netaccess.smshealthconx.net

- Cerner Corporation -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number bf:bc:20:9b:30:91:f1:24:00:00:00:00:50:e3:c5:22 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cerner Corporation

Organization: Cerner Corporation
Organization unit: Cerner Technology Services
State / Province: Missouri
Locality: Kansas CIty
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): bf:bc:20:9b:30:91:f1:24:00:00:00:00:50:e3:c5:22
Serial Number (int): 254859360336827699352890617903311996194
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 2e:a0:6b:c0:83:b2:f6:8c:12:0c:d8:87:53:cb:06:aa:4e:3b:c0:66
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): f0:b0:d9:1b:77:ab:e3:b4:b8:d6:c1:5b:a7:0e:e5:38:13:23:89:94
Fingerprint (sha256): 43:97:d6:36:ea:f5:59:44:cb:23:a5:23:2d:62:56:ea:36:9a:03:d5:0b:14:33:ac:02:29:0f:c4:49:bb:7d:93

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate netaccess.smshealthconx.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for netaccess.smshealthconx.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

netaccess.smshealthconx.net

Other certificates including the domain name smshealthconx.net

(limited to 100 certificates)
netaccessa.smshealthconx.net
netaccess2.smshealthconx.net
documentmanagement.smshealthconx.net
netaccess.smshealthconx.net
netaccess3.smshealthconx.net
www.smshealthconx.net
netaccessb.smshealthconx.net
oasgold07.smshealthconx.net
oasgold04.smshealthconx.net
netaccess3.smshealthconx.net
oasgold03.smshealthconx.net
netaccessc.smshealthconx.net
netaccess2.smshealthconx.net
www.smshealthconx.net
dashboard-internet.smshealthconx.net
netaccess.smshealthconx.net
oasgold07.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess2.smshealthconx.net
nsp.smshealthconx.net
www.smshealthconx.net
netaccess3.smshealthconx.net
dashboard.smshealthconx.net
oasgold01.smshealthconx.net
www.smshealthconx.net
netaccess2.smshealthconx.net
netaccessc.smshealthconx.net
OASGOLD04.smshealthconx.net
netaccess2.smshealthconx.net
check.smshealthconx.net
www.smshealthconx.net
OASGOLD07.smshealthconx.net
dashboard-internet.smshealthconx.net
netaccess3.smshealthconx.net
OASGOLD02.smshealthconx.net
netaccess.smshealthconx.net
netaccess.smshealthconx.net
dashboard-internet.smshealthconx.net
netaccess.smshealthconx.net
netaccessa.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess.smshealthconx.net
check.smshealthconx.net
netaccess2.smshealthconx.net
netaccess-lifespan.smshealthconx.net
netaccessc.smshealthconx.net
check.smshealthconx.net
netaccess.smshealthconx.net
oasgold01.smshealthconx.net
netaccess-lifespan.smshealthconx.net
dashboard-internet.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess-lifespan.smshealthconx.net
netaccess.smshealthconx.net
netaccess2.smshealthconx.net
netaccessb.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess2.smshealthconx.net
netaccessa.smshealthconx.net
oasgold02.smshealthconx.net
dashboard.smshealthconx.net
netaccess2.smshealthconx.net
netaccess-lifespan.smshealthconx.net
netaccess-lifespan.smshealthconx.net
netaccess-lifespan.smshealthconx.net
netaccessb.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess.smshealthconx.net
netaccess2.smshealthconx.net
netaccessc.smshealthconx.net
netaccessc.smshealthconx.net
netaccess2.smshealthconx.net
netaccessa.smshealthconx.net
netaccessb.smshealthconx.net
netaccess3.smshealthconx.net
netaccess.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess3.smshealthconx.net
OASGOLD07.smshealthconx.net
netaccess.smshealthconx.net
netaccessb.smshealthconx.net
netaccessa.smshealthconx.net
netaccess2.smshealthconx.net
documentmanagement.smshealthconx.net
OASGOLD01.smshealthconx.net
netaccess3.smshealthconx.net
netaccess.smshealthconx.net
netaccess2.smshealthconx.net
dashboard-internet.smshealthconx.net
oasgold03.smshealthconx.net
netaccessa.smshealthconx.net
netaccessc.smshealthconx.net
www.smshealthconx.net
oasgold05.smshealthconx.net
oasgold03.smshealthconx.net
netaccess.smshealthconx.net
www.smshealthconx.net
netaccessb.smshealthconx.net
oasgold05.smshealthconx.net
netaccessb.smshealthconx.net

Certificate

The complete raw certificate details for netaccess.smshealthconx.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPYRRcODFqNzngqpNDMH
eEeNhSjMumvQuZl7eswfRkR1hJ+F4+0YbvcvY0VvSPxSye4TCyo+sv9XMTHD1d6F
fiK7dq4vR3NQk3FJJiG9Et5yPVFz6BMGfN5biFTsGAxrK2aYXMcHa5F7qREBn1GR
LfbnHX4kJYgf38fTimDiPPR3tWXEJrAnnYsFujSgcHI1Ry/Lt1NCJP1DCoX91ZRq
gXAMHOq2KrgMPjyCynhOx3Gjc5q5K84KVJgG6MoUgGqbTrPvljKcaQxos39cCF0z
+bm9bphNYmVvQDPCSW0c385LLRaB8m9zvVMCCsvFseT2MU19oNyVl2y2Cj/qU1ae
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 254859360336827699352890617903311996194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-13 10:57:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 11:27:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kansas CIty'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cerner Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cerner Technology Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netaccess.smshealthconx.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25873954605326003828806867756756846126914759460773264846825587569646860898382574132298573354988180596364270634473316045022344462410108495610702151481196723515903394219806919631701046324077154731528680808330688361059619963695041945838938502340140476960984521591058565821000795331063920859844170719115802371510559862726450863382629065527435158881785372423990913820437665840100593075650589780884267217880923015823817248243996304398370818086727415339828765657746151675257595803559636997304592320267078997127362931679719155241773685003585789232647752682101668305255887371595994233336558430230314528687294361262848428383961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netaccess.smshealthconx.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ea06bc083b2f68c120cd88753cb06aa4e3bc066
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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