test-safeco-acr-payments-api.np.uscm.libertyec.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 13:6c:3c:20:8a:50:52:2d:ff:63:45:48:6b:a0:e0:7a was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 13:6c:3c:20:8a:50:52:2d:ff:63:45:48:6b:a0:e0:7a
Serial Number (int): 25817319503318616029210364702911160442
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 7c:70:2e:50:95:15:cd:22:69:b7:a4:cc:24:b7:55:59:db:90:16:8f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): fe:89:73:d0:84:f1:2d:5b:b2:e7:27:8e:f6:5f:c1:f9:e0:aa:97:59
Fingerprint (sha256): 02:fc:63:c8:58:42:23:2b:01:74:90:35:45:40:08:ef:ba:e3:ff:ad:69:00:47:1a:4e:26:2c:94:9c:e5:e8:4d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate test-safeco-acr-payments-api.np.uscm.libertyec.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-safeco-acr-payments-api.np.uscm.libertyec.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-safeco-acr-payments-api.np.uscm.libertyec.com

Other certificates including the domain name libertyec.com

(limited to 100 certificates)
*.lnpopa.uscm.libertyec.com
claimsview.libertyec.com
piclaimcenter-testers.libertyec.com
2pr-propertypremiumdeterminationservice.libertyec.com
publish-wps.libertyec.com
2pr-pmpieservice-internal.libertyec.com
pmclaims-esb-rental-internal.libertyec.com
pmclaims-esb-fnolservices-internal.libertyec.com
ete-www2.libertymutual.com
*.dev.uscm.libertyec.com
autopolicy-pmwps.libertyec.com
prod-pmcontactcenter-nppi.libertyec.com
2pr-telematicsvaryingenrollmentdiscountservice.libertyec.com
financialaccountservice.libertyec.com
2pr-pifin-salescomp-services.libertyec.com
2pr-telephonymediationservice.libertyec.com
life-fin-wps.libertyec.com
2pr-propertypolicy-pmwps.libertyec.com
pmclaims-esb-rentalreservation-internal.libertyec.com
masterdatamanagement.libertyec.com
2pr-esvc-wps.libertyec.com
2pr-pmclaims-esb-iso-internal.libertyec.com
DEVEFT-dpmsvc.libertyec.com
perf-geicohiss-nppi.libertyec.com
plp-cloud-cpa.libertyec.com
2pr-pmepbam-internal.libertyec.com
test-safeco-acr-payments-api.np.uscm.libertyec.com
pmclaims-esb-internal.libertyec.com
2pr-pmclaims-esb-fnolservices-internal.libertyec.com
ete-www2.libertymutual.com
ditto.libertyec.com
2pr-pmclaimcenter-internal-n2w3.libertyec.com
publishingformsmarketservice.libertyec.com
nginx-admin-launcher.libertyec.com
*.devops.deva.uscm.libertyec.com
pmclaims-esb-claimvideo-internal.libertyec.com
propertytelematicsservice.libertyec.com
2pr-pmclaimcenter-internal-n1w2.libertyec.com
pmclaims-esb-claimservices-internal.libertyec.com
ds-dmgt-nebula-scope-wem-dev.lmig.com
2pr-pmepdoc-internal.libertyec.com
explore-violationpredictor.libertyec.com
ete-www2.libertymutual.com
*.prod.prod-ets-shared.libertyec.com
msb-prefill.libertyec.com
crdt-dataservices.libertyec.com
pmclaims-esb-esubro-internal.libertyec.com
2pr-pmepep.libertyec.com
2pr-inet.libertyec.com
8-internal.us-east-1.non-production.paas.lmig.com
non-prod-wxs.libertyec.com
*.lnpopa.uscm.libertyec.com
crdt-app.libertyec.com
pmclaims-cti-osa-kdc-internal.libertyec.com
ete-www2.libertymutual.com
piclaimsdoc-internal.libertyec.com
rtpo.libertyec.com
pmclaims-esb-claimvideo-internal.libertyec.com
pcf-WhrmGXwiYi.us-east-1.non-production.lmig.com
pmclaims-esb-xact-internal.libertyec.com
perf-marketing.lnpopa.uscm.libertyec.com
appservices.libertyec.com
publishingforms-bpm.libertyec.com
uat-pi-marketservices.libertyec.com
8-internal.us-east-1.non-production.paas.lmig.com
piclaimcenter-testers.libertyec.com
qa-dpmsvc.libertyec.com
autopolicy-pmwps.libertyec.com
pmclaimcenter-internal-n3w2.libertyec.com
2pr-cloudant.libertyec.com
prod-geicohiss-nppi.libertyec.com
*.perf.nonprod.uscm.libertyec.com
8-internal.us-east-1.non-production.paas.lmig.com
*.devops.deva.uscm.libertyec.com
pmclaims-rules-internal.libertyec.com
*.couch.libertyec.com
2pr-fiu.libertyec.com
2pr-pmclaimcenter-internal-n2w4.libertyec.com
2pr-pmpiebackend-internal.libertyec.com
prod-epass-nppi.libertyec.com
whalebot.libertymutual.com
pairingtool.libertyec.com
pmclaims-esb-gatewayservice-internal.libertyec.com
pmclaimcenter-internal-n4w2.libertyec.com
qbe-cpa.libertyec.com
2pr-telematicsvaryingenrollmentdiscountservice.libertyec.com
finmsspgateway.libertyec.com
2pr-pmclaimcenter-internal-n6w2.libertyec.com
2pr-finance-wps.libertyec.com
ete-www2.libertymutual.com
2pr-pmclaims-esb-policyservices-internal.libertyec.com
2pr-ma-appservices.libertyec.com
fiu-nxtgen.libertyec.com
2pr-cloudant-util.libertyec.com
ete-www2.libertymutual.com
2pr-esvc-wps.libertyec.com
*.prod.prod-ets-shared.libertyec.com
2pr-pmpiensa-internal.libertyec.com
cloudant.libertyec.com
pmcentive-erp.libertyec.com

