uatweb30.intranet.mbgov.ca

- Department of Finance (Province of Manitoba) -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 8d:ce:04:4f:93:9f:ec:4e:00:00:00:00:50:f9:67:63 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Department of Finance (Province of Manitoba)

Organization: Department of Finance (Province of Manitoba)
State / Province: Manitoba
Locality: Winnipeg
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8d:ce:04:4f:93:9f:ec:4e:00:00:00:00:50:f9:67:63
Serial Number (int): 188490847992882197370870889550620223331
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ad:b4:4e:34:a6:7b:1a:51:83:dd:2b:f4:a7:19:b8:2b:75:df:4e:b1
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): d2:91:3d:d6:3a:09:ab:3c:fe:5a:bb:6d:fe:b7:94:83:76:4b:38:ed
Fingerprint (sha256): 46:06:48:6b:96:8f:d6:04:96:1a:f3:e4:93:0e:4e:a2:ca:0b:34:80:e7:ef:72:16:00:7b:c8:f1:84:58:6e:bf

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate uatweb30.intranet.mbgov.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uatweb30.intranet.mbgov.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uatweb30.intranet.mbgov.ca

Other certificates including the domain name mbgov.ca

(limited to 100 certificates)
mbpdbs0729u.shared.mbgov.ca
webmail.me.mbgov.ca
m3p.intranet.mbgov.ca
MBPAPP1015U.SHARED.MBGOV.CA
wpg212db20-orap.shared.mbgov.ca
app0671d.me.mbgov.ca
MBPAPP1015U.SHARED.MBGOV.CA
app0765u.me.mbgov.ca
guest.me.mbgov.ca
app0753x.me.mbgov.ca
employeeselfservice.me.mbgov.ca
app0625u.me.mbgov.ca
uat.app22.intranet.mbgov.ca
uatweb11.intranet.mbgov.ca
res331vad01.shared.mbgov.ca
web30.intranet.mbgov.ca
webmail.me.mbgov.ca
gomc-1167800.me.mbgov.ca
SSPR.ME.MBGOV.CA
intranet.mbgov.ca
train.m3p.intranet.mbgov.ca
uatweb30.intranet.mbgov.ca
mb1etachyon.me.mbgov.ca
CAMSDMBAD102.ME.MBGOV.CA
mbnw.intranet.mbgov.ca
employeeselfservice.me.mbgov.ca
employeeselfservice.me.mbgov.ca
intranet.mbgov.ca
LYNCPOOL01.ME.MBGOV.CA
clp331xen01.shared.mbgov.ca
employeeselfservice.me.mbgov.ca
CAWNDMBAD107.SHARED.MBGOV.CA
employeeselfservice.me.mbgov.ca
opsfms.intranet.mbgov.ca
intranet.mbgov.ca
webmail.me.mbgov.ca
opsfms.intranet.mbgov.ca
webmail.me.mbgov.ca
app0625u.me.mbgov.ca
app0844p.me.mbgov.ca
web11.intranet.mbgov.ca
LDAP.SHARED.MBGOV.CA
CAWNDMBAD103.SHARED.MBGOV.CA
CAWNDMBAD108.ME.MBGOV.CA
ns2dclapp.intranet.mbgov.ca
uatreporting1.intranet.mbgov.ca
LDAP.SHARED.MBGOV.CA
app0765u.me.mbgov.ca
CAWNDMBAD107.SHARED.MBGOV.CA
uatweb9.intranet.mbgov.ca
mbpdbs0728p.shared.mbgov.ca
LYNCPOOL01.ME.MBGOV.CA
CAMSDMBAD102.ME.MBGOV.CA
CAMSDMBAD103.SHARED.MBGOV.CA
*.secure-wi-fi.me.mbgov.ca
clp331dc01.shared.mbgov.ca
ns2dclapp.intranet.mbgov.ca
app0625u.me.mbgov.ca
ns2ds4app.intranet.mbgov.ca
ns2dclapp.intranet.mbgov.ca
CAWNDMBAD106.ME.MBGOV.CA
MBPDSAPP54V.ME.MBGOV.CA
web11.intranet.mbgov.ca
app0753x.me.mbgov.ca
app0625u.me.mbgov.ca
saps4.intranet.mbgov.ca
uat2.m3p.intranet.mbgov.ca
app0752d.me.mbgov.ca
ns2dclapp.intranet.mbgov.ca
CAWNDMBAD106.ME.MBGOV.CA
CAMSDMBAD103.SHARED.MBGOV.CA
LDAP.ME.MBGOV.CA
MBPDSAPP54V.ME.MBGOV.CA
uat.m3p.intranet.mbgov.ca
LDAP.ME.MBGOV.CA
app0640p.shared.mbgov.ca
uatweb30.intranet.mbgov.ca
CAWNDMBAD108.ME.MBGOV.CA
web11.intranet.mbgov.ca
webmail.me.mbgov.ca
wpg212db20-orap.shared.mbgov.ca
mb1etachyon.me.mbgov.ca
*.mbnw.intranet.mbgov.ca
EDGEPOOL01.ME.MBGOV.CA
intranet.mbgov.ca
CAWNDMBAD102.ME.MBGOV.CA
web30.intranet.mbgov.ca
CAWNDMBAD103.SHARED.MBGOV.CA
LYNCPOOL01.ME.MBGOV.CA
web9.intranet.mbgov.ca
CAWNDMBAD102.ME.MBGOV.CA

Certificate

The complete raw certificate details for uatweb30.intranet.mbgov.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp80jtNL9F2CtD3zkEtMh
D+Vt1Av8Eur5qbBGMAgpfFEE7eZz8NIcmJqDIAy4r664ob6XvW2tYP82nntBbVCA
OAEvwNHVpjNMqCKkPj1RN08D/mBv3K8WvqLiNesfhHVODACoA7NYcOLRjIgNHAfn
TQIZWAjp/qqG6R07TuMY6KG9/NA2lv3n4dvrli7m9J0+FsjesM4DznQ2poXL12FZ
dMKqo+O8699Mr8Mo91KBnAVNnsvQJUd+TssGwoCpPfE7QyD7FxM5ctjGrmKhlmk3
sHpuZZZTi8X6BCRzCwBK3mEMoj8PCfgPf8cUX11ym8IhNTsYsDlJ2nvtj1CQvSql
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 188490847992882197370870889550620223331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 17:26:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-03 17:56:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manitoba'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Winnipeg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Finance (Province of Manitoba)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uatweb30.intranet.mbgov.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21182954976100226740027849151244060456801616789641751035094808776450213295415904710936191809050993000221401281775933578284165202355316937207657939918638838896051287397380435728979093544318043016823752257213885389054274216557775554184489748692160351448456517600834176626552239281307014280751231297356667503582029801957148729215849214737610857866784487167600093145339085019508193891280904586759967665068926016232126330467212238469622889686241731259568370149615818160281577922123992706866267273959126036330499351695612804000055039776269438939993883310703295958815435996072990165534100904800389927829874900908864552215869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatweb30.intranet.mbgov.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							adb44e34a67b1a5183dd2bf4a719b82b75df4eb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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