appspider.synopsys.com

- Synopsys, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number ff:00:10:d3:34:2f:00:8a:00:00:00:00:50:fc:ba:d6 was issued on by Entrust, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Synopsys, Inc.

Organization: Synopsys, Inc.
State / Province: California
Locality: Mountain View
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ff:00:10:d3:34:2f:00:8a:00:00:00:00:50:fc:ba:d6
Serial Number (int): 338953480176999539096855329083458632406
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 2c:6f:ba:b5:2c:01:2c:07:94:8b:dc:5d:bb:21:01:88:33:3d:ca:39
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 9b:bc:84:d9:f1:94:80:99:db:e9:f6:b2:51:61:e7:95:ed:c3:01:b1
Fingerprint (sha256): 11:25:be:28:89:e2:33:38:45:f7:02:9e:52:91:1c:13:4c:1f:e2:e0:d7:dc:a0:31:d4:04:d7:3e:e4:48:c4:3a

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate appspider.synopsys.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for appspider.synopsys.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

appspider.synopsys.com
appspider.internal.synopsys.com
us02vwrapid7asm.internal.synopsys.com

Other certificates including the domain name synopsys.com

(limited to 100 certificates)
gitsnps.internal.synopsys.com
mdc-scs2.synopsys.com
cn.news.synopsys.com
polaris.synopsys.com
capco-status.polaris.synopsys.com
c53.status.diamondasaservice.com
mdc-ssl-gwy.synopsys.com
sca.synopsys.com
alerts.funda.nl
cyberarkepm.aws.synopsys.com
misc.synopsys.com
gettimely-status.polaris.synopsys.com
endpoint-security.status.broadcom.com
o365relay-out.synopsys.com
herbalife.status.polaris.synopsys.com
gettimely-status.polaris.synopsys.com
securitylearning.synopsys.com
nessus.synopsys.com
sig-confluence-test.internal.synopsys.com
scsvuc5.synopsys.com
smetrics.synopsys.com
jp01-vpn.synopsys.com
scsvuc2.synopsys.com
salesloft.synopsys.com
evalportalqa.synopsys.com
herbalife.status.polaris.synopsys.com
us02vwdosgsp.synopsys.com
scs5-admin.synopsys.com
anjuna.status.polaris.synopsys.com
in19cppm01.internal.synopsys.com
alerts.funda.nl
itsstatus.unc.edu
anjuna.status.polaris.synopsys.com
customer.synopsys.com
bizagi.status.polaris.synopsys.com
cn30-vpn.synopsys.com
cn08-scs1-admin.synopsys.com
indigo.training.synopsys.com
password.synopsys.com
stg-dbt-docs.sigdatainsights.cloudops.synopsys.com
indc-vpn.synopsys.com
clarks.status.polaris.synopsys.com
snpsdaeu.synopsys.com
c53.status.diamondasaservice.com
scs6.synopsys.com
am04-vpn.synopsys.com
scsvuc8.synopsys.com
c53.status.diamondasaservice.com
polaris.synopsys.com
automationhero.status.polaris.synopsys.com
c53.status.diamondasaservice.com
azfra1status.mambu.com
connect.synopsys.com
us01-vpn.synopsys.com
apistatus.returnpath.com
training.synopsys.com
qa.csod.synopsys.com
cn42cppm01.internal.synopsys.com
scs3.synopsys.com
api-status.360cities.net
anjuna.status.polaris.synopsys.com
alerts.funda.nl
*.synopsys.com
eventreg.synopsys.com
bizagi.status.polaris.synopsys.com
endpoint-security.status.broadcom.com
crk.status.cloudsigma.com
cl01-vpn.synopsys.com
sdc-aws.synopsys.com
solvnet.synopsys.com
reporting.synopsys.com
alerts.funda.nl
anjuna.status.polaris.synopsys.com
alerts.funda.nl
keyfactorpki.synopsys.com
*.synopsys.com
usocsr2dirpool.internal.synopsys.com
*.msp.synopsys.com
lplfinancial-status.polaris.synopsys.com
blogs.synopsys.com
herbalife.status.polaris.synopsys.com
blogs.synopsys.com
scsvuc3.synopsys.com
us01cppm03.internal.synopsys.com
dam-stage.author.synopsys.com
chat.synopsys.com
alerts.funda.nl
adtrust.wellsky.com
carlzeiss-status.polaris.synopsys.com
appspider.synopsys.com
capco-status.polaris.synopsys.com
gettimely-status.polaris.synopsys.com
cn.news.synopsys.com
carrier-status.polaris.synopsys.com
coresvc.synopsys.com
atlanticindustrie-status.polaris.synopsys.com
jp01-vpn.synopsys.com
*.polaris.synopsys.com
defensics-store.internal.synopsys.com
saaspv6-azure.cloud.synopsys.com

Certificate

The complete raw certificate details for appspider.synopsys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRiHmGPOrDxgTNJFv9IQ
rfmw1+jGkP/Aje6tPh3tkXNhOxd+b9w+X4Q1/yM2dEAvB4G9EsIWGwTyCySWQP8a
9MlWvCAg2hRHh9Cu+MiU9NwFKwMFEm9MzPAvDjY/Tf1GVimBqKxgtntZc7eVO/90
DYSUUmkRXydAF5UrJYEkzf51U9rdeC5SJH9XHNyCtl5BQvXoXysbtgCX5/Yhw/Pt
xtRQ6pMu3mpr0h0/GIollaIcPI/cx4Nk1xslaeNNIxgZkdlAtZI8Acm/8JK/uTuT
Eyx6uC24+lOK7NcLpnkyLQNMd9/ZsYpAmm1WWq8az7u2YH6wWqqPb6vz0gO/NF8p
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338953480176999539096855329083458632406
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 21:16:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-09 21:46:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Synopsys, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'appspider.synopsys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24376088889075667023064240833093980290431179878448804784834929115265762790111773445383521943961057567864386496927299723958973450406838798228273050229649458567272256885644532078974204555783338207098328423192428254139643189652487291752182108417662519502178286989501740031442378395168223737168780579390578126807467135230478625237858452726982707558991762070726602665211564987287033492324229410626162677279476640119029679581688606574562402691637777086864954423763475983284769492676435393718726190301260092523532836389864438625913946122584212770579959463844552563657652463145335748742630266098138379010410477862285469493567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appspider.synopsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appspider.internal.synopsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us02vwrapid7asm.internal.synopsys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c6fbab52c012c07948bdc5dbb210188333dca39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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