dev.languagelive.voyagersopris.com

- Cambium Learning Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 5b:40:1f:83:09:18:85:9d:00:00:00:00:50:e7:b6:8c was issued on by Entrust, Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cambium Learning Group

Organization: Cambium Learning Group
State / Province: Texas
Locality: Dallas
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5b:40:1f:83:09:18:85:9d:00:00:00:00:50:e7:b6:8c
Serial Number (int): 121292693751775586251827659324915168908
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d0:51:90:e4:9d:63:b9:09:d0:05:25:3b:c6:e4:a2:9c:02:a5:fb:85
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 31:08:70:da:49:f9:f1:23:f7:28:da:22:75:d1:66:1b:53:ef:fe:ab
Fingerprint (sha256): 1a:f7:a3:09:4c:58:65:c4:9a:0f:bb:e1:36:d8:e8:be:00:4b:eb:0a:af:e6:91:ce:3e:c7:55:35:17:0a:67:04

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate dev.languagelive.voyagersopris.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.languagelive.voyagersopris.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.languagelive.voyagersopris.com
qa.languagelive.voyagersopris.com
publish.languagelive.voyagersopris.com
dataops.languagelive.voyagersopris.com
qa.activities.languagelive.voyagersopris.com
dev.activities.languagelive.voyagersopris.com

Other certificates including the domain name voyagersopris.com

(limited to 100 certificates)
voyagersopris.com
vj.voyagersopris.com
vport.voyagersopris.com
media2.adlegend.com
mail.cambiumlearning.com
wecan.voyagersopris.com
voyagersopris.com
reporting2.voyagersopris.com
content.voyagersopris.com
rewards.voyagersopris.com
readingscape.voyagersopris.com
clttc.voyagersopris.com
letrs.voyagersopris.com
go.voyagersopris.com
sni.cloudflaressl.com
passport.voyagersopris.com
vport.voyagersopris.com
samples.voyagersopris.com
info.voyagersopris.com
*.voyagersopris.com
core.voyagersopris.com
sni.cloudflaressl.com
vj.voyagersopris.com
dev.ask.voyagersopris.com
s1.vport.voyagersopris.com
velocity.voyagersopris.com
vocabgrowth.voyagersopris.com
language.voyagersopris.com
languagelive.voyagersopris.com
readwell.voyagersopris.com
productrelay.voyagersopris.com
wecan.voyagersopris.com
ebooks.voyagersopris.com
info.voyagersopris.com
dev.velocity.voyagersopris.com
mail.cambiumlearning.com
*.voyagersopris.com
dibelsnext.voyagersopris.com
readingscape.voyagersopris.com
readingscape.voyagersopris.com
dev.languagelive.voyagersopris.com
raveo.voyagersopris.com
ebooks.voyagersopris.com
activities.languagelive.voyagersopris.com
pd.voyagersopris.com
dev.pd.letrs2.voyagersopris.com
qa.vport.voyagersopris.com
vport.voyagersopris.com
msletrs.pd.voyagersopris.com
go.voyagersopris.com
ebooks.voyagersopris.com
dev.vport.voyagersopris.com
media2.adlegend.com
Wft.teachlanguage.voyagersopris.com
es.voyagersopris.com
vport.voyagersopris.com
es.voyagersopris.com
t2rf.voyagersopris.com
msletrs.pd.voyagersopris.com
prj.voyagersopris.com
language.voyagersopris.com
s1.vport.voyagersopris.com
t2rf.voyagersopris.com
dibelsnext.voyagersopris.com
productrelay.voyagersopris.com
support.cambiumlearning.com
wecan.pd.voyagersopris.com
insidealgebra.voyagersopris.com
velocity.voyagersopris.com
tncore.voyagersopris.com
transmath.voyagersopris.com
productrelay.voyagersopris.com
ebooks.voyagersopris.com
insidealgebra.voyagersopris.com
support.cambiumlearning.com
dev.literacysymposium.voyagersopris.com
*.voyagersopris.com
qa.voyagersopris.com
velocity.voyagersopris.com
lp.voyagersopris.com
info.voyagersopris.com
languagelive.voyagersopris.com
store.voyagersopris.com
clttc.pd.voyagersopris.com
t2rf.voyagersopris.com
dev.ask.voyagersopris.com
ask.voyagersopris.com
readwell.voyagersopris.com
mail.cambiumlearning.com
yap.core.voyagersopris.com
vmath.voyagersopris.com
qa.ebooks.voyagersopris.com
vtc.voyagersopris.com
dev.ask.voyagersopris.com
ask.voyagersopris.com
readingrangers.voyagersopris.com
vj.voyagersopris.com
language.voyagersopris.com
samples.voyagersopris.com
voyagersopris.com

Certificate

The complete raw certificate details for dev.languagelive.voyagersopris.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGHsObX4Y0TDZGzlAX+e
E5JrBJrAs84a9qvSiPxEUIfx8uhMOm1xf0g8wlxZczLi0Wc0PSLowHxDOcnNuQB9
Mx5offbzH6RuDigbyuv6CAx7/Y7jD0rT43Y41mV0b9K7xR3A8BjZEF7ggnnByTjq
lHOfLRoStbA13R/VUKTxIVVn0vszQSnJ1UfcTlscUZ49m99cwGcxkkg42ytwJmWG
qxpSZy2Jh1yuNODx3jRGehA8SzdWovMDqyvuHMxsTlAKu//B+FFYNZelNJPguvfX
5oxUzslvZiAecNk/EF5ac846jNeuuO/k1nol1RMh0/Idm6II4ivkshuCXUOyBc6U
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 121292693751775586251827659324915168908
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-18 18:52:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-01 19:22:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambium Learning Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.languagelive.voyagersopris.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19741463085190310748527912627334055960620712321804179343499824472528599456574308123552533937786132470034694933999867845021574650217435323015385310993241794359028821075480421788450170021905238899032120551989949106282067278702031940028125482387682377164456524451163897637432523317302092672383428664126452803907500929578613679728902026830089196998855552111366302836901546105339844283841442464404569052905201852982892797133175903081290316207463454479459202059679715443674640807288400219957856792054956151656522983853568407239511862241516904749456127561955471502617528454525728180603717881175229159150845811181006147720313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.languagelive.voyagersopris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.languagelive.voyagersopris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.languagelive.voyagersopris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataops.languagelive.voyagersopris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.activities.languagelive.voyagersopris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.activities.languagelive.voyagersopris.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d05190e49d63b909d005253bc6e4a29c02a5fb85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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