txdotconnect.txdot.gov

- Texas Department of Transportation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:95:17:c7:b0:33:e4:94:f5:8d:9f:1d:f4:f6:16:73 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Texas Department of Transportation

Organization: Texas Department of Transportation
Organization unit: TSD
State / Province: Texas
Locality: Austin
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:95:17:c7:b0:33:e4:94:f5:8d:9f:1d:f4:f6:16:73
Serial Number (int): 7420274527203589400920279990096238195
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 70:f1:5d:01:7c:93:31:3f:82:25:b3:34:ea:96:5e:bc:d7:a6:07:01
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 46:a0:e3:b6:e9:78:a4:b6:dd:e7:47:3e:70:4b:72:c7:05:fa:f6:d8
Fingerprint (sha256): 28:3f:7f:4a:e0:4f:ad:b0:e0:7d:da:2a:5d:a4:18:c4:29:7f:b7:25:57:98:b9:1d:61:f3:1c:7a:35:09:1f:f1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate txdotconnect.txdot.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for txdotconnect.txdot.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

txdotconnect.dot.state.tx.us
txdotconnect.txdot.gov

Other certificates including the domain name txdot.gov

(limited to 100 certificates)
sb20pca.txdot.gov
testporta.txdot.gov
mppm.txdot.gov
edit.drivetexas.txdot.gov
testportal.txdot.gov
txrtn.txdot.gov
crisdev.dot.state.tx.us
po.txdotconnect.txdot.gov
mppm.txdot.gov
webex-sso.txdot.gov
arcgis.mppm.txdot.gov
www.dot.state.tx.us
crisuat.dot.state.tx.us
ftp.txdot.gov
testmap.drivetexas.txdot.gov
ADFS.TXDOT.GOV
jaspere2eext.txdotconnect.txdot.gov
externalusers.txdot.gov
publicdocs.txdot.gov
mycitrixsf.txdot.gov
edit.drivetexas.txdot.gov
apps.dot.state.tx.us
cgust.txdot.gov
cgwuat.txdot.gov
hr.txdot.gov
editmap2.drivetexas.txdot.gov
dev.txdotconnect.txdot.gov
cris.dot.state.tx.us
hcmust.txdot.gov
remote.txdot.gov
apps2.dot.state.tx.us
contractsinternal.txdot.gov
txdot4sverpweb1.txdot.gov
txdotconnect.txdot.gov
cris.dot.state.tx.us
ecmmobile.txdot.gov
e2eext.txdotconnect.txdot.gov
ftp.txdot.gov
oc1.txdot.gov
www.txdot.gov
externalusers.txdot.gov
cris.dot.state.tx.us
uatext.txdotconnect.txdot.gov
mycitrixsf.TxDOT.gov
AVNMET.txdot.gov
avnmetfiles.txdot.gov
fbde.txdotconnect.txdot.gov
webex-sso.txdot.gov
externalusers.txdot.gov
mppm-ref.txdot.gov
qa2.txdotconnect.txdot.gov
dev.txdotconnect.txdot.gov
fin.txdot.gov
testportal.txdot.gov
ADFS.TXDOT.GOV
txdotconnect.txdot.gov
www.txdot.gov
citrix.txdot.gov
edit.drivetexas.txdot.gov
txdot4azitsmon1.dot.state.tx.us
ecmmobile.txdot.gov
AAHUAT.txdot.gov
last.mppm.txdot.gov
matsuat.txdot.gov
TXDOT4AZK2WPRD1.dot.state.tx.us
ftp.txdot.gov
remote.txdot.gov
adfs.txdot.gov
sb20pca.txdot.gov
crossroadsuat.txdot.gov
txdot-xenweb.dot.state.tx.us
enabler.txdotconnect.txdot.gov
ftp.txdot.gov
cris.dot.state.tx.us
txdot4sverpdlx1.txdot.gov
oc1.txdot.gov
editmap.drivetexas.txdot.gov
cgust.txdot.gov
apps2.dot.state.tx.us
elm.txdot.gov
editmap.drivetexas.txdot.gov
mycitrix.txdot.gov
finust.txdot.gov
avnmet.txdot.gov
apps2.dot.state.tx.us
TNTODAY.dot.state.tx.us
www.txdot.gov
testmap2.drivetexas.txdot.gov
mppm.txdot.gov
devarcgis.txdotconnect.txdot.gov
apps.dot.state.tx.us
externalusers.txdot.gov
reports.txdot.gov
*.mppm.txdot.gov
txrtn.txdot.gov
fbqa.txdotconnect.txdot.gov
edit.drivetexas.txdot.gov
vcsc1.txdot.gov
its.txdot.gov
fin.txdot.gov

Certificate

The complete raw certificate details for txdotconnect.txdot.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7420274527203589400920279990096238195
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Austin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas Department of Transportation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TSD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'txdotconnect.txdot.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864083216241743915795704329497644334036377453388981358693834513341429998317483060059689924470276152371971655142810248996246906430586183186605984392037640574413922929648804865351959781175332197154389554835973433404322155199030189089482562602099526738401044840739341671527270389757480585743313491563400658007666781935645492650994252412819979937798713591625263035901956228029238052173494117254588346254381039267203858984423497008046872751283892268574299001224192323759545723004492055041985897505693071112627223821354950667609508697806547350066887531903911433848222612891973850181202492509001743126853595793337859244322192987040033257123175299528386489179428107998812496166660868118288870176926370921237893264923911088698988225013162430047607320811737687368406916090961417477889144013625658084819877325716570176687558276797328187102965585169713252512465920837160156219925309422550170738124471225947909809360877891107390112724245443293773540464676573773862946079051446010401316899835265374027886525531252125767542644172173646071085464175878973298716675042679484670613878843512851564880994955655621022988882393819877204895194678238317853307778756468378527963532068088086045178348987507038013709293995701176924879033827704017647139608050241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70f15d017c93313f8225b334ea965ebcd7a60701
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txdotconnect.dot.state.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txdotconnect.txdot.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001688159e68400000403004630440220106933ab559bfc07239345fe5dd02cb09de2fe6f571d948ab0648a8ed4cf84f102207d9be60ef3a86e3a5675cc08ef6691bd54d1ba37438da2ba78476c478964c3290076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001688159e7540000040300473045022100e8fcb0c859ebf6b4b00da3c9930a2f47c4fe874c5caca46df31ffc8204f66132022037314529d11ad736d25605cc556ebf89dca2e4645a9f6ab9dba35ea84b846d64
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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