old.killeenisd.org

- Killeen ISD -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 09:33:11:3e:b4:c1:d2:3f:00:00:00:00:50:f4:bb:bd was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Killeen ISD

Organization: Killeen ISD
State / Province: Texas
Locality: Killeen
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:33:11:3e:b4:c1:d2:3f:00:00:00:00:50:f4:bb:bd
Serial Number (int): 12228208870900474338109471830043835325
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b8:a1:5e:63:c0:f1:b4:7a:66:57:a2:37:f1:a6:45:ee:4d:2a:2c:a1
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 58:25:1f:28:80:1f:47:1c:37:93:b2:02:6c:6d:72:2c:dc:1d:71:d5
Fingerprint (sha256): 5e:17:ee:8d:45:d3:58:24:77:59:7b:12:4f:e8:28:27:a6:ce:a0:9c:1a:cd:78:65:af:70:1a:05:c0:63:4c:ae

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate old.killeenisd.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for old.killeenisd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

old.killeenisd.org
www.old.killeenisd.org

Other certificates including the domain name killeenisd.org

(limited to 100 certificates)
webvpn.killeenisd.org
espsms.killeenisd.org
techhelpdesk.killeenisd.org
mobile.killeenisd.org
www.killeenisd.org
jac.killeenisd.org
webvpn.killeenisd.org
lync.killeenisd.org
reporting.killeenisd.org
mealapps.killeenisd.org
help.killeenisd.org
*.killeenisd.org
esphac-test.killeenisd.org
webvpn.killeenisd.org
transfinder.killeenisd.org
owa.killeenisd.org
techhelpdesk.killeenisd.org
www.killeenisd.org
espsms.killeenisd.org
idbadges.killeenisd.org
old.killeenisd.org
jac.killeenisd.org
*.killeenisd.org
mail.killeenisd.org
espsms.killeenisd.org
esphac.killeenisd.org
www.killeenisd.org
facerec.killeenisd.org
*.killeenisd.org
webvpn.killeenisd.org
www.killeenisd.org
kisdjss.killeenisd.org
eduphoria.killeenisd.org
espsms.killeenisd.org
www.killeenisd.org
eforce.killeenisd.org
sso.killeenisd.org
schools.killeenisd.org
pwreset.killeenisd.org
schools.killeenisd.org
ibossreporter.killeenisd.org
www.killeenisd.org
ibossreporter.killeenisd.org
exceed.killeenisd.org
ftpfiles.killeenisd.org
lync.killeenisd.org
jac.killeenisd.org
old.killeenisd.org
sso.killeenisd.org
mealapps.killeenisd.org
www.killeenisd.org
mealapps.killeenisd.org
*.killeenisd.org
reporting.killeenisd.org
webvpn.killeenisd.org
prime.killeenisd.org
old.killeenisd.org
timeclock.killeenisd.org
kisdjss.killeenisd.org
www.killeenisd.org
pwreset.killeenisd.org
library.killeenisd.org
webstage.killeenisd.org
esphac.killeenisd.org
share.killeenisd.org
help.killeenisd.org
eduphoria.killeenisd.org
sso.killeenisd.org
owa.killeenisd.org
lync.killeenisd.org
*.killeenisd.org
pwresetstaff.killeenisd.org
espsms.killeenisd.org
help.killeenisd.org
testreporting.killeenisd.org
www.killeenisd.org
reporting.killeenisd.org
help.killeenisd.org
payments.killeenisd.org
help.killeenisd.org
*.killeenisd.org
library.killeenisd.org
*.killeenisd.org
old.killeenisd.org
schools.killeenisd.org
kisdjss.killeenisd.org
eweb.killeenisd.org
owa.killeenisd.org
sso.killeenisd.org
www.killeenisd.org
owa.killeenisd.org
webstage.killeenisd.org
prime.killeenisd.org
owa.killeenisd.org
webstage.killeenisd.org
*.killeenisd.org
eduphoria.killeenisd.org
office.killeenisd.org
webvpn.killeenisd.org
espapp1-test.killeenisd.org

Certificate

The complete raw certificate details for old.killeenisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdqh62HTeFdUz80B/E/e
rcKSmMwL7AirLF1Jb0r0wgKtjnz1swj5dvSdz1YBFwCzAAW0vHyak9s+MHm3Y8RP
v9z7eeR6dJCN9ZB2hgII1pdzdCW1NTzCIC04phID6hTNZyUgMfPgEBo1YNdgsTzw
zqSatD6MGcKOYj4QugleiaRFqhyRSu9pAHYVXjEvWqLlRStkXTGtFwLH4UFZqfnB
fHVJJ5pa0U5sDM2X7u+talPztlL1G2t1Feo+iUV7s/gCB5zh8o4vMruEn5M9YQnE
IfJqW/ig3g66DjWwypFiMkww4RYCeI/iigLd3hYSXXTUPdOAfoBQ1Rvxda4u1Yvd
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12228208870900474338109471830043835325
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 03:06:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-02 03:36:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Killeen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Killeen ISD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'old.killeenisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20937132022309541536903730185544551672537997457756468452791875354206450934745255366293322955726574086824496085834055242314173793043575142831876958578455681478450820208839568428948510885456784085089394651340602845664036983075131522381173896300053469123898558664481458518642272931775284389459375100061479033070537750642752111622806386104774395750424359503759020021864414022317100041669476028551796898219498343373741709505361335912389674608820415079256919126088631106031533879091236692551838832817544402703976221766310887323180591966310949037270474091126430292889206112185001389347916715908898655429061182447033021881817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.killeenisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.old.killeenisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c1ce699fb000004030046304402204a481a3af78023711cdb2d596873415774a554573da9a6a97f87ca57152c9b8702200a2cb45a54bff021a9f8b9cb66aff91d8a265573629035a339f1a4c96da306570076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016c1ce69a090000040300473045022100ec5b5f5f20ee0d979d17d9f8025e21f20738fa3ec3354db90aebe1acf73734ea0220178487972bfc800bb36bfd49c8986cacabdab2fad67aa1068f0d41cbe641c134007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016c1ce69a32000004030047304502203aeb509a0a1893d51293edecbd74463f3c979062ab369dc52a301f5b01299da002210082347f547881bb2f0f50fd129725a1f85bdfb47a2f01b9c1413b86051fc8704d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8a15e63c0f1b47a6657a237f1a645ee4d2a2ca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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