www.magentammt.nl

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number f3:bb:eb:29:9f:f7:07:25:f0:72:90:bd:83:1d:33:72 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.magentammt.nl

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): f3:bb:eb:29:9f:f7:07:25:f0:72:90:bd:83:1d:33:72
Serial Number (int): 323978132152398846105007447409275253618
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8e:9e:1b:a8:9a:fe:66:05:a2:12:00:b3:0e:bb:9a:1f:86:de:45:40
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 64:2f:8c:ce:29:3d:b1:8b:9b:55:db:9d:21:93:1c:32:dd:8c:09:1f
Fingerprint (sha256): 2f:ae:ed:43:8e:54:db:f8:4b:84:96:95:1d:20:fd:7a:9a:a9:02:c9:93:e8:13:a5:1b:5c:08:68:ab:13:dd:47

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate www.magentammt.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.magentammt.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.magentammt.nl
magentammt.nl

Other certificates including the domain name magentammt.nl

(limited to 100 certificates)
fdus-27.freshdesk.com
helpdesk.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com
www.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
www.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
www.magentammt.nl
helpdesk.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
helpdesk.magentammt.nl
www.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com
fdus-27.freshdesk.com
fdus-27.freshdesk.com
fdus-27.freshdesk.com
fdus-27.freshdesk.com
fdus-27.freshdesk.com
helpdesk.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
helpdesk.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
fdus-27.freshdesk.com
fdus-27.freshdesk.com
fdus-27.freshdesk.com
www.magentammt.nl
helpdesk.magentammt.nl
helpdesk.magentammt.nl
helpdesk.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
www.magentammt.nl
fdus-27.freshdesk.com
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com

Certificate

The complete raw certificate details for www.magentammt.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgIRAPO76ymf9wcl8HKQvYMdM3IwDQYJKoZIhvcNAQELBQAw
gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE
AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0yMjEwMjQwMDAwMDBaFw0yMzExMjIyMzU5NTlaMBwxGjAYBgNVBAMTEXd3
dy5tYWdlbnRhbW10Lm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
s/ZtftXQy5qBEuGEnHN9dlxin+6xCgIWBIrj5eqzwp8ZWguKIXHjkW/mWMg9rIgC
pOxCMAtZmGMYF/GAhlNVpcTClqe9wMhn3BZ4P93MpKE/q7zaocCmSkMQPZ9L+8xF
v4VB4fB+MhUopTOUrNwZ6WCAWSgR6yNGFafhfdHQcSP88jRHlhROx8RRV/bkmquR
Frqsa3w0yUgrNAfUWg/DTa1yKXHp05KP+VPGel1zmfDG4cZbYG8UFuOAizoBR4g0
ZtdGurfksHMVRO/TrXju9F9mQnnA/7bFa8DDh4eheLXhQFHWR//x7W3/LLyGSqAz
Ni+oMgJJ2Nj7x69bByQGIQIDAQABo4IDBDCCAwAwHwYDVR0jBBgwFoAUjYxexFSt
iuF36Zv5mwXhuAGNYeEwHQYDVR0OBBYEFI6eG6ia/mYFohIAsw67mh+G3kVAMA4G
A1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgIHMCUwIwYIKwYBBQUH
AgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECATCBhAYIKwYBBQUH
AQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3Rp
Z29SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCMGCCsGAQUF
BzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTArBgNVHREEJDAighF3d3cubWFn
ZW50YW1tdC5ubIINbWFnZW50YW1tdC5ubDCCAYAGCisGAQQB1nkCBAIEggFwBIIB
bAFqAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGECbaOpAAA
BAMARzBFAiEArzRLJguA4iqjqsawbVn9Ji3UVeF3mRMaZeqfereNK1wCIGbnf2FN
Z6N4uaOEbB5j9feIDId4TAYYVoOjY3MRvuW7AHcAejKMVNi3LbYg6jjgUh7phBZw
MhOFTTvSK8E6V6NS61IAAAGECbaObAAABAMASDBGAiEA0PFxPAzEbFtcHbN8up6m
kSrq7ZSBDfVccnystL+6H9ICIQCeKjjITDsw1Y+cdn4jKhsbwn7KG3Mcoa8HJi9Z
I5rjBAB3AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABhAm2jk0A
AAQDAEgwRgIhAJ7hCzJICndf5mVxlSF3aYdeMzQc9xNsdeQ9h3OtdHhiAiEA4zl2
DxRs8xATKn5qSRMFWCnscBTEnis1pC0P145NT1MwDQYJKoZIhvcNAQELBQADggEB
AM1axLvajBy2qVzTtVyWPjvb69xfj8xa2jKXknprtr6+ZX8Va/oPnaS9QUxU9moK
U87mlVWIPJ/w2iLrhbm6a+VVsgWKDImhf+z0cuAJO60rmBdmYb2aV9L6LWJyjS05
dDigEKsYE3fPjUZ7gP+DEGh8n0dh90yO1vL8FZpPYR9MwkcVTKsHDx29iXoQt0fB
rfvNuS5mNCcgvKbsip+0gLh88GbiIa4a+4ohoM6JatrCokEBr97En8yKiAtoHSic
clhahWyI2knSGmO8jhlRzPxPbR1NP5kZ9RyHmCz1Jf11C+D41UW3+76nMFuduwQe
ZCcnPRvG3spEMeMg+Zs1xyQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/ZtftXQy5qBEuGEnHN9
dlxin+6xCgIWBIrj5eqzwp8ZWguKIXHjkW/mWMg9rIgCpOxCMAtZmGMYF/GAhlNV
pcTClqe9wMhn3BZ4P93MpKE/q7zaocCmSkMQPZ9L+8xFv4VB4fB+MhUopTOUrNwZ
6WCAWSgR6yNGFafhfdHQcSP88jRHlhROx8RRV/bkmquRFrqsa3w0yUgrNAfUWg/D
Ta1yKXHp05KP+VPGel1zmfDG4cZbYG8UFuOAizoBR4g0ZtdGurfksHMVRO/TrXju
9F9mQnnA/7bFa8DDh4eheLXhQFHWR//x7W3/LLyGSqAzNi+oMgJJ2Nj7x69bByQG
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323978132152398846105007447409275253618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.magentammt.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22718174625020081949294605238514532906200120696444666638381345233462855650619492338783895410234687988411106437604762519570055985813885371932902791004507161418380651534525343880705382603413206142751854331688279695498742777788198994525590451240321062135712131418722970183429904281308027206858209889815644744733380115562591697391330124022536015843231868549210199412744473991493754120424744342382908542361397372133892165625725073578773828955479379066071009987793735242557016312345109712801648385265732952408444299455266205492641861509970078280357633202188741071537401471404335103501965562921812658952185817170473113617953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e9e1ba89afe6605a21200b30ebb9a1f86de4540
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magentammt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magentammt.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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