dlib.bc.edu

- Trustees of Boston College -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 04:af:76:9e:e7:48:ec:d8:92:a4:1c:50:21:6b:f8:e3 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Trustees of Boston College

Organization: Trustees of Boston College
Organization unit: Libraries
Address: 140 Commonwealth Avenue
Postal code: 02467
State / Province: Massachusetts
Locality: Chestnut Hill
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:76:9e:e7:48:ec:d8:92:a4:1c:50:21:6b:f8:e3
Serial Number (int): 6227969847345364878779673744069359843
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2c:36:39:5c:75:06:b9:5c:81:dc:69:86:85:e3:ce:b7:db:9e:4e:7f
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 05:16:06:84:c0:a6:f8:f8:32:23:7d:1e:a2:d0:10:33:f5:f1:42:23
Fingerprint (sha256): 0a:98:9d:cf:16:84:ef:8f:40:93:f3:0b:4d:5c:56:c2:cd:d4:b9:13:91:d0:e3:d3:98:70:e8:5c:b5:b3:61:80

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate dlib.bc.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dlib.bc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dlib.bc.edu
www.dlib.bc.edu

Other certificates including the domain name bc.edu

(limited to 100 certificates)
pops.bc.edu
sfunder1cert.net
sparkreportsstg.bc.edu
login.bc.edu
www2.bc.edu
cdil.bc.edu
bcservices.bc.edu
naturalenvironment.library.domain.bc.edu
uconnectlabs.com
myreports.bc.edu
services.bc.edu
capricorn.bc.edu
dev.domain.bc.edu
uconnectlabs.com
raven.bc.edu
hunnicutt2.bc.edu
events.bc.edu
arc.bc.edu
ginko.bc.edu
sfunder19cert.net
webtech.domain.bc.edu
click.alumni.bc.edu
newspapers.bc.edu
lira.bc.edu
uconnectlabs.com
cluster.technolutions.net
mail.bc.edu
about-mdev.jstor.org
uconnectlabs.com
irm.bc.edu
domain.bc.edu
web.offcampuspartners.com
uconnectlabs.com
reslife.bc.edu
imi.bc.edu
itservice.bc.edu
dauntless.bc.edu
library.domain.bc.edu
n001.offcampuspartners.com
escholarship.bc.edu
dibpmdev.bc.edu
2101commonwealth.bc.edu
bclsco.bc.edu
ejournals.bc.edu
elvis.bc.edu
lawdigitalcommons.bc.edu
uconnectlabs.com
cluster.technolutions.net
bcgradwoods.bc.edu
mba.bc.edu
infowanted.bc.edu
bclawnet.bc.edu
gambon.bc.edu
lawdigitalcommons.bc.edu
agora.bc.edu
test.cte.domain.bc.edu
stories.bc.edu
tourcms.bc.edu
api.bc.edu
impactreport.bc.edu
wfcawp.bc.edu
pilotvpn.bc.edu
conference.bc.edu
answers.bc.edu
sfunder1cert.net
raven.bc.edu
bcmba.bc.edu
publicplans.crr.bc.edu
on.bc.edu
uconnectlabs.com
sfunder19cert.net
cds1.cvent.com
sonndosa.domain.bc.edu
portalsignon.bc.edu
newspapers.bc.edu
dlib.bc.edu
cluster.technolutions.net
ccc.bc.edu
bettyadmin.bc.edu
sfunder1cert.net
cluster.technolutions.net
admission.bc.edu
elvis.bc.edu
jennybaglivo.bc.edu
uconnectlabs.com
cte.bc.edu
cluster.technolutions.net
testpsnam.bc.edu
jesuitsources.bc.edu
ccc.bc.edu
phoebe.bc.edu
uconnectlabs.com
vespa.domain.bc.edu
cluster.technolutions.net
scenery.bc.edu
lawguides.bc.edu
jesuitonlinelibrary.bc.edu
web.offcampuspartners.com
ganister.bc.edu
idesweb.bc.edu

Certificate

The complete raw certificate details for dlib.bc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z6coiT1VZdVw/XuMsr+
enL8GeBBvUHoZ3tUDM5IxQBa5mKRb3Gr5sEQJ6xhycP3YUfqVHBSsxfp9fn6yB9G
1i6xsMUPk34EzD1DX3akAlYwPYMEjqWJ5OWKTxqh8cPfXC+3WvINXjXDtXM2+FBY
24WPrvQynUvRbAy5eJjUcgLq48KG9734wa/11lB9DuAqbalehyKuTVwKMS657jgs
cZmALs42p1uII3dBGvt78n5Lxt8LGI6/LLlNn8XrXZlyP4RtESb7C5vqjYbNNqIU
HP0FSMsoh+DMFyxbKOG0trb4Gv8eC3hYsKKPA1tacQwSkAGV9RzgwDMYxGFEmLxN
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6227969847345364878779673744069359843
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02467'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chestnut Hill'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '140 Commonwealth Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustees of Boston College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Libraries'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dlib.bc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26462020155801911977496340640701102006279327412444142987929465801427839472643228699726167973959075609627091844205439500540185289269944231348201976122859594897554198761229474821942035790841208175566620906732835576167913757252023102803192333731261356351500070219624998335216565973845023253656498475312891197981671771495845699733339468249905225788189825907827253095995972770195180060962271121833383902682389739714212514067726496088491589557563892332985211826849116306823095327143637078027958778170123677212190551805468430896995312326309336243417218124970662443210084248870984020340159895960497810155478156136769042271489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c36395c7506b95c81dc698685e3ceb7db9e4e7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlib.bc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlib.bc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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