*.truman.edu

- Truman State University -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0f:70:b1:0d:0e:6c:4e:44:b1:53:90:e2:53:18:cf:6a was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Truman State University

Organization: Truman State University
State / Province: Missouri
Locality: Kirksville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:70:b1:0d:0e:6c:4e:44:b1:53:90:e2:53:18:cf:6a
Serial Number (int): 20523548205859321556813136499729551210
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6c:4c:e7:6f:96:85:07:f3:6c:fd:4b:b8:25:34:3e:39:6b:91:d1:2f
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 32:02:00:7d:75:0e:48:2e:aa:23:27:76:37:0b:29:36:aa:31:c0:ae
Fingerprint (sha256): 35:43:8a:b4:57:1a:fd:88:7e:6d:11:38:7d:4d:59:2d:0a:41:ae:67:94:2e:16:1b:6d:ea:6c:47:ad:0a:b2:93

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.truman.edu

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.truman.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.truman.edu
email.truman.edu
exchange.truman.edu
topaz.truman.edu
truman.edu

Other certificates including the domain name truman.edu

(limited to 100 certificates)
truview.truman.edu
*.truman.edu
cluster2.technolutions.net
*.truman.edu
truview.truman.edu
*.truman.edu
*.truman.edu
cluster2.technolutions.net
connect.truman.edu
connect.truman.edu
cluster2.technolutions.net
*.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
truman.edu
admin.archives.lindenwood.edu
*.truman.edu
*.truman.edu
bb-learn.truman.edu
cluster2.technolutions.net
ruby.truman.edu
shale.truman.edu
*.truman.edu
*.ctpprojects.com
connect.truman.edu
barracuda.truman.edu
cluster2.technolutions.net
cluster2.technolutions.net
*.truman.edu
bb-web.truman.edu
truconnect.truman.edu
*.truman.edu
*.truman.edu
truconnect.truman.edu
barracuda.truman.edu
tsu-cms.truman.edu
*.ctpprojects.com
*.truman.edu
*.truman.edu
*.ctpprojects.com
truview.truman.edu
cluster2.technolutions.net
*.truman.edu
*.ctpprojects.com
*.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
admin.archives.lindenwood.edu
*.truman.edu
cluster2.technolutions.net
cluster2.technolutions.net
cluster2.technolutions.net
*.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
cluster2.technolutions.net
*.truman.edu
cluster2.technolutions.net
*.truman.edu
cluster2.technolutions.net
cluster2.technolutions.net
*.truman.edu
webwork.truman.edu
admin.archives.lindenwood.edu
*.truman.edu
*.truman.edu
connect.truman.edu
*.truman.edu
*.truman.edu
cluster2.technolutions.net
*.truman.edu
*.truman.edu
*.truman.edu
*.sites.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
connect.truman.edu
bb6.truman.edu
*.truman.edu
*.ctpprojects.com
*.truman.edu
connect.truman.edu
*.truman.edu
*.truman.edu
truconnect.truman.edu
secure.truman.edu
*.truman.edu
admin.archives.lindenwood.edu
*.truman.edu
cluster2.technolutions.net
truconnect.truman.edu
cluster2.technolutions.net

Certificate

The complete raw certificate details for *.truman.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD4oJboKSnHIiK2GrIQV
t+pmBTEIFrzTI140ZcLCSAUrwt0TS6ADaPoXqT1cQjFYZQl4vvZqVg36QOEuYqD0
euaTDPDhZPl4q0vk2OcmV7JVBpCFz2otPa0MUp6Gh/AFsZ1PGAC/aZ1xH6V/91HD
NkT5rac8IJWAg5MtlaTyQpn117AL8TXNht90bZwj/do15SshrQCYcV36gtd5v8ku
6YkloP4oeD+wfdLsVWk1YQkZaU/j0ytJlup9qNFUEOIMfGWNvnLKUa/qSzK7GpbD
vt8ctlzyfF5ZI9YRaLxk01Cb77qUan5zv7vsXASO3P2LZFdSl/GxuAkbm0FtfH/w
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20523548205859321556813136499729551210
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kirksville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Truman State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.truman.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23258498786855962850489190019708138048781281929283128136126114600861785018924362192156605744210282444610979935680524677271744591302322094786342694179097820442683143063756840975109914257487303544937665709671893352610557905583100753481592844273535390545513130107694792973485128393345373203885555424376999762611765865014140452939855659235101839810022159977162941440854395291393305717963549874849825319117595312471477154927760716611425546553785313971234070442000730015140183327834660310650353633569061876084614363361469735093578446408401987639958696544922079693250092947652738907908617608417151859814554590840513437364343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c4ce76f968507f36cfd4bb825343e396b91d12f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.truman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.truman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topaz.truman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truman.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017232e0e2f00000040300473045022100e981436a365f45fa448b097e82a04eb806636ab1c20668d11f397da5d29f362502207b001d22660061a7f1dec94136f474c1b6b17c79bd0bc742d528851105b59ae00075002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f020000017232e0e30e000004030046304402200b55e13f0dd4c0ec760f8618f6838a64fbeed248b9e49b445b9df731fdd6690502206c47c56deb999d9e8ba25ea33c3e6d30a60ee2cafd7d8d18a47a990954cec22b00760051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017232e0e35c0000040300473045022100bb8f8777d8a9273864285f28f2cee0ba860156de2447ce67874e8c5d4a32368502200764df3f6c27dc0f5326a1cfbe4f5a24d5d52b8d3d9f9d77ec0b2e4d2d75dade
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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