hrassignment-api-dev.allegion.com

- Microsoft Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:9d:98:a5:be:fc:16:ce:1f:b9:7a:dc:c5:cc:12:4c was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9d:98:a5:be:fc:16:ce:1f:b9:7a:dc:c5:cc:12:4c
Serial Number (int): 6135198647943110203791004382350021196
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 55:81:ab:18:2e:53:38:3d:be:1c:88:5d:3c:d2:1b:89:d9:15:13:0f
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 91:67:b1:44:f9:2d:c4:40:7e:cf:17:39:63:ff:30:3a:d0:cf:3c:bf
Fingerprint (sha256): 00:b3:82:c9:4f:de:92:4b:ca:fc:a2:dd:73:df:e2:6d:97:c7:3a:03:59:17:71:75:3d:38:bb:d0:1b:99:e3:26

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate hrassignment-api-dev.allegion.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hrassignment-api-dev.allegion.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hrassignment-api-dev.allegion.com

Other certificates including the domain name allegion.com

(limited to 100 certificates)
status.pipeimob.com.br
ordermanagement-api-uat.allegion.com
support.overtur.allegion.com
el-api-svc-prd.allegion.com
hrassignment-api-dev.allegion.com
el-api-svc-prd.allegion.com
overturkeying-api-uat.allegion.com
smetrics.allegion.com
status.markiiieb.com
discover-overtur.allegion.com
alm-uat.allegion.com
ind-av-veeam1.allegion.com
procom.allegion.com
cisasmartaccess.allegion.com
ivroderstatus-api-dev.allegion.com
ordermanagement-el-qa.allegion.com
overtur-uat.allegion.com
status.ngxnetworks.com
shw.rmt.status.descartes.com
shw.rmt.status.descartes.com
merlin-test.allegion.com
afdverify.beta-reporting.allegion.com
iq.syncd.tech
ind-av-ignition.allegion.com
as2test.allegion.com
ordermanagement-qa.allegion.com
startsmart.allegion.com
overtur-reports-api-qa.allegion.com
algchi-gm-ib-am.allegion.com
kc-test.allegion.com
status.us.premium.salusconnect.io
disponibilidade.activecorp.com.br
www.allegion.com
shw.rmt.status.descartes.com
overtur.allegion.com
alle-despatch-lane-manager-printer-prod.anz.allegion.com
status.quarklink.io
omk-uat.allegion.com
orderentryapi.allegion.com
startsmart.allegion.com
status.5starcoms.net
alm-dev.allegion.com
beta-planviewer.allegion.com
prn-av-opct1.allegion.com
m3uid01.allegion.com
overtur-sandbox-el.allegion.com
soca.allegion.com
shw.rmt.status.descartes.com
feedback.allegion.com
status.anywhere.asolvi.app
overturstatus.allegion.com
cmg.allegion.com
dev-cisasmartaccess.allegion.com
chicago2.allegion.com
www.allegion.com
www.allegion.com
support.overtur.allegion.com
apollo-fw-docs.allegion.com
emeia.allegion.com
www.fshlocking.com.au
accessmgmt-test.allegion.com
overturkeying-api-qa.allegion.com
c360.allegion.com
level4.allegion.com
discover-overtur.allegion.com
status.mapworks.io
americas.allegion.com
www.allegion.com
notifications-dev.allegion.com
accessmgmt-dev.allegion.com
startsmart.allegion.com
shw.rmt.status.descartes.com
notifications-qa.allegion.com
hrassignment-dev.allegion.com
status.pipeimob.com.br
status.doccle.be
mcprod.macle.bricard.com
status.lenderdock.com
shw.rmt.status.descartes.com
m3bed01.allegion.com
vip.allegion.com
www.allegion.com
alle-identity-api.allegion.com
chicago2.allegion.com
soca.allegion.com
ivroderstatus-api-dev.allegion.com
beta-reporting.allegion.com
cisasmartaccess.allegion.com
tooling.allegion.com
beta-history.allegion.com
shw.rmt.status.descartes.com
colwvwcappt1.allegion.com
iq.syncd.tech
alle-operation-reporting-portal-production.anz.allegion.com
ordermanagement.allegion.com
sni22ce5gl.wpc.edgecastcdn.net
ivroderstatus-api-dev.allegion.com
level4.allegion.com
soca-dev.allegion.com
support.overtur.allegion.com

Certificate

The complete raw certificate details for hrassignment-api-dev.allegion.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kigVyLcMCYD6ZqGrcnE
jjeVmwPHThQfOg3Zw43v+/AZKX4+ECTNba/tD6rU4D3nZtB0g/Sq8JuRvrA//vRM
aJgUDu5yalHsnFQvMODSru5j4qV5lyuzJzvZEZ2Iw+RD0j2KT6xNKdB93vGhRDVP
Au1qZPGjCnNzO5k0ZRolsKnOdV+QzNlwGwlzRw21XgrLPZbOpcS4Uyls4TT+L2lv
HglelqGrqQnJn3RiM070kjs165M6JCabIJ+7SI8FEBHvGjQnPqrrUSRoHa/8Mr53
x8CSAn6QKALBM/JutxEG2nAgHv25qx+Lb9/+T+wusfbwNQ9PEH7YrIky2ZcucWWS
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6135198647943110203791004382350021196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hrassignment-api-dev.allegion.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27555763860505701845892689814024867006153107645921319481326986740958279140978017537057209382297172552066782051733361371435241416672628369544847979608173753339600877985596545947140480584482467093987405786175924371158859943067686467627598964781975359588517755395383481920420488082800914576125876276386785999089854546230558891480587224011580616964447467657615590896415240706792303027214806544226531117940426315164589964824161393465223913229058636386007710713275197720673374298555797423029711252573780213827676833965905881450054019979911059256672095079661418268867992551878996138571866710843281842391610917522351266828833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5581ab182e53383dbe1c885d3cd21b89d915130f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrassignment-api-dev.allegion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b2c8d70080000040300483046022100fd776119e0e9a49f16d20af7eeda144f9cdb389ddfbfb7dfc5664cf9187f69fe022100c5006f3d7d2de140c988fb048f3963b62da8fc583ca414c73d5e6112276dcb1300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b2c8d700d000004030047304502205c847fa3bfdc4732efdef014200ac3469ee4cbffdd6a62235e0683cf06c6c7f7022100d98f241ccd327828ce0a187a075dc3f1568c295b9bca948e94b01020fbb2de8a007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b2c8d6fed0000040300463044022039acdd6191b000349d652e30b7cf86dedd23678741f7a5e300b84fa96940b23a0220421056ce8bb27349fe6cc0dd96b87f6617cc3b4e59ab9b23e0ad7f84a3c87e37
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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