dmdc.mil

- DMDC -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 76:bf:d0:0f:4e:e7:16:d7:6b:42:d1:a0:8c:d6:1e:71 was issued on by Entrust, Inc..

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DMDC

Organization: DMDC
State / Province: California
Locality: Seaside
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 76:bf:d0:0f:4e:e7:16:d7:6b:42:d1:a0:8c:d6:1e:71
Serial Number (int): 157844852156639422837349266921035800177
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f5:69:c0:08:d5:e3:d3:c5:ad:39:a5:1b:23:11:e9:db:7c:41:d9:25
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 60:e6:ec:d6:bf:cc:d9:e3:f7:21:e4:f2:32:25:d1:ae:72:11:ba:ec
Fingerprint (sha256): 3e:3c:29:50:ea:a6:fa:21:44:ca:1b:d2:c2:85:43:4e:32:7d:79:5c:e2:4b:a4:63:22:71:06:a7:48:79:3c:ac

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate dmdc.mil

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dmdc.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dmdc.mil
*.dmdc.mil
dmdc.osd.mil
*.dodtap.mil
*.dodsurveys.mil
*.cap.mil
*.dmdc.osd.mil
*.int.dmdc.osd.mil
dodtap.mil
dodsurveys.mil
cap.mil
*.cpms.osd.mil
*.dcpas.osd.mil
cpms.osd.mil
dcpas.osd.mil

Other certificates including the domain name dmdc.mil

(limited to 100 certificates)
dbids-global-enroll.dmdc.mil
dmdc.osd.mil
vpnr.dmdc.mil
icat.dmdc.mil
ravpn4.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
ravpn3.dmdc.mil
vpnm.dmdc.mil
dmdc.mil
ravpn1.dmdc.mil
spottest-ws.dmdc.mil
training.topss.dmdc.mil
dmdc.mil
ravpn1.dmdc.mil
coburn.dmdc.mil
coburn.dmdc.mil
dbids-global-enroll.dmdc.mil
coburn.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
opmverify.dmdc.osd.mil
dmdc.mil
dmdc.mil
ravpn3.dmdc.mil
dmdc.mil
dbids-japan-enroll.dmdc.mil
check.dmdc.osd.mil
utility.spot.dmdc.mil
topss.training.dmdc.mil
dbids.dmdc.mil
dmdc.mil
fmts-pss.dmdc.mil
dmdc.mil
vpnw.dmdc.mil
dmdc.mil
dbids-global-enroll.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.osd.mil
icat.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
spot.dmdc.mil
training.topss.dmdc.mil
dmdc.mil
dbids-global-enroll.dmdc.mil
ravpn3.dmdc.mil
spot-ws.dmdc.mil
ravpn4.dmdc.mil
spot-training.dmdc.mil
dbids-global-enroll.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
topss.dmdc.mil
topss.dmdc.mil
dmdc.mil
closedbeta.topss.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
vpnw.dmdc.mil
dmdc.mil
dmdc.mil
swft.dmdc.mil
dbids.dmdc.mil
topsstest.dmdc.mil
dbids-global.dmdc.mil
vpnl.dmdc.mil
swft.dmdc.mil
swft.dmdc.osd.mil
oracle-f5-external-prod-poo1.cpms.osd.mil
dmdc.mil
topss.dmdc.mil
dmdc.mil
dmdc.mil
ravpn4.dmdc.mil
ravpn1.dmdc.mil
dmdc.mil
closedbeta.spot.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.osd.mil
dmdc.mil
spot.dmdc.mil
dmdc.mil
dmdc.mil

Certificate

The complete raw certificate details for dmdc.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZJ4XK0LvxSRfxYwXJ5C
zK+gP/qoZtKHoxJvdNw++ilMCznqy8MTeDjF4urZAqnElZGjtF4UtIhpKq/CkkWC
FSQkpAO2R8WYJS9mEE3MW441yKJU/Fc0fp5c5AXJvFe/yY/7Z6dXgs7u+r2+TfDR
VaNDsbXzJN2c1q6JHdI9l+4qnYzfjFGml5FAiMG0C65D9VIVxk6WkCR1sffIvSfa
TcXAOyILbmrnDOZ2YsaGoD0MSf5DwhdA7y0Ywvmnt+mdo026vsjtK5k2GoW9Xwwi
UWkUoOJ701onxLtiwXQbTu6/fUKrP9oEgisigg+FErG8ekml8NNU525Z6jyBTiKo
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 157844852156639422837349266921035800177
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 19:53:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-11 19:53:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seaside'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DMDC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dmdc.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25951079647913030752090225664229102100538916728015092838233514311829365154855191852333128790171620085920997878738440842168797647339601811876216772727603644572903622244453464942122759442045527956765496989388149304384079298662040329970324713605705036861751438909455398056999618723023087941590356277280492001801055028156721342681653811894426220611343149635385789818049279306051742084481099315354527737092637260801278249700462171095293956558567124926228542743091631991147331580592006580106851104332436878906524696775227180156536737769115116161906631267320424261933646960580099782583154650363334233634735451194764336212047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f569c008d5e3d3c5ad39a51b2311e9db7c41d925
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (217 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmdc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmdc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmdc.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dodtap.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dodsurveys.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cap.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmdc.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int.dmdc.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodtap.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodsurveys.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cap.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpms.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcpas.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpms.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcpas.osd.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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