P2P-CLX.test.wellsfargo.com

- Wells Fargo & Company -

Issued by Wells Fargo Certificate Authority WS1

About this certificate

This digital certificate with serial number 39:2a:1a:d7:c8:33:f4:c5:f3:72:bb:af:d6:74:c6:be was issued on by Wells Fargo.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo & Company

Organization: Wells Fargo & Company
Organization unit: Infrastructure Appliance Support
State / Province: California
Locality: San Francisco
Country: US

Wells Fargo

Organization: Wells Fargo
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 39:2a:1a:d7:c8:33:f4:c5:f3:72:bb:af:d6:74:c6:be
Serial Number (int): 75984616666463116116220940931822831294
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 82:b6:6b:50:ee:08:a0:79:62:dc:32:8b:ef:6c:06:52:18:63:fd:34
AuthorityKeyId: fe:08:e3:63:85:07:7e:f5:00:58:89:b3:89:a9:4f:ed:0f:0a:41:4f

Fingerprint (sha1): 27:90:b2:b0:3e:4d:67:c7:08:6e:83:bc:97:61:1b:34:37:65:80:77
Fingerprint (sha256): 01:21:8c:0a:ce:53:51:35:41:0a:c1:54:a1:07:8e:a3:21:61:5d:b4:04:05:c6:16:32:54:89:5a:fa:56:01:ee

Issuing Certificate URL: http://mssl-aia.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.cer

Revocation information

OCSP Server: http://mssl-ocsp.ws.symantec.com
CRL Distribution Point: http://mssl-crl.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.crl

Check the revocation status for certificate P2P-CLX.test.wellsfargo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for P2P-CLX.test.wellsfargo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

P2P-CLX.test.wellsfargo.com

Other certificates including the domain name wellsfargo.com

(limited to 100 certificates)
teamworks-uat.wellsfargo.com
st-adhoc.wellsfargo.com
ceosvfix.wellsfargo.com
ceomediauat.wellsfargo.com
achgpuat1.wellsfargo.com
mposapi-uat.wellsfargo.com
retirement-bpo-s-prod.wellsfargo.com
bwl.wellsfargo.com
acctagg.wellsfargo.com
proxy-ewpcs.wellsfargo.com
www.retirementcity.wellsfargo.com
ectz5863r9.wellsfargo.com
mwapp-sit2.wellsfargo.com
edisclosure-pm.wellsfargo.com
qa-static.evetest.wellsfargo.com
ectv4022r5.wellsfargo.com
imagenet-mortgage-uat.wellsfargo.com
st-adhoc.wellsfargo.com
uat-wib.isgpp.wellsfargo.com
ebtest-1bw-fccssqsa.wellsfargo.com
wellsorders.ceo.wellsfargo.com
wellsfs.wellsfargo.com
esignature.wellsfargo.com
equitylinkedreporting.wellsfargo.com
wellsreport.wellsfargo.com
ectx4004r8v.wellsfargo.com
tradeworks-wca.wellsfargo.com
backoffice.wellsfargo.com
eservices.wellsfargodealerservices.com
mxdalpv05.wellsfargo.com
mdm-qa.msgqa.wellsfargo.com
myedpulse.wellsfargo.com
wwwfix.ctslink.com
marketdata.wellsfargo.com
wellscontentfix.wellsfargo.com
onlinedecisiontool.wellsfargo.com
sit-www.evetest.wellsfargo.com
wellscontentuat.wellsfargo.com
pasline-uat.wellsfargo.com
wfadvisors-prod1.wellsfargo.com
marketdata.wellsfargo.com
labs.wellsfargo.com
www.wellsfargoassetmanagement.com
procuretopay.wellsfargo.com
oxi-m-cte-broker.wellsfargo.com
401knext-uat.wellsfargo.com
deposit.wellsfargo.com
bcereporting-sit.wellsfargo.com
ofxtax.wellsfargo.com
teamworks2-uat.wellsfargo.com
wellswcapa.sec.wellsfargo.com
www-wellsfargoadvisors.wellsfargo.com
cms.wellsfargo.com
ifs-cra.wellsfargo.com
cm-pfix.ceo.wellsfargo.com
ectv5858r8v.wellsfargo.com
creditweb-ist.wellsfargo.com
safe-t.wellsfargo.com
www.wellsfargo.com
pyd-WS2-client.wellsfargo.com
RAS-AZ-A.wellsfargo.com
3PV-TL3P003L.WELLSFARGO.COM
wfa-d-1trdfix-msg-v-01.wellsfargo.com
P2P-CLX.test.wellsfargo.com
retirement-bpo-uat.wellsfargo.com
ebprod-1bw-retail.wellsfargo.com
wmidsa.wellsfargo.com
pyd-WQE-client.wellsfargo.com
wfa-t-1trdapi-websvc-v-00.wellsfargo.com
hulavc-n-sit.wellsfargo.com
csfedportal-ext.wellsfargo.com
csfactor-uat.wellsfargo.com
m-wfadvisorbroker-cte1.wellsfargo.com
stg-admin.wellsfargo.com
wellstrustfix.wellsfargo.com
retirementservices-uat.wellsfargo.com
studentinsurance-uat.wellsfargo.com
ebprod-1wfw-wfapublic.wellsfargo.com
whlsleretirement-uat.wellsfargo.com
voltage-ps-0000.msgdev.wellsfargo.com
accountservices-wellsonecard.wellsfargo.com
godigitaldesktop.wellsfargo.com
ectv4008r8v.wellsfargo.com
coms-ceo-uat.wellsfargo.com
ect-lab-6912r5a.wellsfargo.com
m.wellsfargo.com
teamworks-uat.wellsfargo.com
nc2-qaapm-pfe-wtwt.wellsfargo.com
gpow.wellsfargo.com
corporateretirementportal.wellsfargo.com
fundservicesreporting.wellsfargo.com
sourcing.wellsfargo.com
ifs-cra-bcp.wellsfargo.com
ectx4020r8v.wellsfargo.com
eddwtuat.ceo.wellsfargo.com
scf-apps.wellsfargo.com
wit02-dev.wellsfargo.com
fxteller.wellsfargo.com
trust.wellsfargo.com
wellssuite.wellsfargo.com

