www.cok.agh.edu.pl

- Akademia Górniczo-Hutnicza w Krakowie -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 03:06:5e:3b:89:24:87:33:72:34:1e:2d:ec:1a:83:20 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Akademia Górniczo-Hutnicza w Krakowie

Organization: Akademia Górniczo-Hutnicza w Krakowie
Locality: Kraków
Country: PL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:5e:3b:89:24:87:33:72:34:1e:2d:ec:1a:83:20
Serial Number (int): 4020749031913894326617145048101978912
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d3:63:dc:97:55:36:12:34:0d:d5:0e:14:2a:f0:ca:49:7f:61:66:22
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 42:cb:e0:84:af:86:01:a5:dc:49:2b:a8:15:2b:13:e4:ee:f5:4e:56
Fingerprint (sha256): 0b:ba:ee:a8:db:dc:ce:2b:61:e9:20:8f:35:9f:80:73:42:ae:36:36:78:f8:47:01:e4:d0:18:01:4c:e0:1e:4c

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate www.cok.agh.edu.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cok.agh.edu.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cok.agh.edu.pl
www.cok.agh.edu.pl

Other certificates including the domain name agh.edu.pl

(limited to 100 certificates)
www.elektronika.agh.edu.pl
power2.uci.agh.edu.pl
www.sat08.agh.edu.pl
dysk.agh.edu.pl
polak.icsr.agh.edu.pl
obrony.zarz.agh.edu.pl
historia.agh.edu.pl
akademiki.agh.edu.pl
ai.ia.agh.edu.pl
poczta.regent.agh.edu.pl
beerpong.dispuutbaldr.com
www.osa.agh.edu.pl
fundacja.agh.edu.pl
vega.kis.agh.edu.pl
www.masstrans.agh.edu.pl
www.agh.edu.pl
arch.cr.agh.edu.pl
sock.ubpo.agh.edu.pl
emoos.agh.edu.pl
www.masstrans.agh.edu.pl
www.ceramika.agh.edu.pl
fundacja.agh.edu.pl
www.lab.zarz.agh.edu.pl
e-przetargi.agh.edu.pl
ocs.zarz.agh.edu.pl
vpn.kt.agh.edu.pl
home.agh.edu.pl
sw.agh.edu.pl
kandydat.agh.edu.pl
cs.agh.edu.pl
www.osa.agh.edu.pl
pcg-srv.uci.agh.edu.pl
egzaminy.cel.agh.edu.pl
msdn.zarz.agh.edu.pl
historia.agh.edu.pl
www.zarz.agh.edu.pl
cytryna.uci.agh.edu.pl
gitara.uci.agh.edu.pl
home.agh.edu.pl
glados.kis.agh.edu.pl
www.geotermia.agh.edu.pl
*.agh.edu.pl
czgo.pl
ubezpieczenia.agh.edu.pl
poczta.zarz.agh.edu.pl
ubezpieczenia.agh.edu.pl
mops.cri.agh.edu.pl
turnas.wgig.agh.edu.pl
brasil.cel.agh.edu.pl
samorzad.agh.edu.pl
www.masstrans.agh.edu.pl
moje.agh.edu.pl
etextbooks.open.agh.edu.pl
dziekanat.agh.edu.pl
nimbus.geod.agh.edu.pl
sso.ki.agh.edu.pl
baw19.agh.edu.pl
cm.agh.edu.pl
testowyplan.agh.edu.pl
kusiak.cel.agh.edu.pl
ds1.unifi.dsnet.agh.edu.pl
akademik.agh.edu.pl
www.dss.agh.edu.pl
www.podroze.agh.edu.pl
kw2.kwestura.agh.edu.pl
electrospin2024.agh.edu.pl
www.paraphrase.agh.edu.pl
zasoby1.open.agh.edu.pl
gopr.cel.agh.edu.pl
sjo.agh.edu.pl
www.ru.agh.edu.pl
fundacja.agh.edu.pl
regent.uci.agh.edu.pl
rekrutacja.doktoranci.agh.edu.pl
*.wum.uci.agh.edu.pl
polak.icsr.agh.edu.pl
akademik.agh.edu.pl
nimbus.geod.agh.edu.pl
raporty.cop.agh.edu.pl
moodle.agh.edu.pl
kompas.fis.agh.edu.pl
runner.dev.uci.agh.edu.pl
cel.agh.edu.pl
student.agh.edu.pl
wiki.ms.agh.edu.pl
www.kis2.zarz.agh.edu.pl
cm.agh.edu.pl
stats.upel.agh.edu.pl
wiki.ms.agh.edu.pl
ubezpieczenia.agh.edu.pl
www.international.agh.edu.pl
ict2021.agh.edu.pl
www.cok.agh.edu.pl
glados.kis.agh.edu.pl
kw2.kwestura.agh.edu.pl
mapped.cel.agh.edu.pl
stats.upel.agh.edu.pl
journals.agh.edu.pl
www.studzagr.agh.edu.pl
kw2.kwestura.agh.edu.pl

Certificate

The complete raw certificate details for www.cok.agh.edu.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnK97WWXUFuMumJVukaW
jkc5C516HDKBucMdwXLBOTJx89vtIQ+1InarrbnuGAqrrRfLzijVqFkqV0Dl0LFU
mPh4oDn+hOvaTLuUuIPmBLgwlQTXc/uuH0KSAeuU57KpQ1a6d917UoY8UN4LMk3h
FBUsiyvXTcQ539aRFPvQWENFHu+qkuwlnVTzX8+Q2qO7LZzvbl5en2WTXQn166Vb
XlEemll6uhgkfTs+s4qaLlVnEQ96GM8ZdgfJbO7/Ktbb7tt+9BLVwx1LkFFMCDn7
TxORGVEpfCHuyJ4CLnbz5bicx8WEmlKRLpiCFG3cutyzVDbA0qSRYpwIDMA5enGA
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4020749031913894326617145048101978912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kraków'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Akademia Górniczo-Hutnicza w Krakowie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cok.agh.edu.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24041859285050664664061644913854865695593790819526850559922787917021478575038131526550548827474169151928086949625410840746734388318630086830498684993438279666355541665747235617408603109078053747401433731156989426142328646289721736641499936247230782625598207530906692972719788168985997076857149630967119609546762208636223979613237169979470185708246441666457516048226477768032702243178008765342936483082267722877577651013400712408328053835129039808876296296724044039119835684848812286309305570906336319480672617087353135134809992196826907845116845314511101742709251922799103180853029947599867768833247003534341914591403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d363dc97553612340dd50e142af0ca497f616622
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cok.agh.edu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cok.agh.edu.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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