management20210131.hpjam.hp.com

- HP Inc -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:bc:8d:74:6b:06:52:51:74:48:37:d1:f7:78:ae:3c was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

HP Inc

Organization: HP Inc
State / Province: California
Locality: Palo Alto
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:bc:8d:74:6b:06:52:51:74:48:37:d1:f7:78:ae:3c
Serial Number (int): 16929756802167042951620839338430475836
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 72:77:34:20:c3:51:f0:d8:e8:7f:a1:fc:bb:1c:c3:4b:6b:68:f2:e2
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 9d:c7:92:94:65:c7:d6:10:22:cd:aa:71:ba:a8:fa:42:57:fb:1e:0d
Fingerprint (sha256): 01:07:4e:c3:ee:29:b2:5e:d1:65:59:f3:6e:b5:4d:50:8c:27:f7:3a:62:f1:7a:d8:27:02:6a:99:df:31:0a:4f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate management20210131.hpjam.hp.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for management20210131.hpjam.hp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

management20210131.hpjam.hp.com
jamanagement.hp.com
management.hpjam.hp.com

Other certificates including the domain name hp.com

(limited to 100 certificates)
learn-about-supplies-api.ext.hp.com
sprmemprd.houston.hp.com
hpqproxy.external.hp.com
jenkins.cd.dev.avatar.ext.hp.com
smlogin.external.hp.com
sprmamitg.austin.hp.com
padapi-pro.glb1.hp.com
test1.firmwareupdate.management.hpjam.hp.com
hpaiws001.assuredid.svcs.hp.com
c0046786.itcs.hp.com
ezbuy.glb.itcs.hp.com
ap.svcs.entsvcs.com
esamapj.austin.hp.com
gnb2bwebprov.inc.hp.com
reverseproxy-gen2-prod.ext.hp.com
rtc14prdpool93.houston.hp.com
hparc-pro-s2s.austin.hp.com
hpicechatbot01.hpcloud.hp.com
psr01hpisba02.auth.hpicorp.net
uagpro.corp.hp.com
mycrm.support.hp.com
issvc54.external.hp.com
pdp-itg.glb1.hp.com
C0004184.itcs.hp.com
snr.austin.hp.com
essc-web-dev.houston.hp.com
gncppro3.inc.hp.com
signatures.hp.com
ISCS-PRO-EMEAStore1.glb.itcs.hp.com
wwwpprd.recognition.hp.com
isrmstg.ext.hp.com
pulsetest.prp.ext.hp.com
203137-partsurfer-web-pro.inc.hp.com
printx.api.hp.com
itg.smartquote.ext.hp.com
vpn-pa.labs.hp.com
vausnzitg.austin.hp.com
tibco-bw-prod02-gslb1-aa-5030.glb.itcs.hp.com
sprmamitgint.austin.hp.com
pproampro.houston.hp.com
rtc16prdfepool791-sg.ucrtc.hpicorp.net
vdccnzitgt.houston.hp.com
armtool.usa.hp.com
one.hp.com
esam.austin.hp.com
hpsasudf.ext.hp.com
prp.atlanta.hp.com
sbxtsvm-1.ovsc.adapps.hp.com
fcv-portal.inc.hp.com
smartupdate-g1w2446g.austin.hp.com
mashup.api.hp.com
hp-imap.int.hp.com
swhwz-12pG1-002.austin.hp.com
ccls.external.hp.com
g2w4178g.austin.hp.com
itsm-hpit-itg.corp.hp.com
g4t8251.houston.hp.com
akamai-san58.exacttarget.com
h30457.www3.hp.com
astrochatw2.cce.hp.com
esfposmanagerweb.itcs.hp.com
fm-dev.atlanta.hp.com
psr01hpisba01.auth.hpicorp.net
fm-dev.atlanta.hp.com
epocms.www8.hp.com
hpfaxme.external.hp.com
ovrd.external.hp.com
vwebcsniauthitgaws.hpcloud.hp.com
h10145.www1.hp.com
svat-hpi-llb-ext-prd.inc.hp.com
hpapps.sharepoint.hp.com
h30094.www3.hp.com
pa-itg.austin.hp.com
mdcp-ws-itg.itcs.hp.com
hpindigoservice.ext.hp.com
hpsws.itcs.hp.com
hp2b.hp.com
iscs-pro-emeastore1.glb.itcs.hp.com
c0046783.itcs.hp.com
portaldr.edc1.svcs.hp.com
prp-east.corp.hp.com
ak.test.hp.com
eitcds100.int.svcs.hpe.com
g9w0368.americas.hpqcorp.net
cce02sal01.houston.hp.com
h30408.www3.hp.com
mipsinternal-fastsearch-hou.corp.hp.com
itg-live.www.hp.com
ibreporting.corp.hp.com
c1t11746.itcs.hp.com
concentra-itg.austin.hp.com
hpse-vtms.austin.hp.com
management20210131.hpjam.hp.com
gtxi.hptpm.prod.hp.com
h20299.www2.hp.com
ecsapjmcfmvip.ecs.hp.com
iedp-demo.itcs.hp.com
gcsslb.houston.hp.com
domainredirects.ext.hp.com
pplui-pro.glb.itcs.hp.com

Certificate

The complete raw certificate details for management20210131.hpjam.hp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmxrnVeoilZKJJgiro4k
Qm5BOoXV5a5sm3TxIB1aw44VBXrQX5lUKqKhi1fgNg18X4/kGH14ODQpeHFAOrYj
uUECxlVqH2QHMHwWbxND+12zbNrz6yKDFSBeQZKoFCAArmezj308EmfDL58KCyFU
Ki1IdXqs2Hs5RFTsyfcPjiwNh0JAQUDEzD8voGXnUVtrqiB6PbsUdmSqEgCLLPq6
uu/NHAKaFWIq3103umubS4p3u3jDAw+0lVrJ82nbExLqf7YyX8PFzCb3Glh+5JHP
Ax2lvOGvLhjYjmQAGqZ+5/dPnLimoVvQrzsIYA2GAy88X82pJBJz6dTh35FFlHsl
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16929756802167042951620839338430475836
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Palo Alto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HP Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'management20210131.hpjam.hp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23028835580708194567074446425230576803342576403360014062327540536488603701522677547875506146718309193851703573285687573646457190114553682402729806602448384436364288027464866208787532864842023138563783565287777786321873510791344571928612022106193499219742177693043173321425256626778175745400893819007395631482262567603641066394498464070666026185102908713553044010434344019509642944198583623840953474707068593904419511456891156244647034069318890355845875834521535745574959245311929252801747820729256147067239355366001686090026965849390530160180262025674260118930980845365443968285072586325864280574698337875558103983361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72773420c351f0d8e87fa1fcbb1cc34b6b68f2e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management20210131.hpjam.hp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamanagement.hp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.hpjam.hp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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