Certificate

The complete raw certificate details for P2P-CLX.test.wellsfargo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBjqwYkZ87u05wvNiqtj
PU4vc7e+jiZ9t+NTO0d6uSXv91nkV6AffeOOLQO0nSRIT8InOKsDajn0YAgWarMk
rT4pT2fwGC4FhHhgBSWuCfSK1zptGq6omULrdSdylDf9k88GkW5zfv/Nvrt5lzVJ
xbrugt84s4CJjQuEhHexRh6UxUufkh6MO7iOY/zSXe6HYOM5/S3rivMshqRUrwCz
65sco/Q3yAN2F31LnRRxMrS5rW2Fs/fw08eP+44GoBAf6UaVHb8u8HI11U+jx2q+
Pv/HS+9KygenzRg02c4ZmFBdrWUmqgzOTdrv5ELWC5j36xjLbnfHiB+9dh1nxyNi
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75984616666463116116220940931822831294
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo Certificate Authority WS1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Infrastructure Appliance Support'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'P2P-CLX.test.wellsfargo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21725275492507592081327105401706727893450359857186778854829130400337011271050314084414256559730322865720761255018347678406260926177041873549820818332626016824313799339006994444057761165767176497665132496548826727432464605033929775625074334977610223828321408509335604655330341263195873888892528186955752993195024749661953245092901362634771579257027274465354616019189748877805727149944437874450252195619989049727600198916402834378734638200910925172309512826197470314311124379291574799004743788897985888867336709182153358671748297782490717141806567708391094888469997112066999746801052203138972594819045928438850616779353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'P2P-CLX.test.wellsfargo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82b66b50ee08a07962dc328bef6c06521863fd34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe08e36385077ef5005889b389a94fed0f0a414f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-crl.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-ocsp.ws.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-aia.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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