www.reports.oah.state.nc.us

- Executive Office of the State of North Carolina -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 08:ce:8f:fe:14:1e:5b:73:d8:c3:88:ee:f8:47:ad:c1 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Executive Office of the State of North Carolina

Organization: Executive Office of the State of North Carolina
Organization unit: Administrative Hearings
State / Province: North Carolina
Locality: Raleigh
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:ce:8f:fe:14:1e:5b:73:d8:c3:88:ee:f8:47:ad:c1
Serial Number (int): 11706357633890502130080440299809123777
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cf:79:0e:27:a2:63:d6:99:f9:40:c6:10:47:c6:d5:a6:3a:60:a2:23
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 71:cc:3f:36:cf:cb:b7:52:e8:e6:f6:23:2a:ad:0f:c0:a8:5e:75:7d
Fingerprint (sha256): 00:e3:64:aa:61:7a:c0:31:a2:d4:c9:03:dc:26:1b:81:83:e2:1d:b2:5b:61:5c:a5:ec:6d:d0:18:aa:b8:c1:fb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate www.reports.oah.state.nc.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.reports.oah.state.nc.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.reports.oah.state.nc.us

Other certificates including the domain name state.nc.us

(limited to 100 certificates)
jbext.doc.state.nc.us
vitalsuite.its.state.nc.us
dmvcrashweb.dot.state.nc.us
ncgs.nc.gov
govadmin.nc.gov
qa.sqa.its.state.nc.us
www.reports.oah.state.nc.us
almqc1152.sqa.its.state.nc.us
files.nc.gov
ncrec-ex-01.ncrec.state.nc.us
prodwas4.ncdor.gov
hes002.dhr.state.nc.us
boards.governor.state.nc.us
eswftl01.esc.state.nc.us
opustrain.doc.state.nc.us
other-redirects-002.dc.nc.gov
e-billingqa.its.state.nc.us
wdc-hznvwcnt01.eschq.esc.state.nc.us
ncir-uat.dhhs.state.nc.us
pp.ncmotorfleetsys.com
trg-mybeacon.its.state.nc.us
nddhacts01.dhhs.state.nc.us
www.schs.state.nc.us
www.schs.state.nc.us
apps.dot.state.nc.us
webapps7.doc.state.nc.us
dev-mybeacon.its.state.nc.us
jira.djjdp.juvjus.state.nc.us
www.it.nc.gov
db2q.its.state.nc.us
www.schs.state.nc.us
boards.governor.state.nc.us
files.nc.gov
ncir-dev8.dhhs.state.nc.us
dpsjjdev.djjdp.juvjus.state.nc.us
tax.jlc.esc.state.nc.us
ncwwdpl102.its.state.nc.us
edis.commerce.state.nc.us
core.dpi.state.nc.us
ecgrants.dpi.state.nc.us
vpn.ncdws.com
www.archaeology.ncdcr.gov
www.it.nc.gov
sec1.dhhs.state.nc.us
test.dhhs.state.nc.us
ha00alx11.dhhs.state.nc.us
tppi.its.state.nc.us
winhosting5.its.state.nc.us
NBPTS.dpi.state.nc.us
edmvqa-dr.dot.state.nc.us
permitweb.dot.state.nc.us
sccb.its.state.nc.us
sccc.its.state.nc.us
opustrain.doc.state.nc.us
ecsts.dhhs.state.nc.us
ncc870.its.state.nc.us
myPC1152.sqa.its.state.nc.us
secapp.dpi.state.nc.us
qa4.djjdp.juvjus.state.nc.us
ncnodetest.enr.state.nc.us
apps.dot.state.nc.us
ha00alx11.dhhs.state.nc.us
www.labor.communications.its.state.nc.us
his-prep.dhhs.state.nc.us
incident.its.state.nc.us
his-prep.dhhs.state.nc.us
www.esc.state.nc.us
ncthinks.nc.gov
db2d.its.state.nc.us
nc.gov
ncir.dhhs.state.nc.us
e-billingqa.its.state.nc.us
qas-mybeacon.its.state.nc.us
sccb.its.state.nc.us
ncdhhs.gov
fed.jlc.esc.state.nc.us
permitweb.dot.state.nc.us
communications.its.state.nc.us
sccb.its.state.nc.us
qas-mybeacon.its.state.nc.us
qa2.djjdp.juvjus.state.nc.us
edmv-cts.dot.state.nc.us
www.it.nc.gov
www.schs.state.nc.us
appsqc.dot.state.nc.us
www.publicstaff.nc.gov
www.ncrec.gov
www.ncrec.gov
www.deq.nc.gov
orgmgmt.its.state.nc.us
ncir-training.dhhs.state.nc.us
almpc1152.sqa.its.state.nc.us
ssl-dhhsProvider.its.state.nc.us
www.ncrec.gov
www.oshr.nc.gov
bi.mybeacon.its.state.nc.us
schooljobs.dpi.state.nc.us
www.ncrec.gov
www.oshr.nc.gov
www.schs.state.nc.us

Certificate

The complete raw certificate details for www.reports.oah.state.nc.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh54eJUuXJ0cDVlSXgNi
vxfEViIXT10hAwJDpYSfeZh0lzOFss9t9fZflbjPuxuH4mwmLhYn0mKOgGDTLLFO
uajelK/Eg/XTjI198RRnGS4s3MJb+wilO4ceFtv86Bc8TbYo3gXfcbkv9FvVMc2v
3+8Tm8aKU24VYIc0vtnWCmoqeL6wVSst7LkD9JnSpbuyAir2pxUXX1mT0DLB2OAQ
CrOuqPK+tqu4nnfucFcW5NIcvAPI4kP5PLEyi0zaiV1+9yy7KYK1APhW9pf6WdhV
crh28/rjaOK6Tj9iW6NqXXd6s1zHLU8oAhszp+HWFUTBV5VY6YzidOl0svKjbU+v
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11706357633890502130080440299809123777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Raleigh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Executive Office of the State of North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Administrative Hearings'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.reports.oah.state.nc.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24000303551465869989328472665182003283574363533309447969542809869074290144025773269255752350784435580678759211034784644403043401747810280473829910354700480546953557464697699160919902296620144746314681922875601289426250187902709481755412690017428397534750520011449111962337610227994040773147113965817025766583708503971171862666021601625323162472552128633820821225339102507650880596326806468305898230171980200478902162663892594385458462779299123474995616311112917854407218086245842683852938734834952196003303210384090154795822442765681825367150992019017342187126204557193034680788071901255705781939644756872210443906881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf790e27a263d699f940c61047c6d5a63a60a223
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reports.oah.state.nc.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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