nav.aardvarktactical.com

- AARDVARK -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:78:4e:96:c6:4d:0c:45:19:1c:67:f4:78:bc:7b:6a was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

AARDVARK

Organization: AARDVARK
State / Province: California
Locality: La Verne
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:78:4e:96:c6:4d:0c:45:19:1c:67:f4:78:bc:7b:6a
Serial Number (int): 9929265567063229571463236924313729898
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 85:56:ac:90:92:50:ee:5a:6e:7d:6d:db:a1:71:1d:94:08:75:9e:ab
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): bb:7e:18:bd:13:7e:79:a3:57:13:1f:69:f1:1d:0a:af:1e:e8:f3:3d
Fingerprint (sha256): 48:3d:18:24:e4:c7:74:80:f6:37:0a:ab:24:ce:b7:d3:86:68:52:a7:73:7c:1f:2c:b5:d4:df:b0:d5:3d:e7:3c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate nav.aardvarktactical.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nav.aardvarktactical.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nav.aardvarktactical.com
www.nav.aardvarktactical.com

Other certificates including the domain name aardvarktactical.com

(limited to 100 certificates)
ssl375421.cloudflaressl.com
ssl339069.cloudflaressl.com
nav.aardvarktactical.com
ssl375421.cloudflaressl.com
register.avantechit.com
ssl375421.cloudflaressl.com
aardvarktactical.com
ssl375421.cloudflaressl.com
www.aardvarktactical.com
staffassignments.campanytownlasvegas.org
ssl375421.cloudflaressl.com
forms.cabinrentalpros.com
ssl375421.cloudflaressl.com
ssl375421.cloudflaressl.com
ssl375421.cloudflaressl.com
mail.aardvarktactical.com
ssl339069.cloudflaressl.com
forms.aardvarktactical.com
ssl375421.cloudflaressl.com
ssl375421.cloudflaressl.com
www.aardvarktactical.com
ssl375421.cloudflaressl.com
www.aardvarktactical.com
form.gibsonplumbing.com
staffassignments.campanytownlasvegas.org
nav.aardvarktactical.com
ssl375421.cloudflaressl.com
ssl375421.cloudflaressl.com
aardvarktactical.com
forms.cabinrentalpros.com
ssl375421.cloudflaressl.com
contact.purefluent.com
mail.varkmail.com
ssl375421.cloudflaressl.com
ssl339069.cloudflaressl.com
www.aardvarktactical.com
ssl375421.cloudflaressl.com
forms.cabinrentalpros.com
ssl375419.cloudflaressl.com
forms.cabinrentalpros.com
ssl339069.cloudflaressl.com
forms.teachworthy.org
mail.varkmail.com
forms.enterpros.com
ssl339069.cloudflaressl.com
forms.propertyplanning.com.au
vault.aardvarktactical.com
forms.data2save.com
vault.aardvarktactical.com
www.aardvarktactical.com
aardvarktactical.com
ssl375421.cloudflaressl.com
forms.upasolutions.com
ssl375421.cloudflaressl.com
www.aardvarktactical.com
ssl375421.cloudflaressl.com
mail.varkmail.com
aardvarktactical.com
ssl375421.cloudflaressl.com
track.tr.gold
forms.cabinrentalpros.com
mail.aardvarktactical.com
forms.cabinrentalpros.com
www.aardvarktactical.com
formulaire.anaf.fr
secure-forms.techaviagroup.com
forms.localsecurity.org
forms.glowfieldschool.com
forms.cabinrentalpros.com
www.aardvarktactical.com
aardvarktactical.com
forms.ignitingbusiness.com
vault.aardvarktactical.com
ssl375421.cloudflaressl.com
forms.dandeibert.com
ssl375421.cloudflaressl.com
aardvarktactical.com
aardvarktactical.com
forms.cabinrentalpros.com
ssl375421.cloudflaressl.com
ssl375420.cloudflaressl.com
www.aardvarktactical.com
ssl375421.cloudflaressl.com

Certificate

The complete raw certificate details for nav.aardvarktactical.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsBSYiiRkFokdBpp0pSLK
gFEjuGUqgcaC8AvwMvfpluEWd+eNowKmkyhIJ3EHZ5+Tg4ps0FBst9aYtSldGqW2
+kSBnURhx5QhEYYLNr69PHsYhLb5dbcyT67Nyb3HAsi0mpAWFKGZvuhlOZidZeQz
ZgLPTcg+K45VomSN2r5CkaZNFRa40OpGvRsynfIhY9/ZtuR8kRUqfDdxc700ULtn
hR/W5zWozjMGVwjypk1TFrdFcxLBX4iSLMcmbF+3X0xbgzaGKHanoxkP+cLHjw94
8IxsR8/IlN2bykVwlZui8NTDysUveZaEYN5q9FK0CC2NcTeqaG5GCo5om8ZYMC2q
wHWJ2Kv8zjieZ3qjdTQE+hSgZVslk6fyLmRVTnJt2UcIDI6lOTnUjGHD9jgtDu2T
fn2N9UugAHnJweYchCGpWCcz9jxI5fL2c0EEhcHPmT++FTt06nvwagTSAWTWWHQI
ILoRaX+mtCRZbQjzP5i8uNMEFA7IfTG0SXKlNRNIJH4L774Y9AR5O3+a1n0fQ9F0
EdhOWXfegdCWScVQYyWzxrWCyp2wyxif8bAOvD1eeQhyb+PK57pZIYdEzF5vjcNt
CN3lcr1UH4jkEANtAgbyNUCf5WbtieFhBA+K6mgJUbs9Vf6FLwa3Nj4LgvTyOAKx
L13Gu/13gH2b5vDh7YSgHEMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9929265567063229571463236924313729898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'La Verne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AARDVARK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nav.aardvarktactical.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718345573820893635034382222940522064575973653600106323649170863758406561304333500614633937893624935086738772455025767422099501556013309430957171396263682412231599873264617911799227674991614627537814869550956255100625988335255942796525868651627923786822122382955918093597939280143235918231771610179451136617174964776036827314851297467600358614397985201126415187769310991820885866838474153879433538019145793108612634894432096900110977638169046498673352805157738063852781591099621958479949292209503893472365757301929338864448469786470998041728883335956538553592757654559530491852429304828295298815596868430172367766114829797844188154527683694921632552931687432457998309148484030353316408806654783804545165970452299598762146524178749525561373014019193954966737181928703502705081808675247299791546167439093040298485996447770213974370472830230855756617158843814679072726950968996946888179522593966157092140668848070366452879301229219990065324869722447107977010591807831886481825093754508243223736413669106218929794778488992261118899938670205424124337965757305504818798099215823751086989920334032631180796337042726060830967211651151923566666127410578630418631625575678538687014296900306016449869147454560527743897487334391462636510276230211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8556ac909250ee5a6e7d6ddba1711d9408759eab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nav.aardvarktactical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nav.aardvarktactical.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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