rua-prod-policy-agent.tapioca.platform.akamai.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ce:d3:c5:dd:e4:1b:6e:af:f0:8c:b1:f8:f9:b6:9e:a6:0f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rua-prod-policy-agent.tapioca.platform.akamai.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ce:d3:c5:dd:e4:1b:6e:af:f0:8c:b1:f8:f9:b6:9e:a6:0f
Serial Number (int): 331716519871070845391780649263639375554063
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 00:38:90:f4:1d:ec:28:d8:92:46:ef:b2:26:10:b9:49:89:07:bf:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 47:34:0a:66:51:65:f9:0b:b8:ce:9c:90:df:5e:09:30:2b:23:8c:44
Fingerprint (sha256): 07:f4:6c:1f:6a:77:a8:4e:05:58:3f:78:48:b6:67:b7:15:32:9e:c3:56:69:cf:3c:75:86:12:ad:14:e7:54:f2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate rua-prod-policy-agent.tapioca.platform.akamai.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rua-prod-policy-agent.tapioca.platform.akamai.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rua-prod-policy-agent.tapioca.platform.akamai.com

Other certificates including the domain name akamai.com

(limited to 100 certificates)
jobs.akamai.com
sitesearch.akamai.com
community.akamai.com
ccuservice.akamai.com
www.akamai.com
aic.status.akamai.com
eis-aam.akamai.com
eis-aam.akamai.com
countries.akamai.com
www.akamai.com
developer.akamai.com
i.am.akamai.com
zeppelin.perfreport.akamai.com
i.am.staging.akamai.com
eis-redirect-ov.akamai.com
eis-redirect-ov.akamai.com
registration.akamai.com
caretrust.wellsky.com
i.am.staging.akamai.com
1185418.images.chive.akamai.com
ozmobiledevicemail.akamai.com
control.akamai.com
upgrade.terra.akamai.com
client.akamai.com
ccuapi.akamai.com
eis-redirect-ov.akamai.com
cps-test.akamai.com
rua-prod-policy-agent.tapioca.platform.akamai.com
dac-next-staging.corp.akamai.com
caretrust.wellsky.com
eis-aam.akamai.com
eis-redirect-ov.akamai.com
pushzero-assets.akamai.com
control.staging.akamai.com
bancoitau-status.blip.ai
community.akamai.com
l1.fetch.ro.akamai.com
quic.akamai.com
control.staging.akamai.com
upgrade.terra.akamai.com
tech.akamai.com
caretrust.wellsky.com
eis-redirect-ov.akamai.com
wildcard.ingest.akamaientrypoint.net
caretrust.wellsky.com
pkitrustcheck2.akamai.com
tech.akamai.com
parallel-akamaiocsp-essl.akamai.com
ac.akamai.com
idp.luna.akamai.com
akamaiocsp.akamai.com
caretrust.wellsky.com
control.akamai.com
*.wildcard-cps.akamai.com
eaa.status.akamai.com
aic.status.akamai.com
akamaiocsp.akamai.com
eis-redirect.akamai.com
*.wildcard-cps.akamai.com
caretrust.wellsky.com
etp.status.akamai.com
registration.akamai.com
eaa.status.akamai.com
axamx-status.pager.com
aic.status.akamai.com
ccuapi.akamai.com
*.cps-wildcard-s-test.akamai.com
prod-aem.akamai.com
control.akamai.com
single-test-3.cert-test.akamai.com
http2.akamai.com
perf-bos.akamai.com
http2.akamai.com
eis-redirect-ov.akamai.com
c-stg.control.akamai.com
aic.status.akamai.com
www.akamai.com
control.akamai.com
eaa.status.akamai.com
control.akamai.com
eis.akamai.com
qa.dash-ext.akamai.com
ccuservice.akamai.com
tech.akamai.com
iplookup.akamai.com
staging-www-live.akamai.com
bancoitau-status.blip.ai
eaa.status.akamai.com
rua.failapi.prod.edgekey.net
iplookup.akamai.com
adtrust.wellsky.com
eis-redirect2.akamai.com
tm.akamai.com
rua-prod-policy-agent.tapioca.platform.akamai.com
blogs.akamai.com
eis.akamai.com
players.akamai.com
ac.akamai.com
caretrust.wellsky.com
edge.akamai.com

