ctlabs.verizon.net

- Verizon Data Services LLC -

Issued by DigiCert Baltimore TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:08:4d:be:1e:80:f5:f4:ca:c4:80:92:e0:08:e2:90 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Verizon Data Services LLC

Organization: Verizon Data Services LLC
State / Province: Florida
Locality: Temple Terrace
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:08:4d:be:1e:80:f5:f4:ca:c4:80:92:e0:08:e2:90
Serial Number (int): 10676939149478418788061313268298867344
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c6:66:be:9c:dc:16:2d:89:ee:df:31:91:2c:bd:62:22:ce:70:53:37
AuthorityKeyId: f2:56:9b:07:86:07:99:53:7e:12:2c:f8:7d:2f:e6:d5:26:d8:93:54

Fingerprint (sha1): e6:96:ad:92:5f:fd:76:6f:a9:f8:a8:5d:ce:7c:23:ba:4c:45:08:cf
Fingerprint (sha256): 07:2a:66:d5:8f:e3:ba:03:e9:b2:d0:a8:53:a3:c2:5d:c7:38:8d:a0:a2:af:05:c8:62:a4:d0:63:d5:43:1c:fd

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crl

Check the revocation status for certificate ctlabs.verizon.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ctlabs.verizon.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ctlabs.verizon.net
www.ctlabs.verizon.net

Other certificates including the domain name verizon.net

(limited to 100 certificates)
pool-100-11-31-54.phlapa.fios.verizon.net
static-71-125-60-82.nycmny.fios.verizon.net
68.128.255.21.fiostv.verizon.net
s1.wpc.edgecastcdn.net
fvccd.verizon.net
pool-100-16-229-169.bltmmd.fios.verizon.net
pool-108-28-124-53.washdc.fios.verizon.net
www98.verizon.com
fvccu.verizon.net
s1.wpc.edgecastcdn.net
s6.wac.edgecastcdn.net
pool-68-133-61-30.bflony.fios.verizon.net
mealmweb.verizon.net
68.128.255.20.fiostv.verizon.net
www.verizon.com
ctlabs-selfhelp.verizon.net
test-t2ipn.fiostv.verizon.net
wlhmma-mainme-asa.verizon.net
sessionsetupservice.hrbgpaha.fiostv.verizon.net
mercuryipg.nycqnynjd03.fiostv.verizon.net
s5.wpc.edgecastcdn.net
sessionsetupservice.hrbgpaha.fiostv.verizon.net
www.verizon.com
nyfiosspeed2.west.verizon.net
mercuryipg.hrbgpaha.fiostv.verizon.net
speedtest.verizon.net
mercuryipg.frhdnjbbh09.fiostv.verizon.net
mercuryipg.faldmdfld00.fiostv.verizon.net
*.securegateway.verizon.net
s5.wpc.edgecastcdn.net
mercuryipg.hrbgpaha.fiostv.verizon.net
www98.verizon.com
outgoing.verizon.net
sessionsetupservice.hrbgpaha.fiostv.verizon.net
s5.wpc.edgecastcdn.net
test-t2ipn.fiostv.verizon.net
ctlabs.verizon.net
pool-68-133-71-162.bflony.fios.verizon.net
ngstbcmd.vho4.fiostv.verizon.net
pool-100-12-128-165.nycmny.fios.verizon.net
s1.wpc.edgecastcdn.net
static-70-23-27-178.nycmny.fios.verizon.net
rescmacapp01.ui.verizon.net
www.verizon.com
sessionsetupservice.hrbgpaha.fiostv.verizon.net
business.verizon.net
console.contentdistribution.verizon.net
careuat.verizon.net
static-72-94-29-177.phlapa.fios.verizon.net
fvtrm.verizon.net
www22.verizon.com
services.verizon.net
www.verizon.com
static-74-99-191-37.hrbgpa.fios.verizon.net
rly-grid-int-01.verizon.net
mercuryipg.bflonyel.fiostv.verizon.net
aimdashboarddev.verizon.net
zoe-dit-dyn.verizon.net
74.106.129.238.fiostv.verizon.net
*.verizon.net
www98.verizon.com
s5.wpc.edgecastcdn.net
nkrumah.asuscomm.com
fvccd.verizon.net
sessionsetupservice.hrbgpaha.fiostv.verizon.net
www98.verizon.com
sessionsetupservice.hrbgpaha.fiostv.verizon.net
carestg.verizon.net
vmscdl01.vho11.fiostv.verizon.net
outgoing.yahoo.verizon.net
ive.verizon.net
www.verizon.com
s6.wac.edgecastcdn.net
sessionsetupservice.hrbgpaha.fiostv.verizon.net
activatemydsl.verizon.net
www98.verizon.com
sessionsetupservice-stg3.wlhmmaaa.fiostv.verizon.net
www98.verizon.com
sessionsetupservice.hrbgpaha.fiostv.verizon.net
mercuryipg.hrbgpaha.fiostv.verizon.net
vmscdl01.vho14.fiostv.verizon.net
ngstbcmd.vho15.fiostv.verizon.net
pool-71-179-128-39.bltmmd.fios.verizon.net
static-72-94-29-177.phlapa.fios.verizon.net
static-108-16-140-132.phlapa.fios.verizon.net
sessionsetupservice.hrbgpaha.fiostv.verizon.net
s1.wpc.edgecastcdn.net
74.106.132.246.fiostv.verizon.net
activate.verizon.net
gss2.wlhmmaaa.fiostv.verizon.net
sessionsetupservice.hrbgpaha.fiostv.verizon.net
sessionsetupservice.hrbgpaha.fiostv.verizon.net
s5.wpc.edgecastcdn.net
vmscdl01.vho14.fiostv.verizon.net
nrtnohiad01.west.verizon.net
sitecontrol.domains.verizon.net
pool-173-56-41-12.nycmny.fios.verizon.net
s5.wpc.edgecastcdn.net
68.128.255.17.fiostv.verizon.net
s1.wpc.edgecastcdn.net

Certificate

The complete raw certificate details for ctlabs.verizon.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjJPuY2YV9TZiwy935pi
MrrzgDmol1NX53duIrS6/FJgrGeSrKwgexrwCIgam5oW2Mgy+y/yGoZ/a0Ao+b+d
FcEAID0VwPpF5GUlkYhx2+S9UPveTmF1oQtfPam7kH2mBep14yGx99/YRK/TIewz
z6txrOnL2Cryc4BAKiKGYu9tyO6kcJqexIKTei824rscj5qFg9hrk65SyUX7wVu8
Sbd5XtgbqjrWCnfX3PVOpBTJk/nfDDD5OHPeFGDez6kfIaE110SAKfPyDxjOlMoY
DGsxchOrOI+jBxGWTy4rIvwjFx9x2YqAMuklRAvwve+nikZHUltIJAPiGo0nuLbk
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10676939149478418788061313268298867344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Baltimore TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Temple Terrace'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Data Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ctlabs.verizon.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23000180992184860840916284260945907073909880478579872944347458402024847920457522695863151887629761150954876148042420320907736280341863118389219503951137626611675271243651502552018582929798661346012739699563502343310947165830195070413892784764274337081269510324180208516020114551189614290748999023229204513886454082211012175152613279314186844224028435145714764791864399675577134674324724475456159504670126201157318536155503400234595991614869108913757570260955002573049143342498092022709987750303821562490848015737203098582257512729048989577893125390346679511431762893148421047232599094142198301146466409203845846983723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2569b07860799537e122cf87d2fe6d526d89354
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c666be9cdc162d89eedf31912cbd6222ce705337
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctlabs.verizon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctlabs.verizon.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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