gespro.dtes.gencat.cat

- Generalitat de Catalunya -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 0d:f0:79:e1:02:e3:2a:da:a9:81:54:1f:a2:3b:7b:fc was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Generalitat de Catalunya

Organization: Generalitat de Catalunya
State / Province: Barcelona
Locality: Barcelona
Country: ES

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:f0:79:e1:02:e3:2a:da:a9:81:54:1f:a2:3b:7b:fc
Serial Number (int): 18528587190044471093885902780588850172
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 02:5d:03:6b:a2:b9:8a:04:71:e0:63:43:19:ee:9b:f6:04:a4:06:9c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): ed:25:08:0e:71:45:d0:4a:54:b4:78:37:34:f0:bd:d2:2a:3a:b1:a6
Fingerprint (sha256): 03:89:dd:9b:76:c4:0d:b5:84:85:96:1c:f6:73:61:2d:d1:89:13:3b:f3:ed:6a:49:92:4b:f8:52:cb:ec:ed:74

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate gespro.dtes.gencat.cat

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gespro.dtes.gencat.cat

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gespro.dtes.gencat.cat
www.gespro.dtes.gencat.cat

Other certificates including the domain name gencat.cat

(limited to 100 certificates)
preproduccio.core2.simdcat.gencat.cat
preproduccio.gia.oficinadetreball.gencat.cat
sirh.extranet.gencat.cat
ckm.salut.gencat.cat
integracio.admin-seu.atc.intranet.gencat.cat
silvcmgmoi.ics.intranet.gencat.cat
preproduccio.omi.monitoratge.ctti.extranet.gencat.cat
aplicacions.governacio.extranet.gencat.cat
economiacooperativa.gencat.cat
podl2.ithinkupc.com
preproduccio.dretssocials.gencat.cat
preproduccio.salapremsa.gencat.cat
sivic.salut.gencat.cat
connectat.voluntariat.gencat.cat
atenea-externs2.upcnet.es
preproduccio.centraltelefonica.serveiocupacio.gencat.cat
dadesculturals.gencat.cat
gestiowifi.ctti.intranet.gencat.cat
preproduccio.bdi.oficinadetreball.extranet.gencat.cat
preproduccio.jocdelsdrets.gencat.cat
primersinterventors.sem.gencat.cat
epmsi.siep.justicia.intranet.gencat.cat
eformularis.intranet.gencat.cat
tramitador.intranet.gencat.cat
preproduccio.citasalut.gencat.cat
seu2.atc.gencat.cat
preproduccio.etc2.ics.intranet.gencat.cat
preproduccio.store10.simdcat.gencat.cat
jmsmc.vistes.justicia.intranet.gencat.cat
preproduccio.portal.gestorapi.gencat.cat
qualitat.solucions.gencat.cat
tls.automattic.com
cas.dtes.extranet.gencat.cat
entorn.bustiaetica.gencat.cat
pre.bus.salut.gencat.cat
consorciautomocio.empresa.gencat.cat
preproduccio.conciliacions.gencat.cat
atenea-externs2.upcnet.es
extranetdgp.gencat.cat
*.accio.gencat.cat
externet.gencat.cat
serveiscentrals.justicia.intranet.gencat.cat
conta.gencat.cat
preproduccio.enquestes.emc.extranet.gencat.cat
preproduccio.convocatories.dgp.interior.gencat.cat
acc.bus.salut.gencat.cat
pre.bus.salut.gencat.cat
preproduccio.infocentres.esocial.gencat.cat
ecap.ics.gencat.cat
accesuniversitat.gencat.cat
icip.cat
preproduccio.reli.intranet.gencat.cat
convocatories.dgp.interior.gencat.cat
webservices.tsnu.sem.gencat.cat
treball.gencat.cat
preproduccio.sirh.extranet.gencat.cat
preproduccio.serveis.visor.hes.catsalut.gencat.cat
atenea-externs2.upcnet.es
preproduccio.culturapp.cultura.gencat.cat
preproduccio.administracio-emp.empresa.extranet.gencat.cat
siljxmgas01.ics.intranet.gencat.cat
preproduccio.appsalut.gencat.cat
appsalut.gencat.cat
gestio.contractaciopublica.gencat.cat
sslcertificate1.queue-it.net
guc.actic.gencat.cat
preproduccio.revistes.cultura.gencat.cat
bi4.gencat.cat
qualitat.solucions.gencat.cat
cepselots.cultura.gencat.cat
servicedesk.weareavidity.com
pln.salut.intranet.gencat.cat
pre.hccc.salut.gencat.cat
cadgp.dgp.interior.gencat.cat
preproduccio.esocial.gencat.cat
llibreria.gencat.cat
espai.educacio.gencat.cat
servicedesk.vretigas.it
gaudi.atc.intranet.gencat.cat
biblioteques.sponsorwifi.intranet.gencat.cat
podl2.ithinkupc.com
preproduccio.mitjansdecomunicacio.gencat.cat
pre.tramitador.intranet.gencat.cat
preproduccio.aplicacions.agricultura.gencat.cat
tls.automattic.com
tls.automattic.com
formaciooberta.eapc.gencat.cat
preproduccio.oficinadetreball.gencat.cat
atenea-externs.upcnet.es
dadjus.justicia.gencat.cat
preproduccio.cadi.aplicacions.economia.gencat.cat
s5.salut.extranet.gencat.cat
gespro.dtes.gencat.cat
ws.transit.intranet.gencat.cat
qualitat.solucions.gencat.cat
formacio.aplicacions.ensenyament.gencat.cat
mail.gencat.cat
preproduccio.pgme-intra.dgp.interior.intranet.gencat.cat
idp1-gicar.gencat.cat
integracio.presidencia.intranet.gencat.cat

Certificate

The complete raw certificate details for gespro.dtes.gencat.cat in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K/axY7dfSw33XPKrR79
vpD31SSwaqzpTnVXSzMDXqUetM+YO4Y/QFfZ6+n9WMcYzAg2m3LrR0SgvSux32Ay
xgLGsipfweqC+kdT0av47+w07u1GUkJs1jfTaisMHnGd3dHKBxSKiQQY7IUbe+MF
BeMli52C7Sh5A+HqngjpRrRpgYi0aRJ/o8w3Qgt54azpOF0GfPFR97bx8luuDdGg
RDQaiYjU206KeEeA1hsIi289HBQenPagph8uW20I1q1tROWeMQCSKZ4HnbBhSG6i
g00F/nWl3ctDglgq3YeMgsQH+DJTGWlzh3MmyEHlp/xJ3uj4oH6dCFBHcOjgWT17
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18528587190044471093885902780588850172
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 17:02:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-19 17:02:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barcelona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barcelona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Generalitat de Catalunya'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gespro.dtes.gencat.cat'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27859144216441524452326033824555492922160938709447213562108513397171479970931904450631682272284702585785165001456672162045285724540768860571197958923952370844502100709946000523695681923409492366997418842556116279455707443090560065739837011387105993611416608635352397871621011652635975626718262028177636083305527340421161306481425880438709153115794912199145698589260124360348731922366323734791943552582755348942893951910806431176853896542697144861199833484646624516575092447767382892484454682054024580181086991738936347991108933391830843179577901810510237493526367319092291295736107512156987847249860124368420223155143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							025d036ba2b98a0471e0634319ee9bf604a4069c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gespro.dtes.gencat.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gespro.dtes.gencat.cat'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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