idm.east.one.qa.cox.net

- Cox Communications, Inc. -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:24:59:b1 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Cox Communications, Inc.

Organization: Cox Communications, Inc.
State / Province: Georgia
Locality: Atlanta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:24:59:b1
Serial Number (int): 1277450673
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: a1:a4:4a:45:f5:fb:e5:f3:0d:b5:c2:06:f7:81:00:78:da:46:1b:ce
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 06:ae:21:66:83:06:1f:b9:9a:bd:22:5e:50:92:e1:10:a9:80:e3:6f
Fingerprint (sha256): 07:73:bd:75:12:73:3c:d7:ae:08:e1:40:ef:30:3a:2e:f2:0c:57:1c:c5:e7:7c:22:db:80:b3:28:a0:88:38:b6

Issuing Certificate URL: http://aia.entrust.net/2048-l1csha2.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate idm.east.one.qa.cox.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idm.east.one.qa.cox.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idm.east.one.qa.cox.net

Other certificates including the domain name cox.net

(limited to 100 certificates)
idm-ctv-apiwest.cox.net
cci-qa-api-okta.ccm.cox.net
*.ctadns-gke-ddtc-rise-test-b.p3-test.cox.net
duketvmdrm00.tc.at.cox.net
*.misnp.mw.p3-np.cox.net
rmdirvip.east.cox.net
*.kaas-gke-ddtc-mis-ephemeral-a.p3-lab.cox.net
*.aceapigwdev-gke-ddtc-riselab-np-a.p3-np.cox.net
SVL-SA-ATRUNK-TALKDESK-TLS.SV.COX.NET
*.paastest-gke-ddtc-mis-lab-a.p3-lab.cox.net
m.cox.net
*.cdvr-duke.wcdn.cox.net
www.two.qa.cox.com
*.paastest-gke-ddtc-mis-lab-a.p3-lab.cox.net
pop.east.two.qa.cox.net
qa3scvvodsis00.at.at.cox.net
admin.api.dev.na.cox.net
speedtest.rd.sd.cox.net
smtpmm.cox.net
*.gslbwc.p3-lab.cox.net
speedtest.rd.at.cox.net
crs.ivodppv-red-hd.wcdn.cox.net
wireless-services.ddtc.ccm.services.cox.net
api.dev.na.cox.net
idm.public.webservices.one.qa.cox.net
vsz.br.br.cox.net
vsz.br.br.cox.net
chp-dev.at.at.cox.net
*.coxcom-gke-ddtc-spdmz-p-a.p3.cox.net
sslgw.cox.net
idm-intread2-east.services.cox.net
*.networkfulfillment.p3-np.cox.net
pop.cox.net
de4scvtmbatch00.at.at.cox.net
vsz.om.om.cox.net
api.stg.na.cox.net
idm-southwest-webservices.cox.net
contacts.west.cox.net
*.eps-nonprd.dmz.cox.net
edge.coxsweng.tve.cox.net
wifi.cox.net
wsip-24-234-112-151.lv.lv.cox.net
*.dnstest-gke-ddtc-rise-lab-b.p3-lab.cox.net
dukecvdc.ccm.cox.net
idm.east.one.qa.cox.net
qa.outbound.api.services.cox.net
webmail.cox.net
webmail.cox.net
wsip-184-191-234-151.fv.ks.cox.net
idm-extread-qa.cox.net
wsip-98-175-252-104.sd.sd.cox.net
*.national-linear-altcon-cif-dvtc.wcdn.cox.net
qa3scvappcap00.at.at.cox.net
wsip-98-175-252-104.sd.sd.cox.net
*.cbma.p3.cox.net
tve-api.nonprod.cox.net
cci-api-email.ccm.cox.net
internal.api.services.cox.net
speedtest.rd.om.cox.net
sail-ticketing.stg1.ccm.services.cox.net
*.p3ctadns-gke-ddtc-rise-test-b.p3-test.cox.net
*.staging1.services.coxlab.net
*.paastest6-gke-ddtc-mis-lab-a.p3-lab.cox.net
webtop.west.cox.net
wsip-70-165-101-23.rn.hr.cox.net
*.ospicktest-gke-ddtc-rise-lab-b.p3-lab.cox.net
vsz.hr.hr.cox.net
hub.stg.na.cox.net
dukecvappcap00-pub.tc.at.cox.net
de2scvcslsec00.at.at.cox.net
cci-qa-partner-ticketing.at.at.cox.net
qa1labssc1-mtiipc-r1.sv.cox.net
wsip-98-191-6-123.rn.hr.cox.net
idm-intread2-east.services.cox.net
DUKEBWSSCM-DUKE-SA-CBAFOOC-TLS.TC.AT.COX.NET
ip70-177-206-250.hr.hr.cox.net
*.cxcmtest-gke-ddtc-spdmz-p-a.p3.cox.net
wsip-174-78-252-202.rn.hr.cox.net
vdwb02.cdt.sscd.cox.net
tempus.access.service.dev.na.cox.net
vsz.hr.hr.cox.net
*.cox-mpeg4-ads-prod.wcdn.cox.net
*.ipvod-hd.tve.cox.net
idm.east.cox.net
idm.readstore.east.cox.net
fe.services.cox.net
*.eocs-gke-ddtc-spdmz-np-b.p3-np.cox.net
qa2stessc-talkdesk.sv.cox.net
wsip-70-186-143-148.sd.sd.cox.net
*.ctaelbm9-gke-ddtc-rise-test-b.p3-test.cox.net
tempus.access.stg.na.cox.net
dukemwappadmin00.tc.at.cox.net
fbl.cox.net
wsip-184-191-234-150.fv.ks.cox.net
dukecvdc.ccm.cox.net
de3scvvodsis00.at.at.cox.net
*.ctaelbupdate-gke-ddtc-rise-test-b.p3-test.cox.net
*.national-linear-altcon-dvtc.wcdn.cox.net
wsip-184-191-234-152.fv.ks.cox.net
dukevodspice00.tc.at.cox.net

Certificate

The complete raw certificate details for idm.east.one.qa.cox.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnaGQV2rRetlGLr5HCQ9
faSliHuUecIlAtM7pGPbL8SPxjC9NsoaDKKlDdJrp2vDQpySZuwkQStMWIS7CYJ1
rBNz6SrMaZWLz7VpVNtBf29pRmxCsTnnZpDJ7JL4ONTAZx7l6zjeha9NQjRBOyKw
uxEuUX5CdCwhXvwwlxE1H3sEUrKHAn7trRt9pDjxhYMSW0G9P+vMB2/qUQ64lABP
B6YQQURVfPGawDiVG+GVoyWdn93bq9KfoXNidI9AoQ6Qy4P17fU3zg7MwGY9K4N3
f6XuvpBvXmNpE31pzUXjHcORQ1+M78l6opFwqACD1fKu8YK/rh4KQ1A9NnF8E0z1
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277450673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-30 14:12:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-30 17:27:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cox Communications, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'idm.east.one.qa.cox.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22528864861143556799041854791202073215276386469873245683906744125087279187192545159747378309390196683422390670430346497870707541697063403531296908019597114260260736543207816012267214442088883785998026974259753393508600868827818328199872737366842975795510776943938934540887472715008254360646056215573495730500944304589869235183930722714754446926526609088453311514606607196533888282711387748422224379690956343388960642088226759907166413502758979217947560622195254106074273788364658620218883053116710658163645020352103372151631644249879405416746799812528524798040258709320888271801104722847562643212347894835671552816393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1csha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idm.east.one.qa.cox.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1a44a45f5fbe5f30db5c206f7810078da461bce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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