bbdev.grcc.edu

- Grand Rapids Community College -

Issued by AffirmTrust Extended Validation CA - EV1

About this certificate

This digital certificate with serial number 6f:04:cf:0f:d7:d8:59:23:00:00:00:00:58:08:43:64 was issued on by AffirmTrust.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Grand Rapids Community College

Company registration number: 1914-01-01
Organization: Grand Rapids Community College
State / Province: Michigan
Locality: Grand Rapids
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): 6f:04:cf:0f:d7:d8:59:23:00:00:00:00:58:08:43:64
Serial Number (int): 147569276433571020837458494317910311780
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d0:d2:b1:b6:3b:42:65:07:80:4f:ec:96:b5:e5:66:b5:7c:46:02:84
AuthorityKeyId: db:ef:65:37:0b:e5:47:cb:35:d1:90:1f:03:c1:bc:88:c7:a7:ea:80

Fingerprint (sha1): 79:00:b4:de:1e:95:1a:c2:c8:f5:b8:9b:4b:94:95:cd:85:15:2e:dc
Fingerprint (sha256): 2b:db:f7:ec:c8:d4:c2:2f:2c:4a:b0:cc:e2:03:2e:5c:45:a0:fd:21:42:20:13:a6:9d:97:14:df:8c:e1:10:3f

Issuing Certificate URL: http://aia.affirmtrust.com/aftev1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftev1ca.crl

Check the revocation status for certificate bbdev.grcc.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bbdev.grcc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bbdev.grcc.edu

Other certificates including the domain name grcc.edu

(limited to 100 certificates)
papercut.grcc.edu
5178081291534336-fe1.pantheonsite.io
hrprod.grcc.edu
5178081291534336-fe1.pantheonsite.io
5762952716091392-fe3.pantheonsite.io
pspt.grcc.edu
grccwireless.grcc.edu
SCCM.AD.GRCC.EDU
mydesktop.grcc.edu
webnow.grcc.edu
mydesktop.grcc.edu
eprint.grcc.edu
ccsurveys.grcc.edu
epupg1.grcc.edu
eprint.grcc.edu
bb.grcc.edu
bbadb1.grcc.edu
dworksmove.grcc.edu
ACS.grcc.edu
ACS.grcc.edu
webnow.grcc.edu
alertus.ad.grcc.edu
subjectguides.grcc.edu
mydesktop.grcc.edu
5178081291534336-fe1.pantheonsite.io
grccwireless.grcc.edu
imagenow.grcc.edu
lib.grcc.edu
phire.grcc.edu
ibtst.grcc.edu
Analytics.grcc.edu
selfservice.grcc.edu
dworkstst.grcc.edu
mydesktop.grcc.edu
ccsurveys.grcc.edu
bb.grcc.edu
lib.grcc.edu
pi.grcc.edu
sarsweb.grcc.edu
lib.grcc.edu
oc.grcc.edu
air.grcc.edu
lib.grcc.edu
sccmdb.ad.grcc.edu
pstools.grcc.edu
inowprodfcc.grcc.edu
csdev.grcc.edu
ndam.grcc.edu
5178081291534336-fe1.pantheonsite.io
imagenow.grcc.edu
relay.grcc.edu
grcc.edu
grcc.edu
bbtstf5.grcc.edu
pstools.grcc.edu
analytics.grcc.edu
grcc.edu
5178081291534336-fe1.pantheonsite.io
bb.grcc.edu
subjectguides.grcc.edu
*.grcc.edu
hammerhead.grcc.edu
bbdev.grcc.edu
ipam.grcc.edu
psdeves1-2017.ad.grcc.edu
bbdev.grcc.edu
ipam.grcc.edu
dworks.grcc.edu
ds.grcc.edu
*.grcc.edu
mail.grcc.edu
guac.grcc.edu
sccm.ad.grcc.edu
gwsync.grcc.edu
bb.grcc.edu
mydesktop.grcc.edu
guac.grcc.edu
ibtst.grcc.edu
dooraccess.grcc.edu
prtg.grcc.edu
grccwireless.grcc.edu
guac.grcc.edu
mydesktop.grcc.edu
sccm.ad.grcc.edu
lib.grcc.edu
*.grcc.edu
ACS.grcc.edu
alertus.ad.grcc.edu
edocstst.grcc.edu
idatahub.grcc.edu
prtg.grcc.edu
subjectguides.grcc.edu
imagenowtst.grcc.edu
Unity1.grcc.edu
lib.grcc.edu
psupges1.ad.grcc.edu
*.grcc.edu
oc.grcc.edu
pstst.grcc.edu
Unity1.grcc.edu

Certificate

The complete raw certificate details for bbdev.grcc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsGCIqtXfuN+hn+j/zSJ
VHlxMBiEGSXjAqfHqjAGTRiym0W7sECbVgn2OGtc9Ey8Myee9HlMvu2WSxR3er7V
xrEhnvASSPJsYFjERJi1iUoO3HI6t7EFsROciVzdsHdhg6dOLiTchdfHj0HZXzqq
Ij4t/UrmqzXN+76oo1jspELIqgiTLt4KNo3PjglV8DzBKHm52ltPBIFKE2H+ptwD
GNdmwQDR+IhyKTCUsCvcqK1f/jVFBLm5zQ+KQzjyJhWC93NVFgEM+7Vs61bU3qtg
uFdxDqTDJm7I4TMTmQDpmoaQ2nhvDZabhWI9c1/lgdjB/G2AKnccXlJWbaECXe99
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 147569276433571020837458494317910311780
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Extended Validation CA - EV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 13:03:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-16 13:33:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grand Rapids'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grand Rapids Community College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1914-01-01'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bbdev.grcc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25090606902924985456323551720814171875383009128152556410567735965811215189191717139765194063461192371960984359638066726087814213355981928075541224320495423713759442894758766278567177217385626717056930400374448266489689035567183042333522041549556348694833431152172458627401584650854393288621587842447340824123692726498659545219688360704934680286056522559552507155134125921544065113366288704071905398372744214513064694447099486919323036622654633392196016432456105409143805021249792364287985430998731366194150741060421932392959418527112997799172409414367405874997278278220671995713415631244157558603688218283238451281329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbdev.grcc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftev1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.1 (AffirmTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftev1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dbef65370be547cb35d1901f03c1bc88c7a7ea80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0d2b1b63b426507804fec96b5e566b57c460284
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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