access-lon.uict.oninteroute.com

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 0c:d4:0e:68:ce:58:22:46:67:a2:37:fe was issued on by GlobalSign nv-sa.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=access-lon.uict.oninteroute.com,OU=Domain Control Validated,C=GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:d4:0e:68:ce:58:22:46:67:a2:37:fe
Serial Number (int): 3970180438075257906106873854
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: c7:64:17:94:36:6b:bd:48:71:78:cb:1b:b0:f1:ca:66:00:7d:53:73
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): 06:69:bb:7a:a5:50:ae:e7:80:9a:eb:64:b9:75:fa:c8:4d:89:ba:77
Fingerprint (sha256): 4a:e4:58:c2:83:a5:80:2a:45:d6:56:9f:da:8d:9b:b9:5f:a0:ad:03:58:57:1e:2c:6d:c3:c0:66:ec:a6:78:1e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate access-lon.uict.oninteroute.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for access-lon.uict.oninteroute.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

access-lon.uict.oninteroute.com
connect.uict.oninteroute.com
csweb-lon.uict.oninteroute.com
dialin.uict.oninteroute.com
lyncdiscover.uict.oninteroute.com
meet.uict.oninteroute.com
sfbcc02-lon2.uict.oninteroute.com
sip.uict.oninteroute.com
uict.oninteroute.com
webapps.uict.oninteroute.com
webconf-lon.uict.oninteroute.com

Other certificates including the domain name oninteroute.com

(limited to 100 certificates)
access-am.sipfed.oninteroute.com
clarityportal.oninteroute.com
sip.1bridge.com
lync2.oninteroute.com
access-lo.skype4blab.oninteroute.com
join.1bridge.com
pub03.amsNL.oninteroute.com
access-am02.sipfed.oninteroute.com
access-ny.sipfed.oninteroute.com
*.oninteroute.com
access-am02.sipfed.oninteroute.com
access-lo.skype4blab.oninteroute.com
join.1bridge.com
*.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
vani1-amlfe101.vani1.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am.sipfed.oninteroute.com
1bridgeplugin.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
join.1bridge.com
access-hk.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-lo.skype4blab.oninteroute.com
lync2.oninteroute.com
access-am.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-hk.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
lync1.oninteroute.com
access-lon.uict.oninteroute.com
access-pa.demo.oninteroute.com
access-am.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-ny.sipfed.oninteroute.com
sip.1bridge.com
access-am02.sipfed.oninteroute.com
access-lo.skype4blab.oninteroute.com
access-am02.sipfed.oninteroute.com
sip.nordic.oninteroute.com
webbridge.oninteroute.com
fromearthtolife.oninteroute.com
access-am02.sipfed.oninteroute.com
access-ny.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-hk.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
join.1bridge.com
access-ny.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-lo.skype4blab.oninteroute.com
access-hk.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
sip.1bridge.com
sip.pkfcooperparry.oninteroute.com
vani1-nylfe101.vani1.oninteroute.com
access-ny.sipfed.oninteroute.com
access-lo.skype4blab.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am.sipfed.oninteroute.com
access-lon.uict.oninteroute.com
sts.sfblab.oninteroute.com
access-lo.skype4blab.oninteroute.com
access-lo.skype4blab.oninteroute.com
access-ny.sipfed.oninteroute.com
access-lo.skype4blab.oninteroute.com
access-am02.sipfed.oninteroute.com
access-lon.uict.oninteroute.com
edge.acofed.oninteroute.com
sip.pkfcooperparry.oninteroute.com
access-am02.sipfed.oninteroute.com
access-ny.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-lo.skype4blab.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am.s4btrial.oninteroute.com
access-ny.skype4blab.oninteroute.com
access-am02.sipfed.oninteroute.com
access-ny.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
edge.acofed.oninteroute.com
access-hk.sipfed.oninteroute.com
access-am.sipfed.oninteroute.com
1bridgeplugin.oninteroute.com
www.oninteroute.com
access-lo.demo.oninteroute.com
lync2.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com

Certificate

The complete raw certificate details for access-lon.uict.oninteroute.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAtgD6hcwpGZcSR8u/QO
NpEmKmbYOO0NBjNNRwukI2zVwUpU9mgD6A52zNXC4tFv4055QbYSOiCyYi6GVGaO
6aZmm4GWviCLDxOmyXEozxEcD3l5ef7k6n0ob9rOSJkUKpogvS7yTTjj4c4uXACq
d3YzS2SS25FYP8rINwbGT2peP0gOBDBLd+tznFss3ZM2WCswHg3hE8ytfOGFSeob
hd9dOrA9gVd747G1YO9vRJfvhM/cGW/vZqfa+wfAgy8LvaYfscn6kww81nQqiQry
PcZ0c3w4YX3EKTkCX9XqLt6HSnVhHT5D8H7UOvg0P/AREPzPQxPzz0n3peHUT+7u
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3970180438075257906106873854
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-16 11:07:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-18 10:48:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'access-lon.uict.oninteroute.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21718597793535003913256755262441535609103648670060121624326035278165868346568523464705178756420805210752817655685728319749484336104040327603165096830309548863531898155886812296833862097998637925957472545086041832231737835361086675966494562896806503112968554660686330145327230354489025092795092045567683171296408853280077348872031319264954434431054823932600998397254981577824168864553376814364219409950562574515202250825096707085701111781946905042421614515020582037289881215067074401712778103711739888226427421633319207496524891696975343688637506899367813353181245225980882621751040289767636247587030490096702772407897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (337 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access-lon.uict.oninteroute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.uict.oninteroute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csweb-lon.uict.oninteroute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.uict.oninteroute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.uict.oninteroute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.uict.oninteroute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbcc02-lon2.uict.oninteroute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.uict.oninteroute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uict.oninteroute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapps.uict.oninteroute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf-lon.uict.oninteroute.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7641794366bbd487178cb1bb0f1ca66007d5373
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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