pyramid.fco.gov.uk

- FCDO Services -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 46:fa:ca:cb:c1:59:60:44:2f:1d:58:71 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FCDO Services

Organization: FCDO Services
State / Province: Buckinghamshire
Locality: Milton Keynes
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 46:fa:ca:cb:c1:59:60:44:2f:1d:58:71
Serial Number (int): 21967139819048671503995197553
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 86:25:2a:7a:8d:02:a8:db:62:e1:18:be:2e:70:9f:3a:09:3d:1a:11
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): d3:b9:fd:32:6a:29:ab:2e:c5:b3:e3:4e:ae:e0:78:48:f6:18:ca:66
Fingerprint (sha256): 28:92:6b:eb:7f:8b:1d:e6:8b:68:3c:f6:1e:a5:e8:9c:83:1a:fa:1c:a9:0b:28:16:4f:ab:2f:e8:66:2c:b3:e8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate pyramid.fco.gov.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pyramid.fco.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pyramid.fco.gov.uk

Other certificates including the domain name fco.gov.uk

(limited to 100 certificates)
protocol.fco.gov.uk
blogs.fco.gov.uk
blogs.fcdo.gov.uk
blogs.fcdo.gov.uk
gitlab.dev.hub.fco.gov.uk
vle.fco.gov.uk
api.cistest.fco.gov.uk
vle.fco.gov.uk
nexus.dev.hub.fco.gov.uk
securelogin.wifi.fco.gov.uk
crisis.hub.fco.gov.uk
link.cistest.fco.gov.uk
vle.fco.gov.uk
vle.fco.gov.uk
pyramiddr.fco.gov.uk
api.cistest.fco.gov.uk
vetting.fco.gov.uk
*.myna.fco.gov.uk
ci.crisis.dev.hub.fco.gov.uk
*.hub.fco.gov.uk
mx.ppe.fco.gov.uk
*.visa4uk.fco.gov.uk
blogs.fcdo.gov.uk
nexus.dev.hub.fco.gov.uk
vle.fco.gov.uk
vetting.fco.gov.uk
*.hub.fco.gov.uk
www.chevening.fco.gov.uk
jira.dev.hub.fco.gov.uk
confluence.dev.hub.fco.gov.uk
sip.ppe.fco.gov.uk
blogs.fcdo.gov.uk
web-analytics.fco.gov.uk
ci.crisis.dev.hub.fco.gov.uk
*.sharepoint.cloud.fco.gov.uk
blogs.fcdo.gov.uk
protocol.fcdo.gov.uk
servicenowtest.fcos.gov.uk
crisis.hub.fco.gov.uk
*.fconet.fco.gov.uk
nexus.dev.hub.fco.gov.uk
terminal.fco.gov.uk
vle.fco.gov.uk
*.fconet.fco.gov.uk
portal.wifi.fco.gov.uk
internationalmedia.fco.gov.uk
www.locate.fco.gov.uk
servicenowtest.fcos.gov.uk
protocol.fcdo.gov.uk
nexus.dev.hub.fco.gov.uk
hspinternet.fco.gov.uk
*.visa4uk.fco.gov.uk
jira.dev.hub.fco.gov.uk
*.estate.fco.gov.uk
blogs.fcdo.gov.uk
*.estate.fco.gov.uk
protocol.fco.gov.uk
ist.crisis.hub.fco.gov.uk
exercise.crisis.hub.fco.gov.uk
hspinternet.fco.gov.uk
web-analytics.fco.gov.uk
jira.dev.hub.fco.gov.uk
ftp.bacs.services.fco.gov.uk
*.os-insight.fco.gov.uk
*.visa4uk.fco.gov.uk
exercise.consular.hub.fco.gov.uk
vle-test.fco.gov.uk
uat.crisis.dev.hub.fco.gov.uk
protocol.fco.gov.uk
protocol.fcdo.gov.uk
vle.fco.gov.uk
local.crisis.dev.hub.fco.gov.uk
transfer.cistest.fco.gov.uk
etdc.cis.fco.gov.uk
exercise.crisis.hub.fco.gov.uk
*.fco.gov.uk
crisis.hub.fco.gov.uk
blogs.fcdo.gov.uk
protocol.fcdo.gov.uk
sts.ppe.fco.gov.uk
ist.crisis.hub.fco.gov.uk
crisis.hub.fco.gov.uk
protocol.fco.gov.uk
blogs.fcdo.gov.uk
blogs.fco.gov.uk
api.cis.fco.gov.uk
*.visa4uk.fco.gov.uk
wasp.wifi.fco.gov.uk
portal.estate.fco.gov.uk
pyramid.fco.gov.uk
protocol.fco.gov.uk
pyramid.fco.gov.uk
jira.dev.hub.fco.gov.uk
*.consular.fco.gov.uk
nightly.crisis.dev.hub.fco.gov.uk
*.hub.fco.gov.uk
exercise.crisis.hub.fco.gov.uk
nexus.dev.hub.fco.gov.uk
nightly.crisis.dev.hub.fco.gov.uk
estate.fco.gov.uk

Certificate

The complete raw certificate details for pyramid.fco.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmOhw4N1hohxfwqkXXsm
m7POpMJLntrz/KaPnI+vndxnG3RUyt8EKn6KJ6ESHVTRpqPy0vAoN0DDM6EU9ffc
dTTs00uEHrQeVUy7cSCLa7CaYbmre5cPvMYliXr7qYKayKs5ZlEFRHmmtXabKG5/
90JsUiI6YN1lzKjnZQ5ic0hRRSGTVrMCoHNuzpP5oE7wrJQWkG/xyl26lqnYTNjy
t86O6N5CNuaGSJ7b0kt+pigR78Y0bZKNR0fxZgp+CS17J/cXAGMr9i8lPMGYgK9g
n7VSKbD3jI/Tk8KGaUg1unIPRRRyKlmzifaCg06PKLEXPESy5WtFCOi7OFdpP23r
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21967139819048671503995197553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 12:11:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-11 12:11:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Buckinghamshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milton Keynes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FCDO Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pyramid.fco.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25044314699128383670602929079127647695960736600905742549285013106683557826051697110495267246356139894390374380698189550594119970997642644916304665180786013316030743898241810502808948292588734172529711993737235679569185011438368076154205264704548986722500760601661111313837852660972890448432804504439498125039932176411206591069469089012694686618744477389145356311432823565901720451798417832050692912349791535436122894739162464309387637427775580229419284691529334534432190054706351289150840158776784251164975053358385036337620333552470647074573778144077558784225925042000999413260858505025671808339891624431591409707999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyramid.fco.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86252a7a8d02a8db62e118be2e709f3a093d1a11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018944ddb3720000040300483046022100d482b0c883b3d033060db8b4b986e739c5869ba53205a1f2bd4c786d7176ae5e0221008dfa9a1e26bfe185b5a357730def581433f6d1125c2ab0324da47ce8c66f0aa2007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018944ddb3610000040300463044022003d5cb609fcb50ff0af42887d9ee36ab190fe93bb36ca3cb6ec7022ac808848b02201a17997c52cc0b99de1e9b0b43057a917ed91dd0e7f7605a18a55b909ecdd2d900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018944ddb3a40000040300473045022100c025e16f02b2df825f76223d6d11c82005d56b5a1ba18f12ebad6b90cb8e8ad9022070ae5eb47d7d5b327a7f262f8b1a78077a6b6784c6af4d48f15ee8b949b4867d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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