club33.shanghaidisneyresort.com

- 上海国际主题乐园有限公司 -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 5e:7c:8c:47:f1:49:ab:64:f1:27:d4:7e:d1:4d:b7:52 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

上海国际主题乐园有限公司

Organization: 上海国际主题乐园有限公司
Organization unit: IT
State / Province: 上海
Locality: 上海
Country: CN

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:7c:8c:47:f1:49:ab:64:f1:27:d4:7e:d1:4d:b7:52
Serial Number (int): 125594121651459408764019065869063534418
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 28:d9:35:93:d4:f3:ae:34:85:9c:a7:29:50:94:1c:67:9a:27:a6:db
Fingerprint (sha256): 24:75:6b:3e:51:76:19:4b:75:6f:9c:c2:e6:6a:47:31:99:03:1d:19:43:de:1d:9b:ec:f2:26:3f:40:23:9f:ef

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate club33.shanghaidisneyresort.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for club33.shanghaidisneyresort.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

club33.shanghaidisneyresort.com

Other certificates including the domain name shanghaidisneyresort.com

(limited to 100 certificates)
latest.origin-commerce-binding-web.shanghaidisneyresort.com
survey.shanghaidisneyresort.com
sl.origin-com-ui.shanghaidisneyresort.com
shdrctt.shanghaidisneyresort.com
shdr-ecoupon.shanghaidisneyresort.com
latest.origin-commerce-order-web.shanghaidisneyresort.com
latest.origin-commerce-order-web.shanghaidisneyresort.com
stage-external.apim.shanghaidisneyresort.com
shdrctt.shanghaidisneyresort.com
lt.origin-com-ui.shanghaidisneyresort.com
cmrcampaign.Shanghaidisneyresort.com
wx.shanghaidisneyresort.com
prod.origin-mobile-ordering.shanghaidisneyresort.com
shcorporate.shanghaidisneyresort.com
CDN-Gonglve.shanghaidisneyresort.com
www.shanghaidisneyresort.com
wx.shanghaidisneyresort.com
www.shanghaidisneyresort.com
wx.shanghaidisneyresort.com
stage.www.shanghaidisneyresort.com
sl.origin-com-ui.shanghaidisneyresort.com
latest.origin-zootopia.shanghaidisneyresort.com
stage.run.shanghaidisneyresort.com
shdrapiwe.shanghaidisneyresort.com
locker-api.shanghaidisneyresort.com
wx-static.shanghaidisneyresort.com
shcorporate.shanghaidisneyresort.com
stage.onlinechat.shanghaidisneyresort.com
stage.www.shanghaidisneyresort.com
latest.origin-mobile-ordering.shanghaidisneyresort.com
www.shanghaidisneyresort.com
cslatest.origin-com-ui.shanghaidisneyresort.com
api.nwr.shanghaidisneyresort.com
shcorporate.shanghaidisneyresort.com
shcorporate.shanghaidisneyresort.com
wx-static.shanghaidisneyresort.com
club33.shanghaidisneyresort.com
shdrapiwe.shanghaidisneyresort.com
prod-ali.apim.shanghaidisneyresort.com
latest.aws.castapp-fastpass.sh1.wdpro.disney.com
sfo.sensors.shanghaidisneyresort.com
latest-ali.apim.shanghaidisneyresort.com
origin-park-reopen-ui.shanghaidisneyresort.com
csstage.origin-hotel-ui.shanghaidisneyresort.com
authorization.shanghaidisneyresort.com
run.shanghaidisneyresort.com
compass.shanghaidisneyresort.com
shdrapiali.shanghaidisneyresort.com
prod.origin-com-ui.shanghaidisneyresort.com
cmrcampaign.Shanghaidisneyresort.com
stage.wechat.shanghaidisneyresort.com
shdr-aw.shanghaidisneyresort.com
stage-external.apim.shanghaidisneyresort.com
gonglve.shanghaidisneyresort.com
latest.origin-commerce-party-web.shanghaidisneyresort.com
CDN-Gonglve.shanghaidisneyresort.com
aoxiang.shanghaidisneyresort.com
www.shanghaidisneyresort.com
survey.shanghaidisneyresort.com
onlinechat.shanghaidisneyresort.com
aoxiang.shanghaidisneyresort.com
sl.origin-com-ui.shanghaidisneyresort.com
onlinechat.shanghaidisneyresort.com
compass.shanghaidisneyresort.com
portal.tingyun.shanghaidisneyresort.com
shdrctt.shanghaidisneyresort.com
run.shanghaidisneyresort.com
prod.origin-customer-service-portal.shanghaidisneyresort.com
sl.wechat.shanghaidisneyresort.com
web.tingyun.shanghaidisneyresort.com
www.shanghaidisneyresort.com
tlkwechat.shanghaidisneyresort.com
www.shanghaidisneyresort.com
shdr-aw.shanghaidisneyresort.com
www.shanghaidisneyresort.com
latest.origin-commerce-product-web.shanghaidisneyresort.com
onlinechat.shanghaidisneyresort.com
stage.authorization.shanghaidisneyresort.com
wx.shanghaidisneyresort.com
latest.origin-commerce-binding-web.shanghaidisneyresort.com
d1.origin.shanghaidisneyresort.com
stage.onlinechat.shanghaidisneyresort.com
run.shanghaidisneyresort.com
*.apigw.shanghaidisneyresort.com
prod.origin-cart-ui.shanghaidisneyresort.com
tlk.shanghaidisneyresort.com
lt.origin-com-ui.shanghaidisneyresort.com
latest.origin-commerce-micro-web.shanghaidisneyresort.com
shdrapita.shanghaidisneyresort.com
latest.origin-unification-web.shanghaidisneyresort.com
ajax.wx.shanghaidisneyresort.com
stage.onlinechat.shanghaidisneyresort.com
latest.origin-commerce-epep-web.shanghaidisneyresort.com
prod-ali.apim.shanghaidisneyresort.com
www.shanghaidisneyresort.com
cslatest.origin-com-ui.shanghaidisneyresort.com
www.shanghaidisneyresort.com
stage.fapiao.shanghaidisneyresort.com
latest.origin-pipp-ui.shanghaidisneyresort.com
KPC-QA.shanghaidisneyresort.com

