www.jcu.edu.au

- James Cook University -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:8d:a6:51:4c:39:c9:40:f9:cf:ee:94:f2:21:90:8f was issued on by DigiCert Inc.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

James Cook University

Organization: James Cook University
State / Province: Queensland
Locality: Douglas
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:8d:a6:51:4c:39:c9:40:f9:cf:ee:94:f2:21:90:8f
Serial Number (int): 14027767135968659169758396067245822095
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0c:31:75:67:db:94:72:3f:41:71:28:83:55:3e:91:1e:31:bd:b4:5a
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): d7:c6:11:87:76:d0:a5:f2:14:ca:8f:9b:96:fe:1d:e7:14:3a:75:7c
Fingerprint (sha256): 35:f6:0c:74:61:62:e4:6c:4e:c5:ac:56:5b:71:79:4a:ee:9f:4d:40:79:ca:44:8a:16:12:10:f0:0b:5d:0c:59

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.jcu.edu.au

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jcu.edu.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jcu.edu.au
jcu.edu.au
www.jcu.edu.sg
jcu.edu.sg
search.jcu.edu.au
www.ath.org.au
ath.org.au
gmt.edu.au
www.gmt.edu.au

Other certificates including the domain name jcu.edu.au

(limited to 100 certificates)
micrrh.jcu.edu.au
staff.jcu.edu.au
journals.jcu.edu.au
experience.jcu.edu.au
experience.jcu.edu.au
staff-test.jcu.edu.au
online.jcu.edu.au
*.elibrary.jcu.edu.au
libguides.jcu.edu.au
tdc-f5-2-prd.jcu.edu.au
digitalhomestead.hpc.jcu.edu.au
aithmtrf.jcu.edu.au
fortianalyzer.jcu.edu.au
www.hpc.jcu.edu.au
thescienceplace.jcu.edu.au
myregister.jcu.edu.au
researchonline.jcu.edu.au
nvrtsv05.jcu.edu.au
sin-fg.jcu.edu.au
thescienceplace.jcu.edu.au
aithmtrf.jcu.edu.au
alumni.jcu.edu.au
notifications.awstest.jcu.edu.au
san-14-s12.tlsprovisioning.exacttarget.com
learnjcu.jcu.edu.au
camtasiarelayv4.ad.jcu.edu.au
mky-fg.jcu.edu.au
ccdp.jcu.edu.au
secure.jcu.edu.au
secure.jcu.edu.au
eresearch.jcu.edu.au
ap-southeast-2-san1.blackboard.com
vault-bdc-test-2.dc.jcu.edu.au
crrh.jcu.edu.au
journals.jcu.edu.au
ap-southeast-2-san1.blackboard.com
thescienceplace.jcu.edu.au
aithmtrf.jcu.edu.au
plone.jcu.edu.au
ap-southeast-2-san1.blackboard.com
fintestapp.jcu.edu.au
ap-southeast-2-san1.blackboard.com
thescienceplace.jcu.edu.au
git.jcu.edu.au
xargo.cairnsinstitute.jcu.edu.au
ccdp.jcu.edu.au
ap-southeast-2-san1.blackboard.com
san-14-s12.tlsprovisioning.exacttarget.com
research.jcu.edu.au
plone.jcu.edu.au
exams-dev.jcu.edu.au
xargo.cairnsinstitute.jcu.edu.au
sott.jcu.edu.au
aithmtrf.jcu.edu.au
www.jcu.edu.au
libserver.jcu.edu.au
ascender-dev04.jcu.edu.au
learnjcu-stage.jcu.edu.au
www.hpc.jcu.edu.au
thescienceplace.jcu.edu.au
eresearch.jcu.edu.au
student.vpn.jcu.edu.au
learnjcu.jcu.edu.au
ictis.vpn.jcu.edu.au
pexip-sng-conf-node.vmr.jcu.edu.au
international.jcu.edu.au
eresearch.jcu.edu.au
thescienceplace.jcu.edu.au
journals.jcu.edu.au
aithmtrf.jcu.edu.au
nvrcns02.jcu.edu.au
cyclonetestingstation.com.au
www.hpc.jcu.edu.au
ccdp.jcu.edu.au
eresearch.jcu.edu.au
thescienceplace.jcu.edu.au
selection.jcu.edu.au
aithmtrf.jcu.edu.au
libcal.jcu.edu.au
ap-southeast-2-san1.blackboard.com
aithmtrf.jcu.edu.au
camera-streams.jcu.edu.au
thescienceplace.jcu.edu.au
aithmtrf.jcu.edu.au
vpn.jcu.edu.au
thescienceplace.jcu.edu.au
aithmtrf.jcu.edu.au
aithmtrf.jcu.edu.au
egru.jcu.edu.au
s3.jcu.edu.au
stmarks2.jcu.edu.au
thescienceplace.jcu.edu.au
aithmtrf.jcu.edu.au
sb01-2-wc1.jcu.edu.au
stp.hpc.jcu.edu.au
my.jcu.edu.au
libguides.jcu.edu.au
thescienceplace.jcu.edu.au
staging-aims.jcu.edu.au
flashstream1.jcu.edu.au

Certificate

The complete raw certificate details for www.jcu.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qNck4g1Ky5emnl5M1+2
Wikl4ggg1wx/ZM51KnAsjpBpgEcMcTkirH8Cj/woPI6Ehp87KzvW4i4QVssjaguV
ffe8qWKAI7yyvOxPxKXEvOslc160yMyXXWEDAhFiZtyjfwfHaRkofOdjzRlVYHUE
dQ7AgVQHiVvlqd7hROM99TGhJZGFFoM9hFXfl8C75siSFRW8585oGcz6/yTwJmMi
R0fe6jCoZMvz+i3P/OH/BgKoXzRunuxF01o/Dg7vnqjwDYvJc0NPn63+DUjDnUnC
WPok34DwSCp+3FxIqKPiD4yYBIbPmy1Vb6nw90jcShuB3OAFVZfvfDtxui/F4wLZ
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14027767135968659169758396067245822095
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Queensland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Douglas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'James Cook University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jcu.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30630226422032333010100377063741972225901129326805132904324670127718090559786725623711441149893856879318296940175495172281426757593172400782503394140483022901896785609300166884085779978883637233430389735614440592224306257281825963356858317074215088098305214910506126139342703374306271414774763529876927534045098918907659224208680805618049542303496108185206891867812987271734283213806030837262476539534719002968767491194201177571264024576269747290351597752859293916725180705524597942264032002762781916415289313054403230641813727466706589042964375441511892373251856864232353087547814207472381636774884814576262519642551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c317567db94723f41712883553e911e31bdb45a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcu.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcu.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcu.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcu.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.jcu.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ath.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ath.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmt.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmt.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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