dev.login.service.dealers.ia.iafg.net

- Industrial Alliance Insurance and Financial Services Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 75:87:11:9c:d2:c0:a0:95:9f:62:17:40:5e:22:a2:42 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Industrial Alliance Insurance and Financial Services Inc.

Organization: Industrial Alliance Insurance and Financial Services Inc.
State / Province: Quebec
Locality: Quebec
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 75:87:11:9c:d2:c0:a0:95:9f:62:17:40:5e:22:a2:42
Serial Number (int): 156220992808518697321766281678050992706
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e9:ae:17:84:8f:45:9b:a5:c5:99:ab:a1:8a:c7:7c:f7:04:83:64:b0
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): ac:a3:89:25:5c:35:b7:10:2c:3f:fe:95:fc:da:4f:3e:a6:8a:60:b3
Fingerprint (sha256): 5a:18:44:d3:14:bd:d0:ce:a8:ec:04:62:13:8e:65:89:77:fc:7a:56:85:17:e5:b4:ee:a7:dc:0f:66:ac:a0:d0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate dev.login.service.dealers.ia.iafg.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.login.service.dealers.ia.iafg.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.login.service.dealers.ia.iafg.net

Other certificates including the domain name iafg.net

(limited to 100 certificates)
securefonc.inalco.com
*.iagextp01-cae-ase-prod-01.ase.ia.iafg.net
webmail.inalco.com
sva0735.ia.iafg.net
iagomnip01-cac-aks-cw-01.aks.ia.iafg.net
authentification.intg.secureweb.ia.iafg.net
api.AutoriteCertification.ia.iafg.net
iafg.net
iafg.net
accp.login.service.dealers.ia.iafg.net
iagtelc01-cac-ise01.iafg.net
el-nxportal.accp.part.iafg.net
fs52.ia.ca
iafg.net
*.asmb.secureweb.ia.ca
test.ee-tokenapi.accp.webapp.ia.iafg.net
imageserver.secureweb.accp.ia.iafg.net
ee-tokenapi.accp.webapp.ia.iafg.net
expw-e.uc.iafg.net
MQ-Investments-PTS-BYM-02-PROD.iafg.net
expw-e.uc.iafg.net
fs52.ia.ca
proxy.intg.secureweb.ia.ca
*.intg.secureweb.ia.ca
dev.login.service.dealers.ia.iafg.net
*.prod.ia.iafg.net
el-nxportal-mpls-dr.prod.part.iafg.net
se.webgateway.accp.ia.iafg.net
*.intg.ia.iafg.net
*.intg.sitecore.ia.iafg.net
iafg.net
sva0890.ia.iafg.net
webmail.ia.ca
iaginfrp01.azure.ia.iafg.net
sva0736.ia.iafg.net
sva0767.ia.iafg.net
expw-e.uc.iafg.net
sva0735.ia.iafg.net
iafg.net
authentification.asmb.secureweb.ia.iafg.net
accp.login.service.dealers.ia.iafg.net
api.EntrustAutomation.ia.iafg.net
ref.dev.azure.ia.iafg.net
se.webgateway.ia.iafg.net
*.intg.secureweb.ia.ca
sva0737.ia.iafg.net
iagtelc01-cae-ise01.iafg.net
fs52.ia.ca
iaginfrp01-itsm.azure.ia.iafg.net
sva0736.ia.iafg.net
iagclienta01.azure.ia.iafg.net
hdwqc032.ia.iafg.net
fs52.ia.iafg.net
*.prod.ia.iafg.net
iagomnid01-cac-aks-cw-01.dev.aks.ia.iafg.net
ref.dev.azure.ia.iafg.net
*.dev.sitecore.ia.iafg.net
MQ-Investments-PTS-BYM-02-DEV.iafg.net
webmail.ia.ca
api.EntrustAutomation.ia.iafg.net
sva1391.ia.iafg.net
secureweb.fnct.api.ia.iafg.net
iafg.net
se.webgateway.intg.ia.iafg.net
iafg.net
*.sitecore.ia.iafg.net
ee-tokenapi.intg.webapp.ia.iafg.net
portail-accp-01.wifi.ia.ca
dev.login.service.dealers.ia.iafg.net
secureweb.accp.api.ia.iafg.net
se.webgateway.ia.iafg.net
jira.iaah.iafg.net
*.fnct.sitecore.ia.iafg.net
el-nxpace-mpls-dr.prod.part.iafg.net
iaginfrd01-itsm.azure.ia.iafg.net
sva1389.ia.iafg.net
sva0891.ia.iafg.net
secureweb.intg.api.ia.iafg.net
lidqca8.ia.iafg.net
ref.dev.azure.ia.iafg.net
secureweb.asmb.api.ia.iafg.net
ee-tokenapi.accp.webapp.ia.iafg.net
se.webgateway.intg.ia.iafg.net
accp.api.ia.iafg.net
*.accp.websct.ia.iafg.net
*.accp.ia.iafg.net
beyondinsight.intg.ia.iafg.net
*.prod.ia.iafg.net
imageserver.secureweb.accp.ia.iafg.net
*.iagextp01-cac-ase-prod-01.ase.ia.iafg.net
iaginfra01.azure.ia.iafg.net
*.intg.websct.ia.iafg.net
webmail.ia.ca
iaginfrl01.azure.ia.iafg.net
expw-e.uc.iafg.net
iafg.net
*.accp.sitecore.ia.iafg.net
se.webgateway.intg.ia.iafg.net
iagcorpd01.azure.ia.iafg.net
sva1390.ia.iafg.net

Certificate

The complete raw certificate details for dev.login.service.dealers.ia.iafg.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXDWtipu7U6IL8dyHV1G
Hsf8NxY9lJojH7Menzud+6WYJfI1pQlYjDAtlpNVVW4MNA1Xu7LaI8UIM4mai/UF
iJRzDVhV/BL8aKEPzJ/BrJQdBPEytDZ/syuHXqZiLvN1SE1Kv4UxiTNgJz4y5n6S
NzcPKnbGOPswRO5a8XgRZPkTSi3stZ0Yuv2ynXevPKkzcuT3P1rz65uKrX4/LoA/
W5cprTvcK5JkMufMKrs8a64a+qqf+T2uTPcsM/F5pVruByh/uiNhPTJYv3o3BHiM
5bNgm5qcKEnpwYk30Dxge07vaLnoSA8afIc0rs0UuVxCZcmUaTwc/IO0iD+Qj+Y5
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156220992808518697321766281678050992706
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-13 12:54:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 12:54:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrial Alliance Insurance and Financial Services Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.login.service.dealers.ia.iafg.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24419635703702783915438460248073632204953581610271944356512377066590584872165558266878975743133505976866760419175478063445563999346016221164399709375612811755191748596916005972056503596835267678226118840035585341036775778772407737010151270264481039924768997568811612068415183419002370925259567529613532863447031026535215925827936405462863729010187031110039698564235314592823701985134944095277619942755316259612147978904380841870339166659640436019874543495957210846768835987533074828441183372772868222279252268066347304358564074651890968894029300659276218555191867458449644263676898815285396211937974075437475716020721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9ae17848f459ba5c599aba18ac77cf7048364b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.login.service.dealers.ia.iafg.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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