triathlon.hiroshima-cu.ac.jp

- Hiroshima City University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 6b:0f:8c:9b:59:59:dc:4f was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Hiroshima City University

Organization: Hiroshima City University
Organization unit: library
State / Province: hiroshima-ken
Locality: hiroshima-city
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:0f:8c:9b:59:59:dc:4f
Serial Number (int): 7714539285555829839
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 89:cb:ce:2c:9b:2e:54:c0:ba:fe:5b:42:e6:04:c8:fa:f0:30:0f:bd
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): a3:ab:e8:e0:45:6f:e1:d1:30:a5:c7:9a:6e:cd:fe:94:25:92:61:e3
Fingerprint (sha256): 19:df:de:7f:6b:55:b2:44:88:2a:e0:41:88:3d:2b:a2:29:53:b4:05:92:00:45:ac:0e:ca:11:ff:41:3b:1b:25


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate triathlon.hiroshima-cu.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for triathlon.hiroshima-cu.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

triathlon.hiroshima-cu.ac.jp

Other certificates including the domain name hiroshima-cu.ac.jp

(limited to 100 certificates)
beta.cm.info.hiroshima-cu.ac.jp
eduroam.ipc.hiroshima-cu.ac.jp
www.cd.info.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
www.netsci.info.hiroshima-cu.ac.jp
vmcs.office.hiroshima-cu.ac.jp
www2.lib.hiroshima-cu.ac.jp
vcd.art.hiroshima-cu.ac.jp
beta.cm.info.hiroshima-cu.ac.jp
hcuwww.ipc.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
hcuwww.ipc.hiroshima-cu.ac.jp
adfs.ipc.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
www2.lib.hiroshima-cu.ac.jp
intl.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
triathlon.hiroshima-cu.ac.jp
castle.csl.info.hiroshima-cu.ac.jp
www.mirai.info.hiroshima-cu.ac.jp
vc04.hiroshima-cu.ac.jp
hculdud.ipc.hiroshima-cu.ac.jp
gate.ipc.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
opac.lib.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
wiki.v6.inet.info.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
nysnx.office.hiroshima-cu.ac.jp
ichipol.hiroshima-cu.ac.jp
apnasv1.intl.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
www2.lib.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
ichipol.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
itssrv.edu.ipc.hiroshima-cu.ac.jp
intl.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
adfs.ipc.hiroshima-cu.ac.jp
triathlon.hiroshima-cu.ac.jp
m45ma.ipc.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
rct.office.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
www.hiroshima-cu.ac.jp
mailchk.ipc.hiroshima-cu.ac.jp
m45ma.ipc.hiroshima-cu.ac.jp
hpc51a.mc.info.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
hcuidm.ipc.hiroshima-cu.ac.jp
webclass.ipc.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
mail.sos.info.hiroshima-cu.ac.jp
www.prl.info.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
gdep.sos.info.hiroshima-cu.ac.jp
vcd.art.hiroshima-cu.ac.jp
www.cd.info.hiroshima-cu.ac.jp
www.mirai.info.hiroshima-cu.ac.jp
aokin.lang.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
gate.ipc.hiroshima-cu.ac.jp
www.v6.netsci.info.hiroshima-cu.ac.jp
mssa.ipc.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
kss.office.hiroshima-cu.ac.jp
apnasv1.office.hiroshima-cu.ac.jp
mail.sos.info.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
fed.ipc.hiroshima-cu.ac.jp
renew.triathlon.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
info.hiroshima-cu.ac.jp
info.hiroshima-cu.ac.jp
vc02.hiroshima-cu.ac.jp
aokin.lang.hiroshima-cu.ac.jp
beta.cm.info.hiroshima-cu.ac.jp
ats2021.info.hiroshima-cu.ac.jp
mailchk.ipc.hiroshima-cu.ac.jp
wm45ma.ipc.hiroshima-cu.ac.jp
hpc51a.mc.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
www.cd.info.hiroshima-cu.ac.jp
gate.ipc.hiroshima-cu.ac.jp
fed.ipc.hiroshima-cu.ac.jp
fed.ipc.hiroshima-cu.ac.jp
info.hiroshima-cu.ac.jp
vc-office.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
adfs.ipc.hiroshima-cu.ac.jp
aburae.art.hiroshima-cu.ac.jp

Certificate

The complete raw certificate details for triathlon.hiroshima-cu.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfLEyW0tq5yhlX/yhinR
MsyFzzJYVm4WrmXEs3Xhl2zTYu/yBOzO2jKB4XBHIx7waCFOVNOic5+QavpW+X76
Atc8iUOB6YevAqkQCadrJnNimupvHzWvWKnJSUv+aUko/M57G9epXT5v02/bBhPQ
UiFHf+lxSABVlZaQTii/zTiUENluL58al7o+m1lPMZB/e0NaHlOVpqpAOni3d/oe
ZdQFDd6WbFM2KwrffF3mSrRONXrAUCWM2ZJ25uzFlLTSXgXgJb6AzlwsQGH5MXsK
u0CJ3SNkVvhcbIWtXfxF9UyghKEh0T/b+wctRf8aAKNxBveDe7Yn4gOQVFVYQaRS
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7714539285555829839
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-05 05:22:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-05 05:22:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hiroshima-ken'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hiroshima-city'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hiroshima City University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'library'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'triathlon.hiroshima-cu.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21453987246297124723722841321025796109688588102856679751450539373116092215835550235200176693772925808351281562281837499731733396577567187677547121478535372134232217024782739687169007152591963583307405502552817132298878913750975297199025339086110397778739999151850936963259357100857234846103698759641300257097886696190964214065706872656144495500761274034154191725217176427317732006665536645088184084543486147851715861713452391813029820202038838300623841975530287833063643584639096039816253335868076907906001809500250962244365017258343719882292405304309701000421254024380891886372496743301750163283268131442592714085089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triathlon.hiroshima-cu.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89cbce2c9b2e54c0bafe5b42e604c8faf0300fbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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