Certificate

The complete raw certificate details for test-safeco-acr-payments-api.np.uscm.libertyec.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNUS+l2w4nZhgxB1cHHv
LMZhF3I5zapuLs0t0QpBG5MXPMAR0fMvhS4xgqUkF6JH/+2B1iApA9GstIAhZLOv
hE94pYZlqmAPqlak0lTt8CFpiG8GgwdiZv0CEjUZ7AgJjGp4Lg2LFJyH+ECCutv+
ND7mt73DsXd9jQrA83REPtpj42ndGSdVQ9ZG9SLQHlqqbOzwG8jhNkcPwcONBBPH
JsUQHj6VYEsBeEv7Z1IkVlrIFw7Q0eEhJNykRGF7fdVFQdR1X9Rp/Q8fn0iwjBos
uKbofC4YZ4e6STStpeapVyV6FVYC4ep2RFHd0hgL4DTsFpgISV++rah7cnDKTUoM
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25817319503318616029210364702911160442
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 14:32:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-09 14:32:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-safeco-acr-payments-api.np.uscm.libertyec.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24847778544263397813784234074933168296464077240419377546557503530227078054524598461199131174924324526406562493838377655303552806930809703553873660310923718376202271774132479860228054823313925726302424973282395173771219442195252615401358503841979841393419571016360167470216511405745538165308639551236943074018851888765264643478878411179662784686986248911891775882796425536448331637772280233942723239652422534242075041765903045447441938146332296606466794732179940759979940416441426167227760655382516579371841274181162440261450512684843012510233973429498337654247239288014119477347649384438686687429508167136701632351303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c702e509515cd2269b7a4cc24b75559db90168f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-safeco-acr-payments-api.np.uscm.libertyec.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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