frm.itc.gov.ae

- Abu Dhabi Systems and Information Centre -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 06:93:59:cd:eb:9a:14:69:19:77:68:9a:11:24:3a:69 was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Abu Dhabi Systems and Information Centre

Organization: Abu Dhabi Systems and Information Centre
Organization unit: DOT-ITC
Locality: Abu Dhabi
Country: AE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:93:59:cd:eb:9a:14:69:19:77:68:9a:11:24:3a:69
Serial Number (int): 8740457062057403591983342863685794409
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 25:2d:be:c2:8e:0b:0e:97:46:d5:45:c1:30:49:bd:ff:6b:ec:f8:25
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): df:7e:82:01:6e:a4:75:32:32:67:0b:a6:0f:dc:b7:2e:21:f1:18:6f
Fingerprint (sha256): 49:61:19:e7:62:59:47:e2:37:78:0b:96:fc:92:45:0a:be:45:8f:a0:50:32:dc:b5:f5:62:6e:51:c5:61:ed:93

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate frm.itc.gov.ae

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for frm.itc.gov.ae

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

frm.itc.gov.ae
lms.itc.gov.ae
e.itc.gov.ae
les.itc.gov.ae
lms.itc.abudhabi.ae
les.itc.gov.abudhabi
frm.itc.gov.abudhabi
e.itc.gov.abudhabi
e.itc.abudhabi.ae
frm.transad.ae
e.transad.ae

Other certificates including the domain name itc.gov.ae

(limited to 100 certificates)
adtaxi.itc.gov.ae
adda.gov.ae
adtaxi.itc.gov.ae
adda.gov.ae
maxservices.dot.gov.ae
darb.itc.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
maxservices.dot.gov.ae
adda.gov.ae
darb.itc.gov.ae
adda.gov.ae
*.itc.gov.ae
*.itc.gov.ae
adtaxi.itc.gov.ae
frm.itc.gov.ae
itps.itc.gov.ae
adda.gov.ae
itps.itc.gov.ae
watheq.itc.gov.ae
adda.gov.ae
adda.gov.ae
mail.dot.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
les.itc.gov.abudhabi
adda.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
frm.itc.gov.ae
salama.itc.gov.ae
adda.gov.ae
admobility.gov.ae
adda.gov.ae
iavmep.itc.gov.ae
*.itc.gov.ae
salama.itc.gov.ae
itc.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
mail.itc.gov.ae
adda.gov.ae
toll.itc.gov.ae
adda.gov.ae
aviationgrievance.itc.gov.ae
toll.itc.gov.ae
watheq.itc.gov.ae
admobility.gov.ae
itps.itc.gov.ae
salama.itc.gov.ae
itc.gov.ae
mail.itc.gov.ae
adda.gov.ae
adda.gov.ae

Certificate

The complete raw certificate details for frm.itc.gov.ae in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8740457062057403591983342863685794409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi Systems and Information Centre'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOT-ITC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'frm.itc.gov.ae'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855352748450447984027069374333501162581290880414033217791873415609503114342471764429644260346716791808458275700438381538938980535529217471447912153286736485794862997884522798771914797241315696050079708130763453127330968588673901864068692966129596602465226969952960402368284808460814064052403046381311488540995708909743475815125869168264260290270456479404715940642694811787625115078467951902043791585268425413031521583731235835877969142424692124445564731089416735212155938193093765451296847608144261932956640533768352031654024392190547162618256916267779631510865555387340069633015329391864667975531067682593371386301172445482528989670028420081243428745675721601066044912717813991388268277657712397256190296854886521058473197329583308865619210676713922248388199516866887462279313945387345671971122022062549095750319245914987308919326408725010215247752336023177703089530566749644412040264710747517578289085346526273379340373403605181868395065420766675168504330622377521222750801707893898273150523645609904176929867608433548771958892170233862110970935478338895842549847718515034125345758250270125348406078090618114216904174880511079568885712100754566432074629265162514793305544928484076620317924595959157301739615295396040381987993241917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							252dbec28e0b0e9746d545c13049bdff6becf825
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (199 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frm.itc.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.itc.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.itc.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.itc.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.itc.abudhabi.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.itc.gov.abudhabi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frm.itc.gov.abudhabi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.itc.gov.abudhabi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.itc.abudhabi.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frm.transad.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.transad.ae'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016d0d82e4f7000004030046304402203f8265089872f3f90f390bcc8ab9ba20699d140adf26affbc95671037b8e9e5e02206c648c8a95e761504699082610fb2d2e17bed997dd7d3dff90f714b273630e720076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016d0d82e56a000004030047304502206a12c40c2d9df2e7719616fdf8b87c16b2ff9f8f53ce3dfc9833c61eb8c5ac89022100f9dd59ce69f396d48e36472429f883f0cba94ab31da6764baa822b10d1ff4c34
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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