www.eportal.giservices.io

- Worldline -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 9c:15:4c:e7:50:f9:4c:28:1b:c9:96:05:37:93:1b:d2 was issued on by Sectigo Limited.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Worldline

Organization: Worldline
State / Province: Île-de-France
Country: FR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 9c:15:4c:e7:50:f9:4c:28:1b:c9:96:05:37:93:1b:d2
Serial Number (int): 207470165366371708829723651588794555346
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a0:4b:21:ab:b3:21:07:1d:b9:f9:6b:bc:88:39:b1:d5:37:99:66:78
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): bd:04:da:4b:3e:e7:bb:6c:8b:b7:03:26:70:59:04:3b:d4:0f:7c:2a
Fingerprint (sha256): 08:5c:a2:b7:56:c0:4e:0d:c4:ad:b9:63:e8:bc:08:c3:a2:22:2e:94:d5:ef:85:14:bc:f7:53:e4:27:3d:78:b9

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.eportal.giservices.io

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.eportal.giservices.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.eportal.giservices.io
adeo-eportal.services.ingenico.com
adeo.eportal.worldline-solutions.com
api-eportal.services.ingenico.com
api.eportal.worldline-solutions.com
carrefour-eportal.services.ingenico.com
carrefour.eportal.worldline-solutions.com
elior-eportal.services.ingenico.com
elior.eportal.worldline-solutions.com
eportal.giservices.io
eportal.services.ingenico.com
eportal.worldline-solutions.com
ikea-eportal.services.ingenico.com
ikea.eportal.worldline-solutions.com
jlppact-eportal.services.ingenico.com
jlppact.eportal.worldline-solutions.com
mns-eportal.services.ingenico.com
mns.eportal.worldline-solutions.com
systemeu-eportal.services.ingenico.com
systemeu.eportal.worldline-solutions.com
www.eportal.worldline-solutions.com

Other certificates including the domain name giservices.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.eportal.giservices.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 207470165366371708829723651588794555346
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worldline'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.eportal.giservices.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 926667155650053346840349807892369366686419838409778933166992960987369875874580408604065365976092615535967376916395637393032477237141950815789369312771301661966500849257424626389306905121578299930699501760270609371054705814569237786047081230566988798659275007924850180192895939840776730686350725307322866853509110945435150778932223261210797891204623290490520159084188182642732216887511005644576435932512143459501018734034255562440851634194148775925611427961980046698132625779057331122429310377999192705139704483213898946749297763689703602714534000166758269864877434674961389347987466947186552520370728444518101471911669374696952393516019732342721989060166835982228637238446557661166809818496662712685708021994335090422348654826812778730874031578815280915138404497438899711923786147864785255710200808784606676793157910766366671962738256414928673662098585552182406592991049168114843508317740635577654315295326031430325296815420506730399353159627850810821873472030663920323069862383432421773744084424958543008071019433631338758309175402309393801869241700047976309456299370634838117170760121930571103219415114818238932301420008240265047150240010401711585405585575336099674146257940090264839501444842990994048158242465518780423222453250213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a04b21abb321071db9f96bbc8839b1d537996678
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d559ed0700000040300483046022100874a19039ae0e22ac43de5b265403f610a87d929ec9c6f19f06b4be245ccec57022100f27f5fb3de128fcaa10580ccdf41eb6b1af44c6f3badc405a9bdbb5b2b96703e0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d559ed145000004030046304402207e044d89ddc8d2e8243e36979713a6de566f0242426baf939fe9b82e14eee58e02202f698bdd4ee35432912b1c99de8abc95d994764a3439bbd65bc171bbfeeb5a24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (769 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eportal.giservices.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adeo-eportal.services.ingenico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adeo.eportal.worldline-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-eportal.services.ingenico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.eportal.worldline-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour-eportal.services.ingenico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.eportal.worldline-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elior-eportal.services.ingenico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elior.eportal.worldline-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eportal.giservices.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eportal.services.ingenico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eportal.worldline-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea-eportal.services.ingenico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.eportal.worldline-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlppact-eportal.services.ingenico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlppact.eportal.worldline-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mns-eportal.services.ingenico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mns.eportal.worldline-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systemeu-eportal.services.ingenico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systemeu.eportal.worldline-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eportal.worldline-solutions.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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