icare.intermountain.net

- Intermountain Health Care Inc -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:dd:d1:da:ea:e1:00:f3:74:61:1c:b8:8d:14:5c:ca was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Intermountain Health Care Inc

Organization: Intermountain Health Care Inc
Organization unit: Intermountain Health Care Inc
State / Province: Utah
Locality: Salt Lake City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:dd:d1:da:ea:e1:00:f3:74:61:1c:b8:8d:14:5c:ca
Serial Number (int): 18431717918978199660951794957937827018
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a6:c6:d9:83:5c:85:a1:be:b7:a5:6d:24:0e:15:42:5b:5f:31:e5:65
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): cd:40:09:6c:a6:45:d1:38:4d:e8:c6:47:a1:46:2b:69:26:40:1d:2d
Fingerprint (sha256): 59:85:e9:63:35:19:ec:c2:07:4e:60:0b:61:e2:ef:6c:4e:80:54:a6:ac:16:6c:b4:d2:bf:88:22:48:2b:20:36

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g1.crl

Check the revocation status for certificate icare.intermountain.net

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for icare.intermountain.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

icare.intermountain.net
LPV-VDICM01.co.ihc.com
LPV-VDICM02.co.ihc.com
LPV-VDICM03.co.ihc.com
LPV-VDICM04.co.ihc.com
LPV-VDICM05.co.ihc.com
LPV-VDICM06.co.ihc.com
LPV-VDICM07.co.ihc.com
LP-ENVDISS01.co.ihc.com
LP-ENVDISS02.co.ihc.com
LP-ENVDISS03.co.ihc.com

Other certificates including the domain name intermountain.net

(limited to 100 certificates)
fsso-tst.intermountain.net
sso.intermountain.net
m.intermountain.net
drift.bnaa.dk
physician.intermountain.net
icare-dr.intermountain.net
sso.appservice.co.azs.intermountain.net
account.intermountain.net
drift.bnaa.dk
xlib.intermountain.net
erp.intermountain.net
imperva.com
dev.intermountain.net
awcm.intermountain.net
intermountain.net
drift.bnaa.dk
erp-tst01.intermountain.net
drift.bnaa.dk
imperva.com
drift.bnaa.dk
m.intermountain.net
drift.bnaa.dk
intermountain.net
m.intermountain.net
icare.intermountain.net
*.intermountainhealthcare.org
erp.intermountain.net
awcm.intermountain.net
jsstest.intermountain.net
drift.bnaa.dk
xlib.intermountain.net
m.intermountain.net
sso.intermountain.net
reportstst.intermountain.net
tst.intermountain.net
*.sso.appservice.co.azs.intermountain.net
drift.bnaa.dk
printit.intermountain.net
imperva.com
imperva.com
storefront.co.ihc.com
drift.bnaa.dk
ciportal.intermountain.net
reports.intermountain.net
sso.intermountain.net
drift.bnaa.dk
adfs.intermountain.net
drift.bnaa.dk
drift.bnaa.dk
tableau.intermountain.net
mtst.intermountain.net
dfd-dev.intermountain.net
drift.bnaa.dk
erp.intermountain.net
intermountain.net
drift.bnaa.dk
securedrop.intermountain.net
drift.bnaa.dk
reports.intermountain.net
drift.bnaa.dk
mtst.intermountain.net
netaxept-status.developers.nets.eu
awcm.intermountain.net
drift.bnaa.dk
sso.intermountain.net
imperva.com
drift.bnaa.dk
adminmanagement.co.azs.intermountain.net
awcm.intermountain.net
drift.bnaa.dk
*.vault.co.azs.intermountain.net
m.intermountain.net
sso.intermountain.net
drift.bnaa.dk
jss.intermountain.net
fssocaregiver.intermountain.net
drift.bnaa.dk
intermountain.net
printit.intermountain.net
m.intermountain.net
imperva.com
m.intermountain.net
datamart.intermountain.net
imperva.com
*.hosting.co.azs.intermountain.net
teamspace.intermountain.net
icare-test.intermountain.net
intermountain.net
netaxept-status.developers.nets.eu
awcm.intermountain.net
*.adminhosting.co.azs.intermountain.net
drift.bnaa.dk
drift.bnaa.dk
intermountain.net
drift.bnaa.dk
imperva.com
*.table.co.azs.intermountain.net
icare.intermountain.net
drift.bnaa.dk
jsstest.intermountain.net

Certificate

The complete raw certificate details for icare.intermountain.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuZ9131YdF73rh6tNRTH
yA/VFMALKCI93x3M+7iptF18JpBk5FJWQgMgZUFfYK9sbsa9NtpzUr+PCAh/ELzl
pHMCGBp6NcNWVR5OxwoZ1lDAt9nvFZCt9qSlLQf6mIgxtuycHP1DLlMSdEWRLHRJ
2kvGja73bSSud4eRmI57hpuUcxLBBtgwdg0vgLYcUUyPRBW3+FEbeD9pUBpcfymF
2ZedrCJrlYHoxBY1ECKC+DSw+hIwWPv0gK7JOxo7dReN2q4Gf0i4JqmaUnPnsBEe
VIVLgJTzavYFLgX/9D2BklH5VYYCIlAdV7+2IPC5A9OF/MDlK4QrCa9HHHN7mDjr
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18431717918978199660951794957937827018
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermountain Health Care Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermountain Health Care Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'icare.intermountain.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25108844012283814826087071400514342979068540312888367405118721648372376156276785414012553982380392532227030803084143548220781062866904877345069936842348125820484496896627907777961967290471905096031504022822258584218192594795252101855424100930370105435601622676538571252679349053158367483115402309491516535089714944681685029538998311410119858799876960868944713243200048962103497834077817829222808361823094856272812886306722615181127125851796355778170598970512008122091864944306722250388289102195581708660831947437026830672785152342835917370989867421568622881422860452452187585128211569769554546995655173875730868661129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6c6d9835c85a1beb7a56d240e15425b5f31e565
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (272 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icare.intermountain.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LPV-VDICM01.co.ihc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LPV-VDICM02.co.ihc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LPV-VDICM03.co.ihc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LPV-VDICM04.co.ihc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LPV-VDICM05.co.ihc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LPV-VDICM06.co.ihc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LPV-VDICM07.co.ihc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LP-ENVDISS01.co.ihc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LP-ENVDISS02.co.ihc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LP-ENVDISS03.co.ihc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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