oxp-naa.otiselevator.com

- Otis -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 2d:85:da:9e:f1:77:09:3a:9d:8c:ea:3f:a7:40:34:02 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Otis

Organization: Otis
State / Province: Connecticut
Locality: Farmington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:85:da:9e:f1:77:09:3a:9d:8c:ea:3f:a7:40:34:02
Serial Number (int): 60510269450579412795224144861353489410
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b1:67:88:e0:a4:e3:9a:ee:78:ce:41:7e:9d:b0:3e:83:15:23:00:b1
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): da:d8:b1:82:8e:bb:1d:12:02:1c:09:cf:d2:e3:46:9f:5b:2f:23:5b
Fingerprint (sha256): 05:18:0e:fa:99:92:c8:e1:83:bf:3e:15:9b:00:2b:6f:45:04:25:3a:8c:b5:ef:78:c1:df:f2:2f:6e:a5:b6:36

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate oxp-naa.otiselevator.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oxp-naa.otiselevator.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oxp-naa.otiselevator.com
www.oxp-naa.otiselevator.com

Other certificates including the domain name otiselevator.com

(limited to 100 certificates)
cms-naa-stag.otiselevator.com
ceros2.map.fastly.net
oxp-apac-oft.otiselevator.com
oxp-emea-oft.otiselevator.com
diagnostics-emea-stag.otiselevator.com
cpconfigservice-api-naa-stag.otiselevator.com
eServiceAPI.QA.otiselevator.com
oxp-apac-stag.otiselevator.com
*.dev.otisone.otiselevator.com
oxp-naa.otiselevator.com
GlobalMobilenl-stg.otiselevator.com
otis-iot-stg.otiselevator.com
*.otiselevator.com
auth-api-naa-stag.otiselevator.com
oxpr-apac.otiselevator.com
ceros2.map.fastly.net
qswhqpy.otiselevator.com
reachsurvey.otiselevator.com
datapipeline-emea-oft.otiselevator.com
oxpr-emea-oft.otiselevator.com
gds1.otiselevator.com
diagnostics-naa.otiselevator.com
oxp.otiselevator.com
developers.qa.otiselevator.com
gds2.otiselevator.com
qsnaapy.otiselevator.com
GlobalMobileOtisFR-STG.otiselevator.com
cv-chn.otiselevator.com
fc-naa-stag.otiselevator.com
diagnostics-emea.otiselevator.com
connect-api-naa-stag.otiselevator.com
cv-emea.otiselevator.com
connect-api-naa-stag.otiselevator.com
*.dlrgroup.com
ota-mm-stg-apac.otiselevator.com
rtv.otiselevator.com
oxp-chn.otiselevator.com
diagnostics-naa.otiselevator.com
ceros2.map.fastly.net
voiceotisline-naa-stag.otiselevator.com
GlobalMobilenl-Devqc.otiselevator.com
oxpr-emea-oft.otiselevator.com
datapipeline-chn-keycloak.otiselevator.com
diagnostics-emea-stag.otiselevator.com
gdsemda006.otiselevator.com
otis-iot-qa.otiselevator.com
ruTTA-prd.otiselevator.com
campusview-emea-stag.otiselevator.com
voiceotislinelog-apac-stag.otiselevator.com
cms-naa.otiselevator.com
diagnostics-apac-stag.otiselevator.com
smartservice-api-apac-stag.otiselevator.com
connect-api-apac.otiselevator.com
cloudservice-naa.otiselevator.com
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
bitbucket.otiselevator.com
brandhub.stage.otiselevator.com
globalmobileotisUKtkitapp-prd.otiselevator.com
ruTTA-stg.otiselevator.com
decisions-dev-int.otiselevator.com
cms-apac-stag.otiselevator.com
qlikcrmEMEAstage.otiselevator.com
deviceportal-naa-stag.otiselevator.com
GlobalMobileNL-PRD.otiselevator.com
globalmobileotisauttkitapp-prd.otiselevator.com
deviceportal-apac.otiselevator.com
oxpr-qa.otiselevator.com
cv-emea-stag.otiselevator.com
ceros2.map.fastly.net
decisions-emea.otiselevator.com
gds1.otiselevator.com
oap-emea.otiselevator.com
voiceotislinelog-apac-stag.otiselevator.com
oxp-emea.otiselevator.com
hipchat.otiselevator.com
cms-naa-stag.otiselevator.com
oxpr-emea.otiselevator.com
jira.otiselevator.com
oxp-naa-stag.otiselevator.com
oap-emea.otiselevator.com
ceros2.map.fastly.net
oxpr-apac-oft.otiselevator.com
remrda.otiselevator.com
cv-apac-stag.otiselevator.com
globalmobileotisEStkitapp-prd.otiselevator.com
ceros2.map.fastly.net
apip-devloper-dev.otiselevator.com
voiceotislinelog-apac-stag.otiselevator.com
Decisions-dev.otiselevator.com
oxpr-qa.otiselevator.com
developer-studio-dev-emea.otiselevator.com
LinePulseMagentoUAT.otiselevator.com
cv-apac.otiselevator.com
datapipeline-chn-oft.otiselevator.com
ceros2.map.fastly.net
developer-studio-dev-naa.otiselevator.com
datapipeline-apac.otiselevator.com
deviceportal-naa-stag.otiselevator.com

Certificate

The complete raw certificate details for oxp-naa.otiselevator.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/m91QWHznHbEhQROBnV
xpTkxRhAgL29H4cRmkROkVoPV1v06v3tZ6Zs2aA7s/UuiIVCNRf0pwP0+IQYbge0
GpvdfRMyEtjeZdMMZ9dlq9pfI6DsUEjevnt86xEXj2o1F63GreaUVgDldCMWoX9K
wCaJGMdQuPF5lo2t04h7qjo82VF+hlLAUzJ+Ided7RvEL7uu7armgszLqtCLxmjH
6b2L71GeolqOEMlpBriwBePgRKryGnnfxhsQGD3Hwdnl5w5+UhHy1avUjwS0BFl2
ZpcnH5ZobMe+p/VakgGVlQZ+iVPTLcILVegqRUuYTEXSLE5jECeQhXIDyyZaeRRI
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 60510269450579412795224144861353489410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-13 13:57:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 13:57:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Farmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Otis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oxp-naa.otiselevator.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22214855508285460060255061742072995883809182678789779443293167456343097067168605378306000140156412592792686985331631892036891780328651464826607047193377952405528712355416537740058104204558583731118106755590085642728096015826627474986195409945480104059943308437066141692168709989756466724754696711526016151592634851254323716651694086403751771331816071528977629154622517929220752945542829818790751908540149208023076801997401474077555806224435665036788613845191649532095384617306951863486586381776304173709989706064131861897475963575532761574656200219910534230168288558353763128062232112919767224428328084478949055547561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b16788e0a4e39aee78ce417e9db03e83152300b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxp-naa.otiselevator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxp-naa.otiselevator.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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