hipchat.swisscom.ch

- Swisscom (Schweiz) AG -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 17:15:a9:13:7f:64:88:cd:5f:23:48:d4:92:07:f0:e8:b1:70:77:49 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
Organization unit: Internet Services
State / Province: Bern
Locality: Worblaufen
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 17:15:a9:13:7f:64:88:cd:5f:23:48:d4:92:07:f0:e8:b1:70:77:49
Serial Number (int): 131789831989138850952309587457549494880968931145
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 04:73:6e:fa:31:ec:e4:e1:39:c5:85:7c:79:a0:33:34:38:bb:62:c7
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): a5:13:08:13:a1:ab:ab:f2:2e:0a:88:f1:40:dc:67:b5:ce:c4:af:f7
Fingerprint (sha256): 05:2c:3e:ba:e6:11:d4:07:92:3c:7a:5c:dc:5a:fb:44:30:9f:71:8a:32:97:d8:c2:94:8a:d5:cc:36:5f:dd:ff

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate hipchat.swisscom.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hipchat.swisscom.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hipchat.swisscom.ch
www.hipchat.swisscom.ch

Other certificates including the domain name swisscom.ch

(limited to 100 certificates)
olr-stag.swisscom.ch
cms.staging.entertainment.swisscom.ch
email.swisscom.ch
cp.cspp.swisscom.ch
spscms4linux02.exotrack.swisscom.ch
tvnow.swisscom.ch
internetbox-nas.staging.swisscom.ch
issue.swisscom.ch
secure04.stage.lithium.com
blockchain.swisscom.ch
partner-authz-staging.swisscom.ch
netzausbaukarte.swisscom.ch
magazin.swisscom.ch
i.swisscom.ch
docsafe-beta.swisscom.com
twint-prd.swisscom.ch
ssc1.imst.swisscom.ch
octane.swisscom.ch
*.portal.bankinghub.swisscom.ch
gaia-gateway.vega.m6s.swisscom.ch
iot.vodafone.swisscom.ch
sbc1-emea-che-zhh.teamsa.swisscom.ch
ccs.join.swisscom.ch
*.tcsbc02.teamsa.swisscom.ch
multi.swisscom.ch
l2.shared.global.fastly.net
bcs.join.swisscom.ch
secure05.lithium.com
wast.swisscom.ch
sdx.swisscom.ch
identity.phoenix.m6s.swisscom.ch
ccs.join.swisscom.ch
l2.shared.global.fastly.net
global-portal-dev.swisscom.ch
l2.shared.global.fastly.net
btbcs.swisscom.ch
tools.swisscom.ch
l2.shared.global.fastly.net
ssc1.ims.swisscom.ch
internetbox-nas.staging.swisscom.ch
lite.m2m.swisscom.ch
vimaphet-dasbc1.joind.swisscom.ch
extranet-acc.swisscom.ch
extranet-int.swisscom.ch
shop.swisscom.ch
secure05.stage.lithium.com
internetbox-nas.swisscom.ch
media.oid.swisscom.ch
5670976570261504-fe4.pantheonsite.io
acs.joind.swisscom.ch
secure04.stage.lithium.com
dis.swisscom.ch
wrc.joind.swisscom.ch
*.tasbc01.teamsd.swisscom.ch
sensu-backend-8.exotrack.swisscom.ch
simple2.swisscom.ch
secure04.stage.lithium.com
5754818358411264-fe2.pantheonsite.io
issue-int.swisscom.ch
l2.shared.global.fastly.net
wmt5443.conferencing.swisscom.ch
check.swisscom.ch
clientrvk.testweb38.swisscom.ch
tpe-staging.swisscom.ch
marketplace.bankinghub.swisscom.ch
inone-game.swisscom.ch
check.swisscom.ch
dns-vetting1e.map.fastly.net
handyhilfe.swisscom.ch
secure04.stage.lithium.com
hpalm-app-prd.swisscom.ch
cockpit.dev1.swisscom.ch
secure05.stage.lithium.com
rtc-dis.swisscom.ch
het-cds.swisscom.ch
mds01.swisscom.ch
www.survey.swisscom.ch
wfmweb.swisscom.ch
tv-thankyou.swisscom.ch
inone.swisscom.ch
buyback.swisscom.ch
secure04.stage.lithium.com
stag-messagingproxy.swisscom.ch
secure05.lithium.com
oms-tst.omsaas.swisscom.ch
cockpit.swisscom.ch
vergleich-server-cloud.swisscom.ch
buyback.swisscom.ch
hipchat.swisscom.ch
regapi-1olb.swisscom.ch
stream.swisscom.ch
repairmanager.swisscom.ch
robotics.swisscom.ch
zhheapp-sasbc01.joineapp.swisscom.ch
git-test.swisscom.ch
5754818358411264-fe2.pantheonsite.io
acs.gated.swisscom.ch
www.lawe-network.lime.novu.ch
chat.projuventute.swisscom.ch
cw000130.exotrack.swisscom.ch

Certificate

The complete raw certificate details for hipchat.swisscom.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131789831989138850952309587457549494880968931145
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-05 13:36:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-05 13:36:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worblaufen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hipchat.swisscom.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853208314947289929133310879951924231810365105244140117294438688485297856919313039729728364726309776917301130687525209765388349247947167217341311159706005262071842809987320544656299875011810019787554722868659996885333410718112971100305558216646679788222103040319768449995909895589138862404942280775378552647894210955905457161640871704780235556073262290662199778827708751455818409204474967108757848720937173868562087378565149911296540225238893172892674394422908004071573479316129178630988446706321875765359523349566417357025026949001799288522729014599010841194074619861697839175015657048581423533606745731492923716998975504137666783361255821732175843317348330373911926890699175822641951266745740266313353832154596446857549910692017897594532605977784847373000847369444474646887310854572410422634852987393148099647147478261803334144791149597541331515669446810545504682192390623822148332002049687202358024756207850830998540793100214160335424463195412056089820155300689867939920418727090485129494525102889666647806893659640462288566438603470222880757271867158545571181737188101707219813770543309249361191997647893953988395649875421293028078375199205986635917780460541525225998927662018861094672462483646415844141517831234722866963926757503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipchat.swisscom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hipchat.swisscom.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04736efa31ece4e139c5857c79a0333438bb62c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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