lyncwebext.sonyusa.com

- Sony Corporation of America -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 72:2c:a4:f6:e8:6b:89:9b:45:91:5d:d4:73:af:1c:02 was issued on by Symantec Corporation.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Sony Corporation of America

Organization: Sony Corporation of America
Organization unit: Culpeper Operations
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 72:2c:a4:f6:e8:6b:89:9b:45:91:5d:d4:73:af:1c:02
Serial Number (int): 151763798458489446479383118930980576258
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): ec:54:f3:a0:0a:19:96:7f:2f:4b:34:a5:25:65:58:14:e3:95:93:59
Fingerprint (sha256): 26:c4:9b:4e:7e:75:0f:f5:7f:e5:42:cb:78:98:53:61:6c:8a:e3:5e:e6:38:f2:b7:11:70:e4:55:c4:00:e5:32

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate lyncwebext.sonyusa.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyncwebext.sonyusa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyncwebext.sonyusa.com
meet.sonyusa.com
dialin.sonyusa.com
lyncdiscover.am.sony.com
lyncdiscover.sm.sony.com
lyncdiscover.spe.sony.com
lyncdiscover.sony.com

Other certificates including the domain name sonyusa.com

(limited to 100 certificates)
as-mail.sonyusa.com
Hybrid.sonyusa.com
encrypt.sonyusa.com
as-mail.sonyusa.com
sca-ext.sonyusa.com
remote.sonyusa.com
webauth.sonyusa.com
Hybrid9.sonyusa.com
tst-dev.sonyusa.com
sca-ext.sonyusa.com
meeteast.sonyusa.com
sip.am.sony.com
Hybrid3.sonyusa.com
meeteast.sonyusa.com
globalras-am-east-ash.sonyusa.com
tst-dev.sonyusa.com
Hybrid4.sonyusa.com
globalras-am-east-ash.sonyusa.com
remote.sonyusa.com
mag.sonyusa.com
tst-dc.sonyusa.com
mft.sonyusa.com
tst-dev.sonyusa.com
tst-dev.sonyusa.com
sftp-dev.sonyusa.com
mft.sonyusa.com
global.sonyusa.com
tst365-ext.sonyusa.com
sip.am.sony.com
portal.sonyusa.com
tst-dc.sonyusa.com
tst-dc.sonyusa.com
globalras-am-test.sonyusa.com
Hybrid1.sonyusa.com
tst-west.sonyusa.com
sra-usin.sonyusa.com
sra-drcw.sonyusa.com
ealert.sonyusa.com
global.sonyusa.com
globalras-israel-dc.sonyusa.com
Hybrid.sonyusa.com
Amculyncpool01.am.sony.com
globalras.am.sony.com
lyncwebext.sonyusa.com
olmwest.sonyusa.com
USCULCISEAPP01V.am.sony.com
tst-dev.sonyusa.com
encrypt.sonyusa.com
GISCAMISEPXG.sonyusa.com
globalras-am-east-ash.sonyusa.com
sra-east.sonyusa.com
sra-usin.sonyusa.com
sra-spi.sonyusa.com
Hybrid1.sonyusa.com
gateway.sonyusa.com
sra-usin.sonyusa.com
gisd-portal.sonyusa.com
Guest-portal.sonyusa.com
ealert.sonyusa.com
vnet-ash.sonyusa.com
USCULSENMVPN01.sonyusa.com
sra-drcw.sonyusa.com
sra-drcw.sonyusa.com
tst-dc.sonyusa.com
Tst365-ext.sonyusa.com
sra-usil.sonyusa.com
Hybrid3.sonyusa.com
global.sonyusa.com
encrypt.sonyusa.com
as-mail.sonyusa.com
tst-dc.sonyusa.com
pic.sonyusa.com
sra-west.sonyusa.com
sra-usil.sonyusa.com
sftp-dev.sonyusa.com
sra-drcw.sonyusa.com
tst-dev.sonyusa.com
sftp-dc.sonyusa.com
sra-drcw.sonyusa.com
mag.sonyusa.com
encrypt.sonyusa.com
Tst365-ext.sonyusa.com
tst-dc.sonyusa.com
meetwest.sonyusa.com
mft.sonyusa.com
Guest-portal.sonyusa.com
sftp-dc.sonyusa.com
encrypt.sonyusa.com
globalras-am-west.sonyusa.com
sftp-dc.sonyusa.com
sra-spi.sonyusa.com
globalras-am-test.sonyusa.com
ealert.sonyusa.com
sca-ext.sonyusa.com
encrypt.sonyusa.com
remote.sonyusa.com
as-mail.sonyusa.com
lyncwebext.sonyusa.com
global.sonyusa.com
tst-dc.sonyusa.com

Certificate

The complete raw certificate details for lyncwebext.sonyusa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8zK3QaRcSUAFEpr0dON
yiD73yRmfLHgrrMaRW6KT9tYDhJ17KekVWkJ9n1lMNqEbbEgnjvDcxVS35qc9+dW
E4xslA/+5juLOzLwfG8wyLKDhWCbowWxBnHh4Oy1KJLuhGB0Yfg5fvshTpubXopI
7eOjQKZ4W2LtpQg5SDNeDshODpcRrdA3Wcbln2PmIUjpP8k6JUuaYGA7MqDPFdvV
kU3zsl+lHeB5RLFHmd1+W+MA0AiJ7/Qa4m33rne3cCGxdA8OYp777N61HMcUIG7A
QnQC0n5W7P5kfCX1phxiJQba/uU30pwhwomncjSzzC+BpoEgBOOtNc9IApWvfG+I
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 151763798458489446479383118930980576258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sony Corporation of America'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Culpeper Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lyncwebext.sonyusa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23707549942226633664342094594487267491393141961218966110791880130321631423039806109769626330819894200117286943635197637674881789579528129543514027719702700905189691033325686541133135982985979631163098190372662194598544186643001809972351196409102927825362515024606868594221726285333139182012755079638477462717917862668107644150210888885907535749467028759809868449733861072217339816871767645397120969156897260724881693443542953892164579478868992989704093254023335133283099780333161784637364656753824482329782557603781607233296039833024113469060156832618111661247969911956957564103646221689142955260705644521350396610677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwebext.sonyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.sonyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.sonyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.am.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sm.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.spe.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sony.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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