o365.mail.pb.com

- Pitney Bowes Incorporated -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 67:04:27:c3:23:cf:50:af:db:b4:2b:06:4c:8c:79:94 was issued on by Entrust, Inc..

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Pitney Bowes Incorporated

Organization: Pitney Bowes Incorporated
State / Province: Connecticut
Locality: Shelton
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 67:04:27:c3:23:cf:50:af:db:b4:2b:06:4c:8c:79:94
Serial Number (int): 136932059227829310938036087889551194516
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 5e:9a:54:1b:a0:fb:65:98:dd:af:8a:d0:da:38:67:ce:c7:ee:10:92
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 49:fd:db:14:c9:ac:47:30:5f:89:70:44:3a:8f:bf:e5:4a:40:4c:1e
Fingerprint (sha256): 0e:48:64:ec:5e:79:70:4b:01:53:3d:e0:9b:64:9e:d7:2b:d0:ed:28:30:58:63:46:9c:ef:61:8c:e4:52:96:c1

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate o365.mail.pb.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for o365.mail.pb.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

o365.mail.pb.com
*.pod51169.outlook.com
autodiscover.pb.com
autodiscover.pbinc.mail.onmicrosoft.com
autodiscover.pbinc.onmicrosoft.com
mymail.pb.com
namp128-provisioning.internal.outlook.com
pod51169.outlook.com
pod51169ip.outlook.com
pod51169-pri.outlook.com
pod51169psh.outlook.com

Other certificates including the domain name pb.com

(limited to 100 certificates)
cometservmdck.pb.com
gpr.pb.com
www.pb.com
srmappp1.ct.pb.com
cometservldck.pb.com
tps414.d3.qa.pb.com
imperva.com
*.sl.pb.com
eccappq1.ct.pb.com
*.pb.com
qa.inside2.pb.com
usdc1-bmrappv01.pb.com
syk665.d3.qa.pb.com
grcdbcip1.ct.pb.com
cryptotest1.ssps_develop.ct.pb.com
sf.d3.qa.pb.com
zazzle.pb.com
Ludwig.ssps_develop.ct.pb.com
support.ecommerce.pb.com
ukcometlb22.pb.com
rates.sendpro.pb.com
imperva.com
anzcomettest.t3cloud.pb.com
isend.sys.pb.com
pbkdexe.pb.com
brcomet1.pb.com
cmtservpre2-ext.test.pb.com
teamsite.inside.pb.com
Citrix.Sendsuite.pb.com
Decometlb7.pb.com
qa.teamsite.inside.pb.com
*.test.pb.com
tds.d3.pb.com
www.pb.com
client.pitneybowes.com
sbo101.d3.qa.pb.com
remote1.pb.com
PBMD-EXE02.pb.com
nexpose.pscloud.pb.com
iam.pb.com
qa.inside2.pb.com
api.pb.com
BIUS-FORCS01.ssps-bi.nw.pb.com
hallshipping.sendsuite.pb.com
*.ecommerce.pb.com
developer.pb.com
dr.pb.com
vma.pb.com
dedc3-rinapqp2.pb.com
t3qacmtldc.pb.com
kuu802.d3.qa.pb.com
*.pb.com
DeutscheBank.SendSuite.PB.com
*.api.jp.pb.com
tdcec-lb15b.pb.com
myaccess.pb.com
laurel-vm.ssps-testing.ct.pb.com
kb.ecommerce.pb.com
usdc2-rdgappv01.pb.com
*.ecommerce.pb.com
mymail.pb.com
PBMD-EXE02.pb.com
*.ecommerce.pb.com
srmapp1.ct.pb.com
qa.teamsite.inside.pb.com
ukcometp8.pb.com
ng.ebpp.e2vault.pb.com
service.pb.com
incometp5.pb.com
imperva.com
*.pb.com
o365.mail.pb.com
USAPLUXAVAYACTI01.pb.com
frcometp7.pb.com
MAILTRACKING.PB.COM
www.pb.com
mwb2b.pb.com
srmdbciq2.ct.pb.com
tablet.sendpro.pb.com
PBKD-EXE02.pb.com
support.ecommerce.pb.com
soi.d3.pb.com
awds.pb.com
cim.pb.com
proactive.pb.com
USDC1-OPNET01.pb.com
rjd190.d3.qa.pb.com
sni.cloudflaressl.com
vma.pb.com
PBMD-EXC02.pb.com
mdcvcse1.video.pb.com
PBKD-EXC02.pb.com
www.pb.com
sncdbciq1.ct.pb.com
cryptotest1.ssps_develop.ct.pb.com
PBKD-EXE01.pb.com
*.mail360.pb.com
kdcec-lb19b.pb.com
tdcec-lb17a.pb.com
aws-epmprod.pb.com

Certificate

The complete raw certificate details for o365.mail.pb.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO4WSw/Y6frRoBJ5GMvO
iIDOG94kKWdG/VMLojOq4ooi/eXQBsWqX/79r6//RCKbt9LQbn9oPoZx3RwilW2E
5IpCYEkZ6Lhhd6kMesx+R7ZKvg4y7nBxCXgDT6+mMq7cKH6INits8s+tOEP4Ahb4
dGiT54XYEikk4VRmsMUYq2NmhyTyCQcygKqbv2i2b6bKyxXVouc9shUHbVMBvMEx
l/4v0Fas6zzXhq2QnNhr51RymyKBbcjt7ImdSsK0NFZMuKmwNU/tjZGdwCQJB/K1
pOVpeLdQcHFQeEmgQKqcmw2wvSCxrlHcLk93W8wD1iM9A7Wt2G0LZ/EwkmcdvX6c
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 136932059227829310938036087889551194516
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 23:19:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-28 23:19:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shelton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pitney Bowes Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'o365.mail.pb.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19305627471144705160603173750811780892299788901556665938056847220286594276676533916923214430962176534190318682073630821332686073293298490689476593925323451428786462823716903829511315180195998248739663568807922246075087121550836156052619126110921845251968725127790603159002793682928409753530270377496484261132829095123090015268280548805397372522626193230932909554076774503822756608411054461862511077591254264099570009083069079521862027825806464206793488765013589278417479162151377864574238795682672985160821242401681880825833744041001395419545779719316999022692309343478843850176317846423582826542084514107588819721293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e9a541ba0fb6598ddaf8ad0da3867cec7ee1092
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (299 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o365.mail.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pod51169.outlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pbinc.mail.onmicrosoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pbinc.onmicrosoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymail.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namp128-provisioning.internal.outlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pod51169.outlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pod51169ip.outlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pod51169-pri.outlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pod51169psh.outlook.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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