*.bjc.org

- Bjc Health System -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number a2:40:09:dc:da:d4:3b:c0:64:06:16:94:de:c1:63:4a was issued on by Corporation Service Company.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bjc Health System

Organization: Bjc Health System
Organization unit: IT
Address: 4901 Forest Park Ave
Postal code: 63108
State / Province: Missouri
Locality: St. Louis
Country: US

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a2:40:09:dc:da:d4:3b:c0:64:06:16:94:de:c1:63:4a
Serial Number (int): 215667442355709092965247132546059297610
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5c:c7:0c:64:1d:bd:8b:9e:0c:c5:95:93:90:3a:bd:ee:bb:96:6e:3e
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): 63:ba:f7:8f:fa:66:a5:47:ef:f4:6c:c5:06:50:61:7c:fa:3f:65:63
Fingerprint (sha256): 1e:0e:9b:23:46:6a:24:98:ec:c4:71:4f:66:82:08:ee:b4:85:4b:e1:cd:68:61:23:fa:fa:19:46:60:6a:01:f7

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate *.bjc.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bjc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bjc.org
bjc.org

Other certificates including the domain name bjc.org

(limited to 100 certificates)
slchsimschedule.bjc.org
mobap-efertility.bjc.org
ottrbmt.bjc.org
hietest.bjc.org
clinicaldesktoptest.bjc.org
secure.bjc.org
interpreterschedule.bjc.org
empdirect.bjc.org
www.bjc.org
www.bjc.org
iconnectuserid.bjc.org
sni.cloudflaressl.com
sni.cloudflaressl.com
accessbjc.bjc.org
upbcgwsync05.bjc.org
bjc.org
upbcgwsync07.bjc.org
hcmobile.bjc.org
slchsimschedule.bjc.org
lms.bjc.org
webserver01.bjc.org
testmytime81.bjc.org
mytime.bjc.org
webmail.bjc.org
health.bjc.org
www.bjc.org
sni.cloudflaressl.com
bjcexconl01.bjc-nt.bjc.org
www.bjc.org
vdi.bjc.org
www.bjc.org
secure.bjc.org
tfcmobileconnecttest.bjc.org
slchsimschedule.bjc.org
rxrefill.bjc.org
adfst.bjc.org
secure.bjc.org
encryptmail.bjc.org
webmail.bjc.org
mbmclaboutreach.bjc.org
www.bjc.org
*.bjc.org
echonet5test.bjc.org
bjcfmdtest.bjc.org
echonet.bjc.org
hrdirect.bjc.org
communitybenefit.bjc.org
mobileenroll.bjc.org
bjhmedicalsurveillance.bjc.org
EchoNet.bjc.org
bjhbylaws.bjc.org
citrixmobile.bjc.org
upbcgwsync09.bjc.org
www.bjc.org
citrixmobile.bjc.org
www.bjc.org
echoapps.bjc.org
rxcall.bjc.org
compassmobile.bjc.org
scmaccess.bjc.org
EchoNet.bjc.org
rxcall.bjc.org
iconnecttest.bjc.org
webserver01.bjc.org
performancereports.bjc.org
fmd.bjc.org
echoapps.bjc.org
iconnect.bjc.org
encryptmail.bjc.org
setmypin.bjc.org
pevpn.bjc.org
fmd.bjc.org
secure.bjc.org
securemail.bjc.org
vpn.bjc.org
bjcpsmob.bjc.org
vpn.bjc.org
paymentgateway.bjc.org
nrllab.bjc.org
clinicaldesktop.bjc.org
www.bjc.org
hcmobile.bjc.org
lms.bjc.org
fmd.bjc.org
encryptmail.bjc.org
fmd.bjc.org
*.bjc.org
nrllab.bjc.org
onlinepayment.bjc.org
upbcgwsync15.bjc.org
www.bjc.org
slchsimschedule.bjc.org
mytime.carenet.org
www4.bjc.org
www.bjc.org
performancereports.bjc.org
echoapps.bjc.org
paymentgateway.bjc.org
encryptmail.bjc.org
interpreterschedule.bjc.org

Certificate

The complete raw certificate details for *.bjc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FyqTcRBFXTRqATjMlRm
tPr2ShSq7DPhGZV8sni5AgoI5bUmqCzM6cmQv00fDYAC17PIQIOITc6hFCkEh3cG
Hwgkp94tU0pKaV3N/q4hpjFKrK4O/MWSD745f5WNxJD6tM8Zl1RtPdVjZ1k5XecA
gIR3EfU0gZKqx4GO0NcnC26OCPtCH5MDdI40HENuVb5fGDnApEbyfexmWRgJOMwd
mjHAe9cPucWtoRNnCvenKUSk+CzwsSdOJ/uEonWkLzfVJ7MMo+VbX8Mgi67dOH7J
7gUk/zhivV4+Um8mlNrlEIXvcWVrAYN46RUGbmFXIpH4YFG4IFQfY/E155ue/qCG
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 215667442355709092965247132546059297610
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '63108'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4901 Forest Park Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bjc Health System'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bjc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26303262370357086176457634824618859668433057811510256173528531348373784686303987490504920554652181341964508260790120652732694837560904090438991548870322134771039052009537801287253944741278176903489262212381518042185922358508380566576240150245625257221068761923077222989493889535741141930312345845572607351558590742681837646044508875786237840394534978117439504134005844573502469343027745214032353105392655334970634916023715663550276735826738340953570573676176703899943456807662530084575723420564222777901529137140912417169971370193912411777367487144425474275382458218418593501868774048306311428248441094193977692816979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cc70c641dbd8b9e0cc59593903abdeebb966e3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bjc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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