crstools-uat.ssga.statestr.com

- State Street Corporation -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 07:be:53:c8:67:4d:c6:a3:7a:27:ee:66:c5:b3:cb:91 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State Street Corporation

Organization: State Street Corporation
Organization unit: SSGA
State / Province: Massachusetts
Locality: Quincy
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:be:53:c8:67:4d:c6:a3:7a:27:ee:66:c5:b3:cb:91
Serial Number (int): 10292831691216615645154176906564979601
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f8:60:fe:74:f7:80:f0:50:d8:0a:5d:c1:a0:4c:87:5e:0e:23:29:88
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): e1:a2:2c:a1:76:f5:a9:11:89:76:a1:f8:12:d7:33:87:fe:83:68:63
Fingerprint (sha256): 01:e0:d6:7a:34:9d:ed:bc:77:ca:7e:ed:c7:20:7b:41:10:bb:7d:fc:f6:d7:20:1b:ff:bf:22:f7:aa:9c:7a:52

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate crstools-uat.ssga.statestr.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crstools-uat.ssga.statestr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crstools-uat.ssga.statestr.com

Other certificates including the domain name statestr.com

(limited to 100 certificates)
corpldapemea.statestr.com
gtsoverview.statestr.com
rits-uat.ssga.statestr.com
dwms02q2.statestr.com
gdcpw5490.statestr.com
ehartt-clo2.statestr.com
kycplatform-preprod.statestr.com
wdcrlvg0015.ssga.statestr.com
na1.bizapps.statestr.com
arch-uat.ssga.statestr.com
amis.statestr.com
statestreetintranet.statestr.com
desjasper.ssga.statestr.com
gvpdfuat52.ssga.statestr.com
SFCPW3212.corp.statestr.com
fre.statestr.com
gvcrsprd67.ssga.statestr.com
gra.statestr.com
sld-preprod.statestr.com
IB4PW3257.corp.statestr.com
gdcvcscamer1.statestr.com
sfculvg0018.ssga.statestr.com
fre.statestr.com
gvcrsdvi67.ssga.statestr.com
ssgaitools-pfm.ssga.statestr.com
mqa2.statestr.com
acc.ssga.statestr.com
*.ssccqa.statestr.com
DEDPW3537.corp.statestr.com
jabhmgamer2.statestr.com
gem.statestr.com
pamanager.statestr.com
gvcrsdr67.ssga.statestr.com
myssc-dev-sg.statestr.com
areapm.statestr.com
crstools-uat.ssga.statestr.com
sfculvg0082.ssga.statestr.com
gvcrsuat68.ssga.statestr.com
jabdl3650.it.statestr.com
sf360.statestr.com
buat-recontmv.statestr.com
nsrdwfe-prd.ssga.statestr.com
gvjbsdr66.ssga.statestr.com
glspl3225.statestr.com
gvwlsuat58.ssga.statestr.com
gaxspapp-uat.ssga.statestr.com
wdcplvg0014.ssga.statestr.com
buat-tlmservice.statestr.com
gvjbsuat87.ssga.statestr.com
mmsg46.statestr.com
fixedincome.ssga.statestr.com
axdsprd.statestr.com
cashviews-dev.ssga.statestr.com
gdcdc50076.statestr.com
sfculvg0006.ssga.statestr.com
master1.devops.ssga.statestr.com
prod-fjw.statestr.com
ses-security.statestr.com
invop-newuat.ssga.statestr.com
cdrapp-dev.statestr.com
invop-uat.ssga.statestr.com
sailpoint.statestr.com
pda-uat-eft.statestr.com
sspr-int-ha.statestr.com
drs-buat.statestr.com
mdf.ssga.statestr.com
*.ssccqa.statestr.com
sfcplvg0123.ssga.statestr.com
PKPPW3201.corp.statestr.com
babelwfe-prd.ssga.statestr.com
nagus.statestreet.com
jabdw3279.corp.statestr.com
sfculvg0042.ssga.statestr.com
gdcuw3246.corp.statestr.com
dwms02q2.statestr.com
solrrequesthandler-uat.statestr.com
brtapp2-uat.ssga.statestr.com
gvcolprd51.ssga.statestr.com
babelwfe-dev.ssga.statestr.com
jabpw3410.statestr.com
wdcplvg0082.ssga.statestr.com
aedp38.statestr.com
ams-xmgbrk-mmsg44.statestr.com
gdcps2200.statestr.com
DEDPW3538.corp.statestr.com
DEDPW3732.corp.statestr.com
igbpw3261.corp.statestr.com
esf-uat.statestr.com
hpmweb.corp.statestr.com
gdcpl4119.statestr.com
LCPPW3560.corp.statestr.com
govapm.statestr.com
ehainq-clo2.statestr.com
gvcmsdr56.ssga.statestr.com
jira.dev.us-east-1.aws.galleon.c.statestr.com
sfcplvg0031.ssga.statestr.com
inss2007.corp.statestr.com
aofs08.statestr.com
aci.statestr.com
buat-fat.statestr.com

Certificate

The complete raw certificate details for crstools-uat.ssga.statestr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EsJiKgODt+kMQJRhS/7
/ub9DtMDrxtupFCzgqKG9xuLxnADVtUmxePPSytQ5GF5zS+t1AqjCvkAz0UseBYH
AhTxcSaNlfg41/c2BUobqeGIXJDXJmXQxhj8x/MyJoB+5rnsTkl7fcPlWwD87udI
hEYAlvsDPvi34hI9gB0uhJBftAFHF3WcwkWzDsnEzQ3bdnKCShXSe5lJTjnuvvH0
16xMPSC9RYrQneT8oACV6mE/F2G7TuH3Gxl6dTqfu1gV0TJO34zhZuQVsDZTZUAj
VEg1qN3S82qwvKOFj+5ZtXQXFtvXGrc6tlWDzLBxpPwvBouDHawZlfDteo0XpmP7
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10292831691216615645154176906564979601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quincy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Street Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSGA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crstools-uat.ssga.statestr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26799522895661899356169905080482548237698325250264963513565604315134465226095919804560572102297750979829744796105683468800635140899719837776566005150979459702092690909988421865841032586102212519879644972673040326826533537494544794463906146026504151360240361300897647940457946032189870571949787612184951907839877679899683653209268236629948646803802986347784631033576944128140657464752936346923972225804995218109365521016424590363239317488780098156841630075933703234707301282692393612505540234370505329111226727142490358088142523460300468533669128749145321131063416354406599930885351647613602114380316589889027943168961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f860fe74f780f050d80a5dc1a04c875e0e232988
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crstools-uat.ssga.statestr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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