Certificate

The complete raw certificate details for rua-prod-policy-agent.tapioca.platform.akamai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgISA87Txd3kG26v8Iyx+Pm2nqYPMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA2MjUxMzMyNDhaFw0yMTA5MjMxMzMyNDdaMDwxOjA4BgNVBAMT
MXJ1YS1wcm9kLXBvbGljeS1hZ2VudC50YXBpb2NhLnBsYXRmb3JtLmFrYW1haS5j
b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNNvGpx39EoUTiiLS
EcbXT1/IJvejBGGpmxiAV+SXx8zRukwyDZK6ap96K4J13e+gX1zt1Zv0Lcqr7OAX
5hU60stdjTSIEj6FUe4m8u5i22uT2qkGjSvgt774RDGkPBM4MC1hBmNSCUylfgUP
DRMzFFTwk/6El8nUKSoHL3WiEA0Jy9+Jfvr472NDIipR3qrdFCwdPcPn4woEjI+F
sCWwKylGf9QEaPomd6tqxFT68Shh6TmTbaeODyOLawFWoOMHcDwqAQpN9OZs+k5V
oPtEI5j3YqXbULE6BQo69jRSBPNYm9O9kWi9I3I6jIn/NoM8cXYbKlvhDxXQvn3F
yxRjAgMBAAGjggJsMIICaDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAA4kPQd7CjY
kkbvsiYQuUmJB79RMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUG
CCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3Jn
MCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMDwGA1UdEQQ1MDOC
MXJ1YS1wcm9kLXBvbGljeS1hZ2VudC50YXBpb2NhLnBsYXRmb3JtLmFrYW1haS5j
b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgBElGUusO7Or8RAB9io/ijA2uaCvtjLMbU/0zOWtbaBqAAAAXpD
lmdMAAAEAwBHMEUCIHPmproTvJqY+GNgZ9RWYGBsFPV2PZCK6LdN5WOVzM+lAiEA
7J0aUhfb2BrdzZzactpBX+A27m+tC8n1acSVsSm63AcAdgD2XJQv0XcwIhRUGAgw
lFaO400TGTO/3wwvIAvMTvFk4wAAAXpDlmdPAAAEAwBHMEUCID6lga0mDb876Z7K
x5tIvyhfBVyg1fLsp9Zxsp+kPpmvAiEA2GKS+JBP97PDiJjErmiil6rWaIx5xW+s
VU8OrCVNRy8wDQYJKoZIhvcNAQELBQADggEBAH76bP+mSJ9aszLCjknN2aJHlJzT
9TOhb7kM2gd0kPHDXJ2EgoLy9+BZU62wWfNL1uBWTydkCx5nt8N4Aafq8wMuZp5v
qytMq47n/8nnS7c5I7jHWi/3uWCjwVUFseRzKAM7e3riHJaDn8NMXMu6qM4t9/pJ
/VPPy+Vzr+K0KP3D5zUhgKL3nLMCd5eMHvk6Iemy5JVGhYzELSA05KvmzeYCI3Lo
iEsED2WsDVBgwAYbYtl77STNJBT/oA/bzWRE3XB9kEyqZ2RzjCP7CG81ENC4vmDK
sYfALZyB33tnOqYgWTODiyfTSIp8gHDv9FsxChsyrOU0k/Z7Lk7dvVM3Ayo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTTbxqcd/RKFE4oi0hHG
109fyCb3owRhqZsYgFfkl8fM0bpMMg2SumqfeiuCdd3voF9c7dWb9C3Kq+zgF+YV
OtLLXY00iBI+hVHuJvLuYttrk9qpBo0r4Le++EQxpDwTODAtYQZjUglMpX4FDw0T
MxRU8JP+hJfJ1CkqBy91ohANCcvfiX76+O9jQyIqUd6q3RQsHT3D5+MKBIyPhbAl
sCspRn/UBGj6JnerasRU+vEoYek5k22njg8ji2sBVqDjB3A8KgEKTfTmbPpOVaD7
RCOY92Kl21CxOgUKOvY0UgTzWJvTvZFovSNyOoyJ/zaDPHF2Gypb4Q8V0L59xcsU
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331716519871070845391780649263639375554063
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-25 13:32:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-23 13:32:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rua-prod-policy-agent.tapioca.platform.akamai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25399964795978122956881955844983190391527215890941449942777215005199935495617717110380561783834097843646217376579947140319294290269385561132911480747910999986299882958740395128010182335020784737297756825462489006627151144434821017874720677091281281783666771476258506986428802946410757208315496094699075064021381122984590968701280646388780690371759998364723594925703168189990793888831883709476402810520046182145527615609114845255174871285140115774196427136958559056736136780971112608752905695543063133470457862822836906458815879279681760746748060819049838630673742793252289635693280933146749148889098413175541347325027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							003890f41dec28d89246efb22610b9498907bf51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rua-prod-policy-agent.tapioca.platform.akamai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017a4396674c0000040300473045022073e6a6ba13bc9a98f8636067d45660606c14f5763d908ae8b74de56395cccfa5022100ec9d1a5217dbd81addcd9cda72da415fe036ee6fad0bc9f569c495b129badc07007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017a4396674f000004030047304502203ea581ad260dbf3be99ecac79b48bf285f055ca0d5f2eca7d671b29fa43e99af022100d86292f8904ff7b3c38898c4ae68a297aad6688c79c56fac554f0eac254d472f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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