wellspafix.wellsfargo.com

- Wells Fargo & Company -

Issued by Wells Fargo Public Trust Certification Authority 01 G2

About this certificate

This digital certificate with serial number 0d:8b:35:9a:85:9a:61:30:b6:e2:51:fd:35:4f:45:66 was issued on by Wells Fargo & Company.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo & Company

Organization: Wells Fargo & Company
State / Province: California
Locality: San Francisco
Country: US

Wells Fargo & Company

Organization: Wells Fargo & Company
Organization unit: Organization Validated TLS
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:8b:35:9a:85:9a:61:30:b6:e2:51:fd:35:4f:45:66
Serial Number (int): 18002780418734407973985975918039876966
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8e:d3:1b:ff:b2:43:b5:a7:db:e0:12:9d:9b:2d:89:bd:54:5e:e4:c8
AuthorityKeyId: 39:13:9e:e1:41:d2:3a:45:0b:38:80:60:af:b5:21:41:7c:01:89:7d

Fingerprint (sha1): 53:6d:bd:d7:0c:a4:03:c1:a3:63:68:60:a7:99:dd:bf:00:60:5e:72
Fingerprint (sha256): 1e:64:56:b0:14:37:69:f1:54:0b:33:37:14:f1:81:54:ff:4d:95:a1:ce:cb:ce:77:55:61:28:75:a9:cb:e7:b1

Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt

Revocation information

OCSP Server: http://statush.digitalcertvalidation.com
CRL Distribution Point: http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl

Check the revocation status for certificate wellspafix.wellsfargo.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wellspafix.wellsfargo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wellspafix.wellsfargo.com
wellspafix.ceo.wellsfargo.com
wellspafix.sec.wellsfargo.com
wellspafix.accesswca.com
wellspafix.currencyteller.com
wellspafix.myonlineresourcecenter.com

Other certificates including the domain name wellsfargo.com

(limited to 100 certificates)
teamworks-uat.wellsfargo.com
st-adhoc.wellsfargo.com
ceosvfix.wellsfargo.com
ceomediauat.wellsfargo.com
achgpuat1.wellsfargo.com
mposapi-uat.wellsfargo.com
retirement-bpo-s-prod.wellsfargo.com
bwl.wellsfargo.com
acctagg.wellsfargo.com
proxy-ewpcs.wellsfargo.com
www.retirementcity.wellsfargo.com
ectz5863r9.wellsfargo.com
mwapp-sit2.wellsfargo.com
edisclosure-pm.wellsfargo.com
qa-static.evetest.wellsfargo.com
ectv4022r5.wellsfargo.com
imagenet-mortgage-uat.wellsfargo.com
st-adhoc.wellsfargo.com
uat-wib.isgpp.wellsfargo.com
ebtest-1bw-fccssqsa.wellsfargo.com
wellsorders.ceo.wellsfargo.com
wellsfs.wellsfargo.com
esignature.wellsfargo.com
equitylinkedreporting.wellsfargo.com
wellsreport.wellsfargo.com
ectx4004r8v.wellsfargo.com
tradeworks-wca.wellsfargo.com
backoffice.wellsfargo.com
eservices.wellsfargodealerservices.com
mxdalpv05.wellsfargo.com
mdm-qa.msgqa.wellsfargo.com
myedpulse.wellsfargo.com
wwwfix.ctslink.com
marketdata.wellsfargo.com
wellscontentfix.wellsfargo.com
onlinedecisiontool.wellsfargo.com
sit-www.evetest.wellsfargo.com
wellscontentuat.wellsfargo.com
pasline-uat.wellsfargo.com
wfadvisors-prod1.wellsfargo.com
marketdata.wellsfargo.com
labs.wellsfargo.com
wellsceopafix.ceo.wellsfargo.com
www.wellsfargoassetmanagement.com
procuretopay.wellsfargo.com
oxi-m-cte-broker.wellsfargo.com
401knext-uat.wellsfargo.com
deposit.wellsfargo.com
servicesuat.ceo.wellsfargo.com
bcereporting-sit.wellsfargo.com
ofxtax.wellsfargo.com
teamworks2-uat.wellsfargo.com
wellswcapa.sec.wellsfargo.com
www-wellsfargoadvisors.wellsfargo.com
cashops-uat.wellsfargo.com
cms.wellsfargo.com
ifs-cra.wellsfargo.com
cm-pfix.ceo.wellsfargo.com
ectv5858r8v.wellsfargo.com
creditweb-ist.wellsfargo.com
safe-t.wellsfargo.com
www.wellsfargo.com
pyd-WS2-client.wellsfargo.com
RAS-AZ-A.wellsfargo.com
3PV-TL3P003L.WELLSFARGO.COM
wfa-d-1trdfix-msg-v-01.wellsfargo.com
P2P-CLX.test.wellsfargo.com
retirement-bpo-uat.wellsfargo.com
ebprod-1bw-retail.wellsfargo.com
wmidsa.wellsfargo.com
pyd-WQE-client.wellsfargo.com
wfa-t-1trdapi-websvc-v-00.wellsfargo.com
hulavc-n-sit.wellsfargo.com
csfedportal-ext.wellsfargo.com
csfactor-uat.wellsfargo.com
m-wfadvisorbroker-cte1.wellsfargo.com
stg-admin.wellsfargo.com
wellstrustfix.wellsfargo.com
retirementservices-uat.wellsfargo.com
studentinsurance-uat.wellsfargo.com
ebprod-1wfw-wfapublic.wellsfargo.com
whlsleretirement-uat.wellsfargo.com
voltage-ps-0000.msgdev.wellsfargo.com
accountservices-wellsonecard.wellsfargo.com
godigitaldesktop.wellsfargo.com
ectv4008r8v.wellsfargo.com
coms-ceo-uat.wellsfargo.com
api-enterprise1.wellsfargo.com
ect-lab-6912r5a.wellsfargo.com
m.wellsfargo.com
teamworks-uat.wellsfargo.com
nc2-qaapm-pfe-wtwt.wellsfargo.com
gpow.wellsfargo.com
corporateretirementportal.wellsfargo.com
fundservicesreporting.wellsfargo.com
sourcing.wellsfargo.com
ifs-cra-bcp.wellsfargo.com
ectx4020r8v.wellsfargo.com
eddwtuat.ceo.wellsfargo.com
scf-apps.wellsfargo.com

