uat-www2-netxprodownload.qa.bnymellon.com

- The Bank of New York Mellon -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:58:e4:0d:26:1d:8c:f1:79:7c:ec:f1:ea:37:59:a2 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Bank of New York Mellon

Organization: The Bank of New York Mellon
State / Province: Pennsylvania
Locality: Pittsburgh
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:58:e4:0d:26:1d:8c:f1:79:7c:ec:f1:ea:37:59:a2
Serial Number (int): 15083055508337039507252602700821911970
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 28:bc:6f:af:05:ce:78:47:9f:d5:a6:4d:82:f6:aa:d1:64:af:42:b8
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): a5:88:89:a9:e9:0c:c7:14:64:f7:2d:01:c2:fa:41:d9:0e:c2:fc:59
Fingerprint (sha256): 0f:7d:6b:98:c5:b3:d5:5e:87:10:2b:e9:09:a4:d8:58:80:99:95:c7:dc:d5:8b:f4:15:83:f3:b5:bb:e5:7b:62

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl

Check the revocation status for certificate uat-www2-netxprodownload.qa.bnymellon.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat-www2-netxprodownload.qa.bnymellon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat-www2-netxprodownload.qa.bnymellon.com
uat-www2.netxprodownload.inautix.com

Other certificates including the domain name bnymellon.com

(limited to 100 certificates)
demo-directbizmonitor.qa.bnymellon.com
billpayadvantage.bnymellon.com
csd.bnymellon.com
M-DCAT.BNYMELLON.COM
supplier.qa.bnymellon.com
xat-res-netx360.bnymellon.com
connectfiletransfer.bnymellon.com
brms.bnymellon.com
dev-marketprofiles.bnymellon.com
*.bnymellon.com
wm-proxyin-uat.qa.bnymellon.com
lionremote-bxp2.qa.bnymellon.com
ecommerce.bnymellon.com
xat-sagepointfinancial-netxinvestor.bnymellon.com
xat-jefferies-netxinvestor.bnymellon.com
BENPAY.DEMO.BNYMELLON.COM
xuat-syndicatedcapital-netxinvestor.bnymellon.com
xuat-harris-netxinvestor.bnymellon.com
debitcard-api.bnymellon.com
uat-connectaisapp.bnymellon.com
cumulus-migration-for-michelle-dmz1.qa.bnymellon.com
iaw.bnymellon.com
ecommerce-dev.bnymellon.com
xat-searleco-netxinvestor.bnymellon.com
ppc.bnymellon.com
authenticate.bnymellon.com
xuat-henley-netxinvestor.bnymellon.com
xuat-juliusbaer-netxinvestor.bnymellon.com
jpass10.bnymellon.com
ae-routing-demo.qa.bnymellon.com
dcat-ciservices.qa.bnymellon.com
remote2.bnymellon.com
awh-ds.bnymellon.com
StructuredCreditConnection.BNYMellon.com
rj101nsgw.bnymellon.com
netxservices.bnymellon.com
remote.bnymellon.com
xat-test-netxinvestor.bnymellon.com
vdsna.bnymellon.com
gm-fxanalytics.bnymellon.com
design.dev.bnymellon.com
xat-gmers2-static.bnymellon.com
odb.bnymellon.com
topsdcat.bnymellon.com
m-privatebanking.bnymellon.com
wbcrparam.bnymellon.com
shaffi-testing5.qa.bnymellon.com
xat-wbcrparam.bnymellon.com
xat-app-liquiditydirect.bnymellon.com
esfsf.qa.bnymellon.com
ccenter.pershing.com
xat-tic-netxinvestor.bnymellon.com
QSEPROD.bnymellon.com
appstudio-api-legacy.bnymellon.com
compliance.bnymellon.com
cctcfindm.mar2020.bnymellon.com
fxanalytics-demo.bnymellon.com
xat-nexen.bnymellon.com
ngej1cs.bnymellon.com
connectais.qa.bnymellon.com
surpasisvc.bnymellon.com
SecuritiesDirectPlus-UAT.bnymellon.com
wca.bnymellon.com
dgtools-mapping.bnymellon.com
bpmconnect.bnymellon.com
fcs-dashboard-1.qa.bnymellon.com
xat-connectfiletransfer.bnymellon.com
eanalytics-demo.qa.bnymellon.com
IFXCLIENT2.DEV.BNYMELLON.COM
shareowners.bnymellon.com
marketplace.bnymellon.com
im.bnymellon.com
design.bnymellon.com
xat-gmsgroup-netxinvestor.bnymellon.com
xuat-saturna-netxinvestor.bnymellon.com
treasuryedge.bnymellon.com
my360-cata.qa.bnymellon.com
ddcship.bnymellon.com
im-user-service.bnymellon.com
xat-hewittfs-netxinvestor.bnymellon.com
firstcitizens-xat-netxinvestor.qa.bnymellon.com
ctdataservices.bnymellon.com
ers2-static.bnymellon.com
bnymdesktop.qa.bnymellon.com
fundadmin.bnymellon.com
structuredsolutions.bnymellon.com
ebi42.qa.bnymellon.com
wvr.bnymellon.com
lionremote-bxp.qa.bnymellon.com
filetransfer.qa.bnymellon.com
mobius.bnymellon.com
connectapp.bnymellon.com
xat-ssi-netxinvestor.bnymellon.com
fundpricing.qa.bnymellon.com
nexenapp.bnymellon.com
xuat-nmis-netxinvestor.bnymellon.com
bds-bdcdrin-xb.bnymellon.com
connectapp-dcat.bnymellon.com
ClientCentral.bnymellon.com
opd2.qa.bnymellon.com

Certificate

The complete raw certificate details for uat-www2-netxprodownload.qa.bnymellon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzidHAhEP3I6qJ4c4hT8K
itcTMNysz3TB9miVzcO5Yod5fR2FrNp8XBQYhBEKyROEWn+dL07E47HI+SC8qIg3
02qX4ZkyR6XaF9oI0kYcyPpej1eydnv8qF/EGmhtuxiNT8Nx0EBVsz1Z3XSmKL8F
OiHJwfwPoBA75R56kOT3NcI+Nu3KNXp5Xr0/MSJMvDsVTHcJUqX/gn1NS/t+YEGU
nknDmUy1jCSKQT2w3HeQJs1s+msVS/o71/ux8Pwr8cHoE10VnmUe/xcZ0qmJsVQU
AgTR//plTtqVEZ7dKC8is7XS9Y0RJcj0POrxPXgY1lJvsK5WNe0V6CEc0aBEo8Zh
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15083055508337039507252602700821911970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Bank of New York Mellon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uat-www2-netxprodownload.qa.bnymellon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26024459218630878430738718467973823580310877570428534587690462363608808501274512955489435126005550430044253518980243069013690001555875895879711667857469798318505325194449148813229257377864797545634163168136670504336387620997024902738115710596764266692015273486013992906843331111519750241210235784538335349794436975474294616718729713136483796456576374373826867559029854163406051327741419409797504270196944069929126988910381215312480787771491726926152983708252242895236026883083784046595155929382767045080345804745296404078180013894357406940714576484248315617697879494399282085536744335297275240165403891050121150226847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28bc6faf05ce78479fd5a64d82f6aad164af42b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www2-netxprodownload.qa.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www2.netxprodownload.inautix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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