TRVWEVATAB01.cxda.medstat.com

- Truven Health Analytics LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:93:06:c7:6f:9b:79:fc:a1:bd:66:ca:a1:e9:24:1d was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Truven Health Analytics LLC

Organization: Truven Health Analytics LLC
Organization unit: CET
State / Province: Michigan
Locality: Ann Arbor
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:93:06:c7:6f:9b:79:fc:a1:bd:66:ca:a1:e9:24:1d
Serial Number (int): 7409545112531956933326831444149478429
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 19:f4:ca:b5:46:54:48:de:27:78:53:09:c0:43:06:61:4e:f2:d4:5b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): fd:2b:bc:86:80:7a:c5:1f:5f:ce:4e:ec:1c:7e:76:d6:17:e1:fe:e7
Fingerprint (sha256): 3c:24:bf:fd:08:90:26:bd:fa:29:20:b2:af:f1:a0:2b:ce:7a:51:07:79:10:77:7a:6f:34:61:d4:2a:a9:f7:e7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate TRVWEVATAB01.cxda.medstat.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for TRVWEVATAB01.cxda.medstat.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

TRVWEVATAB01.cxda.medstat.com
evaote.truvenhealth.com
evaote.truven.com

Other certificates including the domain name medstat.com

(limited to 100 certificates)
mdss.medstat.com
advantage58.medstat.com
onbaseapptest.cxda.medstat.com
medstat.com
TRVWISWEB01.cxda.medstat.com
advantage20.medstat.com
thfedididp.medstat.com
trvlapp3926.cxda.medstat.com
advantage07.medstat.com
gaedstestcog.cxda.medstat.com
advantage59.medstat.com
trvlapp4358.cxda.medstat.com
trvwadvsql09.cxda.medstat.com
TRVWCAWEB05.cxda.medstat.com
thfedidhm.medstat.com
support.medstat.com
tccdemo1.medstat.com
trvlapp3935.cxda.medstat.com
trvlapp2421.cxda.medstat.com
trvlapp1846.cxda.medstat.com
cobidmcognos.cxda.medstat.com
advantage27.medstat.com
advantage03.medstat.com
advantage07.medstat.com
advantage81.medstat.com
trvlapp1154.cxda.medstat.com
trvlapp0870.cxda.medstat.com
advantage2008.medstat.com
gaedsuatcog.cxda.medstat.com
advantage39.medstat.com
trvlapp1078.cxda.medstat.com
trvlapp4148.cxda.medstat.com
advantage38.medstat.com
trvwmiweb07.cxda.medstat.com
trvlapp0872.cxda.medstat.com
voltage-pp-0000.medstat.com
trvlapp3795.cxda.medstat.com
trvwedwuat02.cxda.medstat.com
infdev.medstat.com
apps.medstat.com
advantage26.medstat.com
cobidmsas.cxda.medstat.com
advantage08.medstat.com
trvwmiweb08.cxda.medstat.com
trvlapp3840.cxda.medstat.com
apps2.medstat.com
advantage11.medstat.com
trvlapp1156.cxda.medstat.com
trvlapp1552.cxda.medstat.com
advantage62.medstat.com
voltage-pp-0000.medstat.com
trvlapp3155.cxda.medstat.com
TRVWEVATAB01.cxda.medstat.com
advantage02.medstat.com
sdss.truvenhealth.com
leapfrog.medstat.com
advantage66.medstat.com
advantage67.medstat.com
advantage43.medstat.com
advantage16.medstat.com
TRVWMIDMZ03.cxda.medstat.com
trvwadvsql08.cxda.medstat.com
advantage64.medstat.com
advantage33.medstat.com
mdss.medstat.com
mihealthandsafety.medstat.com
advantage61.medstat.com
trvwbuptab06.cxda.medstat.com
medstat.com
halfreski.medstat.com
trvlapp3870.cxda.medstat.com
trvlapp0871.cxda.medstat.com
advantage50.medstat.com
TRVWEDWUAT01.cxda.medstat.com
advantage16.medstat.com
thfedid.medstat.com
advantage60.medstat.com
trvlapp3595.cxda.medstat.com
advantage66.medstat.com
thfedidhm.medstat.com
trvlapp0869.cxda.medstat.com
advantage.medstat.com
trvlapp1846.cxda.medstat.com
mdss.medstat.com
trvlapp1460.cxda.medstat.com
trvlapp3870.cxda.medstat.com
leapfrog.medstat.com
trvwedwuat04.cxda.medstat.com
trvlapp4093.cxda.medstat.com
trvlapp4407.cxda.medstat.com
TRVWAPCDPROD01.cxda.medstat.com
trvlapp1980.cxda.medstat.com
trvlapp0872.cxda.medstat.com
cdqmat.medstat.com
advantage43.medstat.com
trvlapp4122.cxda.medstat.com
advdev.medstat.com
advantage39.medstat.com
advdemo3.medstat.com
advantage58.medstat.com

Certificate

The complete raw certificate details for TRVWEVATAB01.cxda.medstat.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7409545112531956933326831444149478429
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Truven Health Analytics LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CET'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TRVWEVATAB01.cxda.medstat.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751447993863268726331884151246880505295303260808895472692667793027591993551808368759199129225242535988938290998676410907694401038929942294160050596382400491374372283978089353177901499864652589598976026067245809168796690710772166434769003417887727249831854503822665290888803125301272266599125900958647185102745310006816315262348372704615887955259160883290805466565385993584173824495465671270773186091876585532421267262826024399437920620443066861331359525234580442450238748147802949753933824785928358534585221657477199059743743887184779985483251559656823032471588127670455734460205589333968072353914267741557066350407998011553796860190901886079915841031464083231019144204004048994890129336152080263289568421150917138430211031641517440876621795267670008140869756617435147742165708248532357830276435953559051609121125535248267320242214152798065974238349910714329386030471083162429303696354794862165060617432153041270275487129685130794188916976287963886716052943633812918206441907281968804183205009554354789092329879663420420529840763454969196323199156789210054522249555687323587884155238193453231055130973327793034992106744052458484442593275627428978320191826537272498173334798334633081481670362552626574060310931150574972680947992443137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19f4cab5465448de27785309c04306614ef2d45b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TRVWEVATAB01.cxda.medstat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evaote.truvenhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evaote.truven.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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