umacnas1.campus.wm.edu

- The College of William & Mary -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 93:81:ab:9b:eb:3d:73:5c:21:3c:32:ec:e6:e6:ec:b0 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The College of William & Mary

Organization: The College of William & Mary
State / Province: Virginia
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 93:81:ab:9b:eb:3d:73:5c:21:3c:32:ec:e6:e6:ec:b0
Serial Number (int): 196069802320344306782208307282343029936
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8d:5b:90:1f:32:e9:d2:b6:cd:4c:43:61:03:40:7a:2b:fc:ed:e9:ae
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 1f:b7:ca:1e:c4:ca:ea:b3:cb:ce:76:40:77:8a:9b:ab:db:0e:74:99
Fingerprint (sha256): 01:93:34:6d:ca:a2:fb:5f:af:cd:39:a2:33:69:b9:57:1c:05:90:80:65:e8:be:e8:c4:8a:d4:31:e4:82:76:15

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate umacnas1.campus.wm.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for umacnas1.campus.wm.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

umacnas1.campus.wm.edu

Other certificates including the domain name wm.edu

(limited to 100 certificates)
sql2014dev.campus.wm.edu
info.mason.wm.edu
scholarworks.wm.edu
printshop.wm.edu
tribetrek.wm.edu
umacnas1.campus.wm.edu
image.partnerapp1.myworld.com
dilbert.physics.wm.edu
qliktest.wm.edu
people.wm.edu
blueprod2012r2.campus.wm.edu
image.partnerapp1.myworld.com
scholarworks.wm.edu
tedx.wm.edu
dilbert.physics.wm.edu
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
simpos-sql-prod.campus.wm.edu
blog.oieahc.wm.edu
gp2.wm.edu
stdirector.campus.wm.edu
image.partnerapp1.myworld.com
*.wm.edu
wmvidsquadnas1.campus.wm.edu
explore.mason.wm.edu
image.mktmarathonkids.org
studyabroad.wm.edu
mapi.wm.edu
*.wm.edu
connect.wm.edu
counseling.education.wm.edu
online.mason.wm.edu
catalog.wm.edu
edge-uc1.peopleadmin.com
*.aswp.wm.edu
printshop.wm.edu
vault.it.wm.edu
us-east-1-san1.blackboard.com
san-2-s6.tlsprovisioning.exacttarget.com
onlinemba.mason.wm.edu
scholarship.law.wm.edu
sql-wmpd1.campus.wm.edu
dilbert.physics.wm.edu
stvoicemail04.campus.wm.edu
give.wm.edu
eprint.wm.edu
vpn.aws.wm.edu
wm.edu
blackboard.com
*.wm.edu
counseling.education.wm.edu
onlinemba.mason.wm.edu
visas.wm.edu
getinfo.mason.wm.edu
calendar.wm.edu
tidewaterteam.wm.edu
*.wm.edu
sin.wm.edu
lensec2.campus.wm.edu
image.partnerapp1.myworld.com
*.libraries.wm.edu
itservices.wm.edu
us-east-1-san1.blackboard.com
image.partnerapp1.myworld.com
tribetrek.wm.edu
counselinginfo.education.wm.edu
reservations.wm.edu
us-east-1-san1.blackboard.com
scholarship.law.wm.edu
counselinginfo.education.wm.edu
geolab.wm.edu
online.mason.wm.edu
dilbert.physics.wm.edu
itstatus.wm.edu
tedx.wm.edu
wmvidsquadnas1.campus.wm.edu
visas-test.wm.edu
precollegeonline.wm.edu
helicity.physics.wm.edu
makerspace.physics.wm.edu
www.tidewaterteam.wm.edu
stli.wm.edu
sql-wmpd2.campus.wm.edu
lion2.swem.wm.edu
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
campusrec.wm.edu
image.partnerapp1.myworld.com
it.wm.edu
devl.banner.wm.edu
connect.wm.edu
info.mason.wm.edu
online.mason.wm.edu
mylaw.wm.edu
scholarworks.wm.edu
image.partnerapp1.myworld.com
image.mktmarathonkids.org
masonfiles.wm.edu
msbaonline.mason.wm.edu
blackboard.wm.edu

Certificate

The complete raw certificate details for umacnas1.campus.wm.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs6RdeebMe4l/9cRYoIyG
XaikovMON4FCAsyIUumBfdX618i+TDfkvTjzKSjyzZIOQJfZJExl9iZaeJlzd9bB
i3m3228pwOR4YwAV5cG314z/juT9WGdu7RzefjfwfQzk5wKqW0Pwe0hzXq9RiAUH
td6o1AtL8BK2BK42CL79xKlNAKXSXsRo8rQ7jWztuBHTI9KlqgFv8vzi+8klDANv
qdvJLqltGn08boeg6gtDHhkUATLHw8YGu4MfnNtoiSYNaCp5cDMHz5dZGfwxgUtW
Z7fgwX6wMuQVq/bKL1rNQcXfekzs5GrUIMODqyxvpQSlVL4CGZmLpXQ+Vp0e5+RE
hSfI3T7jNuKKSnOhwOk6ItPREfGMAlpbI23LvtzZk1bWWVyXsNt5/22Q5MiuB/DO
1bQDiEr0k1awKPQGAFRfkw0/joTDlT5AfVCDI8Az0IoqYfpwF27Qfhqm4EdvbrOy
0/Zu1FVerL5wWQL6NrRqFDi49XTqDwYPmH6jck1LnYSFpulAjc186pMfKQDhOjbY
xvQy9ZZySNkFcN9JvR+VQ+4elZRL4CfmjEMdACYIc2Ln2Vimi5YMyL9vuIA4t5yT
iZuBrdeJLt/11BR2PI2vZTAVD/GvcCPbLMIm8g2/QqNOstMC3rpYPSIlYYB9P3uT
8LFFBWVZYu4GbvUnhLYVhkECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 196069802320344306782208307282343029936
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'The College of William & Mary'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'umacnas1.campus.wm.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732875629088790459194403331363520432424159976886295040218313768050773344072757471896970541112430809915766786347607650280148612177145000414474223336133535841164728616550427344626167595424633956407572266206691911951511358371661723776276518221076446067394654077962793509923020620762950392848542027892779115238100830588077440235838617716799453804908565071688686336699964162593086962799851547809390759232246052973376425020522618624065936994967331032026391250856864848057969821707643597224654634323933282890998888687612408971306732596469925768561064242923198121192150213376636002288588151633227130887824450535686225446411758331148752063882312509551416365567868266962066751204626362386237097091215638729590949062343971824325232721250946343328950743745628588098380026255204853170387415884660044952988137988390994823812858178016449674827022514068051102792573410345180153021071552846506750675470429970838193612882169657700517789340441484006348722952671190500861593274157162677595031158530700769403998224144787931718314631934342455974618716676581921419792403237917819169468952032046406251723994322299492289313119300999311293486846084473195683665512103050415486746195340503396684956344317498811136948546221419040065927330114129665618261881226817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d5b901f32e9d2b6cd4c436103407a2bfcede9ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umacnas1.campus.wm.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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