*.pathwaytoagingwell.com

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 71:77:07:3f:19:18:93:ca:4a:0a:74:9e was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.pathwaytoagingwell.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 71:77:07:3f:19:18:93:ca:4a:0a:74:9e
Serial Number (int): 35115702502864748116332672158
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: bb:3e:5c:f4:e1:1a:cd:7c:93:df:b1:88:52:9c:62:d7:8b:0e:e6:f6
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 85:c3:6c:a0:b5:f7:81:65:c8:86:0c:f7:af:6b:ff:13:92:7f:eb:36
Fingerprint (sha256): 3b:d4:7c:65:db:57:03:92:df:a9:2b:8b:9f:f0:9c:e2:22:31:09:69:42:1d:14:03:bc:1b:35:79:24:0d:d2:4f

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.pathwaytoagingwell.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pathwaytoagingwell.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pathwaytoagingwell.com
pathwaytoagingwell.com

Other certificates including the domain name pathwaytoagingwell.com

(limited to 100 certificates)
*.pathwaytoagingwell.com
*.pathwaytoagingwell.com
*.pathwaytoagingwell.com
*.pathwaytoagingwell.com
pathwaytoagingwell.com

Certificate

The complete raw certificate details for *.pathwaytoagingwell.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHbDCCBlSgAwIBAgIMcXcHPxkYk8pKCnSeMA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE3MDIyNzIwMjgyMFoXDTE4MDIy
ODIwMjgyMFowRjEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMSEw
HwYDVQQDDBgqLnBhdGh3YXl0b2FnaW5nd2VsbC5jb20wggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQCctaCX/farUkl6/SQHwIzQYSAjQlhMfr12RNZYJWnX
XXpISTJjM3hXTKq2EgtIeVNCLo+hMj8EMupQZLJguZe3r487rKFSZHbBGTOd7jDx
A7k+mo2rA5XWtv6IKSkUhjaC7jA2KrAFKNybea566aLh3rUyyJE5BVVRVnpxgGvh
6MpGq175Di5t5vHLoEdtCNemz0qx/4VQPa2reFYq203ZE3oGPO2gKkJyob8YCySJ
g7FTc9ZUHDo7Y395V+IMYRTkrB/vE6y/SP1BDzMpAg/0IoPHJr+6j0Yg/28PmRfx
MrrFfg5qyKJeYvcqBnopdJd6QrNE7zyeUHgr5j6PwKyTAgMBAAGjggRSMIIETjAO
BgNVHQ8BAf8EBAMCBaAwgYkGCCsGAQUFBwEBBH0wezBCBggrBgEFBQcwAoY2aHR0
cDovL3NlY3VyZTIuYWxwaGFzc2wuY29tL2NhY2VydC9nc2FscGhhc2hhMmcycjEu
Y3J0MDUGCCsGAQUFBzABhilodHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3Nh
bHBoYXNoYTJnMjBXBgNVHSAEUDBOMEIGCisGAQQBoDIBCgowNDAyBggrBgEFBQcC
ARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EM
AQIBMAkGA1UdEwQCMAAwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NybDIuYWxw
aGFzc2wuY29tL2dzL2dzYWxwaGFzaGEyZzIuY3JsMDsGA1UdEQQ0MDKCGCoucGF0
aHdheXRvYWdpbmd3ZWxsLmNvbYIWcGF0aHdheXRvYWdpbmd3ZWxsLmNvbTAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFLs+XPThGs18k9+x
iFKcYteLDub2MB8GA1UdIwQYMBaAFPXN1TwIUPlqTzq3l9pWg+Zp0mj3MIICbgYK
KwYBBAHWeQIEAgSCAl4EggJaAlgAdQDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09
EcTNtuy+zAAAAVqBQng0AAAEAwBGMEQCIA4B57VBiuihND5mHu4Ozs68p8JirVon
jQFM5q3hufLWAiBP4VNhWpZtQFlUgRf7Btthk6ZMpZwKYF6zTrk9bV/SIQB2AFYU
Bpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABWoFCeHgAAAQDAEcwRQIg
diXmW5yHDYimkm4LOBucZd75Yu5uwBfPHkC9S5GS+9wCIQDzFs9fdbstbe/jTW1R
GUhsjM4RgwMOSOj824MjRCPY6wB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCW
ZDaOHtGFAAABWoFCe7AAAAQDAEcwRQIgQ0ZifnpCXQ/JDljYDMKjkOuMgQv5vIj4
y+lPPUSI5WICIQCEFp8dLme2hBGTvdspFNaX/y2rNRdIfsZKZT3T+pcE0gB2AKS5
CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABWoFCeu8AAAQDAEcwRQIh
ALLx0GbTlK/cfPg92LuPJzQzZ4tFAoQa1cqvFmJFmjQEAiBn2L7KKk8afXSNcOyE
9R/fCqg7uigh49D2gAv4+goIdAB3AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDE
e4l6qP3LAAABWoFCfd8AAAQDAEgwRgIhALr841aBYO6CjFm0zImvWChl22b9jXup
ree5p3px/OlLAiEA67YB2CQMdK0nTcVzLmp3pw8hY4rTwWV+DEtdwA0lNw8wDQYJ
KoZIhvcNAQELBQADggEBAMpPd7w1Gt1yjN9h9rwR1CdzOigPREq7WtLQtu1cGwJ5
R4un3VyA/rS3rLpKdsySCLLQe45EMfrQjphqbCvdaLsGeWbkbmVrRtSGvq4djSmb
BIncbpPOBeXdNlSQSMFtGqkgff5RCEmjwNbM3KZnEfPzM3IicRFmZmhTu0N9mgwA
U0wbf42d++b5yTawxvI/JLfeb5K0LG6tAlOULPc2sLnV65N0N/q2mV7Ayc8dTmyi
nm2elf71Y0LevGbzXz9Dl9p97XJrSZ7wf9BxooIsumqFCkQFBsaQqUzjJgkBTkCW
L0N8d3eXhj0Ra/Tr43Mn5wRVGjopx2sJEtin6L566dI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLWgl/32q1JJev0kB8CM
0GEgI0JYTH69dkTWWCVp1116SEkyYzN4V0yqthILSHlTQi6PoTI/BDLqUGSyYLmX
t6+PO6yhUmR2wRkzne4w8QO5PpqNqwOV1rb+iCkpFIY2gu4wNiqwBSjcm3mueumi
4d61MsiROQVVUVZ6cYBr4ejKRqte+Q4ubebxy6BHbQjXps9Ksf+FUD2tq3hWKttN
2RN6BjztoCpCcqG/GAskiYOxU3PWVBw6O2N/eVfiDGEU5Kwf7xOsv0j9QQ8zKQIP
9CKDxya/uo9GIP9vD5kX8TK6xX4OasiiXmL3KgZ6KXSXekKzRO88nlB4K+Y+j8Cs
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35115702502864748116332672158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-27 20:28:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-28 20:28:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pathwaytoagingwell.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19782739343897233995617558702355340897603710451072980157772537078532901464637742945218334029398296929155432338711187192401030533844521934566943509571556994123965360721030732659279439721440765956921090476785737922550793196889462575773612460876958387630020587730279753156889963354678773317434642006689383835271287961897639988458839478057483259766295153173151752633882560183980861664048664443263428604540619737817089637974178178766961696755753393490462082880400852888327927406163690629104283634323108325466641303008149979194302470054448120231481508661357553822543383921783424266251418327788074743110358438492111154228371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pathwaytoagingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathwaytoagingwell.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb3e5cf4e11acd7c93dfb188529c62d78b0ee6f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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