cag.itsligo.ie

Issued by TERENA SSL CA 2

About this certificate

This digital certificate with serial number bb:e9:8b:36:a6:77:c1:67:b4:ab:63:bf:1b:97:3f:0e was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cag.itsligo.ie,OU=Domain Control Validated

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): bb:e9:8b:36:a6:77:c1:67:b4:ab:63:bf:1b:97:3f:0e
Serial Number (int): 249778263964592853555564549170445893390
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a4:80:f9:83:ca:58:78:58:c8:7d:75:8f:55:df:8c:33:5a:bb:d8:6b
AuthorityKeyId: 5b:d0:8a:1c:9a:32:5b:e0:b5:dd:96:54:1b:e1:86:28:b0:fd:b6:bd

Fingerprint (sha1): f8:1e:b9:d4:59:fa:82:e4:9f:35:33:b2:7b:93:9c:78:16:a9:e1:3d
Fingerprint (sha256): 07:7e:35:46:4a:ae:b2:7e:11:a7:f9:3c:0a:f1:44:f5:d4:1d:91:c0:f9:bd:f7:ae:be:ae:24:a6:ec:cd:85:f3

Issuing Certificate URL: http://crt.usertrust.com/TERENASSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TERENASSLCA2.crl

Check the revocation status for certificate cag.itsligo.ie

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cag.itsligo.ie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cag.itsligo.ie

Other certificates including the domain name itsligo.ie

(limited to 100 certificates)
customerportal.uk.rlb.com
epayments.itsligo.ie
support.homeinstead.ie
hsm.itsligo.ie
systems.squaredup.com
helpdesk.epsilonnet.gr
vle.itsligo.ie
exampapers.itsligo.ie
studentportal.itsligo.ie
support.homeinstead.ie
hub.theriderfirm.cc
libcal.itsligo.ie
password.itsligo.ie
servicedesk.esmsglobal.com
cag.itsligo.ie
dissertations.itsligo.ie
ithelpdesk.familycarers.ie
service.littlegarth.org
heastaging.itsligo.ie
libask.itsligo.ie
ithelpdesk.oneplm.com
libcal.itsligo.ie
sdp.dilloneustace.ie
support.homeinstead.ie
customerportal.uk.rlb.com
outlook.itsligo.ie
outlookex-test.itsligo.ie
helpdesk.mlw.mw
helpdesk.itsligo.ie
servicedesk-meckenheim.pvs-europe.com
helpdesk.itsligo.ie
sugarcrm.itsligo.ie
support.homeinstead.ie
libask.itsligo.ie
vlearchive.itsligo.ie
servicedesk.alessi.com
staffweb.itsligo.ie
support.homeinstead.ie
service.littlegarth.org
soporte.martinezabolafio.com
helpdesk.itsligo.ie
support.homeinstead.ie
sdp.dilloneustace.ie
support.homeinstead.ie
*.itsligo.ie
heastaging.itsligo.ie
servicedesk.coram.eu
support.homeinstead.ie
edocs.itsligo.ie
sd.srk-zuerich.ch
servicedesk.buildmat.eu
opencourses.itsligo.ie
hsm.itsligo.ie
adfs.itsligo.ie
helpdesk.itsligo.ie
libguides.itsligo.ie
servicedesk-meckenheim.pvs-europe.com
helpdesk.sunlight.gr
support.brill.com
support.homeinstead.ie
helpdesk.itwfasteners.com
support.homeinstead.ie
ithelpdesk.frederic-robinson.co.uk
grouphelpdesk.oceanscan.co.uk
helpdesk.itsligo.ie
libask.itsligo.ie
staffportal.itsligo.ie
helpdesk.itsligo.ie
heastaging.itsligo.ie
libguides.itsligo.ie
support.homeinstead.ie
ithelpdesk.koinly.io
helpdesk.beauchamps.ie
customerportal.uk.rlb.com
helpdesk.sunlight.gr
helpdesk.beauchamps.ie
customerportal.uk.rlb.com
www.itsligo.ie
support.homeinstead.ie
hsm.itsligo.ie
coolaney.itsligo.ie
*.itsligo.ie
*.itsligo.ie
servicedesk.am-labor.de
itsupport.nza.nl
support.homeinstead.ie
servicedesk.relyonnutec.com
estateshelpdesk.itsligo.ie
library.itsligo.ie
it.rmk.ee
noc.servicedesk.as
it.rmk.ee
itsupport.gnt-group.com
support.apc-overnight.com
libcal.itsligo.ie
systems.squaredup.com
servicedesk.akcentral.com
zahelpdesk.glencore.co.za
customerportal.uk.rlb.com
support.homeinstead.ie

