vyvi-turva.vy-verkko.fi

- Valtion tieto- ja viestintatekniikkakeskus Valtori -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0f:5a:a5:0c:7f:5f:e6:c6:7b:38:4c:5c:00:79:dc:af was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Valtion tieto- ja viestintatekniikkakeskus Valtori

Organization: Valtion tieto- ja viestintatekniikkakeskus Valtori
State / Province: Keski-Suomi
Locality: Jyvaskyla
Country: FI

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:5a:a5:0c:7f:5f:e6:c6:7b:38:4c:5c:00:79:dc:af
Serial Number (int): 20409074241784959282716383728748846255
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 13:c6:89:1f:f7:dd:44:b1:56:42:ad:c2:7f:6b:4b:d2:42:17:b5:e2
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 33:d3:1a:a9:a8:26:56:d1:6c:96:7d:39:ea:82:ce:37:ec:78:d6:c8
Fingerprint (sha256): 0f:58:d5:ad:85:b9:f8:ba:f2:b3:01:ee:8c:7a:60:df:07:94:2b:05:5b:ca:16:d5:7e:04:75:79:fd:d2:b4:15

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate vyvi-turva.vy-verkko.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vyvi-turva.vy-verkko.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vyvi-turva.vy-verkko.fi

Other certificates including the domain name vy-verkko.fi

(limited to 100 certificates)
mail-136.vy-verkko.fi
mail.vyv.fi
lyae.vy-verkko.fi
VALTTMLCS01.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
vyvi-posti.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
mail.vyv.fi
webfarm.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
mail-137.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
*.vy-verkko.fi
ucc.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-vkokous.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
VYVI-POSTI.VY-VERKKO.FI
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
turvaviesti.vy-verkko.fi
sip.vy-verkko.fi
perusviesti-posti.vyv.fi
turvaviesti.vy-verkko.fi
vyvi-posti.vy-verkko.fi
vyvi-turva.vy-verkko.fi
sip.vy-verkko.fi
mail-out.vy-verkko.fi
vyvi-turva.vy-verkko.fi
vyvi-turva.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-some.vy-verkko.fi
vahva-pub.vnk.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
smtp-in.vy-verkko.fi
vahva-pub-qa.vnk.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
mail-in.vy-verkko.fi
sip.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
mail.vyv.fi
*.vy-verkko.fi
vyvi-kokous.vy-verkko.fi
ucc.vy-verkko.fi
vyvi-turva.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
vyvi-posti.vy-verkko.fi
sip.vy-verkko.fi
ucc.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
*.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
ucc.vy-verkko.fi
mail-in.vy-verkko.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi

Certificate

The complete raw certificate details for vyvi-turva.vy-verkko.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20409074241784959282716383728748846255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Keski-Suomi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jyvaskyla'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Valtion tieto- ja viestintatekniikkakeskus Valtori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vyvi-turva.vy-verkko.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856867943184302699607555155957165787960607089827129039548020288540429879820818389895863098901967053273019503764207404189107315614043979116273357472631975146615898715608112746313712494684720294211911925998637420245774664473982067044985484337507528171738978007623118378804316902538587954099679450778775998615075027539272343623297577236822813854165828800680809179168753053728560408184017085556957821768634768110164550121638696658937392345264514647776464376365278563111624459489966781916620635653991442658221639206586542078726163595978518139944881764975825744933628904491022374204361282719541966357719182549710746660451038350601191461621460404176160101359543876007069888070060045087817551137660243050863973436714486107995126686312163164353459369414938848788155888573161365788082533624915320710876591193180972008137132019116577676680553023504261722177202447207578460318591244483273484945362888590637277373826411816282485121462164041464606097078051143296205348932957770072052372890159766899648040923230059672832104713887588822662576538811616952211715933812884331896758248447180793205443066796953510478989489335280899225151119382863393225948753670650991185759310881725586330877941651228557105447006713544822202952129144919588318642321181537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13c6891ff7dd44b15642adc27f6b4bd24217b5e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vyvi-turva.vy-verkko.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000165ccb582c100000403004730450221009b3f73bcae88f08b6d8e8ebfcb11e38f8affa9ba8374bd6212818124aa0cf066022054084998982f13bac39f6585502dd8f904934d552cb9b120ea9009be4a5411f40075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000165ccb58385000004030046304402205deeb76cf6e35a6d4c2d655fa2d0550a8fccbb96c7524505293a7210d6dda0db02203daaee5681f241f40e0947292df3f9560f8962417f3394a138ea932790ff86e2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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