wiki.state.ma.us

- Commonwealth Of Massachusetts -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 0a:2d:cf:7e:2c:3a:0b:19:0a:4d:db:a4:b3:6c:f1:0e was issued on by Symantec Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Commonwealth Of Massachusetts

Organization: Commonwealth Of Massachusetts
Organization unit: Information Technology Division
State / Province: Massachusetts
Locality: Boston
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:2d:cf:7e:2c:3a:0b:19:0a:4d:db:a4:b3:6c:f1:0e
Serial Number (int): 13530141771707169203025472744049144078
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): cd:10:3c:c6:62:f7:86:28:02:9d:7f:67:3d:0d:f2:24:c5:84:03:86
Fingerprint (sha256): 00:fd:ca:a0:07:8c:67:21:93:e7:75:1e:8e:19:5e:bb:a7:e2:9b:ec:c5:11:ca:34:8e:e2:4d:3e:1c:33:f2:1c

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate wiki.state.ma.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wiki.state.ma.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wiki.state.ma.us
jira.itd.state.ma.us

Other certificates including the domain name state.ma.us

(limited to 100 certificates)
diaboinf-prod.dia.state.ma.us
vgapps-training.hhs.state.ma.us
secure.dor.state.ma.us
boscpauth.jud.state.ma.us
coplink.chs.state.ma.us
wiki.state.ma.us
hwyweb.massdot.state.ma.us
MyTRSPRDESS.trb.state.ma.us
maexcisestamp.dor.state.ma.us
swa.projectcontrols.massdot.state.ma.us
masshealth.ehs.state.ma.us
foreclosures.dob.state.ma.us
inet.chia.state.ma.us
massclearinghouse.ehs.state.ma.us
bcn3-web-uat.dta.state.ma.us
archives.lib.state.ma.us
ibmmq-st.hhs.state.ma.us
ctrwebintqa.osc.state.ma.us
email.state.ma.us
envdvaccaca.elicensing.state.ma.us
sso.hhs.state.ma.us
mcef.jud.state.ma.us
atlas-portal.massdot.state.ma.us
itd-sam-lws3.itd.state.ma.us
www.sec.state.ma.us
icori-train.chs.state.ma.us
earlyedncareop.eec.state.ma.us
trcsd.jud.state.ma.us
bcn-websrv-prod.dta.state.ma.us
app1.massdot.state.ma.us
sopsmeta.ehs.state.ma.us
csg.jud.state.ma.us
maps.massgis.state.ma.us
matris.dph.state.ma.us
wfb.dor.state.ma.us
legacyhscdev.hhs.state.ma.us
masstraffic.massdot.state.ma.us
virtualgatewaydw.ehs.state.ma.us
reportingsdkdev10.itd.state.ma.us
hhsvgapps03.hhs.state.ma.us
eohhsaimqa.ehs.state.ma.us
med-web-sftp.dph.state.ma.us
ieats-cg-cert.hhs.state.ma.us
www.sec.state.ma.us
sdm-uss.ehs.state.ma.us
hhsvgapps01-training.hhs.state.ma.us
vgapps3-qa.hhs.state.ma.us
incapsula.com
uatccfa.eec.state.ma.us
traingateway.edu.state.ma.us
checkalicense.hhs.state.ma.us
ieats-cg-cert.hhs.state.ma.us
rmvdashboard.massdot.state.ma.us
maps.env.state.ma.us
ecemp.chs.state.ma.us
reportingst10.itd.state.ma.us
icori-train.chs.state.ma.us
gicselfservice.gic.state.ma.us
reportingsdkqa10.itd.state.ma.us
gisdev.massdot.state.ma.us
webfusion.chs.state.ma.us
csg.jud.state.ma.us
aws-h92spt.hrcms.state.ma.us
reportingdev10.itd.state.ma.us
maps.massgis.state.ma.us
pmas-app.dcp.state.ma.us
atlas-myrmv.massdot.state.ma.us
sso-training.hhs.state.ma.us
elicensing.state.ma.us
ds1.massdot.state.ma.us
MyTRSUATMSS.trb.state.ma.us
cms.mgc.state.ma.us
gisstg.massdot.state.ma.us
comit.state.ma.us
securemail.state.ma.us
www.sport.state.ma.us
foreclosures.dob.state.ma.us
securefile.state.ma.us
wifi.massdot.state.ma.us
maps.env.state.ma.us
dlsgateway.dor.state.ma.us
abpweb.tre.state.ma.us
envtsaccadm.elicensing.state.ma.us
hwywebuat.massdot.state.ma.us
ibmmq-st.hhs.state.ma.us
acc.elicensing.state.ma.us
ufr.osd.state.ma.us
IMP-USE2-VPN.impact.dot.state.ma.us
wf.dor.state.ma.us
ecse.cse.state.ma.us
gateway.edu.state.ma.us
massachusettsgatewayservice.us
atm-dev.dor.state.ma.us
dor-uca-1.dor.state.ma.us
elr.dph.state.ma.us
coplink.chs.state.ma.us
matris.dph.state.ma.us
wiki.state.ma.us
dlsgateway.dor.state.ma.us
ehs-pr-mmis-lbase1.ehs.state.ma.us

Certificate

The complete raw certificate details for wiki.state.ma.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13530141771707169203025472744049144078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Boston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Commonwealth Of Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information Technology Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'wiki.state.ma.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720148652333670302085717406419206870938418121156278674389624959699754334747911594675743712301335937939142779567548065699258434531508164764373926692674905072473683084669131130592259698030630367706946661932231723228423527072036839991499866675528529844865827444772057111174216212855616812199265483024976689489311366256061596685955110179762118222854647061101969677150277892890287621539035812698030725863984561401195126022752093504892274367397327023886265144226733944534413010118584378303649841435327038939838370361243502165171653047033681575130690044272053274055848766144716996838572325856638664586160443755954646778663065140486890439334448150136463904442106052445639585708236564418501338319691766770795007458815783298728528346838160646595317775344627965712581782531447468137815899915623946316147045256263325497740588951863665617996983427410890462412276319281991920254472561860495757923090005036779019535749416293551197026256307734685490487283201299082721891855511841957110764061433098836705987137165112982493898987682783493095372909026361487287197509449701876643312649281158276480397898385782062746808791842938326812429543718404447784418618201007393652069717318843353190107788112434191488537624393876914116902111684024688047539830344879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.state.ma.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.itd.state.ma.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015a03c95bb20000040300483046022100afaa0aa9380e4248f0d0aeb3407c5e2611b476a53673175aa0bf0a45495fb549022100da3d6a0313356cfcddb634056b2b3526981efca40fe09edaa8ce14d997ce543a007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015a03c95bc6000004030046304402203fc73131e9780577fb18d0cef82a512335307839572c50a506d772e70b258741022047e45980f50d01c216840863b5a2066c2034030733c6dbf5b0fefbcb2f9b4b70
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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