www.ssi.com.vn

- SSI Securities Corporation -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 27:72:88:4b:9b:78:cd:c2:26:f3:0a:86 was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SSI Securities Corporation

Company registration number: 03/GPHDKD
Organization: SSI Securities Corporation
State / Province: Ho Chi Minh
Locality: Ho Chi Minh
Country: VN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 27:72:88:4b:9b:78:cd:c2:26:f3:0a:86
Serial Number (int): 12208376563018931512993319558
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 89:6d:2e:81:5e:9c:b7:79:74:f3:8a:e6:35:18:ea:fe:d5:ff:c6:b5
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): 10:7b:f8:63:99:ee:c2:04:b3:87:70:bc:04:b5:14:9f:ca:f6:ad:ce
Fingerprint (sha256): 59:1f:30:09:0d:c2:96:24:2a:9c:2f:0c:1a:63:e4:b0:2b:43:b1:ea:98:37:4c:9e:da:dd:99:78:23:94:2f:b1

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl

Check the revocation status for certificate www.ssi.com.vn

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ssi.com.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ssi.com.vn
mts.ssi.com.vn
webtrading.ssi.com.vn
ssi.com.vn

Other certificates including the domain name ssi.com.vn

(limited to 100 certificates)
*.ssi.com.vn
*.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
meeting.ssi.com.vn
meeting.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
mail.ssi.com.vn
meeting.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
meeting.ssi.com.vn
smarttrading.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
webtrading.ssi.com.vn
www.ssi.com.vn
www.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
meeting.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
webtrading.ssi.com.vn
*.ssi.com.vn
smarttrading.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
meeting.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
mail.ssi.com.vn
meeting.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
tracking.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
wt-snapshot-afd.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
meeting.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn

Certificate

The complete raw certificate details for www.ssi.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72WBxBnSD8iJcoy75gxr
2SxErS4uh0HInCCqK4+oSoOfq/ThXetXLsCoW5rEzyn/sxXiNhNws+i+P88uPnfg
1jONKP4WboK/5hYpMM4i5HT9MDHVgsoIhj+ueMRLNHgek4qGNepk1Tn2d1KufhIx
blm0sW5/0VU9E7JSx+W40GMNIiKTi4BPvk5vTWq2N4Gs0kW5noMCjC6rm5ppdPrp
QZMH7pnNQrbRodhYaWAySNQrLvGaPKZvxnNt2G9exaPZUyPq7EJrm/b9Q15Tq/tO
+bylA8iVau8KDXbgNlcaOuDCk4QYRbStYq86jbt/5F8Ax5YX5VU6qw9MOPon43kj
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12208376563018931512993319558
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 02:22:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-16 03:36:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '03/GPHDKD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ho Chi Minh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ho Chi Minh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSI Securities Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ssi.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30221009804116434035750309052845889943881397452629856866622557676085223490424422035826606655897646021738604898881933960355010074512524984998898695106122609414070418935631895503227503303975891837979714407832203345517913568400764684997146529293000459837632858258973025072353992054769577799702906749667846569490801991054322488288347571802458087657937591580751130602587694450731204210198181116711936564103582163677765279314849027743812470761199029279551532040674187645100136420587464995127393579712576509718915351105851131910932231928226766572718913104739324813982183280275965392697927687161449251195653381696309075452783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mts.ssi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtrading.ssi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssi.com.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							896d2e815e9cb77974f38ae63518eafed5ffc6b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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