tfmlearning.faa.gov

- Federal Aviation Administration -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:d3:ba:4d:e8:25:e2:fd:59:3f:e7:80:2a:ad:de:6a was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federal Aviation Administration

Organization: Federal Aviation Administration
Organization unit: Information Technology Data Services
State / Province: District of Columbia
Locality: Washington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:d3:ba:4d:e8:25:e2:fd:59:3f:e7:80:2a:ad:de:6a
Serial Number (int): 3757809329321797646640687480163917418
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 4c:8a:40:6a:1c:44:b3:7b:47:b1:68:9a:cf:3f:78:24:4c:5e:2a:5e
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 02:1e:cb:6d:2f:2b:57:5f:41:aa:da:a9:f2:46:ea:75:b1:c0:96:11
Fingerprint (sha256): 03:39:9f:39:f3:ed:ad:d9:a9:68:58:17:5b:9b:97:e5:83:12:08:bc:d9:d3:d3:d6:73:ba:6b:ff:37:60:32:e5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate tfmlearning.faa.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tfmlearning.faa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tfmlearning.faa.gov

Other certificates including the domain name faa.gov

(limited to 100 certificates)
efsas.avs.faa.gov
asi.1.faa.gov
dmt.faa.gov
*.cf-lab.faa.gov
bpmsoa-test.faa.gov
www.faa.gov
authtest.sm.faa.gov
serviceareaapps.faa.gov
fdc3dcpap854.fcs.faa.gov
ftb-test-fims-server.faa.gov
www.faa.gov
agcinsitetest.sm.faa.gov
ama400-pvs2.amc.faa.gov
medxpress.faa.gov
caeg.faa.gov
adsftp.faa.gov
www.faa.gov
arcsight.fcs.faa.gov
csimsuat2.csnet.faa.gov
e2-satotravel-signing.sm.faa.gov
serenacmtest.amc.faa.gov
csims2.csnet.faa.gov
mail.ems365.faa.gov
fist.faa.gov
falcon.faa.gov
asmfvasp02.amc.faa.gov
help.spas-uat.faa.gov
rbrt.avs.faa.gov
iactdcpvap148.ad.faa.gov
rbrt.avs.faa.gov
enroutesupport.faa.gov
fhissso.faa.gov
sdrs.faa.gov
isbp.faa.gov
ilmits.amc.faa.gov
cdmsuat1.sm.faa.gov
asapowa.ash.faa.gov
registry.faa.gov
dev-hotline.faa.gov
part16.airports.faa.gov
home.spasdev.faa.gov
nasea.faa.gov
viewer.tc.secure-ose.faa.gov
sua.faa.gov
registermyuas.faa.gov
vpntest.faa.gov
faa-exm-00.ad.faa.gov
FAA-BelarcDA.faa.gov
extranet.asias.faa.gov
soatest.smext.faa.gov
oaps.faa.gov
dev-www.faa.gov
askmeservices.avs.faa.gov
opt.faa.gov
blackboardtest.sm.faa.gov
wwwtest.faa.gov
wifi.amc.faa.gov
avssharepoint.faa.gov
wifi.amc.faa.gov
aidaptest.naimes.faa.gov
esc-dbprotect.amc.faa.gov
magr-tst.faa.gov
*.faa.gov
amcs-preprod.faa.gov
tfmlearning.faa.gov
av-info.faa.gov
ssm-dev.amc.faa.gov
tifpa-ws.faa.gov
notamsstage.aim.faa.gov
attivio.faa.gov
iasdex.faa.gov
tsd.fly.faa.gov
oaps.faa.gov
denodo-prod3.faa.gov
tmaster.falcon.faa.gov
uis.faa.gov
dgc.eim.faa.gov
blackboard.sm.faa.gov
tsscweb01-dr.tssc.faa.gov
webservices2012-test.avs.faa.gov
aps2.faa.gov
prd.faa.gov
ncr.voicemail.faa.gov
opt.faa.gov
itams.faa.gov
act2.faa.gov
jiratest.sm.faa.gov
avsmtdashboard.avs.faa.gov
www.faa.gov
enroutesupporttest.faa.gov
aviator.faa.gov
uas.npn.faa.gov
www.faa.gov
serenasmbtest.amc.faa.gov
cims.faa.gov
ioeaaa.faa.gov
fhisdevsso.faa.gov
eda.faa.gov
icamms.faa.gov
amcrelay2.faa.gov

Certificate

The complete raw certificate details for tfmlearning.faa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMyptlhJQj/YjPtcFfib
LwDepsloafPzE5atwHLfYe/RhM59bHyFIf610aRQRaKIHzk9bmEBwrTkpZhdGLnr
s5mrzqIysF/3N/idDhTdHhGQqjXH8QuB6M88Kzk0vGQQo1KPuhSbsVCXUhUosoVB
Hx5iEwEunKTXgvZwDFt/nZXB2LzW6VfHJGaNsqMVaIrMP6lrlSf+0HV8eciVkiQ6
OT37/0pXQ5D2JovsGkRDFwDO48gi2BoR7fOM8MshYRZ4KZLQltQbdIC79aO8U/eZ
mzfUZyb+toyHSLvgKvFwRLEWD3cglHOp47oEJYbLetW0xDXXtOuFcOeTsQkW6eGW
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3757809329321797646640687480163917418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federal Aviation Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology Data Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tfmlearning.faa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25348584049695066686043079270781313323562824808108770560645353930831844541210655993645299870490537970771081099844207819661464607361011114978200959993298385950567300119300780556161884047525347925006082082265158170891824342863995465198930803223152125224308068704774163053906633878154968780956287091542128971824545369950253132903168187313773773544954955118207382377785818361207158138822811255730383313425033410191779164897770603319630698320806479375077508887459358973390213406260357355190880228067549264105288684370372164503275226894001778349003825640398214331850704963367410897278104930075089606654408722858667711501891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c8a406a1c44b37b47b1689acf3f78244c5e2a5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfmlearning.faa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000162cfd5de780000040300473045022100b12c67dd61665f31a96bab23fbfa213271f2f265fdc1ff8f181906b73a03edbc022078bcff699b48f565d261ff92fea823d48ee50649c73b167575cd62a8a798243d0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000162cfd5df18000004030046304402207ca8c7ec5572b5140f6372139044ae22e1af10fc136f3c0a0d32ec4e3f07f31a02201604da9793fc740e9d6303ff8fd452d4736ef73fb54a6519ff3deaa13e27d73b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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