api.azsupport.msftcloudes.cn

- Shanghai Blue Cloud Technology Co., Ltd. -

Issued by DigiCert Basic RSA CN CA G2

About this certificate

This digital certificate with serial number 0f:51:51:5a:5e:6b:ed:6c:02:85:77:92:c0:a1:94:f4 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Shanghai Blue Cloud Technology Co., Ltd.

Organization: Shanghai Blue Cloud Technology Co., Ltd.
State / Province: Shanghai
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:51:51:5a:5e:6b:ed:6c:02:85:77:92:c0:a1:94:f4
Serial Number (int): 20360646017249648379754483933711013108
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cf:1f:99:51:50:ea:86:e2:5c:2e:ae:51:c9:6f:52:ce:c0:e3:ef:7e
AuthorityKeyId: 06:bd:a6:9b:60:79:50:31:be:d5:a9:02:4a:a0:d0:95:53:8b:2f:34

Fingerprint (sha1): 71:73:1a:4c:92:b3:73:fd:ae:26:33:78:80:be:9f:b8:40:77:d9:92
Fingerprint (sha256): 5c:8a:db:ac:99:2d:4b:4d:dc:eb:d2:3f:36:3f:44:ed:ce:c4:10:da:3c:9a:90:62:50:a7:40:71:1b:71:8a:48

Issuing Certificate URL: http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/DigiCertBasicRSACNCAG2.crl

Check the revocation status for certificate api.azsupport.msftcloudes.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.azsupport.msftcloudes.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.azsupport.msftcloudes.cn

Other certificates including the domain name msftcloudes.cn

(limited to 100 certificates)
monitoring.azurenotifications.msftcloudes.cn
*.azurenotifications.msftcloudes.cn
mcpclientprod.azurenotifications.msftcloudes.cn
azurehealthmccno.chinanorth.cloudapp.chinacloudapi.cn
*.oneim.msftcloudes.cn
azurehealthmccno.chinanorth.cloudapp.chinacloudapi.cn
internal-endpoint.azsupport.msftcloudes.cn
adthrottlingclient.broadcast.azurenotifications.msftcloudes.cn
*.mdmrp-mooncake.msftcloudes.cn
api.azsupport.msftcloudes.cn
azurehealthmccea.chinaeast.cloudapp.chinacloudapi.cn
api.cps.azuresupport.msftcloudes.cn
internal-endpoint.azsupport.msftcloudes.cn
*.cluster.azsupport.msftcloudes.cn
*.cluster.azsupport-ppe.msftcloudes.cn
phonenotificationclient.notifications.msftcloudes.cn
*.mdmrp-mooncake.msftcloudes.cn
adthrottlingclient.broadcast.azurenotifications.msftcloudes.cn
azureexpertmceast.chinaeast.cloudapp.chinacloudapi.cn
*.cluster.azsupport.msftcloudes.cn
ngclient.private.azurenotifications.msftcloudes.cn
*.mdmrp-mooncake.msftcloudes.cn
azureexpert.trafficmanager.cn
mcheccluster.azurenotifications.msftcloudes.cn
*.icm.msftcloudes.cn
emailclientprod.azurenotifications.msftcloudes.cn
mccncluster.azurenotifications.msftcloudes.cn
*.cluster.azsupport-ppe.msftcloudes.cn
mccnclusterserver.azurenotifications.msftcloudes.cn
phonenotificationclient.notifications.msftcloudes.cn
*.mdmrp-mooncake.msftcloudes.cn
skypeclient.notifications.msftcloudes.cn
azureexpertmcnorth.chinanorth.cloudapp.chinacloudapi.cn
internalauth.azsupport-ppe.msftcloudes.cn
api.azsupport-ppe.msftcloudes.cn
internalauth.azsupport.msftcloudes.cn
rpclient.azurenotifications.msftcloudes.cn
monitoring-encryption-prod.notifications.msftcloudes.cn
oneimsecretencryption.azurenotifications.msftcloudes.cn
adthrottlingclient.broadcast.azurenotifications.msftcloudes.cn
*.icmtest.msftcloudes.cn
*.cluster.azsupport-ppe.msftcloudes.cn
azurehealthmccno.chinanorth.cloudapp.chinacloudapi.cn
mooncakeproddecryptionservice.icm.msftcloudes.cn
internalauth.azsupport-ppe.msftcloudes.cn
*.cluster.azsupport-ppe.msftcloudes.cn
icm.msftcloudes.cn
azureexpertmceast.chinaeast.cloudapp.chinacloudapi.cn
mccncluster.azurenotifications.msftcloudes.cn
azureexpert.trafficmanager.cn
mctestmdsencryption.icm.msftcloudes.cn
icmtesttwist.msftcloudes.cn
warmup.azurenotifications.msftcloudes.cn
api.azsupport-ppe.msftcloudes.cn
prodmonitoring1.icm.msftcloudes.cn
azureexpert.trafficmanager.cn
*.cluster.azsupport-ppe.msftcloudes.cn
MCTestESManagementCertificate.icm.msftcloudes.cn
mctestmdsdecryption1.icm.msftcloudes.cn
*.mdmrp-mooncake.msftcloudes.cn
*.cluster.azsupport-ppe.msftcloudes.cn
api.azsupport-ppe.msftcloudes.cn
*.azurenotifications.msftcloudes.cn
mchecclusterserver.azurenotifications.msftcloudes.cn
internalauth.azsupport-ppe.msftcloudes.cn
testmonitoring.icm.msftcloudes.cn
templateserviceclient.azurenotifications.msftcloudes.cn
cluster.azurenotifications.msftcloudes.cn
monitoring.azurenotifications.msftcloudes.cn
api.azsupport-ppe.msftcloudes.cn
clusterclient.azurenotifications.msftcloudes.cn
mcecclusterserver.azurenotifications.msftcloudes.cn
azureexpertmcnorth.chinanorth.cloudapp.chinacloudapi.cn
*.mdmrp-mooncake.msftcloudes.cn
internal-endpoint.azsupport.msftcloudes.cn
api.azsupport.msftcloudes.cn
mccnclusterserver.azurenotifications.msftcloudes.cn
*.azurenotifications.msftcloudes.cn
phonenotificationclient.notifications.msftcloudes.cn
api.azsupport.msftcloudes.cn
mcheccluster.azurenotifications.msftcloudes.cn
clusteradminclient.azurenotifications.msftcloudes.cn
icm.msftcloudes.cn
azureexpertmcnorth.chinanorth.cloudapp.chinacloudapi.cn
api.azsupport-ppe.msftcloudes.cn
clusteradminclient.azurenotifications.msftcloudes.cn
clusterserver.azurenotifications.msftcloudes.cn
ngclient.private.azurenotifications.msftcloudes.cn
skypeclient.notifications.msftcloudes.cn
mchecclusterserver.azurenotifications.msftcloudes.cn
*.cluster.azsupport.msftcloudes.cn
*.mdmrp-mooncake.msftcloudes.cn
mccncluster.azurenotifications.msftcloudes.cn
clusteradminclient.azurenotifications.msftcloudes.cn
warmup.azurenotifications.msftcloudes.cn
mctestmdsdecryption1.icm.msftcloudes.cn
icmtwist.msftcloudes.cn
api.azsupport.msftcloudes.cn
internal-endpoint.azsupport-ppe.msftcloudes.cn
internalauth.azsupport.msftcloudes.cn

