cmapi-llb8.inc.hp.com

- HP Inc -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:e3:0b:ad:83:9a:e4:ce:ab:8b:45:82:aa:3a:0c:d1 was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

HP Inc

Organization: HP Inc
State / Province: California
Locality: Palo Alto
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:e3:0b:ad:83:9a:e4:ce:ab:8b:45:82:aa:3a:0c:d1
Serial Number (int): 17129624190013942857392454881844530385
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7f:10:cc:76:f7:73:f5:b7:25:50:55:da:5d:86:f8:db:3b:bd:8c:b5
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 52:09:5b:b0:0e:c4:84:31:d5:b9:16:ad:80:e8:47:f2:6b:f6:a6:59
Fingerprint (sha256): 03:ac:fc:56:7b:e3:a1:36:21:83:2b:bc:a1:b8:8c:33:84:e3:e5:44:00:0a:1b:5a:17:cc:58:46:d6:3f:c3:05

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate cmapi-llb8.inc.hp.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmapi-llb8.inc.hp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmapi-llb8.inc.hp.com
g7t16166g.inc.hp.com
g7t16183g.inc.hp.com
g7t15352g.inc.hpicorp.net
g7t15353g.inc.hpicorp.net
g7t15354g.inc.hpicorp.net
cmapi.inc.hp.com

Other certificates including the domain name hp.com

(limited to 100 certificates)
learn-about-supplies-api.ext.hp.com
sprmemprd.houston.hp.com
hpqproxy.external.hp.com
jenkins.cd.dev.avatar.ext.hp.com
smlogin.external.hp.com
sprmamitg.austin.hp.com
padapi-pro.glb1.hp.com
test1.firmwareupdate.management.hpjam.hp.com
hpaiws001.assuredid.svcs.hp.com
c0046786.itcs.hp.com
ezbuy.glb.itcs.hp.com
ap.svcs.entsvcs.com
esamapj.austin.hp.com
gnb2bwebprov.inc.hp.com
reverseproxy-gen2-prod.ext.hp.com
rtc14prdpool93.houston.hp.com
hparc-pro-s2s.austin.hp.com
hpicechatbot01.hpcloud.hp.com
psr01hpisba02.auth.hpicorp.net
uagpro.corp.hp.com
mycrm.support.hp.com
issvc54.external.hp.com
pdp-itg.glb1.hp.com
C0004184.itcs.hp.com
snr.austin.hp.com
essc-web-dev.houston.hp.com
gncppro3.inc.hp.com
signatures.hp.com
ISCS-PRO-EMEAStore1.glb.itcs.hp.com
wwwpprd.recognition.hp.com
isrmstg.ext.hp.com
pulsetest.prp.ext.hp.com
203137-partsurfer-web-pro.inc.hp.com
printx.api.hp.com
itg.smartquote.ext.hp.com
vpn-pa.labs.hp.com
vausnzitg.austin.hp.com
tibco-bw-prod02-gslb1-aa-5030.glb.itcs.hp.com
sprmamitgint.austin.hp.com
pproampro.houston.hp.com
rtc16prdfepool791-sg.ucrtc.hpicorp.net
vdccnzitgt.houston.hp.com
armtool.usa.hp.com
one.hp.com
esam.austin.hp.com
hpsasudf.ext.hp.com
prp.atlanta.hp.com
sbxtsvm-1.ovsc.adapps.hp.com
fcv-portal.inc.hp.com
smartupdate-g1w2446g.austin.hp.com
mashup.api.hp.com
hp-imap.int.hp.com
swhwz-12pG1-002.austin.hp.com
ccls.external.hp.com
g2w4178g.austin.hp.com
itsm-hpit-itg.corp.hp.com
g4t8251.houston.hp.com
akamai-san58.exacttarget.com
h30457.www3.hp.com
astrochatw2.cce.hp.com
esfposmanagerweb.itcs.hp.com
fm-dev.atlanta.hp.com
psr01hpisba01.auth.hpicorp.net
fm-dev.atlanta.hp.com
epocms.www8.hp.com
hpfaxme.external.hp.com
ovrd.external.hp.com
vwebcsniauthitgaws.hpcloud.hp.com
h10145.www1.hp.com
svat-hpi-llb-ext-prd.inc.hp.com
hpapps.sharepoint.hp.com
h30094.www3.hp.com
pa-itg.austin.hp.com
mdcp-ws-itg.itcs.hp.com
hpindigoservice.ext.hp.com
hpsws.itcs.hp.com
hp2b.hp.com
iscs-pro-emeastore1.glb.itcs.hp.com
c0046783.itcs.hp.com
portaldr.edc1.svcs.hp.com
prp-east.corp.hp.com
ak.test.hp.com
eitcds100.int.svcs.hpe.com
g9w0368.americas.hpqcorp.net
cce02sal01.houston.hp.com
h30408.www3.hp.com
mipsinternal-fastsearch-hou.corp.hp.com
itg-live.www.hp.com
ibreporting.corp.hp.com
c1t11746.itcs.hp.com
concentra-itg.austin.hp.com
hpse-vtms.austin.hp.com
management20210131.hpjam.hp.com
gtxi.hptpm.prod.hp.com
h20299.www2.hp.com
ecsapjmcfmvip.ecs.hp.com
iedp-demo.itcs.hp.com
gcsslb.houston.hp.com
domainredirects.ext.hp.com
pplui-pro.glb.itcs.hp.com

Certificate

The complete raw certificate details for cmapi-llb8.inc.hp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zbTRzI/sjFZGimRArD2
s26lRJK4LONuyV1T7g9KTXkeNEY+9Ia8pcHFWuHXHbIi1mb5NitIvNRZIV26r8GK
POF6HJ/LYMPAlhAJy9m96u7/LmVWkO2fT8hpRN6uc3csdVefZxHKpr43f4MWKwim
gYWbUDc2yZi2DKI/9uifl9D772z/2ETtnLcpqxHusM7SxHyGyfP+IMEYNdwSrGs0
gWTJIWGc826yV6tgbgkHzIYz+zepPdf+7beTBFAIDLThNLPlRQ8TDXzWGCHpuvSK
GeVlgYp3M0+sWfxESqaT9mQMguzXuGgfa9UorcTk4t0nsc5Horb1Ha+98XDOuSQ+
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17129624190013942857392454881844530385
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Palo Alto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HP Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmapi-llb8.inc.hp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27168270933278699110025594578036212047907477148992540142596171249215561906088862394493028175362100705981471876430726188381625674295902269226456577628438051828793515166794058052710060087642653425077943809235437953662213252362418910313454110060407209277455171407937780424853698249865691711955399495780151540029269374685637542109242436196252947349167978995749958326949564840196267313274346693996414599383547264338550057336608633200299414402859004971365187716882863699151678808249197158978171479511260864051800304464986180904943919697915315670883097582012099770848873228216840005546141315101123215510138269823890270469657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f10cc76f773f5b7255055da5d86f8db3bbd8cb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmapi-llb8.inc.hp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g7t16166g.inc.hp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g7t16183g.inc.hp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g7t15352g.inc.hpicorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g7t15353g.inc.hpicorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g7t15354g.inc.hpicorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmapi.inc.hp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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