purinaorderfulfillment.landolakes.com

- LAND O LAKES INC -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number d5:fc:0b:91:c5:05:3d:65:00:00:00:00:50:f9:c9:56 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

LAND O LAKES INC

Organization: LAND O LAKES INC
State / Province: Minnesota
Locality: Arden Hills
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d5:fc:0b:91:c5:05:3d:65:00:00:00:00:50:f9:c9:56
Serial Number (int): 284434256566101943718983861577350498646
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 92:53:93:8c:85:ea:62:6a:0e:c4:86:60:a0:98:fb:f6:34:07:a3:20
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): b2:cf:c1:1b:04:38:42:75:dd:9d:42:40:19:9f:46:5e:4d:13:ae:57
Fingerprint (sha256): 3a:9c:ab:ce:98:ae:65:71:6f:9b:cc:6b:a0:b6:a5:46:4e:5a:d8:b0:f4:d0:66:12:86:70:0d:be:94:61:95:6c

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate purinaorderfulfillment.landolakes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for purinaorderfulfillment.landolakes.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

purinaorderfulfillment.landolakes.com

Other certificates including the domain name landolakes.com

(limited to 100 certificates)
smartlabel.landolakes.com
collaboration.landolakes.com
blcom.landolakes.com
loldftst.landolakes.com
sip.landolakes.com
iddcrm.landolakes.com
brandtrademarkqa.landolakes.com
businesslink.landolakes.com
dsimobile.landolakes.com
stage.landolakes.com
workspace.landolakes.com
secure.landolakes.com
portal.landolakes.com
portal.landolakes.com
dairydownloadsqa.landolakes.com
cdmsres.landolakes.com
fleetmiles.landolakes.com
apidv.landolakes.com
collaboration.landolakes.com
azure.landolakes.com
portal.landolakes.com
ssr.landolakes.com
feedlabeling.landolakes.com
collaboration.landolakes.com
expemra2.landolakes.com
kentscorecarddev.landolakes.com
webseriesqa.landolakes.com
ECPrd.landolakes.com
adminstage.landolakes.com
dairydownloads.landolakes.com
partner.landolakes.com
blcom.landolakes.com
adminsmartlabel.landolakes.com
securedev.landolakes.com
carrier.landolakes.com
iddcrm.landolakes.com
specs.landolakes.com
vcs1.landolakes.com
stage.landolakes.com
fleetmiles.landolakes.com
gis.landolakes.com
ftp.landolakes.com
sgpoc.landolakes.com
loltms.landolakes.com
dairycrm.landolakes.com
www.board.landolakes.com
basicresearch.landolakes.com
dev1.landolakes.com
smetrics.landolakes.com
specs.landolakes.com
idd-reporting.landolakes.com
dccstage.landolakes.com
dairydownloads.landolakes.com
ftpqa.landolakes.com
tms.landolakes.com
careers.landolakes.com
blcom.landolakes.com
SIP.landolakes.com
espmysite2013.landolakes.com
extecmcons.landolakes.com
integration.landolakes.com
partner.landolakes.com
idd-time.landolakes.com
dev.landolakes.com
ECPrd.landolakes.com
mpis.landolakes.com
tms.landolakes.com
ftpsqa.landolakes.com
smetrics.landolakes.com
apidv-internal.landolakes.com
ssr.landolakes.com
IMWEB2.landolakes.com
dairydownloads.landolakes.com
extecmcons.landolakes.com
integration.landolakes.com
vpnlab.landolakes.com
www.landolakes.com
portal.landolakes.com
esp.landolakes.com
ftpqa.landolakes.com
rms.landolakes.com
rms.landolakes.com
dcc.landolakes.com
loltms.landolakes.com
bimobile.landolakes.com
ssr.landolakes.com
dairycrm.landolakes.com
secure.landolakes.com
adminsmartlabelstage.landolakes.com
smartlabel.landolakes.com
fleetmilesqa.landolakes.com
dairycrm.landolakes.com
mpoldev.landolakes.com
api.landolakes.com
purinaorderfulfillment.landolakes.com
www.landolakes.com
kentscorecarddev.landolakes.com
dairydownloads.landolakes.com
dfcm.landolakes.com
mpis.landolakes.com

Certificate

The complete raw certificate details for purinaorderfulfillment.landolakes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAug6L7cE8Cl2V9VinBjQJ
mbMP2iG7Oyxmp7oUw0GbwAFGmE+VoXtaJYGlfLi6WGgg3cTuKLcSUFZTxIoehdxL
+ipfzsMMlaHPgdkNFUie7cXhWZNjXhQ2vSDtuSv/BU4DkUb0G1pUaplunZ2NwIFU
QOBvttzlfFAlOZeKZxfZWtzokUBgXopMTxFkvkXX9Kydhwl9evwaGIJKnTDEblU/
UovgxWxBAI3VS5S7uTFBog9kfl6+TNTqknNSzX5SQP4g+IzOkjyRBzdG75oW96RG
AGiUCK4AdwPLYGXmWc8HzmSJAVk8az5qcg/CmYixzgdAbTLu65Fv5sPNK5Un0JQw
XwE4Wp4pwgxzyHEH9W1pWAAM1oyn1HN6a4PX3JYYUkkY8thH39VqSZMiTWyTB1KF
We1pwO09iC4ib3+tpTGqVffZnYwt7taFKqIzaotwafhu/wqJ+4xKeE/C9SW0RWNC
dJ+mZ6zUMTBdJ3PFmpURZcsib7ePn4SLLYdcCUw2oa1eWo7hFkiqOR9g4emUj+i8
N5cV18z21ZxuoUrjLCWBPccrI1HrxX5My2+9YJMKfyvxwk5vnujctJia6SlRwpPZ
LjYS+4gAIgthjO5I0hyKOQOmhbksNbgvCfhaIOZUM2okFQ9QZsIqHnURvy4iBgAY
mVp6jDOhBfL16nKEHkG1aW0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284434256566101943718983861577350498646
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 15:30:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-07 16:00:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arden Hills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LAND O LAKES INC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'purinaorderfulfillment.landolakes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759045612810071197311108855795232703045243747782500273136829229483762235055676130125172784474637847100760144341201919647270193124252061997562997296830207281083029253716135752888194919941161971602188351886872776650536820479388111293469455324778489634464744975795204980614488856662669209195248715438310737008069815834050858738728506344665779413582761101441010813014647639227721129210688620334245142713637768049385024804104728342131616849188852024585511356444095665498782675640526914723869014058285871937031115998794454570784833185221703819138317538004821659028029096174933132656325800939088714443279986776774010143089126783737763719721157781069700656481685483597934103449444743797832133227812299650166947771114804883032519005128719680449712727026104354319178312139629426122903640939318027136698544276301110153763480239712444397399726870201130484233012399217531509093897731355123329015447385529941363780906425295125013447072772421983463525531515688986376488808660281688947382514995925077096409317722456402861277113433273310431133057732302825700669504917718829834298645763058306300143890750776032238920146634277799675181496439812476575361107261853079681213867769119037011626138933046182468485413623310928443057919266912051530155339114861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purinaorderfulfillment.landolakes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9253938c85ea626a0ec48660a098fbf63407a320
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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