mail.cspp.cc.u-tokyo.ac.jp

- The University of Tokyo -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 1a:54:ce:e9:ca:e7:9a:e8 was issued on by National Institute of Informatics.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

The University of Tokyo

Organization: The University of Tokyo
Organization unit: Information Technology Center
Organization unit: Supercomputing Division
Locality: Academe
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 1a:54:ce:e9:ca:e7:9a:e8
Serial Number (int): 1897368846556699368
Serial Number lenght: 61 bits, 8 octets

SubjectKeyId: 50:99:56:ba:e9:80:ff:ad:9c:13:4a:fa:43:86:c5:3f:65:fb:f0:b7
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 4a:9a:84:3f:67:da:71:d7:83:1f:eb:06:94:4f:31:db:a3:cc:75:a8
Fingerprint (sha256): 03:64:dc:6f:c8:93:28:4a:32:c0:56:a0:7f:33:33:4a:7a:3c:88:5c:9b:e1:ec:97:15:8d:f9:22:c7:ad:5d:7d


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate mail.cspp.cc.u-tokyo.ac.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.cspp.cc.u-tokyo.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.cspp.cc.u-tokyo.ac.jp
kix.cspp.cc.u-tokyo.ac.jp

Other certificates including the domain name u-tokyo.ac.jp

(limited to 100 certificates)
s07.seminar2017.ecc.u-tokyo.ac.jp
qa.esc.u-tokyo.ac.jp
hagi.is.s.u-tokyo.ac.jp
ms.ecc.u-tokyo.ac.jp
secure.flight.t.u-tokyo.ac.jp
panelsrv.p.u-tokyo.ac.jp
*.eidos.ic.i.u-tokyo.ac.jp
hagi.is.s.u-tokyo.ac.jp
www.cad.t.u-tokyo.ac.jp
www.flight.t.u-tokyo.ac.jp
www.eve.phys.s.u-tokyo.ac.jp
komaba-alert.c.u-tokyo.ac.jp
cge.t.u-tokyo.ac.jp
shibayamalab.issp.u-tokyo.ac.jp
www.aml.t.u-tokyo.ac.jp
ocw.u-tokyo.ac.jp
www.tanaka.ecc.u-tokyo.ac.jp
sendfile.s.u-tokyo.ac.jp
www.ct.u-tokyo.ac.jp
tokyo.tkl.iis.u-tokyo.ac.jp
sso.adm.u-tokyo.ac.jp
graphics.c.u-tokyo.ac.jp
www.ict.mech.t.u-tokyo.ac.jp
www.ict.mech.t.u-tokyo.ac.jp
freut.u-tokyo.ac.jp
as2.c.u-tokyo.ac.jp
www.nagai-2.iis.u-tokyo.ac.jp
cb.genome.rcast.u-tokyo.ac.jp
*.cyber.t.u-tokyo.ac.jp
ovdtest.aori.u-tokyo.ac.jp
www.tanaka.ecc.u-tokyo.ac.jp
ir3s.u-tokyo.ac.jp
yayoi-man.cc.u-tokyo.ac.jp
smtp.ee.t.u-tokyo.ac.jp
gateway.itc.u-tokyo.ac.jp
sugino.issp.u-tokyo.ac.jp
cardiovasc.m.u-tokyo.ac.jp
mail.l.u-tokyo.ac.jp
qi.m.u-tokyo.ac.jp
www.neumis.iis.u-tokyo.ac.jp
www.is.s.u-tokyo.ac.jp
utop-ice.he.u-tokyo.ac.jp
ovd.aori.u-tokyo.ac.jp
www.genome.rcast.u-tokyo.ac.jp
biomech.c.u-tokyo.ac.jp
www.mi.t.u-tokyo.ac.jp
mail.cspp.cc.u-tokyo.ac.jp
tuk.t.u-tokyo.ac.jp
lsen-web.c.u-tokyo.ac.jp
structure.m.u-tokyo.ac.jp
blog.ocw.u-tokyo.ac.jp
k1.k2.t.u-tokyo.ac.jp
nsl.issp.u-tokyo.ac.jp
www.carf.e.u-tokyo.ac.jp
www.one-earth-g.a.u-tokyo.ac.jp
www.keisu.t.u-tokyo.ac.jp
gwdoc.icrr.u-tokyo.ac.jp
monozemi.akg.t.u-tokyo.ac.jp
iiif.dl.itc.u-tokyo.ac.jp
saiyo.adm.u-tokyo.ac.jp
www.genome.rcast.u-tokyo.ac.jp
rcme.oa.u-tokyo.ac.jp
koseki.t.u-tokyo.ac.jp
wwweic.eri.u-tokyo.ac.jp
idaten.c.u-tokyo.ac.jp
apps-mgmt.adm.s.u-tokyo.ac.jp
nsl.issp.u-tokyo.ac.jp
www.hulab.iis.u-tokyo.ac.jp
utcp.c.u-tokyo.ac.jp
mx.eps.s.u-tokyo.ac.jp
isspmail.issp.u-tokyo.ac.jp
www.lib.u-tokyo.ac.jp
www.aori.u-tokyo.ac.jp
www.aviation.u-tokyo.ac.jp
www.os.ecc.u-tokyo.ac.jp
ml.c.u-tokyo.ac.jp
joras.csis.u-tokyo.ac.jp
hagi.is.s.u-tokyo.ac.jp
usis.mtl.t.u-tokyo.ac.jp
oakleaf-fx-5.cc.u-tokyo.ac.jp
proposal.ducr.u-tokyo.ac.jp
www.yamagula.ic.i.u-tokyo.ac.jp
adventure.sys.t.u-tokyo.ac.jp
takeyama.issp.u-tokyo.ac.jp
www.gdm.iis.u-tokyo.ac.jp
dch.iii.u-tokyo.ac.jp
tls.automattic.com
www.gcl.i.u-tokyo.ac.jp
adventure.sys.t.u-tokyo.ac.jp
www.lib.f.u-tokyo.ac.jp
www.dl.itc.u-tokyo.ac.jp
regist.ms.u-tokyo.ac.jp
k1.k2.t.u-tokyo.ac.jp
radphys4.c.u-tokyo.ac.jp
tuk.t.u-tokyo.ac.jp
www.ai.u-tokyo.ac.jp
www.energy.iis.u-tokyo.ac.jp
www.fly.c.u-tokyo.ac.jp
news.muographix.u-tokyo.ac.jp
announce.cc.u-tokyo.ac.jp