Certificate

The complete raw certificate details for wellspafix.wellsfargo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNM0zo/NyNiR5YMSwV/0
ioGFjrv2/XsBc/X/Ex/EZhbJAZPE/9P8hFfsvS4wbdIc30nPqvwRtSuf8YN8/Wwj
dE2c0N86xn3gmdsgPGC76SbK60SNVTzzGFBtoAJZoEAf1NfmMM7ZRF0lQAeZ/K12
8frM10JkFVJJ4wIaOyS2XDgNm+wth7wXLhnHejwLA1ytirEWF/OflHiuvDMSvd2N
nIsRJEewNa39HoNgzxXPu0PR6SjjnJemoK8/zMr8aHe+bRmeVCaPWTOrk83qdLPh
jUoKO+s3K/OrTweoaV5a3XaQkqm9tsJ+sGzJPg8PwLtnEinE3+bz1I1WYfbl67I0
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18002780418734407973985975918039876966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Organization Validated TLS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo Public Trust Certification Authority 01 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wellspafix.wellsfargo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22827044590733388502195725292521080594304489738187217589763879691651309067281127123113849897379432176473899656692838585386280681204447468361502150020762806907106324805116678763191878370182038127859067286994055243908622284933357462246582863088072570916872385685413187574221917999120072479723097177674413320453526990512921731382924880857639575753125257746715444793870652641449112195169315103086481393204017504406325379880309744044741040844026074464757272747160145117822018279675455854045545750219205626563089519148160051457655652782099006517923910725711106896680361611724544557086550110023159779569106989517661482923041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 39139ee141d23a450b388060afb521417c01897d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ed31bffb243b5a7dbe0129d9b2d89bd545ee4c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (188 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellspafix.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellspafix.ceo.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellspafix.sec.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellspafix.accesswca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellspafix.currencyteller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellspafix.myonlineresourcecenter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statush.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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