insights.cloud-dev.microsoft

- Microsoft Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:93:c6:be:41:95:8f:8b:9c:0b:be:30:27:35:ae:8f was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:93:c6:be:41:95:8f:8b:9c:0b:be:30:27:35:ae:8f
Serial Number (int): 6084210612094017353236071358343261839
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e0:39:4e:f6:b1:55:f4:c9:90:9a:ff:41:de:ec:cb:3d:3d:c4:3c:be
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ac:fe:e2:59:bc:1d:73:10:19:64:c9:f5:c2:28:ab:63:89:31:de:66
Fingerprint (sha256): 5c:20:db:ad:65:05:71:01:9b:7a:2f:79:87:b2:40:94:ce:95:50:7c:b4:7d:fa:8a:ea:f4:32:a1:74:f3:71:48

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate insights.cloud-dev.microsoft

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for insights.cloud-dev.microsoft

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

insights.cloud-dev.microsoft
dev.insights.viva.office.net

Other certificates including the domain name cloud-dev.microsoft

(limited to 100 certificates)
status.officeppe.com
sway.officeppe.com
*.vgdev.glint.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
*.goals.cloud-dev.microsoft
sessions.int.mesh.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
sway.officeppe.com
*.vgqa.glint.cloud-dev.microsoft
test.pulse.cloud-dev.microsoft
officeapps.live.com
learning.cloud-dev.microsoft
sessions.rol.mesh.cloud-dev.microsoft
esign.svc.cloud-dev.microsoft
copilot.cloud-dev.microsoft
augloop-test.officeppe.com
dev.skills.cloud-dev.microsoft
sway.officeppe.com
teamsapp.learning.cloud-dev.microsoft
*.yammer.com
augloop-int.officeppe.com
augloop-int.officeppe.com
status.officeppe.com
test.augloop.svc.cloud-dev.microsoft
learning.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
forms.cloud-dev.microsoft
setup.cloud-dev.microsoft
sessions.ppe.mesh.cloud-dev.microsoft
sessions.int.mesh.cloud-dev.microsoft
dev.skills.cloud-dev.microsoft
*.goals.cloud-dev.microsoft
loop.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
session.rol.mesh.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
*.vgdev.glint.cloud-dev.microsoft
dev.skills.cloud-dev.microsoft
dev.skills.cloud-dev.microsoft
sessions.rol.mesh.cloud-dev.microsoft
*.yammer.com
stage.skills.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
viva.cloud-dev.microsoft
forms.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
esign.svc.cloud-dev.microsoft
esign.svc.cloud-dev.microsoft
kevlar-ssl.augloop-int.officeppe.com
officeapps.live.com
test.augloop.svc.cloud-dev.microsoft
*.vgqa.glint.cloud-dev.microsoft
sway.officeppe.com
int.augloop.svc.cloud-dev.microsoft
reports.mmp.svc.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
officeapps.live.com
*.yammer.com
officeapps.live.com
kevlar-ssl.augloop-test.officeppe.com
*.ppe.goals.cloud-dev.microsoft
learning.cloud-dev.microsoft
test.pulse.cloud-dev.microsoft
profile.ppe.mesh.microsoft.com
sway.officeppe.com
forms.cloud-dev.microsoft
sway.officeppe.com
stage.pulse.cloud-dev.microsoft
stage.pulse.cloud-dev.microsoft
dev.pulse.cloud-dev.microsoft
viva.cloud-dev.microsoft
insights.cloud-dev.microsoft
*.goals.cloud-dev.microsoft
sway.officeppe.com
reports.mmp.svc.cloud-dev.microsoft
app.int.whiteboard.microsoft.com
*.yammer.com
test.augloop.svc.cloud-dev.microsoft
stage.pulse.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
*.yammer.com
forms.cloud-dev.microsoft
aiinfrastructure.cloud-dev.microsoft
aiinfrastructure.cloud-dev.microsoft
status.officeppe.com
*.vgdev.glint.cloud-dev.microsoft
officeapps.live.com
teamsapp.learning.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
insights.cloud-dev.microsoft
aiinfrastructure.cloud-dev.microsoft
status.officeppe.com
augloop-test.officeppe.com
cdn.aiinfrastructure.cloud-dev.microsoft
status.officeppe.com

Certificate

The complete raw certificate details for insights.cloud-dev.microsoft in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQHIxQRNdBZnq2aOnzGq
Fbu8BdAaU+H6AVVjdkGVKq69bMDWsJoLw2jCEGrZ0uqqkcNTU8w7xoy9dCspklFy
0NMiDixTKeejm7ausKg+svUaSJczLX0vVfTA2G8v5BuAKKPLLB/FnBmuvUrRZie+
98gknncyU8qhCZxtMKcD7KZNJ9zolmRVEvQF0qj2nppTHv798g8zqzQtF7zvxfdL
naaZmZj53crFcZtsYMcnuOJ/BMuNeXrlERumbJ50SovWE6lzWtd/WhQDC5V0U/UO
t5mde+Ql4DcKMB91lCRK+ju8Ehpkwb1iRrTMVOBOlbiCg18u+wC2xdSijo9brPu1
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6084210612094017353236071358343261839
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'insights.cloud-dev.microsoft'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25374779147721131859089079515957428853321357950085773869121381739408657795530093344211318137436053790003293161708502675868576150387456765453471575107746771378311711311395770482945625613573851722902920295895139025105288145699201877650563419928845261175557155437019165674180086786857472251270736761752149021906349162375312461295057402211407055995918845359513201290829278564978031994276540262216632608281416131767945618593632169147853727818598837018025774064335960676319248212164719911279189886126928994105589603358445274898928173347335280369448181336622851196600150968940986712414973035269644728664570152674692041520573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0394ef6b155f4c9909aff41deeccb3d3dc43cbe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.cloud-dev.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.insights.viva.office.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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