in-mum.vpn.tatacommunications.com

- Tata Communications Limited -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0b:ab:1d:92:20:d9:e3:12:6e:52:32:51:3b:30:79:36 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tata Communications Limited

Organization: Tata Communications Limited
Organization unit: IT
State / Province: Maharashtra
Locality: Mumbai
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:ab:1d:92:20:d9:e3:12:6e:52:32:51:3b:30:79:36
Serial Number (int): 15509990483800692641778068746153261366
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e3:1e:05:c6:4e:17:a1:bd:bd:3d:56:42:db:d3:9b:1f:73:d7:5d:f5
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 14:2e:b6:e3:49:4e:2c:93:78:74:f2:95:4c:4b:d9:60:60:da:24:21
Fingerprint (sha256): 12:1d:05:b1:3f:9e:c6:d4:60:b6:40:08:bc:15:12:33:9a:15:5a:4d:7e:4f:df:c1:72:80:f6:69:4f:46:80:aa

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate in-mum.vpn.tatacommunications.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for in-mum.vpn.tatacommunications.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

in-mum.vpn.tatacommunications.com
in-mum1.vpn.tatacommunications.com
in-mum2.vpn.tatacommunications.com

Other certificates including the domain name tatacommunications.com

(limited to 100 certificates)
in-pun.vpn.tatacommunications.com
reports.move.tatacommunications.com
indiakyc.move.tatacommunications.com
uk.vpn.tatacommunications.com
eptw.tatacommunications.com
*.globalpartnerportal.com
mobility.tatacommunications.com
cardiolog.tatacommunications.com
test-network.iot.tatacommunications.com
gleexpecls.instacccloud.tatacommunications.com
videoconferencing.tatacommunications.com
in-pun.vpn.tatacommunications.com
xfer.tatacommunications.com
mt-edge-b.3scale.net
in-access.tatacommunications.com
mt-edge-b.3scale.net
ekyc.devkyc.move.tatacommunications.com
us-access.tatacommunications.com
support1.chit.biz
smartdevices.iot.tatacommunications.com
care.koinx.com
portal3.mss.tatacommunications.com
developer.tatacommunications.com
*.tatacommunications.com
jobs.tatacommunications.com
ekyc.prod.in.tmpkyc.move.tatacommunications.com
ekyc.devkyc.move.tatacommunications.com
extranet-vno.tatacommunications.com
demo.analytics.iot.tatacommunications.com
campaign.tatacommunications.com
test-data.iot.tatacommunications.com
extranet-vno.tatacommunications.com
portaltest.tatacommunications.com
helpcenter.keysuggest.io
test-platform.iot.tatacommunications.com
sfilex.tatacommunications.com
healthandsafety.tatacommunications.com
mt-edge-b.3scale.net
*.tatacommunications.com
portal.tatacommunications.com
idp.tatacommunications.com
helpdesk.mytravaly.com
kiacart.triblem.com
www.peakinfra.ethicshelpline.in
www.tatacommunications.com
mt-edge-b.3scale.net
support.xcellhost.cloud
enetcare.tatacommunications.com
primerep.tatacommunications.com
cti1.instaccglobal.tatacommunications.com
support.subcom.tech
in-pun.vpn.tatacommunications.com
customerzone.tatacommunications.com
actsync-na.tatacommunications.com
safety.tatacommunications.com
support.inxeption.com
filexch.tatacommunications.com
hranalytics.tatacommunications.com
smesupport.iifl.com
indiakyc.devkyc.move.tatacommunications.com
portalna.tatacommunications.com
primerep.tatacommunications.com
cardiolog.tatacommunications.com
ekyc.move.tatacommunications.com
test-data.iot.tatacommunications.com
support.agtpl.in
www.tatacare.tatacommunications.com
itassist.aggregateintelligence.com
*.mss.tatacommunications.com
in.mum.vpn.tatacommunications.com
ekyc.uatkyc.move.tatacommunications.com
oneplacebeta.tatacommunications.com
tatacommunications.com
filexch.tatacommunications.com
documentation.mrnobody.in
www.peakinfra.ethicshelpline.in
in-mum.vpn.tatacommunications.com
mobility.tatacommunications.com
us.vpn.tatacommunications.com
in-chn.vpn.tatacommunications.com
move.tatacommunications.com
lmt.tatacommunications.com
*.msft5-eu2.tatacommunications.com
workersafety.uat2.iot.tatacommunications.com
comms-apac.tatacommunications.com
*.tatacommunications.com
*.globalpartnerportal.com
ethernetportal.tatacommunications.com
agrud-support.wetranscloud.in
business-support.truecaller.com
*.msft5-us2.tatacommunications.com
netpms.tatacommunications.com
voiceservices.tatacommunications.com
uat-ekyc.move.tatacommunications.com
support.minits.in
support.freedomcard.io
tatacommunications.com
iot.tatacommunications.com
support.ignitecinc.com
*.ipstorage.tatacommunications.com

Certificate

The complete raw certificate details for in-mum.vpn.tatacommunications.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMUL9qrIieyEtLrbYLwo
d9BsElOZob/bXXSPVDGi/Oe4uFOMeLWnwrT31ZV7QIlb4T48LCGittuBKEpzk3gT
goCN0BGmo0eJ+b2Vr+xkQVpuw4pznH77umWRbIX7L6DTlJyAqH8w4/1a59jyseJz
bvIIFmg0CIfXiXHk3o+mE4Mi3rcJn1qmqcfIB7+Y42rI9eeR1zxT2NNsnIR+KUbd
oH3vFL9dxckjQ+2xUtDUlte9Qw5LMtXl1S/p7KWm0UH5nti3/d2BIgjYE6ssN15n
Gy5AY1equlaWsjOV87rIGWzeUMBanNDk9f0TViIwd7b6wavtmDQCnkEI4iS51CJO
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15509990483800692641778068746153261366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tata Communications Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'in-mum.vpn.tatacommunications.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21305202599616061867414280671697118744414107634411132675766095228242831008488368411939237366428879383874294275567166314736255545691371540265257265256251427262277126368108463888514353759304480129523258632117941220330140699272948955635667613985659365731796849178321204221749504352627621468143157880412156126088786139759647091359078087315520389699600032451008882997767815114827128676495515245442603538519412150439552282157244454307777443872817355567477702342707662460312596470839429532531507614792668393933081118557625501595878691446742436241445163097555641026822860488325816733962540817495340068926106790437795099987661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e31e05c64e17a1bdbd3d5642dbd39b1f73d75df5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in-mum.vpn.tatacommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in-mum1.vpn.tatacommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in-mum2.vpn.tatacommunications.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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