educo.bell.ee.t.kyoto-u.ac.jp

- Kyoto University -

Issued by NII Open Domain CA - G7 RSA

About this certificate

This digital certificate with serial number 35:17:15:af:52:08:db:4e:d4:60:36:fd:f2:9e:b8:d7 was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kyoto University

Organization: Kyoto University
State / Province: Kyoto
Locality: Kyoto
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 35:17:15:af:52:08:db:4e:d4:60:36:fd:f2:9e:b8:d7
Serial Number (int): 70568946425265436845012248241505220823
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 5d:bb:a1:e8:cd:c0:7e:e5:52:b2:e9:d1:e0:a5:6c:12:1a:78:66:66
AuthorityKeyId: b0:2e:e5:51:ed:fc:4a:cf:a3:87:f1:13:90:76:2d:9d:8e:94:a1:e3

Fingerprint (sha1): 31:a7:a6:0e:d6:2f:54:06:ba:bb:a6:d8:4a:18:77:5d:74:75:e7:9f
Fingerprint (sha256): 01:b6:4c:fa:1e:87:f2:01:ce:d3:65:0b:ff:93:72:c5:b2:72:2e:73:22:11:c4:c7:0c:e0:28:5d:f9:f6:d1:b8

Issuing Certificate URL: http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer

Revocation information

OCSP Server: http://niig7rsa.ocsp.secom-cert.jp
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl

Check the revocation status for certificate educo.bell.ee.t.kyoto-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for educo.bell.ee.t.kyoto-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

educo.bell.ee.t.kyoto-u.ac.jp

Other certificates including the domain name kyoto-u.ac.jp

(limited to 100 certificates)
student-notifier-dev.rd.iimc.kyoto-u.ac.jp
home.kurims.kyoto-u.ac.jp
history.cseas.kyoto-u.ac.jp
www.qnmc.icems.kyoto-u.ac.jp
kuhp.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
meibo.i.kyoto-u.ac.jp
jl.net.ist.i.kyoto-u.ac.jp
genome2.cohort.med.kyoto-u.ac.jp
www.anim.med.kyoto-u.ac.jp
koukai.shomubu.kyoto-u.ac.jp
ris-orcid.iimc.kyoto-u.ac.jp
elam.kais.kyoto-u.ac.jp
educo.bell.ee.t.kyoto-u.ac.jp
my.kulib.kyoto-u.ac.jp
kar.gakusei.kyoto-u.ac.jp
www.africa.kyoto-u.ac.jp
ikeda-xrp.gsais.kyoto-u.ac.jp
vdp.cseas.kyoto-u.ac.jp
zoo.zool.kyoto-u.ac.jp
agri-history.kais.kyoto-u.ac.jp
inter3.kuicr.kyoto-u.ac.jp
www.rish.kyoto-u.ac.jp
www.ee.t.kyoto-u.ac.jp
www.esho.kyoto-u.ac.jp
kyutubebio.sci.kyoto-u.ac.jp
db.kudpc.kyoto-u.ac.jp
pas.cseas.kyoto-u.ac.jp
cls.iimc.kyoto-u.ac.jp
SC2-20A-1.kuins.kyoto-u.ac.jp
lawschool.law.kyoto-u.ac.jp
socio.k.kyoto-u.ac.jp
demo3.cseas.kyoto-u.ac.jp
www.al.media.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
kupe.med.kyoto-u.ac.jp
cinq.lif.kyoto-u.ac.jp
www.tech.t.kyoto-u.ac.jp
www.maizuru.marine.kais.kyoto-u.ac.jp
www.cn.call.iimc.kyoto-u.ac.jp
vmm.cc.iimc.kyoto-u.ac.jp
www.rri.kyoto-u.ac.jp
www.s-ar.t.kyoto-u.ac.jp
mgend.med.kyoto-u.ac.jp
ris-orcid.iimc.kyoto-u.ac.jp
tls.automattic.com
utrecht.kuicr.kyoto-u.ac.jp
gisurg.kuhp.kyoto-u.ac.jp
www2.kulib.kyoto-u.ac.jp
www04s.ufinity.jp
ikev2-i.kuins.kyoto-u.ac.jp
mail.st.kyoto-u.ac.jp
www.suzuki.icems.kyoto-u.ac.jp
mhost2.iimc.kyoto-u.ac.jp
kudpc.kudpc.kyoto-u.ac.jp
www.s-ge.t.kyoto-u.ac.jp
www.rri.kyoto-u.ac.jp
dksrp.hs.med.kyoto-u.ac.jp
ufinity04.jp.fujitsu.com
sp.rd.iimc.kyoto-u.ac.jp
dia.kuicr.kyoto-u.ac.jp
authidp1.iimc.kyoto-u.ac.jp
gssfolio.iimc.kyoto-u.ac.jp
www.yukawa.kyoto-u.ac.jp
100nin.cpier.kyoto-u.ac.jp
jisedai.asafas.kyoto-u.ac.jp
gcoe.biol.sci.kyoto-u.ac.jp
www-nh.scphys.kyoto-u.ac.jp
ap.rieki-souhan.kyoto-u.ac.jp
www.blog.ist.i.kyoto-u.ac.jp
gssfolio.gss.kyoto-u.ac.jp
fundexapp.jp
www.emc.t.kyoto-u.ac.jp
vds2.iimc.kyoto-u.ac.jp
enq.gakusei.kyoto-u.ac.jp
iccert.adm.kyoto-u.ac.jp
www.bic.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
clinsub.raddarj.genome.med.kyoto-u.ac.jp
coc.educ.kyoto-u.ac.jp
www.iimc.kyoto-u.ac.jp
agrohort.kais.kyoto-u.ac.jp
educo.work.t.kyoto-u.ac.jp
www-nh.scphys.kyoto-u.ac.jp
www.icems.kyoto-u.ac.jp
www.cit.t.kyoto-u.ac.jp
ts-mhs.iimc.kyoto-u.ac.jp
database.rish.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
mail.iimc.kyoto-u.ac.jp
www.coc.kyoto-u.ac.jp
www.lif.kyoto-u.ac.jp
educo.yamakawa-lab.ee.t.kyoto-u.ac.jp
plesk.hosts18b.iimc.kyoto-u.ac.jp
incmac-20.kais.kyoto-u.ac.jp
kamitani-lab.ist.i.kyoto-u.ac.jp
125th.kyoto-u.ac.jp
www-nh.scphys.kyoto-u.ac.jp
www.maizuru.marine.kais.kyoto-u.ac.jp
corpus.kanji.zinbun.kyoto-u.ac.jp

