ab-prd-cucm-01-ms.cockburn.wa.gov.au

- City of Cockburn -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:88:1c:64:40:8d:5f:2e:63:4e:8c:fd:c5:f5:66:4a was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

City of Cockburn

Organization: City of Cockburn
State / Province: Western Australia
Locality: Spearwood
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:88:1c:64:40:8d:5f:2e:63:4e:8c:fd:c5:f5:66:4a
Serial Number (int): 2035956218808754753243243436953658954
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: f0:bf:47:01:3d:1b:d5:87:4f:f7:30:8b:fe:5d:f9:6c:3c:90:cb:61
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 04:5a:7d:4d:36:55:57:34:63:cf:56:35:5f:9d:00:2a:83:b0:5e:60
Fingerprint (sha256): 0c:6f:12:66:f7:1e:9b:d7:bc:35:63:54:60:45:b1:83:66:eb:2f:c5:16:6d:48:5d:c8:af:39:d1:0c:d2:ea:2e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate ab-prd-cucm-01-ms.cockburn.wa.gov.au

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ab-prd-cucm-01-ms.cockburn.wa.gov.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ab-prd-cucm-01-ms.cockburn.wa.gov.au
dr-prd-cucm-01.cockburn.wa.gov.au
ab-prd-cucm-01.cockburn.wa.gov.au
ab-prd-cimp-01.cockburn.wa.gov.au
dr-prd-cimp-01.cockburn.wa.gov.au
cockburn.wa.gov.au

Other certificates including the domain name cockburn.wa.gov.au

(limited to 100 certificates)
support.canterbury.qld.edu.au
comment.cockburn.wa.gov.au
ab-prd-cucm-01-ms.cockburn.wa.gov.au
dr-prd-cimp-01.cockburn.wa.gov.au
ab-prd-cucm-01-ms.cockburn.wa.gov.au
comment.cockburn.wa.gov.au
ab-prd-cucm-01-ms.cockburn.wa.gov.au
cockburn.wa.gov.au
servicedesk.cockburn.wa.gov.au
comment.cockburn.wa.gov.au
*.cockburn.wa.gov.au
cockburn.wa.gov.au
cockburn.wa.gov.au
cockburn.wa.gov.au
ab-prd-cucn-01-ms.cockburn.wa.gov.au
comment.cockburn.wa.gov.au
cockburn.wa.gov.au
support.calvary.qld.edu.au
webmail.cockburn.wa.gov.au
*.cockburn.wa.gov.au
ab-prd-cucm-01-ms.cockburn.wa.gov.au
*.cockburn.wa.gov.au
ab-prd-cimp-01-ms.cockburn.wa.gov.au
support.calvary.qld.edu.au
comment.cockburn.wa.gov.au
webmail.cockburn.wa.gov.au
ab-prd-cucm-01-ms.cockburn.wa.gov.au
comment.cockburn.wa.gov.au
ab-prd-cucn-01-ms.cockburn.wa.gov.au
ab-prd-cimp-01.cockburn.wa.gov.au
comment.cockburn.wa.gov.au
dr-prd-cimp-01.cockburn.wa.gov.au
support.canterbury.qld.edu.au
servicedesk.hrha.org.au
vpn.cockburn.wa.gov.au
comment.cockburn.wa.gov.au
*.cockburn.wa.gov.au
comment.cockburn.wa.gov.au
webmail.cockburn.wa.gov.au
comment.cockburn.wa.gov.au
vpn.cockburn.wa.gov.au
support.calvary.qld.edu.au
comment.cockburn.wa.gov.au
comment.cockburn.wa.gov.au
*.cockburn.wa.gov.au
*.cockburn.wa.gov.au
*.cockburn.wa.gov.au
cockburn.wa.gov.au
comment.cockburn.wa.gov.au
support.calvary.qld.edu.au
ab-prd-cimp-01.cockburn.wa.gov.au
vpn.cockburn.wa.gov.au
*.cockburn.wa.gov.au
cockburn.wa.gov.au
ab-prd-cimp-01-ms.cockburn.wa.gov.au
cockburn.wa.gov.au
ab-prd-cimp-01-ms.cockburn.wa.gov.au
ab-prd-expe-01.cockburn.wa.gov.au
ab-prd-cucn-01-ms.cockburn.wa.gov.au
servicedesk.cockburn.wa.gov.au
servicedesk.cockburn.wa.gov.au
support.canterbury.qld.edu.au
ab-prd-expe-01.cockburn.wa.gov.au
ab-prd-cucn-01-ms.cockburn.wa.gov.au
support.canterbury.qld.edu.au
servicedesk.cockburn.wa.gov.au
ab-prd-expe-01.cockburn.wa.gov.au
comment.cockburn.wa.gov.au

Certificate

The complete raw certificate details for ab-prd-cucm-01-ms.cockburn.wa.gov.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKRJhMv6AeVHeJ07Snal
UHNdb8Uc/rLgUkwvz9QWUSKwCIdkl5NHPX9en/TJbc2ylsd3x74qfdyQTsycH96C
rGbP4aua9a2hEyI5vqozheRkBwaDkZalx+1aeLoE/VXiSB/iCs50bTZ7urqgu4Qu
lv+fALAyOeOfaoEkyI0jvMaMC1Py911hCMiuDPDBtDe/2hDlxEgRpT137hV+5KAs
b077w2nK7iqOHo73Emyx3KY9uwls7b1y+zXLj+5hhqzm+PoFSsU4m25CbR1caW5A
UmiYnx8MEFmmAapJg/yDtnsHwmyo4HWxt/yxzSgj5R0xvalQJ+kh8o1kANWoGbtk
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2035956218808754753243243436953658954
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Western Australia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Spearwood'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Cockburn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ab-prd-cucm-01-ms.cockburn.wa.gov.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21794001483283362068657047965885933074872812965239777864828614789811297415595037264452477561593035032068010040274654484573594622084133238433696939739195919593739029875379125250936850563935767418230111002428549946764110353681903441879165397183921145778441638527694905401214305570633316029183872520934074402799447584700379054836797139330115431446809751747880898226067859790858868186060565111411135769419279943545960508380197383022696392841474026265339474615186950403236352078855915041853887728114843708485077069784508894835892099165916623799895428837101361812838383362047138821013157219107779026440533075158521259713657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0bf47013d1bd5874ff7308bfe5df96c3c90cb61
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (201 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab-prd-cucm-01-ms.cockburn.wa.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-prd-cucm-01.cockburn.wa.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab-prd-cucm-01.cockburn.wa.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab-prd-cimp-01.cockburn.wa.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-prd-cimp-01.cockburn.wa.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cockburn.wa.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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