ers1.avigilon.com

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 45:3e:33:a3:49:66:92:de:1b:a4:e5:12:2f:02:85:46 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=ers1.avigilon.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 45:3e:33:a3:49:66:92:de:1b:a4:e5:12:2f:02:85:46
Serial Number (int): 92039701454185040316844761315151086918
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): 6a:72:b7:74:21:1e:7c:0f:fc:75:1e:bb:8e:2c:38:e1:b6:ca:29:e8
Fingerprint (sha256): 35:5a:06:15:db:70:64:bc:29:83:9e:66:57:cc:73:52:ea:73:b9:f1:00:84:13:c9:b9:91:e6:5c:de:fd:71:33

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate ers1.avigilon.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ers1.avigilon.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ers2.avigilon.com
ers1.avigilon.com

Other certificates including the domain name avigilon.com

(limited to 100 certificates)
360in1.net
msan2.myabsorb.com
*.cloud.avigilon.com
imperva.com
360stu.net
imperva.com
360stu.net
info.avigilon.com
360in1.net
incapsula.com
msan2.myabsorb.com
incapsula.com
360in1.net
lrm.avigilon.com
na2.alta.avigilon.com
csa.avigilon.com
akamaisecure6.qualtrics.com
blue.avigilon.com
partner.avigilon.com
ers1.avigilon.com
alerts.avigilon.com
exp1-e.avigilon.com
360stu.net
msan2.myabsorb.com
help.avigilon.com
swdp.avigilon.com
msan2.myabsorb.com
msan2.myabsorb.com
mail.avigilon.com
360in1.net
360stu.net
360stu.net
fs.avigilon.com
360stu.net
exp1-e.avigilon.com
alerts.avigilon.com
expressway.avigilon.com
msan2.myabsorb.com
*.blue.avigilon.com
msan2.myabsorb.com
dev.avigilon.com
360stu.net
mail.avigilon.com
hubble.sandbox.alta.avigilon.com
imperva.com
akamaisecure6.qualtrics.com
developer.avigilon.com
akamaisecure6.qualtrics.com
360in1.net
msan2.myabsorb.com
akamaisecure6.qualtrics.com
partners.avigilon.com
360stu.net
360stu.net
eu2.alta.avigilon.com
eu4.alta.avigilon.com
sdt.avigilon.com
ftp.avigilon.com
360stu.net
imperva.com
csa.avigilon.com
cdn.avigilon.com
ers1.avigilon.com
akamaisecure6.qualtrics.com
sdt.avigilon.com
*.avigilon.com
incapsula.com
*.avigilon.com
sdt.avigilon.com
cdn-cms.avigilon.com
imperva.com
developer.avigilon.com
blue.avigilon.com
api.au.cloud.avigilon.com
*.avigilon.com
incapsula.com
msan2.myabsorb.com
hubble.dev.alta.avigilon.com
360stu.net
avigilon.com
incapsula.com
info.avigilon.com
developer.avigilon.com
eu1.aware.ava.uk
api.us.cloud.avigilon.com
hubble.sandbox.alta.avigilon.com
*.cloud.avigilon.com
app.go.avigilon.com
licensing.avigilon.com
akamaisecure6.qualtrics.com
360stu.net
hubble.sandbox.alta.avigilon.com
msan2.myabsorb.com
imperva.com
akamaisecure6.qualtrics.com
imperva.com
360in1.net
msan2.myabsorb.com
imperva.com
sftp.avigilon.com

