*.opsecsecurity.com

- OpSec Security, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0d:a6:47:6a:53:41:41:5b:4c:7d:46:b5:be:a8:ce:ab was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OpSec Security, Inc.

Organization: OpSec Security, Inc.
Organization unit: IT
State / Province: Colorado
Locality: Lakewood
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:a6:47:6a:53:41:41:5b:4c:7d:46:b5:be:a8:ce:ab
Serial Number (int): 18143333698753918146138767445188988587
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 89:89:53:84:2c:d7:79:51:e1:56:a9:9c:04:98:58:ad:c3:40:5b:1d
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 42:35:e7:a2:e2:31:cc:33:2c:0f:ce:2e:8f:b8:4c:f1:1f:55:54:b5
Fingerprint (sha256): 2e:b0:92:b9:40:ce:4d:4c:37:e9:7f:3b:d2:30:fe:8c:27:e7:77:fb:3c:f8:1c:08:06:20:96:40:4d:89:d4:55

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for certificate *.opsecsecurity.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.opsecsecurity.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.opsecsecurity.com
opsecsecurity.com

Other certificates including the domain name opsecsecurity.com

(limited to 100 certificates)
*.opsecsecurity.com
www.summitmortgagetraining.com
india.polo-development.com
www.summitmortgagetraining.com
nba.opsecsecurity.com
v2.opsec-monitor.de
5662005255995392-fe4.pantheonsite.io
go.rescuevocations.org
brand.opsecsecurity.com
5765606242516992-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
www.frailtycertification.com
opsecsecurity.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
www.summitmortgagetraining.com
www.summitmortgagetraining.com
5662005255995392-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
5662005255995392-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
5662005255995392-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
5662005255995392-fe4.pantheonsite.io
gov.opsecsecurity.com
5765606242516992-fe4.pantheonsite.io
www.summitmortgagetraining.com
5662005255995392-fe4.pantheonsite.io
*.opsecsecurity.com
5662005255995392-fe4.pantheonsite.io
cards.opsecsecurity.com
5765606242516992-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
www.summitmortgagetraining.com
www.summitmortgagetraining.com
learn-rto8.com
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
5662005255995392-fe4.pantheonsite.io
v2.opsec-monitor.de
5662005255995392-fe4.pantheonsite.io
www.summitmortgagetraining.com
celsiusnetworkstatus.com
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
info.opsecsecurity.com
5765606242516992-fe4.pantheonsite.io
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
5662005255995392-fe4.pantheonsite.io
www.summitmortgagetraining.com
www.summitmortgagetraining.com
v2.opsec-monitor.de
*.opsecsecurity.com
*.ap.opsecsecurity.com
5765606242516992-fe4.pantheonsite.io
5662005255995392-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
secureetagnv.opsecsecurity.com
5662005255995392-fe4.pantheonsite.io
helix21.ahacentre.org
brand.opsecsecurity.com
www.summitmortgagetraining.com
5662005255995392-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
info.opsecsecurity.com
www.summitmortgagetraining.com
secureetagwy.opsecsecurity.com
5662005255995392-fe4.pantheonsite.io
secureetagnv.opsecsecurity.com
cards.opsecsecurity.com
*.opsecsecurity.com
www.summitmortgagetraining.com
*.opsecsecurity.com
blog.opsecsecurity.com
uspa.polo-development.com
celsiusnetworkstatus.com
*.opsecsecurity.com
*.opsecsecurity.com
celsiusnetworkstatus.com
*.opsecsecurity.com
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
5662005255995392-fe4.pantheonsite.io
*.opsecsecurity.com
5662005255995392-fe4.pantheonsite.io
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
ap.opsecsecurity.com
learning.potawatomi.org
*.opsecsecurity.com
5765606242516992-fe4.pantheonsite.io

Certificate

The complete raw certificate details for *.opsecsecurity.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1BCRpRNtwEv/hxRzfgY
GqmTGo3PLWvGQ3b3BvLs7ZAseCzOegvZ9Svxe6vmI/z0rrUuvGVHbH/vGRnMnYNY
VwUXaGyVpukKW3OX5TYUEOLEd4yfSigTcCGapnwyRZobpq1VAfAMHn1khZ65O2Kk
SWB805gXhGeU3kw4wUjppwaHc72b7RSrq9A6LF2FmtXOhPB90w+PVNq+AHb/b9lu
pSK2pxNIFcTFJLcDoQbuEjTCOP78ZcLE3rjY4nnnfYNfSirSmOBXow7Qfr1nGQUn
og6ExVH9v9E/zOHlTn8x9Xy/Lgmth7Vx09DeEbjQMTO86yC4RREGt8ky6Id6oUDO
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18143333698753918146138767445188988587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lakewood'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OpSec Security, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.opsecsecurity.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22636233722374627269947427584264389339782904237276088874164248223708392159946701847960660295555780403143407359263435911060572373541359217874819129528811372380185817869788458200322990150006500800492553297964793527667556568830361285814614121731331182115185818156079305447432725369468022881792804181809022987670909019654246947476704018406137295173025356143802884244506562139650899062553665020610996486745393906815231681910043153107162424151964016129624233534575807674842551696437677361796085306511243301811939986394508044934430633673212077705190355064062175439433286578152366660159299293998620516195848184525906925113033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							898953842cd77951e156a99c049858adc3405b1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opsecsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsecsecurity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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