blackboard.bathspa.ac.uk

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 05:bb:dd:41:cd:6e:c6:f5:b2:ce:e5:ad:e3:8d:f0:1c was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blackboard.bathspa.ac.uk

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:bb:dd:41:cd:6e:c6:f5:b2:ce:e5:ad:e3:8d:f0:1c
Serial Number (int): 7621587117401910991833616703210516508
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c0:bf:44:3d:d7:b6:64:99:3a:7d:e3:66:c9:b2:8c:cd:d9:03:fa:5d
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 23:ba:11:19:b7:8c:0e:de:a1:f6:0e:5c:8a:6a:39:c4:99:5c:18:c3
Fingerprint (sha256): 45:69:16:12:6e:57:f0:76:8f:7a:cc:35:aa:41:9e:46:2d:47:1a:d9:b6:31:16:37:30:65:db:65:e7:c5:6a:b6

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate blackboard.bathspa.ac.uk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blackboard.bathspa.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blackboard.bathspa.ac.uk
*.blackboard.com
minerva.bathspa.ac.uk

Other certificates including the domain name bathspa.ac.uk

(limited to 100 certificates)
admin.kotaberbagi.com
eduroam.bathspa.ac.uk
*.bathspa.ac.uk
incapsula.com
sid.bathspa.ac.uk
mydevices.bathspa.ac.uk
reportandsupport.bathspa.ac.uk
researchspace.bathspa.ac.uk
emea-san1.blackboard.com
eu-central-1-san1.blackboard.com
reportandsupport.bathspa.ac.uk
imperva.com
edocs.bathspa.ac.uk
rap.bathspa.ac.uk
library.bathspa.ac.uk
eu-central-1-san1.blackboard.com
incapsula.com
incapsula.com
*.bathspa.ac.uk
data.bathspa.ac.uk
eu-central-1-san1.blackboard.com
imperva.com
www.bathspa.ac.uk
emea-san1.blackboard.com
sharepoint.bathspa.ac.uk
eu-central-1-san1.blackboard.com
emea-san1.blackboard.com
eu-central-1-san1.blackboard.com
adminweb.bathspa.ac.uk
auth.bathspa.ac.uk
strenton.com
incapsula.com
incapsula.com
incapsula.com
eu-central-1-san1.blackboard.com
incapsula.com
eu-central-1-san1.blackboard.com
evasys.bathspa.ac.uk
emea-san1.blackboard.com
incapsula.com
NPCCM-UNITY1.bathspa.ac.uk
eu-central-1-san1.blackboard.com
incapsula.com
incapsula.com
incapsula.com
eu-central-1-san1.blackboard.com
auth.bathspa.ac.uk
incapsula.com
liquidoffice.bathspa.ac.uk
auth.bathspa.ac.uk
eu-central-1-san1.blackboard.com
incapsula.com
alumni.bathspa.ac.uk
sulis.bathspa.ac.uk
emea-san1.blackboard.com
incapsula.com
reportandsupport.bathspa.ac.uk
NPCCM-TNPUB1-ms.bathspa.ac.uk
incapsula.com
incapsula.com
alumni.bathspa.ac.uk
strenton.com
incapsula.com
mycareer.bathspa.ac.uk
eu-central-1-san1.blackboard.com
emea-san1.blackboard.com
anyconnect.bathspa.ac.uk
incapsula.com
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
website-static.figstatic.com
bsuconf2.bathspa.ac.uk
npwin-exchch1.bathspa.ac.uk
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.ezproxy.bathspa.ac.uk
alumni.bathspa.ac.uk
emea-san1.blackboard.com
data.bathspa.ac.uk
reportandsupport.bathspa.ac.uk
eu-central-1-san1.blackboard.com
NPCCM-UNITY1.bathspa.ac.uk
emea-san1.blackboard.com
t4-www.bathspa.ac.uk
eu-central-1-san1.blackboard.com
emea-san1.blackboard.com
auth.bathspa.ac.uk
www.bathspa.ac.uk
incapsula.com
alumni.bathspa.ac.uk
eu-central-1-san1.blackboard.com
tls.automattic.com
incapsula.com
incapsula.com
eu-central-1-san1.blackboard.com
blackboard.bathspa.ac.uk
incapsula.com

