idp.tieto.com

- Tieto Oyj -

Issued by Symantec Class 3 EV SSL CA - G3

About this certificate

This digital certificate with serial number 0f:cd:7b:42:6a:a0:1e:6f:81:bb:ef:a0:8d:81:d4:d1 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Tieto Oyj

Company registration number: 0101138-5
Organization: Tieto Oyj
State / Province: Helsinki
Locality: Helsinki
Country: FI

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:cd:7b:42:6a:a0:1e:6f:81:bb:ef:a0:8d:81:d4:d1
Serial Number (int): 21005340791212335754446609485786109137
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Fingerprint (sha1): 7a:22:48:37:51:d1:ef:2c:26:18:43:08:f1:fd:1f:ca:7c:29:79:39
Fingerprint (sha256): 07:51:34:27:1d:3d:66:cf:4b:bb:69:91:34:00:08:cd:a0:95:a9:2e:89:8f:45:58:33:03:fe:f4:54:7d:7b:c8

Issuing Certificate URL: http://sr.symcb.com/sr.crt

Revocation information

OCSP Server: http://sr.symcd.com
CRL Distribution Point: http://sr.symcb.com/sr.crl

Check the revocation status for certificate idp.tieto.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idp.tieto.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idp.tieto.com

Other certificates including the domain name tieto.com

(limited to 100 certificates)
test.ttp.service.tieto.com
sptestrecproc01.service.tieto.com
novasupport.tieto.com
signalingsupport.tieto.com
tietoufi.tieto.com
partner.portal.tieto.com
dev-remotework.eu.tieto.com
ut10.tix.tieto.com
*.onecloud.tieto.com
tpras.portal.tieto.com
adminportal.sta2.no.azs.service.tieto.com
extmytime.tieto.com
*.shared.pub.tds.tieto.com
analytics.service.tieto.com
www.sign.tieto.com
projectwiki.tieto.com
*.tusaas.vattenfall.tieto.com
interface.tieto.com
rfirds-prod-tsuvf.service.tieto.com
ti-node-internal.soc.tieto.com
*.service.tieto.com
sts.tieto.com
artifactoryoss.shared.enigma.tds.tieto.com
web.signing.tieto.com
ce.tieto.com
sentry.eb.tieto.com
broker.service.tieto.com
repo.onecloud.tieto.com
tefihelvpnex002a.tieto.com
dsoweb-test-tsuhel.service.tieto.com
*.shared.lyse.tds.tieto.com
sts.tieto.com
classify.demo.tieto.com
aarmbase.int.tieto.com
seceppinfsrv141.tieto.com
hsl.etb.tieto.com
teras.tieto.com
jira.tieto.com
spmcr02.service.tieto.com
ib.tieto.com
ar2015.tieto.com
hcw.portal.tieto.com
ar2016.tieto.com
connect-test.tieto.com
hws.tieto.com
analytics.portal.tieto.com
ecm.extra.tieto.com
msucc.tieto.com
sni.cloudflaressl.com
*.signalingsolutions.pub.tds.tieto.com
oftp-test.tix.tieto.com
api.appservice.azurestacklab.demo.tieto.com
ehotel.bix.tieto.com
*.domstolsverket.pub.tds.tieto.com
lyncweb.tieto.com
*.petovsam3.pubdev.tds.tieto.com
tsu-eon-gw.ext.tieto.com
ir-report.tieto.com
*.artifactory.shared.getswish.etds.tieto.com
rtlrds-prod-tsuvf.service.tieto.com
api.appservice.azurestacklab.demo.tieto.com
*.adminhosting.sta2.no.azs.service.tieto.com
ehotel.bix.tieto.com
banktestmts.getswish.pub.tds.tieto.com
www.tieto.com
venni.service.tieto.com
cmf.portal.tieto.com
*.trfcc.service.tieto.com
web-test-tsufortum.service.tieto.com
ar2018.tieto.com
cas.dev.gapps.tieto.fi
customer-experience.tieto.com
eb.tieto.com
secens01.eu.tieto.com
*.core.intdev.tds.tieto.com
browse.ssb.tieto.com
connect.tieto.com
api-utb.tsuge.service.tieto.com
jira.pcoe.etb.tieto.com
tetcdev01.iot.tieto.com
jira.oss.tieto.com
idp.tieto.com
sni.cloudflaressl.com
*.appservice.azurestacklab.demo.tieto.com
*.devops.pub.tds.tieto.com
c105s149vm020.eu.tieto.com
ar2015.tieto.com
tetcdev01.iot.tieto.com
analyticsd.portal.tieto.com
ubuntupetovsam.core.pubdev.tds.tieto.com
portal.alv1.se.azs.service.tieto.com
requeste.tieto.com
monitoring.service.tieto.com
oftp.tix.tieto.com
broker.service.tieto.com
hsl.etb.tieto.com
ftp.tix.tieto.com
sfbedgepool2.eu.tieto.com
conf.tieto.com
ttp.service.tieto.com

Certificate

The complete raw certificate details for idp.tieto.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNCcBm6+5EgN/lybVd0m
baFUWMLQ1dgTlNIXeT9mgEoC6d13j5rpsV2xau+GsOmgaljAPYTomXRHwAHYe8Aj
ly1PYrYXgugnm/cyr+yn0M33s627SDqq/rb4USuKRiXcEqeWVRKU3/gVqc0fgh9q
CRBSGGQ41/jv7ccJ3MeFcB5DkBO5YdFGyKuExxDQLF/zoFISXlB0b70P8Xi2YxBa
qU+0u1Zvq5d0A8rp51BvTb582D1lgWANxw70HL+v5ripDo3X/Eco+yq33s6Pxb9n
enc3DIhPD9YDU2MgoWzp6BeVMVO+GI4WRJHdztjSkGBw9AKAQOzKKg7UXoB9MrVw
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21005340791212335754446609485786109137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0101138-5'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Tieto Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'idp.tieto.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18786138300175052779360048308476998673551141835745759731250286414494160571313980388030705235709788546867090263278256130786760256482755115986275962451879857451885609806781299334077597439598289474596747836990259163021053679245710323618235431149351750618600007647342642343307735075116236545337790729594575705997184364456443010872760387358791947215462248112890973720133269300251010919896734932701869384700022520602655683427093214847910555372544021199913739681918070320859549326095210812235961714100956212123453665859577360962567150102842756811990157996072519315425161977160568647798181497399638389761079206511537391235283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.tieto.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0159abe7dd3a0b59a66463d6cf200757d591e76a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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