lm2ipvmpsa056.lm2.opel.com

- General Motors LLC -

Issued by DigiCert Baltimore CA-2 G2

About this certificate

This digital certificate with serial number 0a:9f:b5:55:4b:7d:61:5d:53:76:ae:75:1e:b0:6a:a3 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

General Motors LLC

Organization: General Motors LLC
Organization unit: GM IT
State / Province: MI
Locality: Detroit
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:9f:b5:55:4b:7d:61:5d:53:76:ae:75:1e:b0:6a:a3
Serial Number (int): 14121533032251222241952781605088029347
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 92:2b:65:d5:f8:4e:db:e1:cd:17:30:46:21:8b:85:23:b7:dd:85:a2
AuthorityKeyId: c0:12:b2:28:74:68:46:67:e9:70:25:74:1a:00:45:5b:06:7d:5c:44

Fingerprint (sha1): f9:f8:59:3a:a9:a3:39:8b:a3:df:98:b1:93:e5:6f:ea:8f:f7:d1:a6
Fingerprint (sha256): 16:80:31:30:70:48:12:b3:6c:57:8d:8d:93:9e:dc:1f:86:c6:8f:f8:49:0c:69:e3:7a:a6:2b:58:0c:02:91:27

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl

Check the revocation status for certificate lm2ipvmpsa056.lm2.opel.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lm2ipvmpsa056.lm2.opel.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lm2ipvmpsa056.lm2.opel.com

Other certificates including the domain name opel.com

(limited to 100 certificates)
*.opel.com
tis2web.service.opel.com
www.opelusadoscertificados.pt
abarth.pt
s.opel.com
prd.connect.opel.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
uat-admin.connect.opel.com
dev.connect.opel.com
uat.connect.opel.com
aemdevms4-connectivity.alfaromeo.com
aemstagems4-connect.alfaromeo.com
www.opel.cz
rusipvmns0001.rus.opel.com
media.gm.com
www.gm.com
new-odnm.opel.com
wpg-wpfarm2-prdl2x.opel.com
aemstagems4-connect.alfaromeo.com
pat.connect.opel.com
dev.services-store.dsautomobiles.com
prechat.opel.com
abarth.pt
prd-admin.connect.opel.com
rusipvmova010.ad.opel.com
dpromo.abarth.it
rusitvmcrd011.rus.opel.com
www.opelusadoscertificados.pt
gf.preprod.opel.com
rusipvmova003.ad.opel.com
trn-admin.services-store.dsautomobiles.com
inf.connect.opel.com
gmid.opel.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
lm2insciv002-vl1729.lm2.opel.com
www.buick.com
ppr.connect.opel.com
abarth.pt
abarth.pt
www.asconnect.opel.com
rusipvmova006.ad.opel.com
spoepc.xw.gm.com
pat.services-store.dsautomobiles.com
www.opel.cz
dev-admin.connect.opel.com
trn.services-store.dsautomobiles.com
aemstagems4-connect.alfaromeo.com
www.gm.com
abarth.pt
rimpsa.opel.com
inf.connect.opel.com
dev.services-store.dsautomobiles.com
sip-hr.mpsa.com
gsa.rus.opel.com
sip-hr.mpsa.com
www.buick.com
dev-admin.services-store.dsautomobiles.com
rusipvmpsa1189.ad.opel.com
spoepc.xw.gm.com
pat.connect.opel.com
media-professional.peugeot.ru
abarth.pt
aemdevms4-connectivity.alfaromeo.com
CRMIT.ext.opel.com
accessr.opel.com
dev-admin.connect.opel.com
pat.services-store.dsautomobiles.com
abarth.pt
services-store.peugeot.fr
dev.connect.opel.com
www.buick.com
abarth.pt
ipgidvmdev117.ipg.opel.com
iessapdt4.opel.com
spoepc.xw.gm.com
www.buick.com
www.opel.cz
rusipvmpst152.rus.opel.com
dpromo.abarth.it
aemdevms4-connectivity.alfaromeo.com
www.opel.cz
admin.connect.opel.com
sip-hr.mpsa.com
www.gm.com
www.opel.cz
pat.services-store.dsautomobiles.com
dev.connect.opel.com
sip-be.mpsa.com
lm2ipvmpsa056.lm2.opel.com
abarth.pt
mves.opel.com
cps.opel.com
admin.connect.opel.com
www.opel.cz
sip-be.mpsa.com
ipgitvmtst182.itpg.opel.com
dev-admin.connect.opel.com
pat-admin.connect.opel.com

Certificate

The complete raw certificate details for lm2ipvmpsa056.lm2.opel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8yciH+AIRdK+S44Dsa1
PLMB7nWjCug3mPhce0Xaexp3hyQQAPTguRusFRPttToMVaRdDL3efAZAxvVnZXJP
msuTdB19IqNEslXPQwxJkv67dzpFSOXYXW2zBYmzv6XGrrk4TGZXOGciCqHeuIS+
mPg7/E6W/eHk2ezP+OCO1W4/QN32jlNyoJzLfzoME60QMF3JhSHxSYWEviiVniTR
F2Xmn6tlXsygbAaQbRFk/7LEXe8cJ9D8h0eHAoJQSjb2nn6NCaJWzzBLLKKQijnY
LfFot5jk+V617v8bFlzZX/Z8cNJFvgf2gAqRrCvueqOxsU0IhacIhl7Ou8sBurVW
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14121533032251222241952781605088029347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Baltimore CA-2 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Detroit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'General Motors LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GM IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lm2ipvmpsa056.lm2.opel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25727273578456255057144792027195636227700243914863886518769718089585713543366162671855023662190397602831293474070361185506733585092986841399073533946608487242745302082847478313762482040893638276352650457275106620040540034165013560270613037470134889939717758056984898138451445759129514348292747038217993893194608065097254724041770936487378570098405292531557944038205202708582007033030624779794373445530489256367338619875794985302257993762406200593423351192360481273606162626307981611531295586042172492540911532575591216385094515781426666012845413032841595950168635144324214744611526585655677011008482727336521302890121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c012b22874684667e97025741a00455b067d5c44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							922b65d5f84edbe1cd173046218b8523b7dd85a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm2ipvmpsa056.lm2.opel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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