Certificate

The complete raw certificate details for blackboard.bathspa.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgIQBbvdQc1uxvWyzuWt443wHDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDEzMTAwMDAwMFoXDTI0MDIyOTIzNTk1OVowIzEh
MB8GA1UEAxMYYmxhY2tib2FyZC5iYXRoc3BhLmFjLnVrMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAv6yQSih6sOemRLiRXvSeZHB5IwTGqDYhXeAajlNp
efmu5FljdoyGt20tf8376osoxTzvsLKPdVeuAQBLv9RvNOFWMog5FbpNMnY4IpfK
Yj9cP2RsR6Gxxsf1xdnJ51ttbkc2hC1dvUqVug6jsCyq+kdpdf7EpLaWZ78ev6NE
HZnenEvsftsMiFSCxDdKjs0x/lnycMmWKXm3d+A/zOc+WH8y+4naAEzqz/vWDtNM
3VGonGJQkyN960soLRw7PnFco+TS8FYQx3sFdNVs5vohkoTeAv6cExuqwFf1dtiM
9py9fnGM76Ux1U4lia2G2k6LFwwHkFNsHILlQeQGPOoGFQIDAQABo4IDGTCCAxUw
HwYDVR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFMC/RD3X
tmSZOn3jZsmyjM3ZA/pdMEwGA1UdEQRFMEOCGGJsYWNrYm9hcmQuYmF0aHNwYS5h
Yy51a4IQKi5ibGFja2JvYXJkLmNvbYIVbWluZXJ2YS5iYXRoc3BhLmFjLnVrMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYD
VR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5jb20v
cjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAt
BggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3QuY29tMDYG
CCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0w
MS5jZXIwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYA
7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGGBTmdugAABAMARzBF
AiEAkwqNPfghVuCIOAThUc/B1GqW5SM54c9Sdmrilc/HXsgCIFAVqu+RlhPysUgl
pV2Txpbxdn6zDkh8U3+jThPmWMBwAHUAc9meiRtMlnigIH1HneayxhzQUV5xGSqM
a4AQesF3crUAAAGGBTmeMwAABAMARjBEAiBm2mZc953Hw/vJYztt6y8vFOc9AA7C
NATspay5qCu0VwIgTN0W0Y8AaXwTBBemdElZGa6ZxIVv4h8xelK/5iGFzwAAdgBI
sONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYYFOZ35AAAEAwBHMEUC
IQC9GWFHZio9xIrtysWHbGkh89gj/gh+otzZ8WzBRHEFMAIgWD/ZWfRLScwnwME2
BZjKjxLiJrxJP8PqcoS9ET2vyYswDQYJKoZIhvcNAQELBQADggEBANGjIoPyUlrS
lOX6BasH6594o66Fj242Occqw/goVK/WI6hab46rq3JaeeAcrT90tcm2Zd9Adh3D
tg5wMszcJMSFqkQB8Z0jP0u1w9lY2ncMQDkHh/kddhRDT0KW4FTMR4r+CviLYetE
HTp92vOi9d/icrrSqe7hfRNWdd4zSQum06m8P01zrVqlsIiR4VaPo/uVHBFzQmyI
i+mGMo1+DXPEAqbiGd3vHaw+to+TjHnQI4dmGjqmFcJQxP5fT3s14T6sdNXu5jBH
9HBseX9yxB0HUJypESdgTx5l7lL22Xw6FGvGRg75JUxSv7w6Rw5tqGq0JNlJa/CY
Tya+SspPX/U=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6yQSih6sOemRLiRXvSe
ZHB5IwTGqDYhXeAajlNpefmu5FljdoyGt20tf8376osoxTzvsLKPdVeuAQBLv9Rv
NOFWMog5FbpNMnY4IpfKYj9cP2RsR6Gxxsf1xdnJ51ttbkc2hC1dvUqVug6jsCyq
+kdpdf7EpLaWZ78ev6NEHZnenEvsftsMiFSCxDdKjs0x/lnycMmWKXm3d+A/zOc+
WH8y+4naAEzqz/vWDtNM3VGonGJQkyN960soLRw7PnFco+TS8FYQx3sFdNVs5voh
koTeAv6cExuqwFf1dtiM9py9fnGM76Ux1U4lia2G2k6LFwwHkFNsHILlQeQGPOoG
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7621587117401910991833616703210516508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blackboard.bathspa.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24196610546748910060416172987113634037091606383551379085307449266500237105000059815892257720247919443206682576787818402832354076227770993996869946318121535271380078234539241489536773809360920681734478156617438396910828873988838494987638540352487180756302808727720539148582150830584676378159858051154496923143302144589346677764072168738377828447689728368394153458984703961472250665001630571601374317685917601436790256052116346625856494269660224298370118178087856586904307565579009461180582816398542248545338435971932705738980162842622645754506552951743986649255732284702598028896926633462499382422731538100107222844949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0bf443dd7b664993a7de366c9b28ccdd903fa5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackboard.bathspa.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minerva.bathspa.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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