www.gilenya.com

- Novartis Pharma AG -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:82:8d:13:c2:b3:2c:f2:e4:a9:92:6f:3c:f7:fd:3e was issued on by DigiCert Inc.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Novartis Pharma AG

Organization: Novartis Pharma AG
Locality: Basel
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:82:8d:13:c2:b3:2c:f2:e4:a9:92:6f:3c:f7:fd:3e
Serial Number (int): 5994771960095095631642519378840780094
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2d:0b:4d:10:37:5c:4f:e1:ae:b6:d2:26:83:a8:75:ad:a1:bd:77:04
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): fa:0b:2b:70:3e:c6:fb:aa:4d:0f:65:ec:f6:1a:ee:eb:b5:71:c8:31
Fingerprint (sha256): 5c:7a:db:c1:bf:70:05:cb:27:f3:68:08:35:bd:84:2d:d2:cf:0c:bf:b6:eb:53:29:7f:2b:43:f5:f1:dc:b9:28

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate www.gilenya.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gilenya.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gilenya.com
gilenya.com
www.mspatientevents.com
mspatientevents.com
www.ms-web-events.com
ms-web-events.com
www.gilenyago.com
gilenyago.com
www.gilenyafirstdose.com
gilenyafirstdose.com
www.spread-the-ms-word.com
spread-the-ms-word.com
www.spreadthemsword.com
spreadthemsword.com
www.gilenyawebcast.com
gilenyawebcast.com
www.myfirstdose.com
myfirstdose.com
www.myfdo.com
myfdo.com
www.m.gilenya.com
m.gilenya.com

Other certificates including the domain name gilenya.com

(limited to 100 certificates)
imperva.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
medhub.com.au
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
medhub.com.au
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
medhub.com.au
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
www.gilenya.com
incapsula.com
incapsula.com
incapsula.com
medhub.com.au
incapsula.com
medhub.com.au
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
medhub.com.au
incapsula.com
incapsula.com
medhub.com.au
incapsula.com
imperva.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
www.gilenya.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
medhub.com.au
imperva.com
incapsula.com
incapsula.com
incapsula.com
medhub.com.au
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
medhub.com.au
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
www.gilenya.com
incapsula.com
incapsula.com

Certificate

The complete raw certificate details for www.gilenya.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPSjFipQO/eodoDDWft8
WnormYzD2zEPpDgf2pdQDndhZyp048eLBK2NKUMDvWfGNHplaYBaMKHlvDfolKxF
X1DaBw/dGSxeoMuYQlrjVkXDXhmAPSZt9FQC+GSaCxhGogb7ui8N9ixBmkSdjvZ2
Cvc58ci9qRp4SeNjQTEB3x1+0bRdEuufOR7kGEcxxpprE/Y9Cjxf/NvXrZzZmw7R
2Vc3jv2XhzYyEJ4XyxDzcDx+yHsq6mxR3De3Bb+aAuTPW/zWqGS9WRu3pLlP7SJB
yu2Njzt3Zk2GLcY/47pY4qd/3LxWcbyexlgq8xQl4/78XG3qw+hhLnPQeyidyqn8
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5994771960095095631642519378840780094
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novartis Pharma AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gilenya.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25873249241994715566474965812688403119307904404565268867448903162175187646004696721584034549214609207200236079598538406280374687529805020295672817833638243152382205835265473645116293030281993984152730100444450248069383398657023850859396153713782683873987767438763420628073049370349627334001115841295722237305080805707646071078842948640627590356486643216775661710151492321191982807458506802263236103567080160333359282893845987128763039003371898368128595706891338784619233589964500316194810904366554651865496367756874117201135382386640351103713507441247955713155174699183043276609264014734519928609747619014722531752971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d0b4d10375c4fe1aeb6d22683a875ada1bd7704
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (444 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilenya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilenya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mspatientevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mspatientevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ms-web-events.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms-web-events.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilenyago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilenyago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilenyafirstdose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilenyafirstdose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spread-the-ms-word.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spread-the-ms-word.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spreadthemsword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spreadthemsword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilenyawebcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilenyawebcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfirstdose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfirstdose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.gilenya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.gilenya.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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