www.nhn.no

- NORSK HELSENETT SF -

Issued by Buypass Class 3 CA 2

About this certificate

This digital certificate with serial number 26:2f:dc:a1:fd:14:03:e3:81:13 was issued on by Buypass AS-983163327.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NORSK HELSENETT SF

Company registration number: 994598759
Organization: NORSK HELSENETT SF
Postal code: 7030
Locality: TRONDHEIM
Country: NO

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 26:2f:dc:a1:fd:14:03:e3:81:13
Serial Number (int): 180332821586932868022547
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: 53:46:a7:b4:65:1a:f2:8d:16:cb:82:66:06:00:9d:9d:6c:09:03:6f
AuthorityKeyId: 22:30:2e:d2:fb:f6:4b:ca:c0:b8:3b:d2:04:c4:e9:72:e6:97:9b:0c

Fingerprint (sha1): ee:e0:98:2c:22:91:b6:22:2a:03:06:e1:e7:04:e6:ec:aa:a2:60:8b
Fingerprint (sha256): 0a:27:20:92:a9:cf:49:3c:16:81:4a:1c:df:04:59:6d:09:03:90:56:7a:fb:8c:e3:e2:88:55:81:34:59:a8:3e

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass3CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass3CA2.crl

Check the revocation status for certificate www.nhn.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nhn.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nhn.no
nhn.no

Other certificates including the domain name nhn.no

(limited to 100 certificates)
amkstatus.nhn.no
configuration-utility.ncpeh.nhn.no
www.nhn.no
amkstatus.nhn.no
register.qa.nhn.no
sonarqube.utv.nhn.no
kot.nhn.no
amkstatus.nhn.no
utviklerportal-test-standby.plattform.nhn.no
hjelp.nhn.no
amkstatus.nhn.no
geoevent.test.gis.nhn.no
norcrin.fnsp.prep.nhn.no
ws.nhn.no
antibiotika.fnsp.nhn.no
min.support.qa.nhn.no
sonarqube.utv.nhn.no
amkstatus.nhn.no
mq.qa.amk.nhn.no
finnmark.klient.qa.amk.nhn.no
amkstatus.nhn.no
amkstatus.nhn.no
skde.fnsp.inte.nhn.no
test.sso.kj.nhn.no
na-test-oidc.d-rfi-000.osl1-rf-it.sky.nhn.no
portal.admin.qa.gis.nhn.no
amkstatus.nhn.no
www.nhn.no
argo.selvbetjening.utvikling.nhn.no
abrsonline.atostatus.com.au
helseid-admin.utvikling.nhn.no
ws-td.test.nhn.no
sikkerhet.nhn.no
medusa.nhn.no
ws-at.test.nhn.no
frontend-fest-test.nhn.no
holbergsplads.nhn.no
amkstatus.nhn.no
www.nhn.no
amkstatus.nhn.no
helse-midt.fnsp.inte.nhn.no
ws-web.test.nhn.no
dev.opplaering.kj.nhn.no
mrs-sts.nhn.no
iplos.skatteetaten.no
adresseregister-test.nhn.no
portal.admin.qa.gis.nhn.no
personregister-td.test.nhn.no
nyan.t-jonas-001.trd1-sky-test.sky.nhn.no
argo.utv.kj.nhn.no
prom.nhn.no
pvk-webimporter.shp-nav.test.nhn.no
amkstatus.nhn.no
www.nhn.no
mrs-sts.nhn.no
uonsket-hendelse.qa.nhn.no
helse-sorost.fnsp.inte.nhn.no
kafka-access-management-helper.internet.shp-nav.test.nhn.no
bergen.klient.qa.amk.nhn.no
vestreviken.klient.qa.amk.nhn.no
fs.tjenesteplattform.nhn.no
ehelse-portal.qa.nhn.no
amkstatus.nhn.no
fodselsmelding.nhn.no
eksternbruker.fs.nhn.no
producerapi-p.plattform.nhn.no
test.pmd.nhn.no
holbergsplads.nhn.no
portal.test.gis.nhn.no
*.qa.amk.nhn.no
configuration-utility.ncpeh.nhn.no
norcrin.fnsp.prep.nhn.no
personregister-web.test.nhn.no
amkstatus.nhn.no
fodselsmelding.test.nhn.no
personregister.nhn.no
amkstatus.nhn.no
auth.sky.nhn.no
abrsonline.atostatus.com.au
aviacme.cname4.test.nhn.no
nhnglobalconnectdata.iu.test.nhn.no
ror.sky.test.nhn.no
api.helsenettet.iu.qa.nhn.no
amkstatus.nhn.no
metrics.qa.amk.nhn.no
selvbetjening.qa.nhn.no
*.sdwan.nhn.no
personregister.test.nhn.no
*.hn.qa.nhn.no
nav-gateway.iu.test.nhn.no
amkstatus.nhn.no
blazing-kafka-browser.internet.shp-nav.test.nhn.no
helsenettet.iu.test.nhn.no
amkstatus.nhn.no
amkstatus.nhn.no
jdps.fnsp.test.nhn.no
*.artifactory.pasientreiser.nhn.no
nordtrond.klient.qa.amk.nhn.no
*.net.nhn.no
*.hn.at.nhn.no

Certificate

The complete raw certificate details for www.nhn.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKZx6SzSmIZRjsmV7sdt
Im0T2RG9Rkyja2W7jBV69PxTtIEjhpsVnYBGlbqXxmf9wDbuIOkjvWUxlllheWei
B/x+UQ6N4mPiWIAK2sy9az4wF4KAuNJbspVfNBd7uWaCBEpoQgN08KWUh3JAKmEc
5Bx+ErAfPEhC4OjVteQ55Bs5cOGbFavGG26Dvfg1+ZhEtioS8pjAZ5CFG+Uk4yLz
Dz96VQiMcbayclec1KRYZZyuGtYAx1K79y4f0WtlqrnWLwyR/vo0HogjuWuQJhIv
pjVkInPh1hw7ZJTZv7tz0jm06uUR5e6a12e+re2MIaJljBdYtQfrknjJ5gOq6Gum
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 180332821586932868022547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 3 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-12 06:07:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-24 21:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '7030'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TRONDHEIM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NORSK HELSENETT SF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.nhn.no'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '994598759'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21290112305208803928028001791989746354903668815324475175015302864719658619241268588875269959030771512680191236533004570213129644784273394106857723721398869702726560172486010893278301460001123413695220797936508284661593449977148518245761691882967446571899277347292096235927426980688681450561483637591079416441984966806267887792355682970037185115211619022748115255133550536905132582551390566989025065443160809751574290086567507668669957265314706991711149557040474280088983598694381578466046633166980534401693060705049147704813943796504887895412537381561963843521756630750716612278808295289255579195517245282948597130847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22302ed2fbf64bcac0b83bd204c4e972e6979b0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5346a7b4651af28d16cb826606009d9d6c09036f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.3.3 (BuyPass EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.buypass.no/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass3CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhn.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhn.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass3CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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