library.usi.edu

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:9f:d4:b8:17:01:db:4c:a4:9e:8f:1d:2e:75:e1:05 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=library.usi.edu

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:9f:d4:b8:17:01:db:4c:a4:9e:8f:1d:2e:75:e1:05
Serial Number (int): 20768309593219052229046373938019819781
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5c:89:3d:83:22:b2:9c:83:10:8e:3d:ce:7e:a0:73:19:2d:6d:94:7f
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 8f:a7:87:c4:b1:be:8b:8a:e1:b0:c8:79:f2:61:8e:5d:cb:11:03:e0
Fingerprint (sha256): 2b:b9:98:94:67:24:c2:74:8f:63:d5:95:57:3c:24:62:27:b3:2a:49:bf:13:ca:ef:b1:07:56:ed:00:27:29:b2

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate library.usi.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for library.usi.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

library.usi.edu
soar.usi.edu

Other certificates including the domain name usi.edu

(limited to 100 certificates)
my.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
forms.usi.edu
forms.usi.edu
forms.usi.edu
handbook.usi.edu
studyabroad.usi.edu
ssb3.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
*.lib-proxy.usi.edu
tk20.usi.edu
www.usi.edu
calendar.usi.edu
linux.usi.edu
bbtsusi.usi.edu
vdir.usi.edu
studyabroad.usi.edu
online.usi.edu
www.alumni.usi.edu
linux.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
banproxyp.usi.edu
online.usi.edu
auction.usi.edu
online.usi.edu
cas.usi.edu
auction.usi.edu
helpdesk.usi.edu
online.usi.edu
mirror.usi.edu
sctssb.usi.edu
www.alumni.usi.edu
library.usi.edu
soar.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
bulletin.usi.edu
WWW.USI.EDU
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
*.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
cms.usi.edu
studyabroad.usi.edu
WWW.USI.EDU
www.alumni.usi.edu
lite.usi.edu
*.lib-proxy.usi.edu
online.usi.edu
baninb.usi.edu
online.usi.edu
bulletin.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
linux.usi.edu
outlook.usi.edu
www.alumni.usi.edu
soar.usi.edu
online.usi.edu
exchhub.usi.edu
auction.usi.edu
*.lib-proxy.usi.edu
cas-login.usi.edu
rmsweb.usi.edu
online.usi.edu
online.usi.edu
blackboard.usi.edu
calendar.usi.edu
www.usi.edu
expc.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
online.usi.edu
library.usi.edu
banssb.usi.edu
online.usi.edu
sts.usi.edu
guard.usi.edu
online.usi.edu
www.alumni.usi.edu
bbtsusi.usi.edu
online.usi.edu
cas.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
cas.usi.edu
cloud.usi.edu
sctssb.usi.edu
WWW.USI.EDU
sts.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
forms.usi.edu
*.lib-proxy.usi.edu
*.usi.edu
online.usi.edu
www.alumni.usi.edu
my.usi.edu
auction.usi.edu
cms.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for library.usi.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIQD5/UuBcB20ykno8dLnXhBTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDIwNjAwMDAwMFoXDTI1MDMwNzIzNTk1OVowGjEY
MBYGA1UEAxMPbGlicmFyeS51c2kuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtdbslY4CnnDOUOTuGBbrln6kywGWEP3Y6+5zwA0Nb9Q345Vo3S0Z
GYEQs3a1N1uADZ6B6FN1Fs+sO7SO6aqzg99XsZESptDDyC1DTeg4Lck7mpaW9zUG
