ncp-nexsign.samsungsds.com

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 08:a3:de:15:b7:33:a6:19:c8:4d:b9:60:29:d6:14:19 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ncp-nexsign.samsungsds.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:a3:de:15:b7:33:a6:19:c8:4d:b9:60:29:d6:14:19
Serial Number (int): 11484672769642123759610781209965499417
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3f:b4:7e:b3:67:25:48:d7:a0:b1:54:11:ea:96:07:33:6c:ec:aa:47
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 97:b7:58:38:b1:f6:c4:34:12:3f:94:ec:b2:01:fb:ee:ed:d3:e5:f6
Fingerprint (sha256): 2e:d7:ed:f9:4a:0a:31:03:5e:48:e0:9b:da:d1:60:f2:80:ad:3e:f9:e9:73:bb:88:98:c9:04:38:12:30:07:98

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate ncp-nexsign.samsungsds.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ncp-nexsign.samsungsds.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ncp-nexsign.samsungsds.com

Other certificates including the domain name samsungsds.com

(limited to 100 certificates)
support100.cdnetworks.net
devplus.samsungsds.com
support100.cdnetworks.net
nexprimehcmstg.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
*.brightics.samsungsds.com
partner.samsungsds.com
support100.cdnetworks.net
images.mkt-email.samsungsds.com
imperva.com
support6.cdnetworks.net
image.samsungsds.com
support100.cdnetworks.net
*.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
*.genai-fin.samsungsds.com
us.brighticsiot.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
*.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net
*.samsungsds.com
*.samsungsds.com
stg-us.brighticsiot.samsungsds.com
support99.cdnetworks.net
support100.cdnetworks.net
*.fabrix-s.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
*.fabrix-e.samsungsds.com
agmsds.samsungsds.com
support100.cdnetworks.net
support99.cdnetworks.net
support100.cdnetworks.net
image.samsungsds.com
image.samsungsds.com
multicampus.com
support100.cdnetworks.net
support99.cdnetworks.net
imperva.com
*.samsungsds.com
ncp-nexsign.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
multicampus.com
partner-network.samsungsds.com
support100.cdnetworks.net
stg-us.brighticsiot.samsungsds.com
image.samsungsds.com
support100.cdnetworks.net
partner.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
*.samsungsds.com
smart-safety.samsungsds.com
support6.cdnetworks.net
support99.cdnetworks.net
image.samsungsds.com
*.samsungsds.com
support100.cdnetworks.net
support99.cdnetworks.net
gdci.devops.samsungsds.com
support100.cdnetworks.net
imperva.com
support6.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net
mypc-disk.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net
support99.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net
ncp-nexsign.samsungsds.com
image.samsungsds.com
support99.cdnetworks.net
cloud.samsungsds.com
mypc-disk.samsungsds.com
imperva.com
support99.cdnetworks.net
support99.cdnetworks.net
*.genai-s.samsungsds.com
rnd365sw.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net
cloud.samsungsds.com
lookin.samsungsds.com
support100.cdnetworks.net
lookin.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net

Certificate

The complete raw certificate details for ncp-nexsign.samsungsds.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgIQCKPeFbczphnITblgKdYUGTANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MTkxMDExMDAwMDAwWhcNMjAxMjA5MTIwMDAwWjAlMSMwIQYDVQQDExpuY3AtbmV4
c2lnbi5zYW1zdW5nc2RzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMjOrYZmvecWUF/3EuXJKEU2+ttA47WBO9PaaXN3tgfU97Q6UWM0guldc8Tr
TPUCfK36UkhDMrtEZ5eIiZsrB+CVJ7Fu5orBWqnsgk5NVfTjnuxdpUgp3oh4Lcy1
JEMner+stWbmG55Q7S3xeHACMVsFuZZ7+IWpfh0XyGE25OQrvQCVjDYrMM+iZxW2
R1QzPF7VLYfwr3J/Zam+FUAiaUbosIOgpsBpBtwZ6sZcCW83gOdC1oMMRrPpr56Z
R8+ubF8UShSLZtMG/+TUeVexPethl/KBqrJtdYhRVJm9TN0B1hk8nghPLmQpeDW8
8dOUCsVldq/gzfPIchWJaSipxvUCAwEAAaOCAbUwggGxMB8GA1UdIwQYMBaAFKPI
XmVU5TB4wQXqBwpqWcy5/t5aMB0GA1UdDgQWBBQ/tH6zZyVI16CxVBHqlgczbOyq
RzAlBgNVHREEHjAcghpuY3AtbmV4c2lnbi5zYW1zdW5nc2RzLmNvbTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDoGA1UdHwQz
MDEwL6AtoCuGKWh0dHA6Ly9jZHAudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIwMTgu
Y3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAECMCowKAYIKwYBBQUHAgEWHGh0dHBz
Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIBMG8GCCsGAQUFBwEBBGMw
YTAkBggrBgEFBQcwAYYYaHR0cDovL3N0YXR1cy50aGF3dGUuY29tMDkGCCsGAQUF
BzAChi1odHRwOi8vY2FjZXJ0cy50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5j
cnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAwJkxbSUFP8mMJ+wfwyfoeKlmB0iFQaFB7A1aAs4ppUp4OZM7DMMoiX5e
zRyJ/Um6XuXhdIkFDDy8kDyBP4EVQJ9L+GWV4p7GcjDozBk7HmT3Y5L9TAqIs3Ux
4R9HZWfV/ii+4DmRlhsX9KF+k9dvEArJULsXrYGMR7URkLoeSa73qnrYaTrKjlzY
f/HpOenVmr6xdUR7QrSRr5/yUuGFJzJVnpHXqbAvjHXqR1bH+0QxPm3T16ZFCSzN
r++GkcqvNYkz2zwcqqgyh8cQJpF86QMsNrVxB/xMY7GhI+TSlj9S3hvIro+i29ys
u1v3G/qvXpjTZtJTDlQFdHsjJUZT/g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM6thma95xZQX/cS5cko
RTb620DjtYE709ppc3e2B9T3tDpRYzSC6V1zxOtM9QJ8rfpSSEMyu0Rnl4iJmysH
4JUnsW7misFaqeyCTk1V9OOe7F2lSCneiHgtzLUkQyd6v6y1ZuYbnlDtLfF4cAIx
WwW5lnv4hal+HRfIYTbk5Cu9AJWMNiswz6JnFbZHVDM8XtUth/Cvcn9lqb4VQCJp
Ruiwg6CmwGkG3BnqxlwJbzeA50LWgwxGs+mvnplHz65sXxRKFItm0wb/5NR5V7E9
62GX8oGqsm11iFFUmb1M3QHWGTyeCE8uZCl4Nbzx05QKxWV2r+DN88hyFYlpKKnG
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11484672769642123759610781209965499417
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ncp-nexsign.samsungsds.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25349577630681477064302037995632518305118161458722238898229296197331678167668162132842227392767358643561688381852685757394833099482882946754501733789026653486438242387277743283577310336579020950960589993053766219351119659547064385541526521825844049900205133639690323454495228581603353146830234613600999736382360460222955095838840200836207876566365326070366984626828761191277396286389209981015415263674654703478674521290949681055452983358306831369591571739596529472656751263793895159423590319807211791281777339723280064049113804287908625693021719792825567449675893682528874373918809347837597272651959911376077030278901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3fb47eb3672548d7a0b15411ea9607336cecaa47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncp-nexsign.samsungsds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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