www.oppci.bnpparibas.fr

- BNP PARIBAS SA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 2e:1d:a9:d9:e7:70:e5:78:c4:b2:38:f6:ab:e0:fc:71 was issued on by Entrust, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: Montreuil
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 2e:1d:a9:d9:e7:70:e5:78:c4:b2:38:f6:ab:e0:fc:71
Serial Number (int): 61298509406365443492700282997224569969
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 6c:1c:34:a5:69:a9:1e:5e:3f:76:42:50:cc:7c:fb:e8:b3:77:8a:aa
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 67:03:78:a8:89:36:a2:c6:52:22:7c:75:4f:59:09:76:06:99:29:c1
Fingerprint (sha256): 02:53:7f:53:34:27:13:18:b9:11:5d:39:92:c6:37:6d:25:86:7c:d5:75:db:e6:dc:be:c2:37:4e:e5:83:b7:00

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.oppci.bnpparibas.fr

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.oppci.bnpparibas.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.oppci.bnpparibas.fr
www.espace.reim.bnpparibas.fr
espace.reim.bnpparibas.fr
www5.oppci.bnpparibas.fr
oppci.bnpparibas.fr

Other certificates including the domain name bnpparibas.fr

(limited to 100 certificates)
bnp16b.bnpparibas.com
bnp11b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
extranetclients.repmfrance.bnpparibas.fr
iol-valuation-realestate.bnpparibas.fr
dspp.bnpparibas.fr
leaseoffers.leasingsolutions.bnpparibas.fr
bnp13b.bnpparibas.com
www.oppci.bnpparibas.fr
mail1.bnpparibas.fr
bnp03s.bnpparibas.com
www.artegy.bnpparibas.fr
extra-vendeur-realestate.staging.bnpparibas.fr
group.bnpparibas
leaseoffers.leasingsolutions.bnpparibas.fr
www.privalto.fr
carto.rentalsolutions.bnpparibas.fr
push.bnpparibas.com
bnp03s.bnpparibas.com
c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com
www.realestate.bnpparibas.fr
bnp02b.bnpparibas.com
leaseoffersu.leasingsolutions.bnpparibas.fr
newlo.leasingsolutions.bnpparibas.fr
www.espace.reim.bnpparibas.fr
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp03s.bnpparibas.com
reim.bnpparibas.fr
easysurvey.realestate.bnpparibas.fr
extranet-vendeur-realestate.bnpparibas.fr
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
vote-ag.mutuelle.bnpparibas.fr
catalogue-formations-reseaux.bnpparibas.fr
collect-bnl-test.bnpparibas.fr
collect.dcrm.bnpparibas.fr
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnppf-collect.staging.bnpparibas
leasingsolutions.bnpparibas.com
bnp13b.bnpparibas.com
easy.bnpparibas.fr
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
investo.bnpparibas
leasingsolutions.bnpparibas.com
bnp13b.bnpparibas.com
bnp08b.bnpparibas.com
www.dspp.bnpparibas.fr
group.bnpparibas.com
bnp03b.bnpparibas.com
staging.international-buyers.bnpparibas.fr
3stepit.bnpparibas.fr
www.logement.bnpparibas.fr
gw2.leasingsolutions.bnpparibas.fr
leaseoffersu.leasingsolutions.bnpparibas.fr
bnp02b.bnpparibas.com
bnp03b.bnpparibas.com
bnp02b.bnpparibas.com
bnp03s.bnpparibas.com
mabanqueentreprise.bnpparibas
push.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp02b.bnpparibas.com
c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com
hubselling.factor.bnpparibas.fr
international-buyers.bnpparibas.fr
dspp.bnpparibas.fr
bnp03s.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp06b.bnpparibas.com
leasingsolutions.bnpparibas.com
france-titrisationrec-was7.bnpparibas.fr
bnp16b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
3stepit.bnpparibas.fr
bnp02b.bnpparibas.com
international-buyers.bnpparibas.fr
bnp02b.bnpparibas.com
challenges.leasingsolutions.bnpparibas.fr
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp08b.bnpparibas.com
www.produitsdebourse.bnpparibas.fr
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
collect-bnppf.bnpparibas.fr
bnp05s.bnpparibas.com
bnp03s.bnpparibas.com
secure1.entreprises.bnpparibas.fr
bnp05s.bnpparibas.com
bnp03b.bnpparibas.com
patrimoine.reim.bnpparibas.fr
extranet.proprietaires.immobilier.bnpparibas.fr
staging.logement.bnpparibas.fr
bnp03s.bnpparibas.com
bnp16b.bnpparibas.com
staging.scpi.bnpparibas.fr
collect-bnl.staging.bnpparibas.fr

Certificate

The complete raw certificate details for www.oppci.bnpparibas.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7gt/QzWO17WFi2hpJu3
tQetBzvXlilG9JTn1uAiN8jqHTwI4+Wq9W5Lj5DYLUh4PlJEiJXT+qEB5neOEprH
jhKOGUwu+aIq6mD2TdGHvJDd0M7uAEfoPxMUhzBJIOtDdkXwOvbsTWI4W2WY89cd
iBOyD/fVE0XXLIJaXCTIK62FoJ7jhIPkfLxfcGVm07G7l+13C1Exx/RbBo8aDbKI
pYk333MjdtlVIsDkmzMC/mDvCe9gGVrjwuFIHXIz5JYr4DtaNK9kim1PvmmveiUz
P+NHyB7ETMchZmjIkGpX+TetIv+2XWf3treOfb5gcvHBH/j1SKijoGJnjZsLREMN
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 61298509406365443492700282997224569969
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 12:33:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-15 12:33:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oppci.bnpparibas.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17637946756989323423051602752659358741229493514758923262398773332062287222965714929565425465079344954626726333782035667722063762387942700449955816830541088164278979736595521050089367082609374884901732936272033879344974660383872286605087289786300586123167083249805839685126258089216256149277912564216255825090518423821565493957793724157043085362826539206667686082165012821692501083642818108720174089100623779886474546100931207248669462206896191807284935604306369215903144698581240992851353154926983105565175482579953596698267829529955021089973461709707591017991200768516141437980331303912203918267910241764575600119171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c1c34a569a91e5e3f764250cc7cfbe8b3778aaa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oppci.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espace.reim.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace.reim.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www5.oppci.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oppci.bnpparibas.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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