uat-pernet.pershing.inautix.com

- The Bank of New York Mellon -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:f9:e7:1d:f7:67:31:36:46:05:11:9e:91:45:d9:b6 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Bank of New York Mellon

Organization: The Bank of New York Mellon
Organization unit: PRN
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:f9:e7:1d:f7:67:31:36:46:05:11:9e:91:45:d9:b6
Serial Number (int): 9272937503287372948880495678704703926
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 92:af:b0:c5:5c:ec:0d:e3:12:39:ee:44:27:fc:57:50:ee:98:dc:48
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 31:da:84:78:60:e2:28:e3:c6:ba:63:01:bd:5a:c2:bd:f9:17:d8:7c
Fingerprint (sha256): 05:fc:f7:11:1f:9b:92:86:0f:09:62:be:2c:6a:6f:fa:2b:ca:56:44:56:41:00:b1:0e:07:2f:d2:f4:f1:80:2d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate uat-pernet.pershing.inautix.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat-pernet.pershing.inautix.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat-pernet.pershing.inautix.com

Other certificates including the domain name inautix.com

(limited to 100 certificates)
par.inautix.com
xat-www.inautix.com
uat-pernet.pershing.inautix.com
xat-wcm2.inautix.com
qa-inside.pershing.inautix.com
xat-www2.netxpro.inautix.com
demo-spm.inautix.com
uat-www2.netx360.inautix.com
uat-www.netxservice.inautix.com
qa-coates.inxselect.inautix.com
qa-rptsvc.inautix.com
uat-content.pershing.inautix.com
uat-mobile-netxclient.qa.bnymellon.com
xat-www.inautix.com
uat-helpdeskivr.pershing.inautix.com
globaljsc.inautix.com
qa-hewitt401k.inautix.com
uat-rpt.pershingprimeservices.inautix.com
uat-netxclient.qa.bnymellon.com
xat-correspondentrv.inautix.com
acis-imaging3.inautix.com
uat-wja-nxo.netxpro.inautix.com
ice2.qa.bnymellon.com
demo-spm.inautix.com
uat-controlcenter.pershing.inautix.com
uat-content.pershing.inautix.com
uat-xml.netxpro.inautix.com
uat-pernet.pershing.inautix.com
xat-ice2.inautix.com
hewitt401k.inautix.com
xat-other-netxinvestor.bnymellon.com
xat-www.pllcfiles.inautix.com
alpha-mobile.netxclient.inautix.com
uat-wja-nxo.netxpro.inautix.com
alpha-www.pllcfiles.inautix.com
uat-www3.netxselect.inautix.com
uat-qpr.pershing.inautix.com
par.inautix.com
uat-www-netxservice.qa.bnymellon.com
xat-www.pllcfiles.inautix.com
dbresearch.inautix.com
xat-www2.pershingprimeservices.inautix.com
uat-xml.netxpro.inautix.com
uat-mobile.netxclient.inautix.com
uat-www2.netxselect.inautix.com
xat-www2.netx360.inautix.com
xat-dbresearch.inautix.com
demo-spm.inautix.com
xat-rptsvc.inautix.com
qa-inside.pershing.inautix.com
qa-dbab.inautix.com
uat-www3.netxselect.inautix.com
alpha-www.pllcfiles.inautix.com
xat-other-netxinvestor.bnymellon.com
ice2.qa.bnymellon.com
demo-opw.netx360.inautix.com
uat-www2.netxinstitutional.inautix.com
xat-rptsvc.inautix.com
uat-ofx.netxclient.inautix.com
sni.cloudflaressl.com
qa-www2.netx360.inautix.com
alpha-www2.netx360.inautix.com
qa-mobile.netxpro.inautix.com
hewitt401k.inautix.com
uat-www2.pershingprimeservices.inautix.com
sni227059.cloudflaressl.com
par.inautix.com
xat-xml.netxpro.inautix.com
uat-ccenter.pershing.inautix.com
sni227059.cloudflaressl.com
sni227059.cloudflaressl.com
xat-dbresearch.inautix.com
qa-dbab.inautix.com
qa-mobile.netxpro.inautix.com
sni227059.cloudflaressl.com
uat-helpdeskivr.pershing.inautix.com
uat-www2.netxinstitutional.inautix.com
uat-www.pllcfiles.inautix.com
uat-investments.citi.inautix.com
qap-xml.netxpro.inautix.com
xat-actimize.pershing.inautix.com
uat-www2.netxpro.inautix.com
dbresearch.inautix.com
xat-monitor.pllcfiles.inautix.com
uat-www2-netxprodownload.qa.bnymellon.com
par.inautix.com
xat-mobile.netxpro.inautix.com
uat-ebd.netxadvisor.inautix.com
WSOMPAPINA02.US.INautix.Com
uat-ccenter.pershing.inautix.com
uat-www2-netx360.qa.bnymellon.com
ice2.qa.bnymellon.com
xat-www.pershinguk.inautix.com
xat-xml.netxpro.inautix.com
xat-www2.netxselect.inautix.com
epm.inautix.com
uat-www2.netxselect.inautix.com
xat-troweprice.inxselect.inautix.com
qa-dbab.inautix.com
xat-rptsvc-irs.inautix.com

Certificate

The complete raw certificate details for uat-pernet.pershing.inautix.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yGa+50UOQOAW2Ed/aaB
lKPJIjZF8W/MPAIFdck7matHC0bqWBCmecaaj2MmQ4WregCaTLfy3grc8Bwgj3zl
qt/DtbMcokd8PZdhpplMVnLplSBo0inCY9KDos8vl/wgsF/yn669QdOYwqyRCR3f
ffwOa80hYfQoJe1a++fbym2f8HdY9q/z0Y6od2jhVRq0ylCBoxZ5/UG6IkVjzika
xFlFYGrGndrnIXq7xJFTK9oZaIkJOa8lZmsZh1Q8JbbBldUojjOWxOtKjpymWIn4
QzBHOgB5PANpLo59L3kt3BVhKN2QW29lCT5qd3tVlJj3nrmgjOGqDES0FMpVuoo8
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9272937503287372948880495678704703926
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Bank of New York Mellon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PRN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uat-pernet.pershing.inautix.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28167713448693943977590158490327392740030390719291038016436551682992495833647432280305648883036707171559742980557773665397797050898660706547004581336847512847739018763871227121587423957430906217890177553609580651358011919763872035839971611757367868167840009355961351365691360408772271124988444866511644764259707660723816147416211694985040745645968001630653393686116648287929544344314504667810509668738586761844354151842820823303024042039209065298390527030679396905760247317211567348109728109463441867217362568870967735171026827566876046892841176764660486071309341128097939243145226571550008292506503300520817669586029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92afb0c55cec0de31239ee4427fc5750ee98dc48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-pernet.pershing.inautix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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