*.sd.prz.edu.pl

- Politechnika Rzeszowska im. Ignacego Łukasiewicza -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 03:ab:f6:54:28:4d:3d:8a:64:a0:3c:0c:60:c9:30:9d was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Politechnika Rzeszowska im. Ignacego Łukasiewicza

Organization: Politechnika Rzeszowska im. Ignacego Łukasiewicza
Organization unit: Uczelniana Sieć Komputerowa
State / Province: podkarpackie
Locality: Rzeszów
Country: PL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ab:f6:54:28:4d:3d:8a:64:a0:3c:0c:60:c9:30:9d
Serial Number (int): 4880562890565130950539912774293205149
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: fa:c7:57:ac:98:6b:e7:b4:92:38:bf:ee:f6:95:f3:18:de:ba:91:cf
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 74:a1:29:a5:fe:05:cd:57:a1:72:29:af:59:d2:21:b7:41:9a:37:01
Fingerprint (sha256): 12:f3:40:10:b2:93:b5:4a:f2:db:cd:1a:54:ab:71:c4:65:61:df:04:20:cf:5b:c1:c4:af:0b:21:53:47:02:6e

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate *.sd.prz.edu.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sd.prz.edu.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sd.prz.edu.pl
sd.prz.edu.pl

Other certificates including the domain name prz.edu.pl

(limited to 100 certificates)
pawel.prz.edu.pl
ketling.prz.edu.pl
katalog.prz.edu.pl
sbp.prz.edu.pl
*.portal.prz.edu.pl
kia.prz.edu.pl
ketling.prz.edu.pl
jerzy.prz.edu.pl
*.w.prz.edu.pl
obsada.prz.edu.pl
klik.prz.edu.pl
aszcz.strony.prz.edu.pl
et08.prz.edu.pl
forum.stud.prz.edu.pl
*.w.prz.edu.pl
kod.prz.edu.pl
graduacjawz.prz.edu.pl
power.prz.edu.pl
*.portal.prz.edu.pl
usosadm2.prz.edu.pl
nwiki.prz.edu.pl
pawel.prz.edu.pl
kia.prz.edu.pl
aszcz.strony.prz.edu.pl
*.sd.prz.edu.pl
power.prz.edu.pl
ketling.prz.edu.pl
power.prz.edu.pl
ketling.prz.edu.pl
konf.sasit.prz.edu.pl
legitymacje.prz.edu.pl
srs.prz.edu.pl
sprawozdania.kia.prz.edu.pl
kod.prz.edu.pl
stud.prz.edu.pl
biurokarier.prz.edu.pl
power.prz.edu.pl
usosapps.prz.edu.pl
ketling.prz.edu.pl
power.prz.edu.pl
graduacjawz.prz.edu.pl
ketling.prz.edu.pl
*.prz.edu.pl
praktyki-weii.prz.edu.pl
graduacjawz.prz.edu.pl
power.prz.edu.pl
*.w.prz.edu.pl
graduacjawz.prz.edu.pl
apd.prz.edu.pl
power.prz.edu.pl
jerzy.prz.edu.pl
power.prz.edu.pl
aszcz.strony.prz.edu.pl
stud.prz.edu.pl
*.w.prz.edu.pl
test.birt.prz.edu.pl
*.kia.prz.edu.pl
*.wbisia.prz.edu.pl
journals.prz.edu.pl
sprawozdania.kia.prz.edu.pl
ketling.prz.edu.pl
klik.prz.edu.pl
usosadm.prz.edu.pl
kni.prz.edu.pl
test.srs.prz.edu.pl
kni.prz.edu.pl
test.usos.prz.edu.pl
aszcz.strony.prz.edu.pl
stud.prz.edu.pl
test.usosapps.prz.edu.pl
krk.prz.edu.pl
biurokarier.prz.edu.pl
graduacjawz.prz.edu.pl
test.usosapps.prz.edu.pl
forum.stud.prz.edu.pl
ketling.prz.edu.pl
*.prz.edu.pl
biurokarier.prz.edu.pl
konf.sasit.prz.edu.pl
obsada.prz.edu.pl
stud.prz.edu.pl
graduacjawz.prz.edu.pl
aszcz.strony.prz.edu.pl
ankieter.prz.edu.pl
office.kia.prz.edu.pl
jerzy.prz.edu.pl
gw-admin.prz.edu.pl
usos.prz.edu.pl
vpn.prz.edu.pl
biurokarier.prz.edu.pl
biurokarier.prz.edu.pl
biurokarier.prz.edu.pl
usosapps.prz.edu.pl
oc.prz.edu.pl
kni.prz.edu.pl
test.usosadm.prz.edu.pl
imap.kia.prz.edu.pl
usosadm2.prz.edu.pl
podyplomowe.weii.prz.edu.pl
jerzy.prz.edu.pl

Certificate

The complete raw certificate details for *.sd.prz.edu.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4880562890565130950539912774293205149
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'podkarpackie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rzeszów'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Politechnika Rzeszowska im. Ignacego Łukasiewicza'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Uczelniana Sieć Komputerowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sd.prz.edu.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 836354014135349204580898475168140706776825849841521716844307461099654203796467850027877310574231896134650244712999044473088248298595505228031702067879909855645648429387055761274569342237198612497206921610908495575174961085877548191424485483097563858668942021633595031917717779410860492079997107742253576770444694729760684507375496514865272756787532849174959461369205873442615288490487127567517159604477402252162231097304091424233784429790951196369359480334996836917415900428171895426682641093329524073423041655413668322809255122988161728102026711116721044982507925964543941414340966268126120148265603578159409062637256656263938050052587523518199925097971649446517404834269928545510142796037904670351179836715889960356211309911705495341540431260375277693021094816054277520777946511258043209151058572108076621920833823236670909061176864965637796323023078471808926328640455397078651438584848718947831336326178639102016032273770044795562588129565644516184738065884481385496743810559558936357129412492716172398488106318968663784193096344869472726315753734798149197702513511368127900385911579187649179989431404207629261178675470889766766137292427064927093242840772858580623062520938822361654176649578523960406917189228742659324937803844783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fac757ac986be7b49238bfeef695f318deba91cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sd.prz.edu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sd.prz.edu.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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