smtp01.harlandclarke.com

- Harland Clarke Holdings -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 3f:a1:08:0e:58:d6:53:e5:36:3b:26:f1:7d:47:15:03 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Harland Clarke Holdings

Organization: Harland Clarke Holdings
State / Province: Texas
Locality: San Antonio
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:a1:08:0e:58:d6:53:e5:36:3b:26:f1:7d:47:15:03
Serial Number (int): 84577486924638698828503500265804469507
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 51:a3:6a:72:93:56:6f:2e:f1:a2:6a:f1:c1:50:12:bc:cc:55:e3:8b
Fingerprint (sha256): 25:25:c1:78:92:57:ec:d9:9c:ed:b9:72:b5:af:43:3d:2c:5b:f7:42:5e:cb:84:fc:df:c7:50:40:bc:38:28:8c

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate smtp01.harlandclarke.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smtp01.harlandclarke.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smtp01.harlandclarke.com

Other certificates including the domain name harlandclarke.com

(limited to 100 certificates)
bcpstage.harlandclarke.com
marketingservices.harlandclarke.com
cfs.harlandclarke.com
efilter1.harlandclarke.com
bcpstage.harlandclarke.com
fs.harlandclarke.com
smtp02.harlandclarke.com
meeting.hchgrp.com
fs.harlandclarke.com
hcconnectda1.harlandclarke.com
pkywfh.harlandclarke.com
sipexternal.hchgrp.com
www.harlandclarke.com
efilter3.harlandclarke.com
myreports.harlandclarke.com
vpw.harlandclarke.com
bcp.harlandclarke.com
*.vip.harlandclarke.com
cunexusonline-test.harlandclarke.com
myreportsqa.harlandclarke.com
service-uat.harlandclarke.com
slcwfh.harlandclarke.com
vpw.harlandclarke.com
myreportsqa.harlandclarke.com
hcconnectda1.harlandclarke.com
myreportsqa.harlandclarke.com
staging.insight.harlandclarke.com
hcc1.harlandclarke.com
vservices.harlandclarke.com
dev-paymentprocessing.harlandclarke.com
hcconnect.harlandclarke.com
crm.harlandclarke.com
gitlab.os.harlandclarke.com
meeting.hchgrp.com
securetransfer.harlandclarke.com
inside.harlandclarke.com
efilter2.harlandclarke.com
staging.insight.harlandclarke.com
secureuat.harlandclarke.com
securetransfer.harlandclarke.com
www.hc.rock.rivetica.com
myreports.harlandclarke.com
hcconnectda1drhcd.harlandclarke.com
inside.harlandclarke.com
*.harlandclarke.com
cfs.harlandclarke.com
togo1.harlandclarke.com
efilter1.harlandclarke.com
vpw.harlandclarke.com
www.hc.rock.rivetica.com
smtp02.harlandclarke.com
inside.harlandclarke.com
www.hc.rock.rivetica.com
inside.harlandclarke.com
hs1.harlandclarke.com
hcconnectda1drhcd.harlandclarke.com
togo1.harlandclarke.com
webmail.hchgrp.com
insight.harlandclarke.com
myreports.harlandclarke.com
www.harlandclarke.com
hcconnect2.harlandclarke.com
inside.harlandclarke.com
marketingservices.harlandclarke.com
www.hc.rock.rivetica.com
paymentprocessing.harlandclarke.com
hcc2dr.harlandclarke.com
fs.harlandclarke.com
hcconnect.harlandclarke.com
bcpstage.harlandclarke.com
www.hc.rock.rivetica.com
cfs.harlandclarke.com
epm.harlandclarke.com
epm.harlandclarke.com
drtestbcp.harlandclarke.com
crmqa.harlandclarke.com
sipexternal.hchgrp.com
staging.insight.harlandclarke.com
insight.harlandclarke.com
insight.harlandclarke.com
secureftp.harlandclarke.com
smtp01.harlandclarke.com
mobinet-uat.harlandclarke.com
HCCS.HARLANDCLARKE.COM
smtp01.harlandclarke.com
bcppartner.harlandclarke.com
pkywfh.harlandclarke.com
meeting.hchgrp.com
inside.harlandclarke.com
bcpstage.harlandclarke.com
mobinet.harlandclarke.com
epm.harlandclarke.com
epm.harlandclarke.com
hcj1.harlandclarke.com
taxhelpdesk.harlandclarke.com
myreports.harlandclarke.com
marketingservices.harlandclarke.com
dsa.harlandclarke.com
insight.harlandclarke.com
mobinet-uat.harlandclarke.com

Certificate

The complete raw certificate details for smtp01.harlandclarke.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA71a8lPSVQDs4jrDXtV3k
JsHF3puDyHXyL1V9IzQlvXBrwr1DH7rEmr9j/SGUZhZEaioYBek4gjEpHUaov2Ez
G3CtgiCuhceGEf5t/pyxFAMFP53FlFjEy/CLMPk9ebenyF/xXyj4g3Ti9HPJn+5d
CqI2PFSd0zgW2PGHEsqKKw0f7UbDAwUaQEKnmOts4Xt3w7cOInOSJ7qJwZfMbQLw
Wft7lxHoQO9I+QrUI+oAPIHusQ8lLXx5SZFBVDuNVy9TXs+i7czkUcEsGQmdIORJ
e6DDy/HbGMK5o3Xb/NAR4L3DCRxmXoVByIcDinPFHtg3D7rrbt9q66sTHKMZeZXC
XxpU5iO5/lz+sWYFngm1bwbn2Vx8KUpqLpqOScnR3SPTeMg2wSXfb+TvRDfn/SFZ
pqrgfbIDh87KvtAK1+uN60LF0iqx+7HpZ2xIDUk3PiyFW12+ee4vXsFvfqvVXVV0
OyFqZR1D7hRtvdoTS+UnUz8rJ0NMcZhdYPsUYVX4uOTqodSb3rsHE+nlqMezUuBJ
ZFteWQi2cr6rqxYbYhLXO7xUZqDnGUd42qIoIRXPWIilKrluXYFtoI51yrqxFTfS
EMZDKZxI9n8cv652jejhyb7Nq1qMYlqr94R4fx/EyKYXDlrJOOXPb/3e8OnhQizZ
PvSviOHNx5KV57O0jKEZTMkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84577486924638698828503500265804469507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Antonio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Harland Clarke Holdings'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'smtp01.harlandclarke.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 976417176987278227234841586276216984413282617631873177619475300801031053718168286760419745001384966394798314813259969781908623917972186391187958778308046038903069558395935950408038580467426967373205028645185409412168244227358430751791712920520636418271091202695101344719524576391408809826127323455207582761260129994890504820278735800805857760232563972591490552890959326117361931382784601311213862314087254809023038307301679010733782359680499412154600796987691892314431552153101554774162482270325287266536910364841664949015728963805843013719323578523752515059908265953536986387181778200085355280566324152757067418316991577891030677061961562751793254236944131519107792555798833746507939014026400999319665324839465608254153042151267631964881893186807508727827508768383711350622114688996099842357602657729980828474450716521845276608478897836759943595799306186046547911947556806524290954730118633426072116833160973780312445018871390359090023773547412049138017286678624841862708742139173313662183685071147549217523987898396402344737991346427839978140042407639982490531075423878470306304710255589355684787607560850599693487748448733848665621196508789775428645706054831063655033060718683551039335788296975631354184653094247576833630423043273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp01.harlandclarke.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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