gis.cityofmontrose.org

- City of Montrose -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 7b:d3:56:3c:c1:5e:d0:2e:00:00:00:00:50:f0:aa:9d was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

City of Montrose

Organization: City of Montrose
Organization unit: GIS
State / Province: Colorado
Locality: Montrose
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:d3:56:3c:c1:5e:d0:2e:00:00:00:00:50:f0:aa:9d
Serial Number (int): 164592367219456394919646955900702337693
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ef:d7:5a:5c:0a:a2:10:1e:4e:55:86:8d:a9:73:f2:fc:ae:7e:5b:e0
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 0a:d1:63:4b:35:e6:e8:ef:23:29:5e:43:a2:3a:81:38:87:7e:d1:6a
Fingerprint (sha256): 4f:1c:f1:87:90:c2:95:50:87:c6:95:6f:ae:cf:df:f8:a6:41:a5:3e:29:d4:f2:28:a1:8d:22:d5:e8:1c:9f:d7

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate gis.cityofmontrose.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gis.cityofmontrose.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gis.cityofmontrose.org
www.gis.cityofmontrose.org

Other certificates including the domain name cityofmontrose.org

(limited to 100 certificates)
support.billinhelpdesk.com
helpdesk.livestockfeedsplc.com
support.henrypeters.com
eyehelp.eyemartexpress.com
support.billinhelpdesk.com
www.cityofmontrose.org
eyehelp.eyemartexpress.com
eyehelp.eyemartexpress.com
servicedesk.grupocorinsa.hn
eyehelp.eyemartexpress.com
servicedesk.grupocorinsa.hn
servicedesk.additionfi.com
helpdesk.maca.net.au
support.billinhelpdesk.com
support.lantech.com
www.cityofmontrose.org
eyehelp.eyemartexpress.com
support.billinhelpdesk.com
servicedesk.biggroup.co.uk
helpdesk.motirservices.com
support.billinhelpdesk.com
helpdesk.livestockfeedsplc.com
vpn.cityofmontrose.org
servicedesk.roosterpoultry.com.fj
www.cityofmontrose.org
support.cityofmontrose.org
helpdesk.maca.net.au
www.cityofmontrose.org
helpdesk.lincolncountybancorp.com
support.henrypeters.com
eyehelp.eyemartexpress.com
eyehelp.eyemartexpress.com
helpdesk.lincolncountybancorp.com
helpdesk.dayair.org
helpdesk.mepco.biz
helpdesk.maca.net.au
servicedesk.lakeside.net
www.cityofmontrose.org
vpn.cityofmontrose.org
helpdesk.lincolncountybancorp.com
helpdesk.dayair.org
vpn.cityofmontrose.org
eyehelp.eyemartexpress.com
support.billinhelpdesk.com
sd.bbacerts.co.uk
helpdesk.motirservices.com
sdp.charlesignatius.co.in
helpdesk.stsholdings.net
support.cityofmontrose.org
helpdesk.maca.net.au
helpdesk.mepco.biz
eyehelp.eyemartexpress.com
apps.cityofmontrose.org
mia.grupoitsupport.com
gis.cityofmontrose.org
gis.cityofmontrose.org
www.cityofmontrose.org
omsweb.cityofmontrose.org
www.cityofmontrose.org
support.lantech.com
servicedesk.lakeside.net
eyehelp.eyemartexpress.com
support.henrypeters.com
sd.bbacerts.co.uk
eyehelp.eyemartexpress.com
helpdesk.lincolncountybancorp.com
helpdesk.greenstonedatasolutions.com
eyehelp.eyemartexpress.com
sd.jltest.ca
eyehelp.eyemartexpress.com
helpdesk.mepco.biz
eyehelp.eyemartexpress.com
support.lantech.com
servicedesk.grupocorinsa.hn
servicedesk.lakeside.net
sdp.charlesignatius.co.in
support.billinhelpdesk.com
servicedesk.i3secure.co.uk
it.servicedesk.qsix.com
cws.cityofmontrose.org
mia.grupoitsupport.com
www.cityofmontrose.org
servicedesk.biggroup.co.uk
servicedesk.grupocorinsa.hn
eyehelp.eyemartexpress.com
it.servicedesk.qsix.com
support.billinhelpdesk.com
www.cityofmontrose.org
eyehelp.eyemartexpress.com
helpdesk.lincolncountybancorp.com
servicedesk.grupocorinsa.hn
vpn.cityofmontrose.org
support.billinhelpdesk.com
www.cityofmontrose.org
support.cityofmontrose.org
it.servicedesk.qsix.com
apps.cityofmontrose.org
it.servicedesk.qsix.com
ithelp.cityofmontrose.org
gis.cityofmontrose.org

Certificate

The complete raw certificate details for gis.cityofmontrose.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GUKM09BWL2BmmIJwZwZ
kqmJjaZaXzFwQ8ZpeVTduEIG5MrbeiE+PDJ0OZQWd3dwWSrtvivZCU0RWXclinV6
ju8eUYf0hyY+44oLlwUibOmG9QRf/ZrCWEJfN9KGImJJVzyIHZJrxK+XoN7IMgmX
76KGB6DLGFz8B1C3Z5YkXrCHE7gf7kL20oClfqKsUvlYbZ/YTva7JkyNDx8mFDR6
QUjsKWyZ+of9gXE5HX9kVvlfTpBHso7m1UnQB4tn0IfqCPBZrYniw40Zxk7ibRFK
raXd2ITD9SexrqSpziSOu+v62uWk1hFNLcAKtydraabTyjzCYq3g+job4mjONDJt
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 164592367219456394919646955900702337693
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 15:20:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-21 15:50:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montrose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Montrose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gis.cityofmontrose.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26812345257570576801718011848287757053085990099571109988130768069246380137720241006924882315528154719792553064787783898930525396029392174044753307481005612121816786571166700670743580910256798468663182037687789202973370870986926630198676791885552309952342405354941069131290249261151069409764976677128654326080935273732710703707991788936904077051765896672682195058366316377264623105488835221431116644445973527776307902601130555320282374575557612172139632670340927702642254033892670685686613700331388072115131845447377000989656075214543260182387912289242112487228974971909859315980376730831077296247834065004361768136161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.cityofmontrose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gis.cityofmontrose.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efd75a5c0aa2101e4e55868da973f2fcae7e5be0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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