vpn1.albion.edu

- Albion College -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 86:c9:c1:a7:d3:f8:3b:cf:f2:40:0f:0a:44:e8:83:9b was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Albion College

Organization: Albion College
Organization unit: IT
Address: 611 E. Porter Street
Postal code: 49224
State / Province: Michigan
Locality: Albion
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 86:c9:c1:a7:d3:f8:3b:cf:f2:40:0f:0a:44:e8:83:9b
Serial Number (int): 179164130905502305108103694576746267547
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 82:22:21:81:1e:21:6c:bb:4e:c8:2b:01:73:7f:d3:f8:6e:5d:3f:08
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 6d:3b:c8:2b:22:4c:4e:49:72:0d:9d:6c:dd:bf:db:07:26:14:98:28
Fingerprint (sha256): 0a:78:8d:ff:14:7e:cc:51:38:29:28:3f:82:db:d5:4a:44:07:f2:c7:63:0b:83:93:36:20:77:e3:7a:76:f7:92

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate vpn1.albion.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn1.albion.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn1.albion.edu

Other certificates including the domain name albion.edu

(limited to 100 certificates)
5698362649083904-fe2.pantheonsite.io
banking-business-review.com
banking-business-review.com
cluster2.technolutions.net
banking-business-review.com
exauth16s01.albion.edu
acis.albion.edu
palo5.albion.edu
161511-web1.vilcek.org
advance.albion.edu
discuss.albion.edu
courses.albion.edu
www.nai.arizona.edu
rt.albion.edu
palo5.albion.edu
hvgw1.albion.edu
cluster2.technolutions.net
albion.edu
library.albion.edu
apply.albion.edu
cluster2.technolutions.net
www.datahero.com
apply.albion.edu
cluster2.technolutions.net
208.lsnc.net
advance.albion.edu
courses.albion.edu
alumnimail.albion.edu
libguides.albion.edu
vpn1.albion.edu
apply.albion.edu
banking-business-review.com
secure2.albion.edu
dwapptest01.albion.edu
ssl713957.cloudflaressl.com
www.humanities.sas.upenn.edu
albion.edu
banking-business-review.com
160.167.tmcapital.com
courses.albion.edu
161511-web1.vilcek.org
ssl713957.cloudflaressl.com
discuss.albion.edu
161511-web1.vilcek.org
advance.albion.edu
ssl713956.cloudflaressl.com
160.167.tmcapital.com
alumnimail.albion.edu
alumnimail.albion.edu
161511-web1.vilcek.org
brassunion.com
acadmintest.cuofco.org
208.lsnc.net
discuss.albion.edu
cluster2.technolutions.net
161511-web1.vilcek.org
apply.albion.edu
cluster2.technolutions.net
160.167.tmcapital.com
acadmintest.cuofco.org
secure.advance.albion.edu
teach.albion.edu
commerce.imodulescontent.com
discuss.albion.edu
afscme57.org
160.167.tmcapital.com
ucomm-sites-dev.stanford.edu
teach.albion.edu
208.lsnc.net
banking-business-review.com
161511-web1.vilcek.org
dwapptest01.albion.edu
cluster2.technolutions.net
alldata.com
www.albion.edu
160.167.tmcapital.com
banking-business-review.com
beistest01.albion.edu
publicarchive.albion.edu
cluster2.technolutions.net
apply.albion.edu
alldata.com
RAD12R2E01.albion.edu
libguides.albion.edu
www.giving.dartmouth.edu
cluster2.technolutions.net
library.albion.edu
illiad.albion.edu
cluster2.technolutions.net
acadmintest.cuofco.org
www2.albion.edu
banking-business-review.com
banking-business-review.com
5698362649083904-fe2.pantheonsite.io
161511-web1.vilcek.org
advance.albion.edu
ssl713958.cloudflaressl.com
2.www.upenn.edu
5740240702537728-fe2.pantheonsite.io
secure.advance.albion.edu

Certificate

The complete raw certificate details for vpn1.albion.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA881h9MJRBTTOj7J7nxDD
9c5rZf4SpKW165QBe80cUpWAupLQLLIVBGeF+J3xtpT1ZhSslq/s3h5tCCZO+Zi0
u3UJjTAxG8dx8lnqdwa10U/eQskNWLIse8wtryCEILkl2bwLlaNLIRsNZp6DAof3
viSHlHndXYNsVsG5xiiqbasTjnv/Cbw7xXrFOuYlcJYD8Cy+xb1uImVruNUusR2S
jf3/zOfXNJIRAq1B2joRIcHv/F0WkAGZi42VDOLwiOaqIA1DGKDuut3oTrP55ikX
AcM2K+hFl+dlMYBQm6pNtDJi0YEeXwcb+CjYeE6n/359Z2w0OX8zEWc9dJCh+DC+
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 179164130905502305108103694576746267547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '49224'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albion'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '611 E. Porter Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albion College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn1.albion.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30777186061698927720548379802163096204803687731981331632447432415078800342505720520372434589662690007625990375970945676429909090751230164590981063620103037816055051852816643370222534804724289811367299449510549210918904368653228479935763812384018161491602063279545836479703995832601995106919318075713965919783350240852549572498830716423218829910173622450537688349238862083783920817243270366254112047032414304449346913602318753930393962117495218911880316011937721853617862960693195338013508996140139232895221782746747782550898164461862694950846395547098076126309584999595291729523786082101442088704297830524875766283877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							822221811e216cbb4ec82b01737fd3f86e5d3f08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn1.albion.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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