod.MQP376.aetna.com
PMDRDEV.aetna.com
xnifiw1p.aetna.com
*.odbc.prodml.aetna.com
qaaetssomobile.aetna.com
wvmqaeirsis01.aeth.aetna.com
Dev2AFAAcctgservice.aetna.com
eimg.aetna.com
devci.aetna.com
test.MQQ830.aetna.com
stealthwatch-2.aetna.com
triplab.aetna.com
qa5701mbuqnxtapps.aetna.com
xtranet50.aetna.com
backupAgent.aetna.com
WVMTMDCE007IS01.aeth.aetna.com
qacqweb.aetna.com
stars.aetna.com
certportal.aetna.com
dev3member.aetna.com

Certificate

The complete raw certificate details for eaz1eamppp10p.aetna.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04kHFsX+3pMkn3uJdku/
aK4HHnQTPuq0RLXYFiCuW7Li8M3N1uPDCkM5/u1it2A/Uo9FGWLqWBHhP87SYR+s
Z3nV9eAQ91Spvtl5nuOdCFUWitoJJNsYoHao/fNYgoaWSw+b6bbArhjFwrdwopWw
lz4yWZ0ziP0jsi0JC0eDZlDPJxx5qZfG5xKRX2nuFasqf2PTY6e6FMfecbnPXUjI
ovpk7uTaX4GIr7wnL6zS5cexB+NxxpDC9/kj6h/GqNd2uGjVmVHfnwI6QQ+rmUxt
Ul9vFH2oqauGGyGKo4WmfVdlt2C2K4MOBAOC1Px3htKSe2edfTre3cMPvL+iL3SJ
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14164378943502303778185822275018309039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aetna Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aetna Inc. Secure CA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hartford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aetna Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eaz1eamppp10p.aetna.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26703853220792111405045373794792923822917393789863409566462374612031195165083415760362720079695542121964480140816466259091413321886831230878264880424641859916258480598324163126172549511625341926673725145867902298502623790252750491145926396530237573526755585176962556733592814237719499249900283197475610690457967688358044084846972507511007563950979759323889076068865111054015382313343610005549460685664069341729073826307410999136316626499443118416874366941137694637964704263229791939254820003371006414639116320973472262323095185824856599350977282540792872263019861937894258360354370710168671700315244093817957280680201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b9ab447afcda621b091fcf3baf104b8981146323
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8cd6db32ef72f82e43839d74bd21aad980842c9c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaz1eamppp10p.aetna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaz1eamppp10p.corp.cvscaremark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaz1eamppp10p-oba.corp.cvscaremark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/AetnaIncSecureCA2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/AetnaIncSecureCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/AetnaIncSecureCA2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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