learning.westminster.ac.uk

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:84:e8:2f:cf:57:5c:32:7d:2c:66:f7:16:6c:72:d4 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=learning.westminster.ac.uk

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:84:e8:2f:cf:57:5c:32:7d:2c:66:f7:16:6c:72:d4
Serial Number (int): 16640828441666282048172159919886987988
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 13:76:6e:12:df:76:a8:63:2c:74:16:a7:7b:45:92:dc:5c:e3:50:62
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 06:59:e6:51:19:b9:e3:47:e0:85:10:75:bf:c1:90:b9:de:de:b4:31
Fingerprint (sha256): 00:6f:22:74:06:e6:49:da:14:ed:fd:7d:1c:15:fd:7f:91:60:78:ad:e6:8d:4b:96:c2:21:1d:de:84:63:1e:be

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate learning.westminster.ac.uk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for learning.westminster.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

learning.westminster.ac.uk
*.blackboard.com
learning2.westminster.ac.uk

Other certificates including the domain name westminster.ac.uk

(limited to 100 certificates)
learning.westminster.ac.uk
your.westminster.ac.uk
sgd.westminster.ac.uk
identity.westminster.ac.uk
sni.cloudflaressl.com
ssl758755.cloudflaressl.com
svn.ecs.westminster.ac.uk
bbreportingproxy.westminster.ac.uk
ssl758755.cloudflaressl.com
smtpout.westminster.ac.uk
prospect.westminster.ac.uk
support.ecs.westminster.ac.uk
bomgar.westminster.ac.uk
wificon.westminster.ac.uk
login.ecs.westminster.ac.uk
webmail.westminster.ac.uk
emea-san1.blackboard.com
upload.ecs.westminster.ac.uk
library-catalogue-test.westminster.ac.uk
timetabling.westminster.ac.uk
resolveitdev.westminster.ac.uk
financelive.westminster.ac.uk
eu-central-1-san1.blackboard.com
lists.westminster.ac.uk
mobile-app.westminster.ac.uk
emea-san1.blackboard.com
resolveitdev.westminster.ac.uk
epayments.westminster.ac.uk
uniprint.westminster.ac.uk
store.westminster.ac.uk
ssl758755.cloudflaressl.com
emea-san1.blackboard.com
accommodation.westminster.ac.uk
vacancies.westminster.ac.uk
eu-central-1-san1.blackboard.com
*.ezproxy.westminster.ac.uk
payonline.westminster.ac.uk
printportal.westminster.ac.uk
bi.westminster.ac.uk
*.users.ecs.westminster.ac.uk
shortcourses.westminster.ac.uk
sgd.westminster.ac.uk
folio.westminster.ac.uk
intranet.ecs.westminster.ac.uk
prospect.westminster.ac.uk
eu-central-1-san1.blackboard.com
learning.westminster.ac.uk
teamwork-internal.westminster.ac.uk
emea-san1.blackboard.com
esp.westminster.ac.uk
library-collections-search.westminster.ac.uk
password.westminster.ac.uk
identity-test.westminster.ac.uk
timetabling.westminster.ac.uk
eu-central-1-san1.blackboard.com
webprint.westminster.ac.uk
jssadmin.westminster.ac.uk
engage.westminster.ac.uk
helpdesks.westminster.ac.uk
support.ecs.westminster.ac.uk
uniprint.westminster.ac.uk
vapplications.westminster.ac.uk
*.test.westminster.ac.uk
emea-san1.blackboard.com
upload.ecs.westminster.ac.uk
download.ecs.westminster.ac.uk
library-catalogue.westminster.ac.uk
housing.westminster.ac.uk
eu-central-1-san1.blackboard.com
financetest.westminster.ac.uk
summeraccommodation.westminster.ac.uk
hub.westminster.ac.uk
emea-san1.blackboard.com
accommodation.westminster.ac.uk
research.westminster.ac.uk
myintranet.westminster.ac.uk
emea-san1.blackboard.com
*.ezproxy.westminster.ac.uk
uowmail.westminster.ac.uk
upload.ecs.westminster.ac.uk
portal.ecs.westminster.ac.uk
yourvirtualopenday.westminster.ac.uk
penguin.ecs.westminster.ac.uk
intranet.ecs.westminster.ac.uk
eu-central-1-san1.blackboard.com
support.ecs.westminster.ac.uk
eu-central-1-san1.blackboard.com
mailinglist.westminster.ac.uk
payonline.westminster.ac.uk
library-catalogue.westminster.ac.uk
financelive.westminster.ac.uk
devtesthub.westminster.ac.uk
identity.westminster.ac.uk
citrixvip.westminster.ac.uk
vapplications.westminster.ac.uk
emea-san1.blackboard.com
task.westminster.ac.uk
yourvirtualopenday.westminster.ac.uk
guestwifi.westminster.ac.uk
filelinx.westminster.ac.uk

