www.hsbc.com.my

- HSBC Nominees (Asing) Sdn Bhd -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 50:ed:d6:4d:67:67:f7:8e:59:2a:f7:19:02:cf:40:12 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HSBC Nominees (Asing) Sdn Bhd

Organization: HSBC Nominees (Asing) Sdn Bhd
State / Province: Kuala Lumpur
Locality: Kuala Lumpur
Country: MY

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 50:ed:d6:4d:67:67:f7:8e:59:2a:f7:19:02:cf:40:12
Serial Number (int): 107573160586492363457494007525074223122
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: dd:09:a3:f6:e7:c9:ab:d3:c1:01:09:79:06:13:d6:54:f1:1d:8c:66
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 46:0d:8a:6a:18:80:23:c8:b6:f6:ca:09:c1:94:95:aa:f8:ed:28:4c
Fingerprint (sha256): 20:25:f8:5c:8b:28:aa:84:b5:ce:b1:d4:27:44:fd:e6:34:22:0e:82:c5:8d:72:5b:92:98:49:da:da:22:63:18

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.hsbc.com.my

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hsbc.com.my

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hsbc.com.my

Other certificates including the domain name hsbc.com.my

(limited to 100 certificates)
virtualcarddemo.hsbc.com.my
gtff2.hsbc.com
www.qualityassurance.securepay.hsbc.com.my
rmintro.hsbc.com.my
virtualcarddemo.hsbc.com.my
business.hsbc.com
prod-fpx.hsbc.com.my
www.3ds-dc-dev.hsbc.com.my
www.hsbc.com.my
cards.hsbc.com.my
mivision.hsbc.com.my
cards.hsbc.com.my
www.erf.hsbc.com.my
business-uat.hsbc.com.my
www.business.hsbc.fr
business-sit.hsbc.com.my
info.hsbc.com.my
cdnbc-wup.hsbc.com.my
sp.hsbc.com.my
wecanwedo.hsbc.com.my
business-sit.hsbc.com.my
cloud.messaging.hsbc.com.my
www.hsbc.com.my
www.uat-securepay.hsbc.com.my
www.about.hsbc.co.nz
business.hsbc.com
www.3ds-cc.hsbc.com.my
investments3.personal-banking.hsbc.com.sg
virtualcarddemo.hsbc.com.my
wecanwedo.hsbc.com.my
tko.pilot.hsbc.com.my
virtualcard.hsbc.com.my
www.evgr-securepay.hsbc.com.my
www.about.hsbc.co.nz
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
www.fundsresearch.investments.hsbc.com.my
tko.lp.dco-cc.hsbc.co.in
sp.hsbc.com.my
zone-apex-alb-lookup.preprod.dynp.cloud1.vv1865.com
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
www.hsbc.com.my
prod-fpx.hsbc.com.my
dxp3.dev.eu.dynp.cloud1.vv1865.com
investments3.personal-banking.hsbc.com.sg
business-uat.hsbc.com.my
www.hsbc.com.my
dxp1.test.dev.eu.dynp.cloud1.vv1865.com
www.hsbc.com.my
dco-loans-uat.lp.hsbc.com.my
www.securepay.hsbc.com.my
sp.hsbc.com.my
www.business.hsbc.fr
www.hsbc.com.my
prod.ap.dynp.cloud1.vv1865.com
virtualcard.hsbc.com.my
www.visuv-cc-dev.hsbc.com.my
events.data.hsbc.com
sp.hsbc.com.my
investments4.personal-banking.hsbc.com.my
business.hsbc.com
business-uat.hsbc.com.my
www.fundsresearch.investments.hsbc.com.my
business-sit.hsbc.com.my
www.3ds-dc.hsbc.com.my
prod.ap.dynp.cloud1.vv1865.com
dco-cc-uat.lp.hsbc.com.my
www.securepay.hsbc.com.my
cards.hsbc.com.my
www.business.hsbc.fr
investments3.personal-banking.hsbc.com.sg
www.hsbc.com.my
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
www.uat-securepay.hsbc.com.my
cyber.hsbc.com.my
www.hsbc.com.my
www.3ds-dc.hsbc.com.my
pages.messaging.hsbc.com.my
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
virtualcarddemo.hsbc.com.my
business-uat.hsbc.com.my
cyber.hsbc.com.my
mortgage-partners.hsbc.com.my
www.hsbc.com.my
blockchaintrade-sit.business.hsbc.co.kr
www.about.hsbc.co.nz
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
pilot.hsbc.com.my
www.hsbc.com.my
www.qualityassurance.securepay.hsbc.com.my
akamai-san73.exacttarget.com
www.hsbc.com.my
business-sit.hsbc.com.my
cdn.hsbc.com.my
virtualcard.hsbc.com.my
www.erf.hsbc.com.my
mortgage-partners.hsbc.com.my
www.hsbc.com.my
prod.ap.dynp.cloud1.vv1865.com
prod.ap.dynp.cloud1.vv1865.com
akamai-san73.exacttarget.com

Certificate

The complete raw certificate details for www.hsbc.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUKro0LYJKFf7oy8kD48
pW/ll+c+w0pwJQq3GMGAvrBMjf3oJA7rUl6Tt/su27ZQj0d4cPd+K4hb3PBP12uV
zgZvPlNIKJtgo7NkhPEaP4sB84TL8aXbb/WuOIYSyMWuanM1ucZpQI7JSkByrxRD
e++tyT57tpQoPWuxA6D+QizGiqEFsIRSUm+OKSDEkf0rycnyr1oz1KFTh2/1AiNx
oxziGh0xmmuHG9vw3MciG5UIqKZmU52BfIuzbAcJ3JRRlbmMzlxaod5tvM/IRRV2
QMiRkVywBdXBWvvt6fGGzUIk7mKY6A5U6Il7a7YrN4CnGVsVIjD0qndSXXRrDmdC
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 107573160586492363457494007525074223122
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-27 02:50:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-18 02:50:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HSBC Nominees (Asing) Sdn Bhd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hsbc.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25911728947148308601719300067080180256814575439675321569340926256327405927952933409875861597849253608448060760640589119353116761561725637030232523172259874910256383481646279257192941031475709693223379194543221778354245597871415792421564346386689984575320726243278544307860021238876270182891055753425662159689243275061762554838068422105972770240572755551197357382888442525775036874668245078354798580400161017529888316583614580286116249813401766086767826455037748009653701270519681997480033149009813280738034446941234128307111371553115014819563747657662199127787178861325356406970747191362747168297452523051533042402017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd09a3f6e7c9abd3c10109790613d654f11d8c66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsbc.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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