Certificate

The complete raw certificate details for club33.shanghaidisneyresort.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+5UiX6nDARqz+ojuTxS
Kc5nXgSh6LTbSE2pLculajUWqgPaFYPMQNov9B6zU9hlI0xPVa/xiiHGiYPMcimV
l+vpTiVBzqkAqGlO1NkRcYvHMPiBGjVSDAUhgLRVl4L/Dx8uUgzFFYd21IIiFNUS
Guopj2iz/k8E0sUoMnvjcxlevyefpULb3VNJOh7Z5Aa88XECd0RsDjfwzmiSM0Sk
9CCxg99nntcCMuQQt3dL4XnaTJoxbFzi1WGm0M7puwh/2DdVUztOTpK72GDvfWEc
6/CKBtbYkW8UnbjyQZEfK2XJQBHCtAKO42Gm4YS8w/XfiuKZwb+VCZY4nAQM2PCx
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125594121651459408764019065869063534418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海国际主题乐园有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'club33.shanghaidisneyresort.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21704275162376119148758153116164946399410022236680108771983859364933384786357473818037928948623728987763057973457082410011894259312166847837648372937978854691625542505924534408719793675159430111226069169244842247094213453386079491923953370056003061444211377091266068884517544320643848062515854079151630432633359943272628480584300264032086366627535834740052358033431158163668686903000307941148800497697922624317119617650864447195922789490731255887765489370581138064761299909952167837026726105847166604282990300199893502928718619634157896326988403493296860291959432392747687909007449288762784320779792588626299962044907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club33.shanghaidisneyresort.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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