cas.sso.paws.lsu.edu

- Louisiana State University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number e5:47:89:32:6b:d6:5a:4b:0e:6c:6d:5c:75:5a:87:9b was issued on by Internet2.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Louisiana State University

Organization: Louisiana State University
State / Province: Louisiana
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e5:47:89:32:6b:d6:5a:4b:0e:6c:6d:5c:75:5a:87:9b
Serial Number (int): 304764646796599566222472485145310562203
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 40:17:42:5a:a8:9c:a1:d8:d8:06:5e:3d:e3:46:74:7a:b1:b7:b1:26
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): fe:c7:df:c3:51:be:f9:13:e3:fd:5c:c5:6f:cd:c8:a5:91:58:1a:f9
Fingerprint (sha256): 04:77:18:af:01:ad:43:aa:68:1a:eb:72:58:4c:9b:0c:a7:b4:5f:77:75:21:3d:a2:a3:6d:62:15:bf:de:f4:7f

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate cas.sso.paws.lsu.edu

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cas.sso.paws.lsu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cas.sso.paws.lsu.edu
cas1.sso.paws.lsu.edu
cas2.sso.paws.lsu.edu
cas3.sso.paws.lsu.edu

Other certificates including the domain name lsu.edu

(limited to 100 certificates)
paws.lsu.edu
test-myproxy01.apps.lsu.edu
itservice.lsu.edu
moodlerooms.com
ussweb012.lsu.edu
us.prod.campusgroups.com
www.lsu.edu
libweb.lsu.edu
listservnew.lsu.edu
lalinks.lsu.edu
stellar.cct.lsu.edu
cobbler.hpc.lsu.edu
ngcl-4052-ups-1.lsu.edu
www.socialwork.lsu.edu
guides.lib.lsu.edu
www.ltrc.lsu.edu
rhhms002.lsu.edu
accounts.hpc.lsu.edu
subrosa.esl.lsu.edu
rhmac001.lsu.edu
acsa.lsu.edu
mail.agcenter.lsu.edu
phall.vpn.ncbrt.lsu.edu
ath-helpdesk.lsu.edu
appj07.apps.lsu.edu
training.lsu.edu
skype.ncbrt.lsu.edu
nas-csc.lsu.edu
sncsrtweb.sncsrt.lsu.edu
app.lbrn.lsu.edu
www.cct.lsu.edu
applygrad.lsu.edu
ol.berklee.edu
rh-testwiki.lsu.edu
moodleftp.lsu.edu
digitalcommons.lsu.edu
places.lsu.edu
admissions.lsu.edu
registration.apps.lsu.edu
us.prod.campusgroups.com
phall.vpn.ncbrt.lsu.edu
pollux.ncbrt.lsu.edu
class.bus.lsu.edu
saspr01.lsu.edu
development.moodlerooms.com
development.moodlerooms.com
hydra.cct.lsu.edu
it.design.lsu.edu
card.apps.lsu.edu
appl008.lsu.edu
www.bands.lsu.edu
ngcl-1079-ups-1.lsu.edu
appl030.lsu.edu
podcast.cct.lsu.edu
testsciquest.lsu.edu
uiswcmsweb.prod.lsu.edu
*.ezproxy.law.lsu.edu
mediasite.outreach.lsu.edu
timeclock.lsu.edu
acsa.lsu.edu
newservicerequest.lsu.edu
palo-test.vpn.lsu.edu
cbr.lsu.edu
vm-apps.ofs.lsu.edu
appl003.lsu.edu
web.offcampuspartners.com
urecportal.lsu.edu
appl020tm.lsu.edu
www.ece.lsu.edu
cas.sso.paws.lsu.edu
moss.outreach.lsu.edu
lbrn.lsu.edu
mediasite.outreach.lsu.edu
test-myproxy01.apps.lsu.edu
maps.ga.lsu.edu
clbd.cobre.lsu.edu
us.prod.campusgroups.com
uss-tut.lsu.edu
www.cae.lsu.edu
web.apps.lsu.edu
rhmax.lsu.edu
development.moodlerooms.com
vcs.lsuagcenter.net
mapp02.lsu.edu
answers.outreach.lsu.edu
rhesx003-mgmt.lsu.edu
dsl.lsu.edu
ol.berklee.edu
uni-wiki.lsu.edu
digitalcommons.lsu.edu
geauxgive.lsu.edu
hearne.phys.lsu.edu
development.moodlerooms.com
us.prod.campusgroups.com
laddl-lims.lsu.edu
pollux.ncbrt.lsu.edu
etd.lsu.edu
splunk.its.lsu.edu
lawadfs.law.lsu.edu
chat.ncbrt.lsu.edu

Certificate

The complete raw certificate details for cas.sso.paws.lsu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6FCUDSikLU4+zSX4B5+
+9rw/oY1MXiKzp687DiUVjOxbi4nxTdm1C0D9njXj8M7MIe/oJQLqyh5NGIviN4I
78wDR+T1utBGS+Nzis3t8/JfK3BpP/BfFfFHJOZvBm66SF8R0qggKxWbtpco5jLQ
t4FzUKRqnLDG11xZEZ23hhRtrr7FhSS8ajmja6tVgJvvT4k5K36jvvfE2ibnBF3s
6t1qhm2fmNUGwk4h/MIbOIKXZ1LYoYLodmlikf8QtQJMUYtB87O4hLQei5GXbImH
USak5HzPZHBoCYKCvj4SeY7U4UiOXXFc4UtxXF21IfgmHjoYZQhtKYBrQXEX+53a
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304764646796599566222472485145310562203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cas.sso.paws.lsu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25200942482808455885316727307597175452128468547154254380547043124416670488854890290222184940860905948720052968475597135032081280527011327451286100006072681471694062104686936561829121455100063098109468926235590210577084151169381982462353004461234471464992055132620635323229063122744935556240355039825614427101438898917400466482299307368216638213611487300060049269424925841143941451822686942798604371387189106727538647745805247897381891663870718579087088111160293263849664161228294182411514177991569709528176012676485805741222067593476584432943570727816530159034509470554704507159205386897607447677223745713864127142601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4017425aa89ca1d8d8065e3de346747ab1b7b126
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.sso.paws.lsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas1.sso.paws.lsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas2.sso.paws.lsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas3.sso.paws.lsu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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