aqi.oregon.gov

- State of Oregon -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:30:9a:66:56:5c:a5:a0:e1:8e:22:92:36:53:49:f1 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Oregon

Organization: State of Oregon
State / Province: Oregon
Locality: Salem
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:30:9a:66:56:5c:a5:a0:e1:8e:22:92:36:53:49:f1
Serial Number (int): 8227729822998419954041941799656966641
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 47:98:83:ee:2c:e3:46:ea:54:be:2e:81:59:48:6e:f6:ca:7e:b6:f7
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 7f:0b:3d:be:37:bb:1f:23:a7:5d:89:09:70:e9:20:e4:e7:79:24:9c
Fingerprint (sha256): 03:03:f5:b5:92:fd:9c:f0:97:f3:59:73:ba:2f:74:65:db:d6:44:a7:56:3a:e7:92:64:27:5a:46:da:9a:8f:af

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate aqi.oregon.gov

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aqi.oregon.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aqi.oregon.gov
aqiapi.oregon.gov
www.aqi.oregon.gov

Other certificates including the domain name oregon.gov

(limited to 100 certificates)
publicaccessqa.courts.oregon.gov
licensesonline.dcbs.oregon.gov
ojdsftp.courts.oregon.gov
omb.oregon.gov
ftp.odf.oregon.gov
www.cahcat.oregon.gov
justice.oregon.gov
otr.oregon.gov
*.jjis.oregon.gov
dhs.oregon.gov
ommpsystem.oregon.gov
perfwssecext-mci.one.oregon.gov
tag-unclaimed.oregon.gov
osp.oregon.gov
unclaimed.oregon.gov
ilearn-test.oregon.gov
aqi.oregon.gov
justice.oregon.gov
access.courts.oregon.gov
epht.oregon.gov
traditionalhealthworkerregistry.oregon.gov
5715683958587392-fe4.pantheonsite.io
*.odf.oregon.gov
mail.oed.oregon.gov
sit-orverify.oregon.gov
DASAPP.OREGON.GOV
remotesupport.dhsoha.oregon.gov
*.osbn.oregon.gov
ommpsystem.oregon.gov
sorm.oregon.gov
access3.courts.oregon.gov
contact-tracing.oha.oregon.gov
billing.dcs.oregon.gov
appellate.courts.oregon.gov
*.boli.oregon.gov
hrlb.oregon.gov
test.cahcat.oregon.gov
dsktp.doj.oregon.gov
daresource.oregon.gov
*.hcs.oregon.gov
dev.navigator.oregon.gov
hybrid.doj.oregon.gov
data.oregon.gov
vpn.boli.oregon.gov
inside.das.oregon.gov
licensesonline.dcbs.oregon.gov
facilities.nchmd.org
cebhelpdeskportal.cebupacificair.com
ilearn-testing.oregon.gov
SIT-TEST.one.oregon.gov
daresource.oregon.gov
orpin.oregon.gov
5654100301578240-fe4.pantheonsite.io
otr-test.oregon.gov
yourwater.oregon.gov
opdssentry.courts.oregon.gov
yourwater.oregon.gov
rps.licenseeservices.public.health.oregon.gov
crimstest.oregon.gov
5654100301578240-fe4.pantheonsite.io
dmv2u.oregon.gov
opdscore.courts.oregon.gov
pdpactrac.oregon.gov
epht.oregon.gov
ommpsystem.oregon.gov
mail.dhs.oregon.gov
ltcfacilityportal.oregon.gov
ilearn-testing.oregon.gov
perfwssecext-mf.one.oregon.gov
servicedesk.odva.oregon.gov
*.health.oregon.gov
minorlabels.dcbs.oregon.gov
immalert.health.oregon.gov
test.careware.oregon.gov
tls.automattic.com
crims.oregon.gov
ftp.odf.oregon.gov
ojdvideomea.courts.oregon.gov
ommpmanagement.oregon.gov
dmv2u.oregon.gov
www.energyinfo.oregon.gov
traditionalhealthworkerregistry.oregon.gov
ra.das.oregon.gov
*.dhsoha.oregon.gov
otr.oregon.gov
uatwssecext-oa.one.oregon.gov
5747976207073280-fe2.pantheonsite.io
webportalqa.courts.oregon.gov
otr.oregon.gov
psilocybin.oregon.gov
dev.navigator.oregon.gov
otr-test.oregon.gov
pt.osp.oregon.gov
buildingpermits.oregon.gov
dhs.oregon.gov
servicedesk.odva.oregon.gov
ilearn-test.oregon.gov
5747976207073280-fe2.pantheonsite.io
tickets.dtradebox.com
billing.ets.oregon.gov

Certificate

The complete raw certificate details for aqi.oregon.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUdMJQMQNx+D3dgdaj9J
ZITzyne3EP8dxHzvJHTcjq+nBGqQopMSXd/LGveK2aCldVnVJWUWm/eI+w3v2cYu
E7wCuN8SY3Nlkd1TgsKEJhWkPsECqCAK5xW8fL5QoGt9Pl/xNbqyBsbDKjeISQ7m
Jul/ZWJc78/qb3h/agjqqUp8V/rzQJvY2pxrMgJYZTM4rB9qFHk9NRe+zJcdpKH1
2486KC8ei6Fx+L2G4hjgFPog+4pMjv/8iwFYfb7OfjKCWY9NEYNwvwlbbL9JIOLO
SR8bHqUUWxBYHMZl9abP5A5nJeJuEoR5yswg1L+uH1pPCcdRcNvJUCtZqmTZR+tG
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8227729822998419954041941799656966641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salem'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aqi.oregon.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25914010595946089495203118604380544461702420088513945517026026032474228177865536675411754388564141686865201983678977854406703906018171968695800239139009178371280228774417016130213954341142120145203717281841943630987988312426220518064000246639475513743213673438242063071746029973771362080255944737895616295966283365506215970575687488128180421955215899625030039147350599048504003327638394631861546987766398230587239772279755300935558188857452420295206788779380822496370497928012921496271682630141071402917532482683455635535589421379244073768796339307769524897191811280534565446924249047041610070945017377769635042772597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							479883ee2ce346ea54be2e8159486ef6ca7eb6f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqi.oregon.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqiapi.oregon.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aqi.oregon.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000187ba36597f000004030046304402203e2803c605c62ca43931161ecc4dc0b19890fd6c3500f1d5e4686fc8659834130220482181da8f29e3db731b033739a8980a86a52e96d6d45a2855dc3aadfab3dd6700760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000187ba3659b500000403004730450220675ef9c8f7c3820acfef75a7b5c330bfdb8b8484c4354785aa43d6d3efe27047022100fc778fc70689545f7951d341191a1ef9044d80d7a9c187377a33cd28a791df00007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000187ba365970000004030047304502205e0bbf119de8ab287b2c1fc45433672aa96b91b96371634d437b45dc3e98d1ba022100cbe0f53c3c335826dca5df561a599c75e5e567364fa88b25abfb15523934542f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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