*.knowledgeforce.com

- Market Force Information LLC -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0d:b2:02:99:53:a4:68:66:b4:fb:e6:c3:70:ec:c9:36 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Market Force Information LLC

Organization: Market Force Information LLC
State / Province: Georgia
Locality: Peachtree Corners
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:b2:02:99:53:a4:68:66:b4:fb:e6:c3:70:ec:c9:36
Serial Number (int): 18204245498637190321724244560326740278
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 07:b6:25:eb:29:96:c9:73:30:de:0d:a3:6e:cc:23:32:40:e7:de:e3
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 8b:30:4e:67:01:5b:b9:4c:d6:10:a7:62:8c:e2:55:d5:6d:09:dc:45
Fingerprint (sha256): 4e:20:e2:f0:a4:80:c6:8c:76:3a:95:57:61:fc:14:99:01:34:f8:22:49:e6:13:e3:1e:06:1c:91:34:c1:73:83

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.knowledgeforce.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.knowledgeforce.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.knowledgeforce.com
knowledgeforce.com

Other certificates including the domain name knowledgeforce.com

(limited to 100 certificates)
mi.portal.sagrado.edu
status.labs.caes.ucdavis.edu
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
status.amanah.com
status.amanah.com
mylanstatus.globalvisioninc.com
status.channelengine.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
status.investisdigital.cloud
status.wavity.info
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
status.greenewx.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
status.amanah.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
*.knowledgeforce.com
mylanstatus.globalvisioninc.com
estado.ikslatino.net
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
*.knowledgeforce.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
status.alogna.co.ao
*.knowledgeforce.com
status.site24x7.eu
mi.portal.sagrado.edu
mi.portal.sagrado.edu
status.channelengine.com
mylanstatus.globalvisioninc.com
status.healthera.co.uk
status.labs.caes.ucdavis.edu
mylanstatus.globalvisioninc.com
status.zenithpayments.com.au
status.zenithpayments.com.au
status.greenewx.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
cinc-status.tkelevator.com
status-v3.knowledgeforce.com
mylanstatus.globalvisioninc.com
*.knowledgeforce.com
*.knowledgeforce.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
status.h2.tc
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
cinc-status.tkelevator.com
status.amanah.com
status.madrasmediaworks.in
mi.portal.sagrado.edu
status.greenewx.com
status.appetize.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
odeonstatus.marketforce.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
status.themoviedb.org
status.automationanywhere.digital
status.quick-vue.com
mylanstatus.globalvisioninc.com
dun.im.4pple.org
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
status.ioneaccess.ch
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
status.shadowtek.com.au
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
status.webgears.at
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
status.sumex.ch
*.knowledgeforce.com
status.navis-cvs.com
mi.portal.sagrado.edu

Certificate

The complete raw certificate details for *.knowledgeforce.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsviyZuxvaIMv0KEk4HJ/
lEKlTQVq9RJkzfeiNRSiRhkGADo7W5hYK4gqxcHad3ENOFuXmZAz5mDdx0q408m1
Ckx46x8XRUnLaFcMhl/j8YXYZGCJNP4ndp+YEG8dHwhcwCszWwf1m270iLpn1gkC
VOKe9/BC6PSIh0VKcUkZde5Nt0bQS6ylJLsiJ5J8Mz/pM4g2Xo9xmZl/JawRFKfM
ghgkwve3zwu+cOhvSat7HH+rZq97YZiHo4WzDYmMYgIYIyC/G3ip7WVOS1fSNces
gvBgzuK4DdY0zd9EvhpM4dwlu5hJEEAPewxq9HRiKntnpKtb1aU1UPBbu7GRXMOU
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18204245498637190321724244560326740278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Peachtree Corners'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Market Force Information LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.knowledgeforce.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22593055287704093755041768242217076547958834048634141574096094687612224808679792930350781555910764087968925499122063683165597782422546594501620379873953925175643331055320222773746272912028885973552439455768388974796475797678413818696917733441698311292295850098663282938604266025134019886323081135985571090997122826916361600370892577345284015265303544142758017503205318102728561873852282037366336213104760111919472790082684677856260143426606450839142268150309530163569055644697446847910971852840312272266627169943351079253705093754267796341389286141402635596558581043218323454033996254073905898181274935819680845370513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07b625eb2996c97330de0da36ecc233240e7dee3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knowledgeforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgeforce.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a0077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018fa0cbbe7b0000040300483046022100a4ce92593a47f78e4a2473038e04ca0d7654cb973d8470fad9d86607557d3439022100c08e1f1547977068ea1639d5340b4a4db5aab6ed00f69e1bf1e75e41868d15f60077007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018fa0cbbe2d000004030048304602210088b4a4be09e80cbf62fac440456126931ba9f8fdcc947418c5c0e84031ce78d302210086288bfaf603be9cb2ea11227a537fb5c07479f1becc125fc011c570354d05e7007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018fa0cbbe490000040300473045022100d5d10798d260043b9527a2e2ddc233cf8b4662ac8be7492fd4591c5886dbabb9022033c2a32ef8e1748cae97659d6b885ce9b3f8c159c8ae3be6e71a3c59e25dead1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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