Certificate

The complete raw certificate details for learning.westminster.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIQDIToL89XXDJ9LGb3Fmxy1DANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDIxMTAwMDAwMFoXDTIzMDgxNzIzNTk1OVowJTEj
MCEGA1UEAxMabGVhcm5pbmcud2VzdG1pbnN0ZXIuYWMudWswggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQCfDAaZMGqD7aLTDNR/UZAf30O+7hii1CIICgIN
56al5Yc7bsQPIDEoKZ4Pwx1CZXQhzx24stsDU6BmZzZOIjykMsTKoypPVKwdmMsd
3nykO/rVQhky03SBp6SjOnjvqd+h9LKN7Pu3Px/8W9DT0ViUrUYYMVTHwcQq/NyL
xhpk4HugH6FCzf3Hlac/3JK773WJsnvQ7aHlfWGztomi4FQPW8V2/pT8CNkPJVBV
LBMmsCnrw9GwtenPcehQFPCLpmRxHIdBRvDKv1uYHxN0emD6npQNuz0wHwGhufcm
B13ei/CZfGcA+2NEIYG+0ws8WgxIHD97Gd/s0rQUv1SHW7B9AgMBAAGjggMhMIID
HTAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUE3Zu
Et92qGMsdBane0WS3FzjUGIwVAYDVR0RBE0wS4IabGVhcm5pbmcud2VzdG1pbnN0
ZXIuYWMudWuCECouYmxhY2tib2FyZC5jb22CG2xlYXJuaW5nMi53ZXN0bWluc3Rl
ci5hYy51azAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9u
dHJ1c3QuY29tL3IybTAyLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEF
BQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRy
dXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVz
dC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIB
bQSCAWkBZwB1AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABhj3P
410AAAQDAEYwRAIgLoI7OPAf8fEV5Xj+kCFt/6oVvwU3hDQOeb/5xMr5LR4CIAGx
2bFr/vXUoDXkPpDOkf1R4ek9mEfzpIDIxvVwXp+vAHYAs3N3B+GEUPhjhtYFqdwR
CUp5LbFnDAuH3PADDnk2pZoAAAGGPc/jrgAABAMARzBFAiA6h9KQMBqNwRpJbdIP
eEemGAjO7eMrEQNhLECzVUfTygIhALZrOOcAMh8WHAZzMmh0G5UCpSo93Xa2g0an
7x/c3C6zAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGGPc/j
fwAABAMARzBFAiEAvTzQgjpn6kipjSaZbinFUYAASmvfcsDwRRnlpsW/macCIByy
KSZqac3NL9emvhiOeJsEJ9/QYFJAgG26hNDnEpgmMA0GCSqGSIb3DQEBCwUAA4IB
AQAjIKMFYejYyoUwqHF8Psc+o5QtqFt05hDsWKrJOaWcMgTdUF+2TY9Iehk+3736
S4Oft2raolPMywFPIPUBi5kSMUqK9nbR32OXT6EK3qNILjqcGUdOppnmztLyt+dO
ulCj3t9hd49lLe8um4DENkQn4blwCf+3GW0B1rcaWgz3ODT5dvGYvgP77vuMpUjm
bLM6Fi31BE09ZiCVsGD0z6h1a0fLqVpcHPpvvGtTVcc8EgAC+ChxMZfF1PNVEpFA
Wh7cQ9yGEnOELvEQM4GZ4EwF9vH2h54Se3mkKRonzktrDYTGfrQ/IjSn720miZKA
OKFG6l9FJnZgoD2i/PL+rE+V
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwwGmTBqg+2i0wzUf1GQ
H99Dvu4YotQiCAoCDeempeWHO27EDyAxKCmeD8MdQmV0Ic8duLLbA1OgZmc2TiI8
pDLEyqMqT1SsHZjLHd58pDv61UIZMtN0gaekozp476nfofSyjez7tz8f/FvQ09FY
lK1GGDFUx8HEKvzci8YaZOB7oB+hQs39x5WnP9ySu+91ibJ70O2h5X1hs7aJouBU
D1vFdv6U/AjZDyVQVSwTJrAp68PRsLXpz3HoUBTwi6ZkcRyHQUbwyr9bmB8TdHpg
+p6UDbs9MB8Bobn3Jgdd3ovwmXxnAPtjRCGBvtMLPFoMSBw/exnf7NK0FL9Uh1uw
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16640828441666282048172159919886987988
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'learning.westminster.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20077820620265226454496776271039977684209322761382187601556150797079962829439245109312007841615353168819298472110297503567520169619224248382547360057514262757374589276066008209436498622960059335302249549832224374716426390174665460978917299821766606697058203184392539230969532855830636494879641395927060515365108892738910693126406159485505486158946056017797459294424749958896806427746430737286664906219226394217415535678478178987888632202789675994211827736236716674844621698576600516118088329903256462313475084002777050231016533781614107049789002699607836518464507938538520692153474954857139753281633956056479443955837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13766e12df76a8632c7416a77b4592dc5ce35062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.westminster.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning2.westminster.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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