www.chinacache.com

- 上海浦东发展银行股份有限公司 -

Issued by GeoTrust CN RSA CA G1

About this certificate

This digital certificate with serial number 08:76:87:c4:6c:81:e8:61:4e:26:2f:6f:cc:68:2a:5f was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

上海浦东发展银行股份有限公司

Organization: 上海浦东发展银行股份有限公司
Organization unit: IT
State / Province: 上海市
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:76:87:c4:6c:81:e8:61:4e:26:2f:6f:cc:68:2a:5f
Serial Number (int): 11249268683184212290139452297248778847
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c6:ac:3f:91:b8:c0:4d:68:47:37:5f:64:df:58:31:2a:6d:1a:54:d1
AuthorityKeyId: 91:9f:5e:31:15:ae:10:9f:ad:60:c1:f7:c1:cc:aa:48:34:2f:0c:26

Fingerprint (sha1): 43:52:54:d2:7e:ef:39:20:17:f6:68:0a:2e:d8:45:58:5f:0d:c1:57
Fingerprint (sha256): 21:a4:50:7f:43:92:a5:21:a5:5e:79:8b:e0:8d:07:be:c2:f5:33:96:69:b5:6b:76:b1:71:72:2c:73:90:64:df

Issuing Certificate URL: http://crl.digicert-cn.com/GeoTrustCNRSACAG1.crt

Revocation information

OCSP Server: http://ocsp.dcocsp.cn
CRL Distribution Point: http://crl3.digicert.com/GeoTrustCNRSACAG1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustCNRSACAG1.crl

Check the revocation status for certificate www.chinacache.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.chinacache.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.chinacache.com
chinacache.com
etest4cdn.spdb.com.cn
grayebankcdn.spdb.com.cn
ebankcdn.spdb.com.cn

Other certificates including the domain name chinacache.com

(limited to 100 certificates)
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
report.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
log301.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
*.cosapi-wz.chinacache.com
www.chinacache.com
test2.edu.chinacache.com
www.chinacache.com
ccms.chinacache.com
cdn04.ccedge.net
*.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
yun.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
storage-1.chinacache.com
www.chinacache.com
*.cosapi-wz.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
en.chinacache.com
www.chinacache.com
yun.chinacache.com
*.chinacache.com
www.chinacache.com
www.chinacache.net
www.chinacache.com
www.chinacache.com
*.cosapi-bj.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
s.portal.chinacache.com
*.cosapi-bj.chinacache.com
www.chinacache.com
www.chinacache.com
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
ap4-1.cdn.salesforce-communities.com
www.chinacache.com
www.chinacache.com
*.chinacache.com
www.chinacache.com

Certificate

The complete raw certificate details for www.chinacache.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPOvX2WH9vadDkkjL1XR
6q+w1lBz8Naha7MsM0dV9ZXRSLFEIi9O+Up4uYeJjP3qosxuirEYJolb/9lgqAxb
gJQX1dzclPjAOga4REJ26TBT8BKNfROwjBrKefNg7lON8/anCHLWhnoRtI6XUcXs
4KQ94737Ylt4kiiN8GjpUORuEEgLSemn6vvS1tRhl5DP3Svc4w6Oj/P1Qn10Nloe
vmJ3cVWjEybRvn36tNIuu5mROkieIdQ/8S0q1fFuDrifMac5PBnGSWwnLrFDHe57
KDl4jtOwFrym5HArbTkPWvqDNGKgaASS5whO4zBoJcPPA+liQCtVtrSsbKv2tpGy
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11249268683184212290139452297248778847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust CN RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海浦东发展银行股份有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.chinacache.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22843060470375495859755107540196445994340208115294383876132279864389947153049943508031905187860527298488837112206970094136541782003260734648190366363225149332321778952094148455234877740884856870238441799979242210203164710944342274885131647830892324968404090184104709901795732556491184401531411416797923104333244346064379208210405396999539941948966572272446262527379707416379200869225826305931707596291862565445735873582199356092133123653117961290195062080659539802464900277661027128141307494320820865757042685989696896747539733958521137064648375980905377091436424504157033187516337909183545132302548127693711730651663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 919f5e3115ae109fad60c1f7c1ccaa48342f0c26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6ac3f91b8c04d6847375f64df58312a6d1a54d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinacache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinacache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etest4cdn.spdb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grayebankcdn.spdb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebankcdn.spdb.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustCNRSACAG1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustCNRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.dcocsp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert-cn.com/GeoTrustCNRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016eabda9c2b000004030046304402207f53b921f2ba927c4eba19e2bd43f4a6ce317832d7c914d7f759358ed73e9b3e0220718ac12d5643bd01c6c73bf61330b825e34e25cc8994f35c4d0c828bd1c4987b0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016eabda9bd80000040300483046022100b1af8e39104eb45290a82f804c3370a4803f96f928d91af183d13dad8ccf7ec4022100bad9d5c320b4b0578a1f5ca7a4ee17ad154ae5b8a027722c09d829f3eeb1b1ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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