sjdckafkabk.us.trendnet.org

- Trend Micro Inc. -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number 07:53:46:14:5e:a7:a4:c3:00:00:00:00:58:08:ed:78 was issued on by AffirmTrust.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Trend Micro Inc.

Organization: Trend Micro Inc.
State / Province: Texas
Locality: Irving
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): 07:53:46:14:5e:a7:a4:c3:00:00:00:00:58:08:ed:78
Serial Number (int): 9736977992282567306011473324716649848
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 94:ab:c9:6f:47:06:52:9e:8e:f9:ac:2f:09:37:84:76:6f:10:95:e5
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): 7b:44:d3:ac:f3:63:8f:13:6f:cb:29:f3:f7:52:8b:96:ae:6d:6c:b2
Fingerprint (sha256): 29:92:40:a9:e5:e7:f6:c6:fb:65:e9:2c:cf:11:60:b1:05:cf:ff:80:b7:fa:22:0d:25:72:3f:e1:ec:70:ba:fc

Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl

Check the revocation status for certificate sjdckafkabk.us.trendnet.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sjdckafkabk.us.trendnet.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sjdckafkabk.us.trendnet.org

Other certificates including the domain name trendnet.org

(limited to 100 certificates)
*.trendnet.org
liberalapi-tmp.sdi.trendnet.org
phvm-is-radius3.ph.trendnet.org
ca-ets-labvcenter.us.trendnet.org
phvm-gsd-sslaut.ph.trendnet.org
edc2kafkazk2.eu.trendnet.org
bizadmin-beta.trendnet.org
*.trendnet.org
*.trendnet.org
SJDC-NAV17WEBS2.us.trendnet.org
ie-lansweep-01.eu.trendnet.org
aws-billingapi.plsstg.trendmicro.com
edc2kafkaschema.eu.trendnet.org
SJDC-KAFKABK5.us.trendnet.org
*.trendnet.org
*.us.trendnet.org
jdc2-ise01.jp.trendnet.org
hubstg.trendmicro.com
sjc1-gfr-vip2.sdi.trendnet.org
itk8sd.tw.trendnet.org
us-ets-nexusproxystg.us.trendnet.org
PHVM-IS-AACTI.ph.trendnet.org
us-ets-fs01.us.trendnet.org
nj-594-rdgw.tw.trendnet.org
sjdc-infosec-arcmc.us.trendnet.org
horusapi-ibeta.sdi.trendnet.org
virtualsharesstg.trendnet.org
sjc1-tmus-ops.sdi.trendnet.org
virusRDP2.tw.trendnet.org
tw-ets-rgw06.tw.trendnet.org
ca-ot-yogi.us.trendnet.org
hrfoundation.trendnet.org
senna.aptinfra.tw.trendnet.org
nj-ets-labfs.tw.trendnet.org
*.terra-stg-vtr.vtr.trendnet.org
eunavposita.eu.trendnet.org
*.vtr.trendnet.org
infra.mars.trendmicro.com
minionapi-tmp.sdi.trendnet.org
de-ddwi-01.eu.trendnet.org
*.sdi.trendnet.org
kallitest.us.trendnet.org
*.us.trendnet.org
SJDC-KAFKAAPI1.us.trendnet.org
sjdc-scssoapp.us.trendnet.org
tw-ets-rgw08.tw.trendnet.org
virtualshares.trendnet.org
nj-ets-fs.tw.trendnet.org
SJDC-KAFKABK2.us.trendnet.org
tw-ets-rg03.tw.trendnet.org
kkbox.tw.trendnet.org
sjdc-nabuintapp.us.trendnet.org
cloudcntr.sdi.trendnet.org
OCSEG.TRENDNET.ORG
adc-lcmweb01.tw.trendnet.org
pr2g.baplsstg.trendmicro.com
EDC2VMNAVSITB18.eu.trendnet.org
nj-ets-labfs.tw.trendnet.org
regalpha.trendnet.org
apollo-reports.eu.trendnet.org
login-tmp.trendmicro.com
sjdckafkabk.us.trendnet.org
mybuddiy.us.trendnet.org
NJ-ETS-MSDN.TW.TRENDNET.ORG
ddan.tw.trendnet.org
SJDC-NAV17WEBS1.us.trendnet.org
tw-ets-vra.tw.trendnet.org
tw-ets-rg03.tw.trendnet.org
aws-iapi.plsbeta.trendmicro.com
phvm-gsd-sslaut.ph.trendnet.org
tw-ets-jksgw3.tw.trendnet.org
tw-magw.tw.trendnet.org
tw-ets-fs.tw.trendnet.org
aws-billingapi.plsprod.trendmicro.com
nj-ets-rgw.tw.trendnet.org
hrfoundation.trendmicro.com
aws-emsapi.plsprod.trendmicro.com
dozer.aptinfra.tw.trendnet.org
OCSEG.TRENDNET.ORG
submit.aptinfra.tw.trendnet.org
aws-tsdmdv01.jp.trendnet.org
EDC2NAVSTG021.eu.trendnet.org
driapi-beta.sdi.trendnet.org
tw.trendnet.org
threatsearch.tw.trendnet.org
analyze.aptinfra.tw.trendnet.org
lmpi-beta.sdi.trendnet.org
edc2kafkazk5.eu.trendnet.org
TW-ETS-LABFS.tw.trendnet.org
tw-ets-ddwi.tw.trendnet.org
edc2kafkastream1.eu.trendnet.org
us-ets-nexusproxy.us.trendnet.org
aws-sdiadapter.plsbeta.trendmicro.com
edc2kafkazk4.eu.trendnet.org
tw-ds-labfs.tw.trendnet.org
SJDC-NABURADIUS.us.trendnet.org
www.vrli-sjdc.trendmicro.com
nj-rdsec-msdn.tw.trendnet.org
sjdc-gissmonjob.us.trendnet.org
SOA.trendmicro.com

Certificate

The complete raw certificate details for sjdckafkabk.us.trendnet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVi5K+gkA+yjnt892hxT
AuIU9Fsp5vPvJ/Ix00qX7RAwq1U1+l5rlBKLt6RM/Di0ShGRFzQBoaePdAvz7f8P
Oud2gHP/6lJ8q1VAYcMn6t4veSHOcekawXA5JOx6D7Cpo75+n8c3FjbQDXWZdM9K
eq8G3xOoqhOCZB0WR/8OacUK70pmODuXiZ3qZmpVGefcxlzyNjYsO9E6JchdCg4t
bl1fmabv9SvGNcIf+K4UI/+S13GXVecff2Eqg28Uf/klKImUAjPhp6qk4rMOkFQ1
KVu0PC5BLhuj469gEnsZu4UtJMq26NgOFjM1qKvy9OFOcUIumlQo9OFfMQ6OtAuk
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9736977992282567306011473324716649848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-23 11:04:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-23 11:34:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irving'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trend Micro Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sjdckafkabk.us.trendnet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20873071422182019794654250671747276029201457299957021721571711553945575440797888963419450174703296883387109022288387012335591140386521626559560691833105123250228768376399919010044117663570987662601678786236013637885101790723894413488073127268152537206215293013759055380622728098687645490282868035033989454883751833153298660162829524774135219099164052849933549150656115910839576351092591233974063468675828744472158241283675784112209011589876597221465046325706000408897724717285948595277056064102732671330785183731448903236993416304826321896507864932227606638100345771388060785681121039636908109437809951129562646291677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjdckafkabk.us.trendnet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94abc96f4706529e8ef9ac2f093784766f1095e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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