www.webmail.ke.knightfrank.com

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number fa:18:49:0a:50:1c:1a:d7:c2:2c:df:ff:b3:38:16:50 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.webmail.ke.knightfrank.com,OU=Domain Control Validated+OU=Issued through Knight Frank Kenya E-PKI Manager+OU=COMODO SSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): fa:18:49:0a:50:1c:1a:d7:c2:2c:df:ff:b3:38:16:50
Serial Number (int): 332433095503809273273847971071623960144
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f1:02:75:09:49:0c:4d:a4:c8:ab:eb:44:0c:3c:1f:f7:b9:f7:dd:98
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): 3c:6e:c6:d0:47:b1:75:1d:9b:6f:17:40:f0:44:2f:45:c0:07:bf:78
Fingerprint (sha256): 1d:f7:0b:ce:25:89:2a:e4:de:83:86:f7:00:2b:d0:78:0d:54:5b:8d:b6:b5:0b:be:ea:32:29:12:e0:82:c3:ae

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate www.webmail.ke.knightfrank.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.webmail.ke.knightfrank.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.webmail.ke.knightfrank.com
webmail.ke.knightfrank.com

Other certificates including the domain name knightfrank.com

(limited to 100 certificates)
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
media.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.acumenthirdsector.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
emails.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
secure.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
www.webmail.ke.knightfrank.com
globalprotect.in.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
secure.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
mail.tz.knightfrank.com
webmail.ke.knightfrank.com
www.acumenthirdsector.net
mail.knightfrank.com
mail.tz.knightfrank.com
secure.knightfrank.com
support4.cdnetworks.net
remote.kfdublin.ie
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.webmail.ke.knightfrank.com
support4.cdnetworks.net
sip.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
mail.knightfrank.com
support4.cdnetworks.net
draganddrop.knightfrank.com
mail.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
emails.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
meet.hk.knightfrank.com
lyncweb.au.knightfrank.com
www.webmail.ke.knightfrank.com
support4.cdnetworks.net
vxprint.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.acumenthirdsector.net

support4.cdnetworks.net
mail.knightfrank.com
mylets.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
*.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
media.knightfrank.com
support4.cdnetworks.net
draganddrop.knightfrank.com
go.th.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
sip.au.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net

Certificate

The complete raw certificate details for www.webmail.ke.knightfrank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu9VhyzpS2lqADkcxJb4
PYqT/BcGVpftE5L0xBRBA8uTJ/S0YVU8oyX5C7wtJL3P9ihKYnJWViThQCYMZRm8
/u1zHPY4xS717CbdWcOJNbKNLerZogO9piJMDTvSRnMBcW4pVKbEMs2Sd/2YsSB4
IctRPjsWjsMniHkbWj5Y4ZmDw3fI0VomcKVGsKQzdgsEdcNRp89+quk9d9nwWmSv
1xSkcMxECOJ/TnMD5MU/eqlOothaEW2B1cLY7st2sIfahJGVCLEYwTgO41xAbpoP
DIN84V59V4vTciEK64D5siraAiiHbQM4KToVuLxcsuKGUhMGYOS0OCYvZfDLWfd4
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332433095503809273273847971071623960144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Issued through Knight Frank Kenya E-PKI Manager'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.webmail.ke.knightfrank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25113204423630814190819812926861732072140172044901141488514075134264707111557940761966971359189215067546191770674894111220922417362751772972076573329608912389506637060987851206129379095635027984360118789255739535053530077129204319787896443261933920674530116276123398146218080467240293829647059169401456553447550031610428481256618887074851496491269087487309441864632252795639912821544521171442365626762780751966078350438814978368698734533483434703160837009368618015100136027884879251312903528902787704689752240275135200587790476760254568985617132980846214556255961574947595130641961337093812134894410214719968272414871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1027509490c4da4c8abeb440c3c1ff7b9f7dd98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmail.ke.knightfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ke.knightfrank.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000166f33236c40000040300473045022100cd6544629ee048782edd0e8e485bf9cf70fbec4e8209ef494c30ce99e8a497e5022057ee420d3d4871172c3738bf025bfbe435e032814c024e263e97991ffa75e5e90076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000166f33237ed0000040300473045022100acd315beb1dd52495f6208bd9a02b901842820e83ba786bedddd69b83e1b04e402206fa21e0cf52354e4ce60a22d0fe4e8b8668e9b2209c367816a526b29a34af442007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000166f33237860000040300483046022100b2a8ca47fa48cbc26e5fda24eb453b8af7a1c7b1bb3d70a8b16a927be37367db022100e8163cc7b908ff826d9ca2ca5aa767ac374b843a8e344c9f6fa6eb079d9578a5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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