BAt1Ca3brCbw5Cet9ukuQEz0k0qzApsV09VJ7EGZhTgOQuPQEXtr6/BlpHp4RfF2
hp9LnrPeCVpGRUpI6NUW8imGQiRqt57hd23GRGHs3E1zL/W+GEGWYkznrTITbHo6
7430ZVEBTGQ83UslB4iiM97fssHeY+NVTHgsdFPMowihnvKhj3WeS3NFaQ52ejvp
QJyS5F/W8EaNSbaou5gZ8Y8s8ueDgKiFwQIDAQABo4IC9jCCAvIwHwYDVR0jBBgw
FoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFFyJPYMispyDEI49zn6g
cxktbZR/MCgGA1UdEQQhMB+CD2xpYnJhcnkudXNpLmVkdYIMc29hci51c2kuZWR1
MBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2Ny
bC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkw
ZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29t
MDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9y
Mm0wMi5jZXIwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFo
AHUAzxFW7tUufK/zh1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGNe+21bQAABAMA
RjBEAiAbsrmFZjecUBkv0cfT53bQv68S+Ww6vbMuaYX8soSqwAIgeYTOFYMoMkbi
DtjXjKRnP2CgbmMSAhXnfZfLMwzguvYAdwB9WR4S4XgqexxhZ3xe/fjQh1wUoE6V
nrkDL9kOjC55uAAAAY177bVsAAAEAwBIMEYCIQCR8Ia/Y5A/oDDjIJiRwkr5Moh5
SbJyumRSDWhgGbbhbAIhAKZYud4F0CkdnWydmpiMgBMenRo3nHD3SnZLK7sSAabr
AHYA5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGNe+21mAAABAMA
RzBFAiApqAwTbPfCUBniFBYiseuEtPLK1iohNJ/vibgch9DUrwIhAI1yJ5fvGxj6
xWhlGp7Lypogij7ipnx53qvHyrTn/9QeMA0GCSqGSIb3DQEBCwUAA4IBAQBZf7HZ
FYycTDJsIr5WIP6IUPyOCMZQNauKsfR2eQ+KLJYnrebJsahvpMqu23vINjLZk3bJ
/knSSJWAenorq+8LeIJPEQzEdHftkxIUWoywp6B2KO26qK5Mrrg3N4vXoI6YJpff
xRAuxck995RXDfmn2GOEGPeBS3vRwE2BdjM7r4EJHF5Ux97t9azfVjBy+vIvFsIY
Az8ajf7DFCXLoEvmk0IsMZsXB0Zb0rTDFZgROLLfAh9HAPSjPstQhMuExmg6GOJp
ItsfN7F9Q9ocNRoHUY0TOrRgXR4VhgNzjaAQ7sW+uXRGUx48u/hzDItBnL/7B2ic
8rhy2EuzV4Q0Cm8M
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdbslY4CnnDOUOTuGBbr
ln6kywGWEP3Y6+5zwA0Nb9Q345Vo3S0ZGYEQs3a1N1uADZ6B6FN1Fs+sO7SO6aqz
g99XsZESptDDyC1DTeg4Lck7mpaW9zUGBAt1Ca3brCbw5Cet9ukuQEz0k0qzApsV
09VJ7EGZhTgOQuPQEXtr6/BlpHp4RfF2hp9LnrPeCVpGRUpI6NUW8imGQiRqt57h
d23GRGHs3E1zL/W+GEGWYkznrTITbHo67430ZVEBTGQ83UslB4iiM97fssHeY+NV
THgsdFPMowihnvKhj3WeS3NFaQ52ejvpQJyS5F/W8EaNSbaou5gZ8Y8s8ueDgKiF
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20768309593219052229046373938019819781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'library.usi.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22955116250727601980205352383693977374854913544178570879519410200655050237244665528604326040433917981290391964796434412695229948028428939750474184924385720575143974311719923812998618755234180379122070099599786539624446400910357605219484945755830119022853403732482327422887900258100449912357031628705711058455865225618718936394467294117407933775394739752688224024380841349460493430915331845003630732097744471151385547376498060015717540321368122460262527653112982922167326156543201468404781184584149192805448521317818405929833671016200019456553870069526565259446541226765374651070756938409468766840055481105760721077697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c893d8322b29c83108e3dce7ea073192d6d947f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.usi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soar.usi.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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