Certificate

The complete raw certificate details for api.azsupport.msftcloudes.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nu71AaghYyPuL+86PiN
ft+IWn5JCr6/TGUqiJPJZ8d992txpFFmF8D6xRaNMQCISlbvGzP2P0K1noCtAIeZ
waYsDx38ddEmoQN6Jk0/dwjr+FKv+74sUWuv9X+Xtc/Scb9hiYA3WJsiBPRkRfzd
axx3eQeJUvbaS+Y0qKckoDNWHg8FfJvqQXhCQOlgL2YbTMyQl/tXqNK8u/ycsB4Q
mbGpMDGLer5dGIbr9JwhIq06zVdDnHOYkQjWmwINVflT9C2jzgyGI0WWdzRvz1sJ
OPRP1qs1s09UvC4TFEqMNqpXyeaYJjAz6lU1+iD8RwPLQiMf21VjVZgwsMbCTphf
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20360646017249648379754483933711013108
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Basic RSA CN CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai Blue Cloud Technology Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.azsupport.msftcloudes.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27076012626256770636415507958347328220232116303183821607321373971081689684253797375675815274044124533716369122511359085487192023679371266113017608581377160120248447717247040066642842358022044398309338010758791200928393450433661328981296279111585338364110025014803774358010174487817915579371291074498983756631329681574969195894552471889807660141237904201542894132850934535368271838893189035451885265429830949106010899372116803525138284035341032496286919486999430570649214015054382374169964953016660091848343782659765061188967392449265749407418425879423914190309676346513060766069596792687561867492640847669337926426433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 06bda69b60795031bed5a9024aa0d095538b2f34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf1f995150ea86e25c2eae51c96f52cec0e3ef7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.azsupport.msftcloudes.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/DigiCertBasicRSACNCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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