www.tokyomirai.ac.jp

- Tokyo Future University -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0a:8c:a5:26:42:96:5e:07:e9:a6:bb:9e:d4:3c:6e:25 was issued on by DigiCert Inc.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tokyo Future University

Organization: Tokyo Future University
State / Province: Tokyo
Locality: Adachi
Country: JP

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:8c:a5:26:42:96:5e:07:e9:a6:bb:9e:d4:3c:6e:25
Serial Number (int): 14022551146906606234261037662496124453
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 32:77:36:30:c9:7c:97:f0:71:fd:36:6f:8e:e0:6a:3d:d8:10:24:d4
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): eb:0d:fa:34:20:43:9d:dc:24:07:49:ba:c2:2d:44:a6:d8:01:f6:e9
Fingerprint (sha256): 52:b1:e3:44:93:37:c6:94:0c:91:00:ea:be:96:64:e5:76:79:fa:37:dc:7e:8f:6b:78:26:e9:29:44:92:96:cd

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate www.tokyomirai.ac.jp

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tokyomirai.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tokyomirai.ac.jp
tokyomirai.ac.jp
www.freeschool.tokyomirai.ac.jp
corres.tokyomirai.ac.jp
license.tokyomirai.ac.jp
miraien.tokyomirai.ac.jp
jhs.sanko.ac.jp
humans.tokyomirai.ac.jp
www01.tokyomirai.net
www02.tokyomirai.net
www.odawara.ac.jp
cols.odawara.ac.jp
rishu-web.odawara.ac.jp
tsushin.odawara.ac.jp
www.sanko.ac.jp
helpdesk.sanko.ac.jp
sankoshinjukai.sanko.ac.jp
form.sanko.ac.jp
foreign.sanko.ac.jp
navi.momoiku.jp
www.sanko-group.info

Other certificates including the domain name tokyomirai.ac.jp

(limited to 100 certificates)
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
*.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp

Certificate

The complete raw certificate details for www.tokyomirai.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22ag2THC2f+2UXn9tJ0e
OVrdNNy+uTnFdM/aS/YvVVl/gCTf82EnoQQYdfSNSbXHmqQ7n/A3Sm7OnHG+xP5R
6z7uwMoO8M1a0cpO6DZxSpf+a2cibeAi67hH0J+k4bC07hLDFYp0BSZBAHSbj22M
39jzgQ30UafYUP2yCeYAaEAajHj1DBs9BwlozoCF+mCNmPVu5Xc+xWQUCcFe8mXe
DkIc51YSOJxgayAIPemDZvOt390i7j1Myqq/NQCN+ttaD7QPIEEnuof6kLuvNlyu
kLfMRBzJ11NQQfpkHaQBWOlMoAxR+0vGUnffRPBbALQExM4oLlvRgwdH2hsKOn1O
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14022551146906606234261037662496124453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adachi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo Future University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tokyomirai.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27696796695443555877502322283238974805441945487451927211336501036970513845803959452387101843220745958813157239255429363219786614777332702801052362018591131842544095715671632661543177785077969903002686527474248160399078405101817460160084911448120519405605781450733419590673517091253367676217560723770595936770498444034193657090587214959151194321425804669960819520625065530809691549831078376008954773859149371388939752863993658359783655054751230314307240561147960315579453637474341372208238459187087406563991841368112165882766119647251154056341059890131957503770813856926760024155326417512129181393352877127582344892061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32773630c97c97f071fd366f8ee06a3dd81024d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (472 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeschool.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corres.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'license.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miraien.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhs.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humans.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01.tokyomirai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02.tokyomirai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cols.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rishu-web.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsushin.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sankoshinjukai.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'form.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreign.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navi.momoiku.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanko-group.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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