Certificate

The complete raw certificate details for educo.bell.ee.t.kyoto-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuS8oJ0qxJl5QKNpfUr6
3CbdcJww8+vqM85DoaeFVSvmXNqVn4NfNbBCqyzYSaCcOVsgWPvcWcqNrtQ57Kpo
kBX3LMcGa/L+7QiT40GrARJJmE6YFGKIexeWzZT7LzPfB3RlSX4VAFqZHsVvYztZ
jKKf//0xBBB6gXlTroYI8VGLKLi0iGxHtyKW0HQMUvuZq3CPs2EJdVRIOg9beyLg
95yAVgYNcZuhWULraAaceKimR2vtkQj28YX94D6NBJHTUdoZYbIGE98pQG7r9lAX
2Gz2vzu0mZioPUyVCNUnDN7Us5qqSX0077KjiRbz9hqyOloGQ3Q1OziIl9aupX+1
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70568946425265436845012248241505220823
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G7 RSA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-02 01:17:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-02 01:17:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyoto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyoto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyoto University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'educo.bell.ee.t.kyoto-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21068352957057308308237351989098068383563438755112175412718789208373460659390381258305669553650989607171905806303142368965437886185250590647362324958985246287120439246276591927958164445340011054943381188757398415334131566919170907466490605049456693957138906521010506559713453745710505194139042989753396348662839812421852742939463379337577477853513797757382629280170529226682230031386709830514911818956623019776314042701242855360723559837201044683931061922555017598661469975510369476221131355881845375450481906687828608783166441636861883076660549583005368699039670215713416932079564631196671822392840217124746353948149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b02ee551edfc4acfa387f11390762d9d8e94a1e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig7rsa.ocsp.secom-cert.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educo.bell.ee.t.kyoto-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.214.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5dbba1e8cdc07ee552b2e9d1e0a56c121a786666
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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