www.lefrecce.it

- FERROVIE DELLO STATO ITALIANE S.P.A. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:22:8f:5d:25:b1:2f:22:00:29:7b:4e:87:74:30:88 was issued on by DigiCert Inc.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FERROVIE DELLO STATO ITALIANE S.P.A.

Organization: FERROVIE DELLO STATO ITALIANE S.P.A.
State / Province: Lazio
Locality: Roma
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:22:8f:5d:25:b1:2f:22:00:29:7b:4e:87:74:30:88
Serial Number (int): 14800953811281842568653161532243587208
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 76:8a:3c:5c:90:4a:f8:46:fe:a5:49:26:69:76:00:68:1b:98:8e:0c
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): f8:c5:8c:52:b7:b8:71:42:a3:e5:1b:56:47:b8:15:4c:32:e5:f9:74
Fingerprint (sha256): 39:02:a1:e7:01:e7:82:9a:60:29:6c:3a:cd:59:d9:c0:3c:34:5f:56:32:7b:33:60:fe:d0:b6:01:cd:9d:0c:6a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.lefrecce.it

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lefrecce.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lefrecce.it
www.trenitaliatper.com
www.thello.fr
www-int.trenitaliatper.com
www-corr.trenitaliatper.com
www-cert.trenitaliatper.com
thello.fr
portaleapi.lefrecce.it
portaleapi-certificazione.lefrecce.it
portaleapi-cert.lefrecce.it
lefrecce.it
consumer-apimanagement.lefrecce.it
apimanagement.lefrecce.it
apimanagement-cert.lefrecce.it
api.trenitaliatper.com
api.lefrecce.it
api-int.trenitaliatper.com
api-corr.trenitaliatper.com
api-cert.trenitaliatper.com
api-cert.lefrecce.it
agenzia.trenitalia.com
agenzia.cert.trenitalia.com

Other certificates including the domain name lefrecce.it

(limited to 100 certificates)
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
extvpn01.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
www.lefrecce.it
*.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
*.lefrecce.it

Certificate

The complete raw certificate details for www.lefrecce.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfg+CbXmHFVrGIRU7CU8
Rf2kHldAz9wMWkRNAeYtv9LVBgl8m34cXtbc4NgYDGVE4ZyosrgGcdVRYGGCo/UH
KIPUkPubZZ/Uu7HQk56XA/B7WDH+Ea+oU563lqK7BOvvUe9s8J/SxKdp3NnCpb7x
haha8Qgl2ykE60frdYrXmnJ6MPie7/Oh6v4We1yiS2bKbsTOvnZjjw1oz2uqNrEy
gK1FMWsdfiNXnAgNrMVvBSjUqksrSi7nvz34MMJWkgyuSoSdmB4AYjdWidzp3zNf
NGQbDi3/02jvwtzhFVXf7iGPisDvrjcZ0JnEL/KgjzzMee7c98WCkQEQnVXXLgKi
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14800953811281842568653161532243587208
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lazio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FERROVIE DELLO STATO ITALIANE S.P.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lefrecce.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21456686397373037724921791744621684933937013714003394822117934443152159410005964056149342036636528948939181731726089991469929334160618604194045502030486476079634009784538046089356243291625731179832119343316990532152186207128354243603477174246825972201337448368084774929041359548623349485510817227199164841558868236458431717250849137700668354871173104928924007785094614726002748557718672948744668248020922291129959898573939518458532512959859429177446457336787945407312964477667693308439903932643892149806906945598775926172025455566865454666449004352003283552004678770568300832883326724905622028051954975008087112590079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							768a3c5c904af846fea54926697600681b988e0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (559 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thello.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-int.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-corr.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cert.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thello.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaleapi.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaleapi-certificazione.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaleapi-cert.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumer-apimanagement.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apimanagement.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apimanagement-cert.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-int.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-corr.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-cert.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-cert.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenzia.trenitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenzia.cert.trenitalia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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