bcp.asbbank.co.nz

- ASB Bank Limited -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 64:7c:36:cd:5d:59:96:07:00:00:00:00:54:cf:7d:3f was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ASB Bank Limited

Company registration number: 398445
Organization: ASB Bank Limited
Locality: Auckland
Country: NZ

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 64:7c:36:cd:5d:59:96:07:00:00:00:00:54:cf:7d:3f
Serial Number (int): 133567755909732227326141019753062300991
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 52:47:86:a3:01:98:c3:79:4e:ab:de:12:c9:40:6e:dc:4e:20:33:b6
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 16:8e:42:f7:36:81:b7:63:56:5d:3a:96:17:ce:e6:5f:b5:22:a6:89
Fingerprint (sha256): 55:5c:76:3e:85:20:ae:d9:ad:67:0f:f2:f5:e2:77:79:c4:c8:3b:9a:03:d3:26:a9:af:72:26:8c:3b:fc:6a:2e

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate bcp.asbbank.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bcp.asbbank.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bcp.asbbank.co.nz

Other certificates including the domain name asbbank.co.nz

(limited to 100 certificates)
mdm.asbbank.co.nz
fnc.asbbank.co.nz
fnc.asbbank.co.nz
ccimail.asbbank.co.nz
tms.asbbank.co.nz
mobile.asbbank.co.nz
qa.asbsecurities.co.nz
qa.asbsecurities.co.nz
fnc.asbbank.co.nz
mobileapipilot.asbbank.co.nz
tms.asbbank.co.nz
harbor-prod.asbbank.co.nz
webappisamdev.asbbank.co.nz
webappisamdev.asbbank.co.nz
harbor-qa.asbbank.co.nz
fnc.asbbank.co.nz
mobile.asbbank.co.nz
fnc.asbbank.co.nz
rancher.asbbank.co.nz
webappfs.asbbank.co.nz
ccimail.asbbank.co.nz
fastpay.asbbank.co.nz
PXATCA15.prod.asbgroup.co.nz
mail.asbdev.co.nz
qafnb.asbbank.co.nz
harbor-qa.asbbank.co.nz
tms.asbbank.co.nz
harbor-qa.asbbank.co.nz
tms.asbbank.co.nz
tms.asbbank.co.nz
ost.asbbank.co.nz
fnc.asbbank.co.nz
STW-UDPD-ATCA-01.asbbank.co.nz
harbor-qa.asbbank.co.nz
www.asbbank.co.nz
jim.asbbank.co.nz
qa.asbsecurities.co.nz
PXATCA15.prod.asbgroup.co.nz
mastertrust.asbbank.co.nz
mdmqa.asbbank.co.nz
tms.asbbank.co.nz
ccimail.asbbank.co.nz
nfuse.asbbank.co.nz
qafnb.asbbank.co.nz
mdm.asbbank.co.nz
bcp.asbbank.co.nz
fnc.asbbank.co.nz
www.asbbank.co.nz
bcp.asbbank.co.nz
bcp.asbbank.co.nz
ost.asbbank.co.nz
www.asbbank.co.nz
PXATCA15.prod.asbgroup.co.nz
jim.asbbank.co.nz
www.fastnetoffice.asbbank.co.nz
ost.asbbank.co.nz
www.asbbank.co.nz
www.fastnetoffice.asbbank.co.nz
ost.asbbank.co.nz
fstonline.asbbank.co.nz
fnc.asbbank.co.nz
fstonline.asbbank.co.nz
ost.asbbank.co.nz
www.asbbank.co.nz
tms.asbbank.co.nz
STW-FC-ATCA-01.asbbank.co.nz
fnc.asbbank.co.nz
webappisamdev.asbbank.co.nz
ost.asbbank.co.nz
mastertrust.asbbank.co.nz
qa.asbsecurities.co.nz
webappisamdev.asbbank.co.nz
webappapidev.asbbank.co.nz
qamasb.asbbank.co.nz
mail.asb.co.nz
www.ofx.asbbank.co.nz
segqa.asbbank.co.nz
fnc.asbbank.co.nz
PXATCA15.prod.asbgroup.co.nz
ost.asbbank.co.nz
nfuse.asbbank.co.nz
jim.asbbank.co.nz
www.asbbank.co.nz
bcp.asbbank.co.nz
ccimail.asbbank.co.nz
www.asbbank.co.nz
harbor-qa.asbbank.co.nz
ccimail.asbbank.co.nz
www.asbbank.co.nz
harbor-qa.asbbank.co.nz
www.asbbank.co.nz
tcs01.asbbank.co.nz
www.ofx.asbbank.co.nz
www.asbbank.co.nz
webappsharkymcsharkbootsfacedev.asbbank.co.nz
fnb.asbbank.co.nz
ost.asbbank.co.nz
www.asbbank.co.nz
STW-SMC-ATCA-01.asbbank.co.nz
bcp.asbbank.co.nz

Certificate

The complete raw certificate details for bcp.asbbank.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNmxVsKMY+b1TVMPIlSG
OOPKYdF2Fi0BsRI2dGm7lc1mhb20A/2d6L2OMm8rHMyqb/nguvF2WD4d8tH7k47p
2ODKLrgXrtPGCF1bJHA0iD/ILyZnU3QcKhRaCkuOPCUQf8QWyl/UkCFTBHqwkLPg
MkFq8W7sA77iKukhSf77hMorkO1QRNQu0jfRTFDIWwkS9WrobYpAJogiRkoVkw3M
Ge07QrqXemk1DxyvTR2CIYrcpDc44t3JJ8jNVQJL1TIDmMyDgB8S7s1DTi0tSFNI
AWD0QpiFA+lAoshQux9XFUmF8k90+0EMWKsMlZqLH5Cw34oirPNqSfv35O7fX6Ep
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 133567755909732227326141019753062300991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-25 01:01:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-26 01:31:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auckland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ASB Bank Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '398445'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bcp.asbbank.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23840149619757657426816283354373387126475214214412978310357863368453337817433729745620719614474065542848387037602673693939365048304124565382215673778116670439241797223873974941738588760188557711495914044302349636117412146504321235709751963982009397442341703225526460557135315332925498394861977455175419523067986746832196967332621822771257989812174550528247940802176288366560351622324455435157664672993780128549077902476660065497100706317757419944357040294742678808383005314887505747876544410687302238795629075971843337668742212580720539630111539065577770038646004571526415700133937443615916309997664076291168972908871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcp.asbbank.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							524786a30198c3794eabde12c9406edc4e2033b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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