Certificate

The complete raw certificate details for cag.itsligo.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIElzCCA3+gAwIBAgIRALvpizamd8FntKtjvxuXPw4wDQYJKoZIhvcNAQELBQAw
ZDELMAkGA1UEBhMCTkwxFjAUBgNVBAgTDU5vb3JkLUhvbGxhbmQxEjAQBgNVBAcT
CUFtc3RlcmRhbTEPMA0GA1UEChMGVEVSRU5BMRgwFgYDVQQDEw9URVJFTkEgU1NM
IENBIDIwHhcNMTUwNDI3MDAwMDAwWhcNMTgwNDI2MjM1OTU5WjA8MSEwHwYDVQQL
ExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFzAVBgNVBAMTDmNhZy5pdHNsaWdv
LmllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8b+s2CYWNvKJCiYp
nwshebWFfZ42PGB7718Gw2cslq4JkXzfUbr47ajlH/1gcA4Ez5X3eZnFHYKrOMjo
9VBbcN4Y6yMSyvSAzeeDi6c9XMAuLTVezZmbLb44Vf+gOi2UrzVVkuZrBdOQqQD1
Wf1YvtiI4pGHjWcEg8Obme/R4HzxzlPl2WXKhHvslUkI+HoH2YaOeBzY7SfDCEqL
AJQL4H+/p17yh/YgSEYi52tO8TxQaD457J02esQtR4hZeECAQbfC4rdU6qJK5heg
RoN5IV33uELP/xZH9Q/ovWmpkUVVF1QMazsRhOlYXTF0UGGXst64tQO7kE/R7ak8
5hf4yQIDAQABo4IBajCCAWYwHwYDVR0jBBgwFoAUW9CKHJoyW+C13ZZUG+GGKLD9
tr0wHQYDVR0OBBYEFKSA+YPKWHhYyH11j1XfjDNau9hrMA4GA1UdDwEB/wQEAwIF
oDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAi
BgNVHSAEGzAZMA0GCysGAQQBsjEBAgIdMAgGBmeBDAECATA6BgNVHR8EMzAxMC+g
LaArhilodHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVEVSRU5BU1NMQ0EyLmNybDBs
BggrBgEFBQcBAQRgMF4wNQYIKwYBBQUHMAKGKWh0dHA6Ly9jcnQudXNlcnRydXN0
LmNvbS9URVJFTkFTU0xDQTIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51
c2VydHJ1c3QuY29tMBkGA1UdEQQSMBCCDmNhZy5pdHNsaWdvLmllMA0GCSqGSIb3
DQEBCwUAA4IBAQAr1ItDPoPwYOXtqF1OC8pFW8jOMc/1Jnm2BgrXQz+NGJfK5LDS
eJB0oClc8IA40sb79y75Pd+q2PonNCetWz4qNHbp2+v/eBueAJjf1nzUmAUY77Cn
BUiWPcND27jzrNwB87Chn6CpizV4aATAiwBkj/71OOGZSYmAsou3lo80mWkfetiw
h+hcbsanqc5n/fJWi5NeO/+o1dwZpXCciykPrWMtGA0dvyK5aukZph6AfZCED0x8
a12fxmRLSaCRKU6ZQXMlg6VhHIUEskNSn1zQygaHp613ESoK+4zhQEcKrr4o90Sq
5Xg7DcNdoweFUMtPQs215o7e0dOTUHOhciXr
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8b+s2CYWNvKJCiYpnwsh
ebWFfZ42PGB7718Gw2cslq4JkXzfUbr47ajlH/1gcA4Ez5X3eZnFHYKrOMjo9VBb
cN4Y6yMSyvSAzeeDi6c9XMAuLTVezZmbLb44Vf+gOi2UrzVVkuZrBdOQqQD1Wf1Y
vtiI4pGHjWcEg8Obme/R4HzxzlPl2WXKhHvslUkI+HoH2YaOeBzY7SfDCEqLAJQL
4H+/p17yh/YgSEYi52tO8TxQaD457J02esQtR4hZeECAQbfC4rdU6qJK5hegRoN5
IV33uELP/xZH9Q/ovWmpkUVVF1QMazsRhOlYXTF0UGGXst64tQO7kE/R7ak85hf4
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 249778263964592853555564549170445893390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cag.itsligo.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30517950047464182997906298386469829423366535340936009905194567823565666798954777735836900838503287550796596607150300528934503750450628456684518389945314280628472380713183932727350411197484762059858096906237438994101698804068071416720918466459606205447263101328699859976346750337152768158610979557016831485019408990113805204053812379806018457668541056414395881361324620640696545271798010658668113399629111477878255055228419055053632058177407725696844503775098666753301710062080521718142405766886743173444087496430448791283153081419250054972954427982912269624291355304575862113549088946839189830575422939385990921844937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5bd08a1c9a325be0b5dd96541be18628b0fdb6bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a480f983ca587858c87d758f55df8c335abbd86b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TERENASSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TERENASSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cag.itsligo.ie'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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