www.oldsecond.com

- Old Second National Bank -

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 17:61:3d:78:78:78:5b:db was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Old Second National Bank

Company registration number: 3603
Organization: Old Second National Bank
State / Province: Illinois
Locality: Aurora
Country: US

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 17:61:3d:78:78:78:5b:db
Serial Number (int): 1684695323239799771
Serial Number lenght: 61 bits, 8 octets

SubjectKeyId: 4f:d2:82:67:3c:48:7a:fd:65:65:a7:fa:dd:79:bf:14:ad:ae:a9:42
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 3c:cd:71:a8:54:59:73:2b:3f:36:3e:3f:70:90:dc:44:52:b4:c9:29
Fingerprint (sha256): 5b:a5:3c:6b:89:97:1e:72:47:51:3d:fb:77:3f:62:82:42:ac:d7:6f:2a:b2:74:b4:16:09:d8:f7:46:0e:97:f2

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s3-22.crl

Check the revocation status for certificate www.oldsecond.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.oldsecond.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.oldsecond.com
oldsecond.com

Other certificates including the domain name oldsecond.com

(limited to 100 certificates)
investors.oldsecond.com
o2vpn2.oldsecond.com
onlinebanking.oldsecond.com
akamai-san145.exacttarget.com
o2vpn2.oldsecond.com
o2vpn1.oldsecond.com
onlinebanking.oldsecond.com
webmail.oldsecond.com
sip.oldsecond.com
www.oldsecond.com
stores.footlocker.co.uk
www.oldsecond.com
answers-embed.techem.de.pagescdn.com
onlinebanking.oldsecond.com
*.oldsecond.com
local.oldsecond.com
www.oldsecond.com
*.oldsecond.com
akamai-san145.exacttarget.com
mail2.oldsecond.com
*.oldsecond.com
sip.oldsecond.com
ens.oldsecond.com
akamai-san145.exacttarget.com
store.iwc.com
digital.oldsecond.com
akamai-san145.exacttarget.com
onlinebanking.oldsecond.com
webmail.oldsecond.com
local.oldsecond.com
o2vpn2.oldsecond.com
investors.oldsecond.com
locations.wauchulastatebank.com
www.oldsecond.com
o2vpn1.oldsecond.com
digital.oldsecond.com
local.oldsecond.com
answers-embed.techem.de.pagescdn.com
local.oldsecond.com
answers-embed.shumanlaw.com.pagescdn.com
locations.wauchulastatebank.com
answers-embed.westmichiganderm.com.pagescdn.com
sip.oldsecond.com
oos1.oldsecond.com
o2vpn1.oldsecond.com
*.oldsecond.com
o2vpn1.oldsecond.com
lmweb.oldsecond.com
answers.waltoncommunities.com
webmail.oldsecond.com
oos2.oldsecond.com
mail.oldsecond.com
o2vpn1.oldsecond.com
webmail.oldsecond.com
o2WC.oldsecond.com
www.oldsecond.com
o2vpn2.oldsecond.com
mail.oldsecond.com
digital.oldsecond.com
akamai-san145.exacttarget.com
*.oldsecond.com
answers.lafamiliainsurance.com
sip.oldsecond.com
local.oldsecond.com
onlinebanking.oldsecond.com
www.oldsecond.com
mail2.oldsecond.com
answers-embed.shumanlaw.com.pagescdn.com
answers-embed.westmichiganderm.com.pagescdn.com
answers.waltoncommunities.com
myloan.oldsecond.com
akamai-san145.exacttarget.com
onlinebanking.oldsecond.com
akamai-san145.exacttarget.com
local.oldsecond.com
*.oldsecond.com
local.oldsecond.com
www.oldsecond.com
synergichealthcareers.yext-cdn.com
local.oldsecond.com
webmail.oldsecond.com
O2View.OldSecond.com
store.iwc.com
webmail.oldsecond.com
stores.footlocker.co.uk
o2vpn2.oldsecond.com
o2AE.oldsecond.com
synergichealthcareers.yext-cdn.com
seg.oldsecond.com
local.oldsecond.com
www.oldsecond.com
*.oldsecond.com
*.oldsecond.com

Certificate

The complete raw certificate details for www.oldsecond.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1684695323239799771
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 12:52:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-26 19:02:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3603'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aurora'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Old Second National Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oldsecond.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853141403562404962694190888302735615980170966978881979595404946022965145340616575534108397549836569303522487141663386327603753943607058305691829943767279382233288415748392519117432481044537812345518772446673602254249081128666737805238640663354679009157232248061637784307426191804237871513944710474628520847791665737636019991766845121843809005864942416840782691675902198644737670570019616607167227392687043538242847825033170000824209148703314907380518732594885672992962101896405621318959534507771255840981300349404864675143551555954170793496965651474416783509241796565312878210768950817084656542269722345764609837085112780291986519242349003006516638349215674641636593651001311996693238877052522795442214074665127340893155686064025004489372749108097691841155670512980474575110047331842448672532099721716640655070186517491612005149647467190497476133426534799669739080182873650767072740147785670713402001630928049873018728454309242930552957169807797935048010100540658591074449968117438113026992055654288524702296236970432233232485052781668974811966083904701107567632013898936053130974655804676720837260650940116118323569939320717852200460673570339892013177068315460797237484068241594139859278691048049872459697662590473930486265589725687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s3-22.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.3 (GoDaddy EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldsecond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsecond.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fd282673c487afd6565a7fadd79bf14adaea942
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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