cv-emea-stag.otiselevator.com

- Otis -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number d8:f9:63:97:70:e7:26:70:00:00:00:00:50:fa:cc:13 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Otis

Organization: Otis
State / Province: Connecticut
Locality: East Hartford
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d8:f9:63:97:70:e7:26:70:00:00:00:00:50:fa:cc:13
Serial Number (int): 288408148964262066276296678349423168531
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 05:b7:a1:d5:a3:91:e6:1f:e4:ce:d7:c7:cf:a2:c5:e8:41:8f:46:c3
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): d4:4a:52:c0:19:8b:d5:13:b1:7c:af:8a:67:92:30:5f:df:0f:6f:6d
Fingerprint (sha256): 1a:30:32:34:47:70:9c:3a:0d:d4:71:13:b9:c5:3b:ad:36:ba:e2:cd:60:8a:43:ef:e4:d6:bc:98:35:10:cf:a3

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate cv-emea-stag.otiselevator.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cv-emea-stag.otiselevator.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cv-emea-stag.otiselevator.com

Other certificates including the domain name otiselevator.com

(limited to 100 certificates)
cms-naa-stag.otiselevator.com
ceros2.map.fastly.net
oxp-apac-oft.otiselevator.com
oxp-emea-oft.otiselevator.com
diagnostics-emea-stag.otiselevator.com
cpconfigservice-api-naa-stag.otiselevator.com
eServiceAPI.QA.otiselevator.com
oxp-apac-stag.otiselevator.com
*.dev.otisone.otiselevator.com
oxp-naa.otiselevator.com
GlobalMobilenl-stg.otiselevator.com
otis-iot-stg.otiselevator.com
*.otiselevator.com
auth-api-naa-stag.otiselevator.com
oxpr-apac.otiselevator.com
ceros2.map.fastly.net
qswhqpy.otiselevator.com
reachsurvey.otiselevator.com
datapipeline-emea-oft.otiselevator.com
oxpr-emea-oft.otiselevator.com
gds1.otiselevator.com
diagnostics-naa.otiselevator.com
oxp.otiselevator.com
developers.qa.otiselevator.com
gds2.otiselevator.com
qsnaapy.otiselevator.com
GlobalMobileOtisFR-STG.otiselevator.com
cv-chn.otiselevator.com
fc-naa-stag.otiselevator.com
diagnostics-emea.otiselevator.com
connect-api-naa-stag.otiselevator.com
cv-emea.otiselevator.com
connect-api-naa-stag.otiselevator.com
*.dlrgroup.com
ota-mm-stg-apac.otiselevator.com
rtv.otiselevator.com
oxp-chn.otiselevator.com
diagnostics-naa.otiselevator.com
ceros2.map.fastly.net
voiceotisline-naa-stag.otiselevator.com
GlobalMobilenl-Devqc.otiselevator.com
oxpr-emea-oft.otiselevator.com
datapipeline-chn-keycloak.otiselevator.com
diagnostics-emea-stag.otiselevator.com
gdsemda006.otiselevator.com
otis-iot-qa.otiselevator.com
ruTTA-prd.otiselevator.com
campusview-emea-stag.otiselevator.com
voiceotislinelog-apac-stag.otiselevator.com
cms-naa.otiselevator.com
diagnostics-apac-stag.otiselevator.com
smartservice-api-apac-stag.otiselevator.com
connect-api-apac.otiselevator.com
cloudservice-naa.otiselevator.com
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
bitbucket.otiselevator.com
brandhub.stage.otiselevator.com
globalmobileotisUKtkitapp-prd.otiselevator.com
ruTTA-stg.otiselevator.com
decisions-dev-int.otiselevator.com
cms-apac-stag.otiselevator.com
qlikcrmEMEAstage.otiselevator.com
deviceportal-naa-stag.otiselevator.com
GlobalMobileNL-PRD.otiselevator.com
globalmobileotisauttkitapp-prd.otiselevator.com
deviceportal-apac.otiselevator.com
oxpr-qa.otiselevator.com
cv-emea-stag.otiselevator.com
ceros2.map.fastly.net
decisions-emea.otiselevator.com
gds1.otiselevator.com
oap-emea.otiselevator.com
voiceotislinelog-apac-stag.otiselevator.com
oxp-emea.otiselevator.com
hipchat.otiselevator.com
cms-naa-stag.otiselevator.com
oxpr-emea.otiselevator.com
jira.otiselevator.com
oxp-naa-stag.otiselevator.com
oap-emea.otiselevator.com
ceros2.map.fastly.net
oxpr-apac-oft.otiselevator.com
remrda.otiselevator.com
cv-apac-stag.otiselevator.com
globalmobileotisEStkitapp-prd.otiselevator.com
ceros2.map.fastly.net
apip-devloper-dev.otiselevator.com
voiceotislinelog-apac-stag.otiselevator.com
Decisions-dev.otiselevator.com
oxpr-qa.otiselevator.com
developer-studio-dev-emea.otiselevator.com
LinePulseMagentoUAT.otiselevator.com
cv-apac.otiselevator.com
datapipeline-chn-oft.otiselevator.com
ceros2.map.fastly.net
developer-studio-dev-naa.otiselevator.com
datapipeline-apac.otiselevator.com
deviceportal-naa-stag.otiselevator.com

Certificate

The complete raw certificate details for cv-emea-stag.otiselevator.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvRwLddbaWmS9Xy1MfV8
lneVOtc768Ak/LqvCGm6oGT3jr9ux6HZePFmUPWmSFPPZ9gidGmv/mv5G/257+Ye
lMzbtVFNbAG4hbJKwz8Vtup/w7x8Ln1xKiBUPBkjcAi+8b/HQg8ll1yRNdoFIfvC
g0gtA/N8T1BgU1DzfeOtqZHBiFaN1RgXtaYxUL6OCRsvivKtCLFNbQkeJL6+6rvC
DQ9GLuSpKvSc5NjqKp7+oefX819zpSwzdokTa0Ve9NG/kdWVckemexwd0OeBaD3i
ZXBPUtGQEoKNVqWluXu73sBKgE2B9D6mdXnS2/ZNtGFTOuFmlbHuuMqlrrgbyPrV
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288408148964262066276296678349423168531
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-26 21:04:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-26 21:34:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'East Hartford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Otis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cv-emea-stag.otiselevator.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23600861692325718062457600618859243261734955787166948865140489619356260497420462999804511241445169199054150618077256750447263289744310219849461950012940192622389032356001559703498180857980866307507088502244368134418670639204357073179461324305240040464619010411580816695486765389858907302910638649976346167455688117728594246120986025643435838727415845137940818346238069196028241553713054451844705271633514958814876233128643749177787876614685647891162597639907725991230003068460008470212271449663327099922722145860377630806767251615479558811509621860576143828677128374834524192372209132974023108908832396154288066975013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cv-emea-stag.otiselevator.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05b7a1d5a391e61fe4ced7c7cfa2c5e8418f46c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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