Certificate

The complete raw certificate details for ers1.avigilon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIQRT4zo0lmkt4bpOUSLwKFRjANBgkqhkiG9w0BAQsFADBm
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UECxMU
RG9tYWluIFZhbGlkYXRlZCBTU0wxIDAeBgNVBAMTF0dlb1RydXN0IERWIFNTTCBD
QSAtIEczMB4XDTE3MTAwNDAwMDAwMFoXDTIwMTAwMzIzNTk1OVowHDEaMBgGA1UE
AwwRZXJzMS5hdmlnaWxvbi5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQCrRpABCbryfAMW/qG0KQ+NiMH/PLktXXXxC/X/8NymBW3sFoNJitLflirU
KPz/QFpk2PwftjspmS5cnOMPEPdK8l1NgiS2klr1IXlZgElrVXgIT+IHl2vXaJ36
2wkyjuuAWHr8IhcdcOkuOUJBHqWE31HFZfkGY1bpYnuiG0i3lLawbOFir28lo0U+
ezYv12w5SUNNLx/VHV73E8g7iGI40u5GTqAwGSFfzwXzHyOYCCWCSExNaEkdR8Sa
0ttUKGbXvKxnPvIKIHIKMhUzHEHwPZzs/3EctBPM1RRYy1RohTETmK+eYdIwavqd
D2fe+dA6omT2Cfx5HGsQH3wm91mqjNbgOAWAISuDilZEZiEvm8ykV+732D0bRt0g
UrCyVkxru3HRmx+jvOTeWKkekB9YRlIdbr47y4lfeiloy8sMIvmBRnHAsh4Okla3
8QD9TDU1eVmTMFyXgyLHZa/4lmKk8rJ5d7G3lbBJZZAGxTcaXTD60e+G7zg40iNl
VXJNvid8q5IvdeEJWyvQgRVXn0iW5sQ598XgU7RRWVqrMQmZSOzzYMbX5GXnQCu+
iGH7njRJLHdgtvgcJ+1c5AXIBYgGSASQPhGxJiC1yKpa9SnPVw3bOV+ROXzLUn2z
Rsm0LaImc7b5qPZw1qP7Rh58xlx6TgFcXT9Aqkrr5q8og59y0QIDAQABo4IByzCC
AccwLwYDVR0RBCgwJoIRZXJzMi5hdmlnaWxvbi5jb22CEWVyczEuYXZpZ2lsb24u
Y29tMAkGA1UdEwQCMAAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2d0LnN5bWNi
LmNvbS9ndC5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQIBMIGEMD8GCCsGAQUF
BwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRv
cnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29t
L3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB8GA1UdIwQYMBaAFK1lIoWQ0Dvj
oUmLN/nxCx1fF6B3MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8v
Z3Quc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ3Quc3ltY2IuY29tL2d0
LmNydDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyDO
e2QvMRm2HU0c5MvJhBHfn2I/tgjqWp8cw6Zy0hAwPPJrMOfTZdbY9URI239pqwel
JfirpEGgZTo02b/v8yCisM4FuNOGHXRjhHvCmpTD1ixk4dZoWxqclFAZHUwMhO43
KoLqc/5LTOhj6TBfLSXHMGZZYVJePKKxt8ipnoj2DYNFaYe5QOLzS7hBZe+YD7EM
EyWYCZo+TRw459Tw4ORKp5KoQPTQM0sscMy1o//kursT4PVzveAM+eW1cbjJF9iu
rnCDdsTwQgAYT6+bMxRTbNRwHkx8JB3nJu2NwDtNkosULgdad+SCHmD8V2aCNmzY
/rlYRlOoqvLC0Hgk3g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92039701454185040316844761315151086918
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ers1.avigilon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 698743627620372045234631815358412735003396025478218268924724686159537198248016829975026053890587767862099212356737411059421991148858201150775204167745183353999241065708426026998755140147515700493041614521757917351635608413976661338524545368606988559609063594851229082502944904678961290564870237633959328770661560754574788705731914167321077218641111009328446428052614907209194068402705734784282868377138379272931764348567248271930684600012664218669038812478363053957215467322561715750652358147014498450035340604413204995458748827868265402605246252786272251115576971767868544292309140354218355638637674909998237016405743898975413819230010957506850139068954860602388541407846548673385283470643295274305793590776925116905570452766900293431212578189986148645172423022450241121077973819377824986744459032959266238259258228097545168053557586810732619854905007500055268988905074524796647070411755825864656608621538959674241236046607364466525476492455247737766837814307654317619625402845241718916691174511590673451506224284224090898611122466013117792524431295981330951142271237547182223146498371225985643563458831517305108743485354068033063914389442742640005409665893754319162081315724412965191327127948190783674915807821484370116448064860881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ers2.avigilon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ers1.avigilon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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