smtp1.diplomatie.gouv.fr

Issued by Gandi Standard SSL CA 2

About this certificate

This digital certificate with serial number f2:c4:ea:64:f4:ae:ab:b0:2c:71:00:c1:47:07:dd:de was issued on by Gandi.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=smtp1.diplomatie.gouv.fr

Gandi

Organization: Gandi
State / Province: Paris
Locality: Paris
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): f2:c4:ea:64:f4:ae:ab:b0:2c:71:00:c1:47:07:dd:de
Serial Number (int): 322695619246611479638745260447182085598
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 58:d1:2c:08:05:d4:87:18:d7:86:62:fb:58:87:70:ca:3a:6b:67:df
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): 61:7d:8e:c4:b6:b8:55:85:54:b1:c0:87:ff:ad:8a:d5:73:2f:57:92
Fingerprint (sha256): 07:3f:7b:8f:f7:3c:1e:44:65:c0:bf:ef:97:5d:1a:f3:28:eb:d1:4c:e5:3b:9a:d2:24:20:c8:18:0c:d1:a7:0e

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for certificate smtp1.diplomatie.gouv.fr

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smtp1.diplomatie.gouv.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smtp1.diplomatie.gouv.fr
smtp1.diffusion.diplomatie.gouv.fr
smtp1.liste.diplomatie.gouv.fr
smtp1.ofpra.diplomatie.gouv.fr
smtp2.diffusion.diplomatie.gouv.fr
smtp2.diplomatie.gouv.fr
smtp2.liste.diplomatie.gouv.fr
smtp2.ofpra.diplomatie.gouv.fr

Other certificates including the domain name diplomatie.gouv.fr

(limited to 100 certificates)
grandformat.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
dev.grandformat.diplomatie.gouv.fr
forge.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
monconsulat.diplomatie.gouv.fr
smacano.mad.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
fecito.mad.diplomatie.gouv.fr
enrolement.portail.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
smtp1.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
fecito.mad.rad.diplomatie.gouv.fr
latitudefrance.org
apps.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
votefae.diplomatie.gouv.fr
www.diplomatie.gouv.fr
latitudefrance.org
apk.diplomatie.gouv.fr
monconsulat.diplomatie.gouv.fr
cncd.diplomatie.gouv.fr
idppastel.diplomatie.gouv.fr
ariane.diplomatie.gouv.fr
escano.mad.rad.diplomatie.gouv.fr
escano.mad.rad.diplomatie.gouv.fr
api.diplomatie.gouv.fr
apk.diplomatie.gouv.fr
escano.mad.rad.diplomatie.gouv.fr
grandformat.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
pm.dpad.rad.diplomatie.gouv.fr
monconsulat.diplomatie.gouv.fr
grandformat.diplomatie.gouv.fr
epoc.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
latitudefrance.org
apps.diplomatie.gouv.fr
latitudefrance.org
basedoc.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
portalis.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
vuedemafenetre.diplomatie.gouv.fr
santiano.mad.rad.diplomatie.gouv.fr
grandformat.diplomatie.gouv.fr
pm.dpad.rad.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
grandformat.diplomatie.gouv.fr
micore.dpad.rad.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
escano.mad.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
cic-lp.diplomatie.gouv.fr
fecito.mad.diplomatie.gouv.fr
portalis.diplomatie.gouv.fr
latitudefrance.org
vuedemafenetre.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
pm.dpad.diplomatie.gouv.fr
pastel.diplomatie.gouv.fr
latitudefrance.org
vuedemafenetre.diplomatie.gouv.fr
pastel.diplomatie.gouv.fr
grandformat.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
catalogue.api.diplomatie.gouv.fr
*.reseau21.diplomatie.gouv.fr
bibliotheque-numerique.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
portalis.diplomatie.gouv.fr
pm.dpad.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
epoc.diplomatie.gouv.fr
ariane.diplomatie.gouv.fr
vuedemafenetre.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
mail.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
portail.diplomatie.gouv.fr
micore.dpad.diplomatie.gouv.fr
apk.diplomatie.gouv.fr
stendhal.diplomatie.gouv.fr
pastel.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
escano.mad.diplomatie.gouv.fr

Certificate

The complete raw certificate details for smtp1.diplomatie.gouv.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Uz2fVr0edAKSBnHPGrS
rCud3ODBQm/3cGTwF8//5/OgsxjMNWvXMuFNqpQs1ip4BL1VCh+Dc1lmJFzgcR3x
Wp9vHMUT4dk26YjG7+gXUOFvH1R8Dhes4/xBa81qStg25dTXMO0MDz3+g3a1YjE+
2j/ZThcWZXtDtZ6CadMWB5f7/r+ohmle9fhw1j6Y10F18SDKBxD3CUK6RpO7RSgi
hOw+yTp7w98sLRu9NBOlxRVhuM8kipfe1HrtMY6ooZMa6m1Heh5nkPkxOA2I8pmV
5Z3K9PjeET616nEK1Mx2EgS3Gh+UyEMV3gbC74S/gdpfTSQBJD8UeRJaWQU2Gxld
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322695619246611479638745260447182085598
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smtp1.diplomatie.gouv.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26421757533857181238859120022210071108441913470761368424574043217221904204973330395467441867191787158397653931111002227407612067489615612970199719069511196680757756029128995872681728746129169534289853376244325801689311169359383748443713571506070888119841264975830320830368590456138777399440938101392596794583033661812039869268409147049416803586194226881749925621556522823263727922874238905408968442111923968905110894369707884495358327524921646507664814940360856437774311566065684860005165746049337935489086049082942325251884599518721227362712601840257720828289390795625801800774266390214859717589326588504346713480577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58d12c0805d48718d78662fb588770ca3a6b67df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp1.diplomatie.gouv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp1.diffusion.diplomatie.gouv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp1.liste.diplomatie.gouv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp1.ofpra.diplomatie.gouv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp2.diffusion.diplomatie.gouv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp2.diplomatie.gouv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp2.liste.diplomatie.gouv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp2.ofpra.diplomatie.gouv.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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