milkywaypage.cupdapp.com

- China Unionpay Data Services Co., Ltd. -

Issued by TrustAsia OV TLS Pro CA G3

About this certificate

This digital certificate with serial number 05:ec:d4:49:98:69:6f:45:d1:11:de:96:1b:8c:62:27 was issued on by TrustAsia Technologies, Inc..

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

China Unionpay Data Services Co., Ltd.

Organization: China Unionpay Data Services Co., Ltd.
State / Province: Shanghai
Country: CN

TrustAsia Technologies, Inc.

Organization: TrustAsia Technologies, Inc.
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 05:ec:d4:49:98:69:6f:45:d1:11:de:96:1b:8c:62:27
Serial Number (int): 7875827739199820554752746671986991655
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e8:b1:fa:72:47:05:25:12:0c:8e:05:fa:e3:fe:b3:61:0f:29:ce:eb
AuthorityKeyId: 9a:d9:0d:10:c9:c4:5f:4c:32:d2:e7:f0:1b:ad:4a:a6:2d:25:3b:d4

Fingerprint (sha1): 1a:12:0a:fe:6d:db:ce:bf:fb:2c:c3:76:65:93:a8:34:22:10:cf:cf
Fingerprint (sha256): 4f:7b:41:f4:63:9d:e1:3c:51:81:81:ba:89:4a:c0:29:8f:e0:f7:5e:68:67:39:62:42:eb:ed:29:ef:f5:d1:3f

Issuing Certificate URL: http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/TrustAsiaOVTLSProCAG3.crl

Check the revocation status for certificate milkywaypage.cupdapp.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for milkywaypage.cupdapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

milkywaypage.cupdapp.com
directbank.uobchina.com.cn
directbank.crcbbank.com
directbank.jlnls.com
heb.caihongbank.com
dbsdigi.dbs.com.cn
zx.zznsyh.cn
directbank.qhrccb.com
dbank.fubonchina.com
www.wdnsbank.com
zx.hsbank.com.cn
zxyh.nccbank.com.cn
yinshu.gzhxrcb.com
direct.xwnsmsd.com
zxyh.qznsh.com
digitalpartnership.sc.com

Other certificates including the domain name cupdapp.com

(limited to 100 certificates)
wechat.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
api.ws.cupdapp.net
stmt.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
wechat.cupdapp.com
ws.cupdapp.net
stmt.cupdapp.com
*.unicorn.cupdapp.com
ant.ccbillinst.cupdapp.com
ncoas.cupdapp.com
milkywaypage.cupdapp.com
xdzlar.cupdata.com
ncoas.cupdapp.com
ws.cupdapp.net
appsignsrc.cupdapp.com
ncoas.cupdapp.com
api.ws.cupdapp.net
*.static.cupdapp.com
ws.cupdapp.net
api.ws.cupdapp.net
app.cupdapp.com
ncoas.cupdapp.com
securityplus.cupdata.com
api.ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
directbank.cupdata.com
ws.cupdapp.net
perbank.cupdapp.com
apptranssign.cupdapp.com
stmt.cupdapp.com
ws.cupdapp.net
prepaidcard.leagcard.com
ncoas.cupdapp.com
ncoas.cupdapp.com
appsigndest.cupdapp.com
ncoas.cupdapp.com
stmt.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
api.ws.cupdapp.net
api.ws.cupdapp.net
ncoas.cupdapp.com
app.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
milkywaypage.cupdapp.com
crbep.cupdapp.com
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
stmt.cupdapp.com
app.cupdapp.com
appsigndest.cupdapp.com
ncoas.cupdapp.com
stmt.cupdapp.com
perbank.cupdapp.com
stmt.cupdapp.com
api.ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
app.cupdapp.com
stmt.cupdapp.com
app.cupdapp.com
ncoas.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
app.cupdapp.com
ws.cupdapp.net
stmt.cupdapp.com
api.ws.cupdapp.net
app.cupdapp.com
stmt.cupdapp.com
stmt.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
wechat.cupdapp.com
stmt.cupdapp.com
stmt.cupdapp.com
ws.cupdapp.net
api.ws.cupdapp.net
stmt.cupdapp.com
stmt.cupdapp.com
api.ws.cupdapp.net
wx.cupdapp.com

Certificate

The complete raw certificate details for milkywaypage.cupdapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKSxOWtC5eHxEPG9qWN/
sb8ytkfFFWMOIs1M4Upc6QJRdLkuUjn2yTaIKGeZ0VzMUg8l/aglFimTyCRvmmjF
utpAn7YsgnBb4OmK5nYfvre+zh70q84FXUrr6uOl0ZKzZRmp8I1rYcoj97+tqa7d
HlkdkI5qG7kRl3ZgYgGBw209WBpY3olevcN3gtPHlxrdM3CCQKMJtffz6KPuo2c8
eYmX6yLIPBfL3Z/mp5fKdX4nYYKmMsPgxZ6C6KIUbiLP7aqTkRQZ/4doQ0pNxk5i
+oRkrhNnXiTxTMek9DvAbTiavkF5Ymi1s513I5Q2Pq/XeLnoLZJJMUYejwzDRyaa
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7875827739199820554752746671986991655
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia OV TLS Pro CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China Unionpay Data Services Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'milkywaypage.cupdapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22804107685181339155659646636721799266484222531156500738425428663729129903938233367273624735428953749984755821363976117811324663588645973166490569069022375057100374931563667642207150181585671906847547022515548169391863689266293459897602901965946852361600647981727133487672914078661249903037987161598372817889728436777450876858648862242073159290846840235473894885993210719178793537224779450688751745145886865423834209041135956478313468614560806100058672452626672244029470607891618278973915290112783758443908818770989877137735698731492292049366173349200063924458908651332806617813243610570264638896062989951446859291233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9ad90d10c9c45f4c32d2e7f01bad4aa62d253bd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8b1fa72470525120c8e05fae3feb3610f29ceeb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (345 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milkywaypage.cupdapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directbank.uobchina.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directbank.crcbbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directbank.jlnls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heb.caihongbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbsdigi.dbs.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zx.zznsyh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directbank.qhrccb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbank.fubonchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdnsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zx.hsbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zxyh.nccbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yinshu.gzhxrcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct.xwnsmsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zxyh.qznsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalpartnership.sc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/TrustAsiaOVTLSProCAG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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