Certificate

The complete raw certificate details for mail.cspp.cc.u-tokyo.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cSxvFLxYDE+MzX/thnO
yEvZgjCpYkJKsrMOuX8jpEQKupsUdxrj063+yinRTrt5/hgZVEY5GivfmiQoySh8
83olub9bOfmdw8sj7l1Y1KT+rZ7uiR75Q3v4FOhanmZJGB67U45RpXqIS5pbJQxA
8cSFuSxCwoHZEoqpF+oz7WiPrAAciray+9hlC50iycIVX+7ZbjHndFf4Kiky34OD
kcU4FlL2fHkPMS6+W8kAAEYiZ1VoM5Ws7F3zBXk9V6N+hNpB0q77IAq/5JEAsg87
iTgGXVC3IYqLeknCXOQXUO6BlYXO4YVjDsGfvmfxNMxl2u0lRDy+JlL25T6/Whjl
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1897368846556699368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-07 04:37:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-07 04:37:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Academe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Supercomputing Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.cspp.cc.u-tokyo.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27490705742026495706994396162928394446220430589952854280612950030867054015023534295278717326016382103770362807467530913543036467315547124866650462568711578142886761605906863676871425695553931832991106057891232117542801801481675484187483479899558670235172203704343310243395778825605299014132269119733802328713753191678240830906007087304105785852354552016690895143987904679599774758872979250263263979793520513665501396307284378091998105790310468308443336618097797699785159225806070348841194161371359342706740057009988425045389871808624594537688691934000121161889202231386491952823051107926998465373218004265220601079269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cspp.cc.u-tokyo.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kix.cspp.cc.u-tokyo.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							509956bae980ffad9c134afa4386c53f65fbf0b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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