partner.outlook.cn

- Shanghai Blue Cloud Technology Co. Ltd -

Issued by DigiCert Cloud Services CA-1

About this certificate

This digital certificate with serial number 06:90:01:e2:c9:ac:81:14:83:f4:f3:10:df:67:a9:23 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Shanghai Blue Cloud Technology Co. Ltd

Organization: Shanghai Blue Cloud Technology Co. Ltd
State / Province: Shanghai
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:90:01:e2:c9:ac:81:14:83:f4:f3:10:df:67:a9:23
Serial Number (int): 8723096972727874070125692578506975523
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a3:1f:82:7f:ab:52:c1:97:ea:69:e0:a6:e5:26:53:0d:73:ba:23:9e
AuthorityKeyId: dd:51:d0:a2:31:73:a9:73:ae:8f:b4:01:7e:5d:8c:57:cb:9f:f0:f7

Fingerprint (sha1): 97:ce:76:8e:21:e0:cd:19:b9:ff:d2:ea:c1:c9:38:32:cb:5f:7d:c7
Fingerprint (sha256): 3a:07:db:90:d8:49:c1:e7:ec:c3:a8:f5:35:4f:04:76:1a:1f:01:de:e4:c5:6a:25:99:d3:c2:16:f8:68:4c:95

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertCloudServicesCA-1.crt

Revocation information

OCSP Server: http://ocspx.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl

Check the revocation status for certificate partner.outlook.cn

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for partner.outlook.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

partner.outlook.cn
*.partner.outlook.cn
*.nrb.footprintdns.com
attachment.outlook.office365-net.cn
attachments.office365-net.cn

Other certificates including the domain name outlook.cn

(limited to 100 certificates)
partner.outlook.cn
o365IPpassivemon.protection.partner.outlook.cn
*.mail.protection.partner.outlook.cn
test.partner.outlook.cn
ome.partner.outlook.cn
transport.outlook.cn
*.mail.protection.partner.outlook.cn
eopsec.protection.partner.outlook.cn
r4.partner.outlook.cn
xdfs.protection.partner.outlook.cn
exap-int.um.prod.partner.outlook.cn
cdn03.ccedge.net
cdn03.ccedge.net
tafe.chntrs07.partner.outlook.cn
aad.gal.fastprofileapi.outlook.cn
*.oscs.protection.outlook.cn
partner.outlook.cn
outlookwebauthentication.outlook.cn
cdn03.c3edge.net
test11.partner.outlook.cn
*.cdn.partner.outlook.cn
*.cdn.partner.outlook.cn
exoglsauth-v2.partner.outlook.cn
sti.coreauth.outlook.cn
auditnrt.protection.partner.outlook.cn
diuser.partner.outlook.cn
*.safelinks.protection.outlook.cn
TEST2.protection.partner.outlook.cn
test5.partner.outlook.cn
uminternal.um.prod.partner.outlook.cn
test17.partner.outlook.cn
test1.protection.partner.outlook.cn
*.mail.protection.partner.outlook.cn
*.oscs.protection.partner.outlook.cn
test121.partner.outlook.cn
informationProtectionKeyVault.protection.partner.outlook.cn
cdn02.c3edge.net
cdn03.ccedge.net
TEST3.PARTNER.OUTLook.cn
uminternal.um.prod.partner.outlook.cn
test.partner.outlook.cn
owacek.partner.outlook.cn
*.oscs.protection.outlook.cn
bitlocker.protection.partner.outlook.cn
ic3he-ge.teams.microsoftonline.cn
gallatin-lockbox.chntrs07.partner.outlook.cn
*.partner.outlook.cn
eop-chn02.gallatin.protection.partner.outlook.cn
partner.outlook.cn
SubstrateSettingsObjectStore.partner.outlook.cn
msexchangetransport.protection.partner.outlook.cn
cdn03.c3edge.net
*.protection.partner.outlook.cn
eopauth.protection.partner.outlook.cn
exap.um.partner.outlook.cn
exap.um.partner.outlook.cn
partner.outlook.cn
*.protection.partner.outlook.cn
tafe.chntrs07.partner.outlook.cn
transportoriginatingsmtpprobe.protection.partner.outlook.cn
auth.protection.partner.outlook.cn
partner.outlook.cn
lamconfig.partner.outlook.cn
hxservice-gallatin.outlook.cn
xsi.partner.outlook.cn
authgls.protection.partner.outlook.cn
test.partner.outlook.cn
sdxd.protection.partner.outlook.cn
*.mail.protection.partner.outlook.cn
schedulinggallatin.partner.outlook.cn
xdfs.protection.partner.outlook.cn
auth.protection.partner.outlook.cn
test4.partner.outlook.cn
bitlocker2.protection.partner.outlook.cn
copytosentitems.outlook.cn
xcd.protection.partner.outlook.cn
eop-csam.protection.partner.outlook.cn
test131.partner.outlook.cn
owaauth.partner.outlook.cn
test2.protection.partner.outlook.cn
*.oscs.protection.partner.outlook.cn
TEST3.PARTNER.OUTLook.cn
torus.lockbox.signer.v2.partner.outlook.cn
test.test.partner.outlook.cn
exoprovtoo365.partner.outlook.cn
test.microsoftonline.cn
msosyncservice.partner.outlook.cn
test.microsoftonline.cn
*.protection.partner.outlook.cn
eop-csam.protection.partner.outlook.cn
msexchangetransport.protection.partner.outlook.cn
gallatincosmosproxy.partner.outlook.cn
16.partner.outlook.cn
exoauth.partner.outlook.cn
test18.partner.outlook.cn
partner.outlook.cn
EmergencyPatch.CHNMGT03.partner.outlook.cn
exap.um.partner.outlook.cn
IPReputationObjectStore.partner.outlook.cn
test.partner.outlook.cn

Certificate

The complete raw certificate details for partner.outlook.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU6vNFrj8IagrvXXg4zJ
lQaLl3sOxuxzT6TssJHAggXYxxv8ingfH5y+mhpj+eUj0/wRsujWaF+kNwTUDjcF
N95Ayc3FEVe5CrIocmaC7hMXMibij1+AZqI0qRroBF6SPrBuDSfEu42ia0T6hU7s
7oq6p49E0qSOZDAcglghq/08ptYlOLaI3vVEoi3nDwijxK/qqU9A2nIQbA8VWE8Q
nyj/d84peYpWR1+Cxa6hr6GaBKy9NOzJ8XX+Me87bUR24jTXJEY9xaQ5dfNfRzED
ROM1lS2mQeHwtqNxhmGZAaseFhU8KWCfjDa9gvh2B6oJzU0pUZ8GwEo6xtkg8+rq
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8723096972727874070125692578506975523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Cloud Services CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai Blue Cloud Technology Co. Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'partner.outlook.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23897840358710873844651742096133691059027535307080150647510495084973969427369386812342293074175134832308777498952504599570383083035562728610066534824054384862658462603248109097525314138155124780618524287308074632543805630448219570338593828958885873717749329100854817776718217099946536116794516139404729114176809931884712434679105124390939501790314737979988566418839557739176883746646026497291194151711457187646053549404330811078073525814492508696727838668523126375495330905814431448909251360469809914349549057277189728385024125411248868658628099697634652709180477416895209735670878479910213082986720930317329419135629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a31f827fab52c197ea69e0a6e526530d73ba239e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.outlook.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partner.outlook.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrb.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attachment.outlook.office365-net.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attachments.office365-net.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocspx.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertCloudServicesCA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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