*.royalenfield.com

- EICHER MOTORS LIMITED -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 6d:6a:95:e0:42:83:61:1c:2a:0b:5e:f2:6b:9c:84:bf was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

EICHER MOTORS LIMITED

Organization: EICHER MOTORS LIMITED
Organization unit: IT
State / Province: DELHI
Locality: NEW DELHI
Country: IN

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:6a:95:e0:42:83:61:1c:2a:0b:5e:f2:6b:9c:84:bf
Serial Number (int): 145439274854284707688909574222533919935
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 26:52:63:c8:ec:a1:8e:78:1c:35:31:3e:fd:e9:b3:cf:9e:6e:98:2a
Fingerprint (sha256): 1b:bc:cb:5c:9e:9e:e4:b5:59:0c:a0:e7:92:62:d0:7c:9a:98:6d:3f:a5:43:12:92:61:72:cd:79:f5:71:38:ce

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate *.royalenfield.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.royalenfield.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.royalenfield.com
royalenfield.com

Other certificates including the domain name royalenfield.com

(limited to 100 certificates)
magentocloud33.map.fastly.net
l.ssl.shopify.com
d.d8u.com
store.royalenfield.com
san-30-s12.tlsprovisioning.exacttarget.com
support.infinityfincorp.com
locate-us.royalenfield.com
yfeonl.royalenfield.com
ecomm.royalenfield.com
stage.rekart.royalenfield.com
store.royalenfield.com
*.royalenfield.com
img.ecom.royalenfield.com
ecommdev.royalenfield.com
store.royalenfield.com
recreate.royalenfield.com
app1.ftrans01.com
store.royalenfield.com
support.infinityfincorp.com
mcstaging-store.royalenfield.com
store.royalenfield.com
d.d8u.com
magentocloud33.map.fastly.net
digitalguide.royalenfield.com
locate-us.royalenfield.com
store.royalenfield.com
l.ssl.shopify.com
stage.rekart.royalenfield.com
90southgame.royalenfield.com
d.d8u.com
d.d8u.com
hdfc-uat.royalenfield.com
spares.royalenfield.com
www.store.royalenfield.com
locate-us.royalenfield.com
san-30-s12.tlsprovisioning.exacttarget.com
connected-storage-sit.royalenfield.com
img.orders.royalenfield.com
d.d8u.com
stage.rekart.royalenfield.com
motoverse.royalenfield.com
app1.ftrans01.com
san-30-s12.tlsprovisioning.exacttarget.com
stage.rekart.royalenfield.com
hr.itsm-presales.in
90southgame.royalenfield.com
motoverse.royalenfield.com
*.royalenfield.com
motoverse.royalenfield.com
recreate.royalenfield.com
d.d8u.com
mcstaging-store.royalenfield.com
*.royalenfield.com
Eicher Motors Limited
api-notidev.royalenfield.com
san-30-s12.tlsprovisioning.exacttarget.com
locate-us.royalenfield.com
ecomm.royalenfield.com
*.royalenfield.com
remarket.royalenfield.com
democdn.royalenfield.com
s2s.royalenfield.com
*.royalenfield.com
yfeonl.royalenfield.com
connected-sit.royalenfield.com
stage.remarket.royalenfield.com
www.royalenfield.com
san-30-s12.tlsprovisioning.exacttarget.com
connected-sit.royalenfield.com
stage.remarket.royalenfield.com
store.royalenfield.com
remarket.royalenfield.com
uniforms.royalenfield.com
democdn.royalenfield.com
mcstaging-store.royalenfield.com
mcstaging-store.royalenfield.com
magentocloud33.map.fastly.net
hmxtest.royalenfield.com
locate-us.royalenfield.com
locate-us.royalenfield.com
connected-storage-sit.royalenfield.com
mcstaging-store.royalenfield.com
Eicher Motors Limited
locate-us.royalenfield.com
catalogue.royalenfield.com
connected-sit.royalenfield.com
img.orders.royalenfield.com
hdfc-uat.royalenfield.com
magentocloud33.map.fastly.net
magentocloud33.map.fastly.net
90southgame.royalenfield.com
connected-sit.royalenfield.com
mcstaging-store.royalenfield.com
api-notidev.royalenfield.com
store.royalenfield.com
store.royalenfield.com
san-30-s12.tlsprovisioning.exacttarget.com
magentocloud33.map.fastly.net
ecomm.royalenfield.com
connected-sit.royalenfield.com

Certificate

The complete raw certificate details for *.royalenfield.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Iq+AjlNp/UdRUOHf5Vz
TAQHERN5dwZe3XI//lBS52atv8W++FmQ+eqqSiqW1M3JTcNK3xVEzNXXv1iLczwa
A+JnLKjMR5GtP94XGWBwt4Bf4vB5Kh8a0+3/f+w6rvpITMnHgdP/2Q7l2W/QmFEO
BsCKmTJkk24GEebz/ERjpeo0ElO6jxOAM5lTEx7GDHw4gtUZJ1DwDUIp9jUUxoV4
HHBq9tIjGrDNWVnHcCu034922ncNRJRwQ2O2as8bxfG+c3fOKAROoScRrujhMpHH
/Wpp8v9lDY/HX4l8yqTLr3L9xPS6sn0myNBoOiTYlErA6cgURce2mrS6NUxjvqjH
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 145439274854284707688909574222533919935
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DELHI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NEW DELHI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EICHER MOTORS LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.royalenfield.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30365609531154628294089921959090636345595420517946186041305804218592045974002617536096586903440117586502735048583626386695411468317528942797778518036415069693694947434154427702609492416262123948036541097227738368609219763904679836024594364460743240265294930263150428059838657629632690084078055590226298117580349020839657283209014499330668634040862269728692134418683760916319060657330487970438288610321959217658878056518907981916026914535307275216790276056210714042001952539897920243868627291382219864877721222365199761188587531940059113305118914601554174305378713557781821984344847745665885280369934285926593328629553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalenfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalenfield.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015b89f230760000040300473045022100f7555cf25b1bfaf91329952118de55af571c1c9271b38b994ff8cd4a5c574ae002201eec26b2dcbb8b77ac3b475c6fa6d4e522159b6cc02ca10650730e66d1598094007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015b89f230ab00000403004730450220404a4550257bcebfa8ea3d195f41712bd4659ee7df61e8fb8d1f49fd2566027a022100b62afb42e4977e756d6bce8c06df4c6b3a7600585390f495278eb89d5bec46d1007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015b89f23109000004030047304502203a8883a9c27375b330d17968c4eea0015b94ab4cf8da1401235eeb0252d53680022100f299dbec57b53aa1e84c9b6c7480d0b46b357a0b63cf6c68a5e1655d6b52e6ea007600bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a50000015b89f2316300000403004730450220773f8f1019dc00027320f882818751b9475e13039f28d373dcd89e650ad98ffb022100ca1469144b2f4fb4c52e64547118374517efa550727f697dadd2d0387139315d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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