smc.tciserv.com

- TCI Fund Services LLP -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 05:c5:30:5a:a4:e4:eb:98:00:31:9c:c6:5a:d7:e3:92 was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TCI Fund Services LLP

Organization: TCI Fund Services LLP
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:c5:30:5a:a4:e4:eb:98:00:31:9c:c6:5a:d7:e3:92
Serial Number (int): 7670003197283831228925540908049884050
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 61:97:69:1f:b3:bd:fd:25:48:bc:f5:07:c1:79:d5:d1:e2:34:a5:83
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 05:92:e9:6b:dd:05:c1:3a:07:82:2a:49:4a:49:4e:dd:bb:bf:9b:7b
Fingerprint (sha256): 5f:c6:f0:53:89:86:81:62:39:0e:ea:45:f8:c7:36:6d:1d:96:7f:ec:c5:e3:67:29:e1:cd:9a:54:94:8b:d5:86

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate smc.tciserv.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smc.tciserv.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.tciserv.com
autodiscover.tcifund.com
cavext.tcifund.com
autodiscover.tciserv.com
autodiscover.tcianalysts.com
investorday.tcifund.com
smc.tciserv.com

Other certificates including the domain name tciserv.com

(limited to 100 certificates)
customerportal.uk.rlb.com
support.homeinstead.ie
systems.squaredup.com
helpdesk.epsilonnet.gr
servicedesk.group-k.be
helpdesk.presto.se
support.homeinstead.ie
hub.theriderfirm.cc
itservicedesk.paradigmhousing.co.uk
servicedesk.esmsglobal.com
servicedesk.iquw.com
ithelpdesk.familycarers.ie
service.littlegarth.org
support.homeinstead.ie
soporte.inmocolonial.com
support.homeinstead.ie
helpdesk.scf-corporate.com
customerportal.uk.rlb.com
soporte.unirioja.es
itsupport.fhbrundle.co.uk
helpdesk.mlw.mw
helpdesk.itsligo.ie
soportecmi.toledo.es
servicedesk-meckenheim.pvs-europe.com
mail.tciserv.com
technologyhelpdesk.slimmingworld.co.uk
servicedesk.iquw.com
support.homeinstead.ie
support.homeinstead.ie
getsupport.superdry.com
servicedesk.alessi.com
support.homeinstead.ie
service.littlegarth.org
soporte.martinezabolafio.com
support.homeinstead.ie
support.homeinstead.ie
support.homeinstead.ie
technologyhelpdesk.slimmingworld.co.uk
servicedesk.coram.eu
ithelpdesk.gmmh.nhs.uk
support.homeinstead.ie
support.homeinstead.ie
sd.srk-zuerich.ch
servicedesk-meckenheim.pvs-europe.com
helpdesk.sunlight.gr
support.brill.com
helpdesk.danpearlman.com
support.homeinstead.ie
helpdesk.itwfasteners.com
support.homeinstead.ie
servicedesk.weber-ing.de
ithelpdesk.frederic-robinson.co.uk
soporte.unirioja.es
grouphelpdesk.oceanscan.co.uk
cavext.tcifund.com
cavext.tcifund.com
helpdesk.tciserv.com
itservicedesk.paradigmhousing.co.uk
helpdesk.itsligo.ie
servicedesk.prelectronics.com
esolportal.noatum.com
support.homeinstead.ie
smc.tciserv.com
support.homeinstead.ie
ithelpdesk.gmmh.nhs.uk
ithelpdesk.koinly.io
soportecmi.toledo.es
helpdesk.beauchamps.ie
customerportal.uk.rlb.com
helpdesk.sunlight.gr
helpdesk.beauchamps.ie
customerportal.uk.rlb.com
support.homeinstead.ie
mail.tciserv.com
servicedesk.prelectronics.com
*.tcifund.com
servicedesk.am-labor.de
support.homeinstead.ie
itsupport.nza.nl
support.homeinstead.ie
servicedesk.relyonnutec.com
it.rmk.ee
it.rmk.ee
itsupport.gnt-group.com
support.apc-overnight.com
systems.squaredup.com
servicedesk.medica.co.uk
customerportal.uk.rlb.com
itservicedesk.paradigmhousing.co.uk
getsupport.superdry.com
support.homeinstead.ie
servicedesk.alessi.com
servicedesk.group-k.be
servicedesk.christs.cam.ac.uk
helpdesk.epsilonnet.gr
mail.tciserv.com
helpdesk.atu.ie
smc.tciserv.com
customerportal.uk.rlb.com
support.homeinstead.ie

Certificate

The complete raw certificate details for smc.tciserv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg35RK+jNZdMGlwBevev
SCIHNJhZ9bUDO16aP/qo/yjgBvUZ6blVNayUqyVOeOAa4au2l0khcXe1UMstxIhu
XiKcBNFc8LrA3kW9CRBy2syn8FyW6zGLfwyJqHtT6897avoLiOTTC7dr+SLJpjzL
HJfnlUbUFuK4Y+pEOZkgZn2exS9xlCF5F5x39w93gRHGiNmpr7ZxB6aCNKR+93r/
yCDLuE1jBzZrK7uyhur/fmmhmk9F29Ob8lvVOKWVuDx1s79eJIubt4e+Nz8iKBPv
x7vItUy11W6S5dXsC5moxj1utrarraHxF0+K4/32e3FU6ks+pUsN13Cl2YlpdKF+
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7670003197283831228925540908049884050
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TCI Fund Services LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smc.tciserv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18942636435326793228194758825630146785193455392650029824112098829038445621047387133500607692771436770190070755578311657553029413712558110007563697869240152390746163228620708770240402968931026925382694005375347511808272256979855097642336420445776192525004259298507772261301273374208792851138276020032431488476337375534153912581068080436646767226317799751150129147079403328794790528243692523389351024514680693874751977766659929659936029228600712773434557143685211646250333039386269774084120982855548448691497076161464426602732338212266187803363334807360231389579424100167466771035204996407668724814986763127866764918309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6197691fb3bdfd2548bcf507c179d5d1e234a583
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tciserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tcifund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavext.tcifund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tciserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tcianalysts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.tcifund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smc.tciserv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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