bunkazai.pref.yamaguchi.lg.jp

- Yamaguchi -

Issued by SECOM Passport for Web SR 3.0 CA

About this certificate

This digital certificate with serial number 7e:41:19:ab:37:a4:14:38:c9:93:54:85:69:96:5f:43 was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Yamaguchi

Organization: Yamaguchi
Organization unit: Bunkazai
State / Province: Yamaguchi
Locality: Yamaguchi
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:41:19:ab:37:a4:14:38:c9:93:54:85:69:96:5f:43
Serial Number (int): 167820747390180079882159648674353143619
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6e:21:b3:ae:d2:36:4d:14:2a:fb:67:ab:3d:d1:32:98:c7:1d:0a:8c
AuthorityKeyId: cb:ef:3d:ef:83:74:a1:a8:42:f0:3b:40:36:fa:6d:82:94:a9:27:36

Fingerprint (sha1): bd:01:f9:ee:03:ea:9e:45:8c:88:2e:b3:72:bb:a6:62:ca:b4:35:55
Fingerprint (sha256): 60:22:ad:ff:9e:63:78:24:cc:d8:39:98:02:e7:8a:5f:73:c0:d6:15:f2:8f:73:af:76:e4:3a:85:0e:4a:01:1f


Revocation information

OCSP Server: http://sr30.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/fullcrl2.crl

Check the revocation status for certificate bunkazai.pref.yamaguchi.lg.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bunkazai.pref.yamaguchi.lg.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bunkazai.pref.yamaguchi.lg.jp

Other certificates including the domain name yamaguchi.lg.jp

(limited to 100 certificates)
www.fukushi-map.pref.yamaguchi.lg.jp
t-bousai.doboku.pref.yamaguchi.lg.jp
library.pref.yamaguchi.lg.jp
www.police.pref.yamaguchi.lg.jp
kigyo-r.pref.yamaguchi.lg.jp
kigyo-r.pref.yamaguchi.lg.jp
webnavi.pref.yamaguchi.lg.jp
dokugeki-kanri.pref.yamaguchi.lg.jp
cgi01.pref.yamaguchi.lg.jp
kiralink.pref.yamaguchi.lg.jp
www.yumehanakaika-pro.pref.yamaguchi.lg.jp
ppi2.pwms.intra.pref.yamaguchi.lg.jp
webnavi.pref.yamaguchi.lg.jp
kenko.pref.yamaguchi.lg.jp
library.pref.yamaguchi.lg.jp
d-bousai.pref.yamaguchi.lg.jp
eco-gis.pref.yamaguchi.lg.jp
www.qq.pref.yamaguchi.lg.jp
www.kagayaki.pref.yamaguchi.lg.jp
forestgis.pref.yamaguchi.lg.jp
kiralink.pref.yamaguchi.lg.jp
eco.pref.yamaguchi.lg.jp
www.qq.pref.yamaguchi.lg.jp
www.kenmin.pref.yamaguchi.lg.jp
www.pref.yamaguchi.lg.jp
t-bousai.doboku.pref.yamaguchi.lg.jp
d-bousai.pref.yamaguchi.lg.jp
naibu.kagayaki.pref.yamaguchi.lg.jp
haikibutsu.pref.yamaguchi.lg.jp
ticket.pref.yamaguchi.lg.jp
doubutuaigo.pref.yamaguchi.lg.jp
kaigosip-hokoku.pref.yamaguchi.lg.jp
www.qq.pref.yamaguchi.lg.jp
jouhou-koukai.pref.yamaguchi.lg.jp
jouhou-koukai.pref.yamaguchi.lg.jp
san3.suntory.jp
dokugeki-kanri.pref.yamaguchi.lg.jp
g.d-keikai.pref.yamaguchi.lg.jp
kenko.pref.yamaguchi.lg.jp
ppi.pref.yamaguchi.lg.jp
acs.e-bids.pref.yamaguchi.lg.jp
kirara.pref.yamaguchi.lg.jp
forestgis.pref.yamaguchi.lg.jp
www.fukushi-map.pref.yamaguchi.lg.jp
www.city.yamaguchi.lg.jp
hito.pref.yamaguchi.lg.jp
ppitest.pwms.intra.pref.yamaguchi.lg.jp
hito.pref.yamaguchi.lg.jp
ssl.kirara.pref.yamaguchi.lg.jp
www.nrs.pref.yamaguchi.lg.jp
dims-crisismap.bousai.pref.yamaguchi.lg.jp
www.kagayaki.pref.yamaguchi.lg.jp
www.kenko.pref.yamaguchi.lg.jp
www.pref.yamaguchi.lg.jp
ppitest.pwms.intra.pref.yamaguchi.lg.jp
ticket.pref.yamaguchi.lg.jp
naibu.kagayaki.pref.yamaguchi.lg.jp
www.kenmin.pref.yamaguchi.lg.jp
www.kenmin.pref.yamaguchi.lg.jp
eco.pref.yamaguchi.lg.jp
mm.police.pref.yamaguchi.lg.jp
jwa-bousai.pref.yamaguchi.lg.jp
www.kagayaki.pref.yamaguchi.lg.jp
d-keikai.pref.yamaguchi.lg.jp
www.kagayaki.pref.yamaguchi.lg.jp
naibu.kagayaki.pref.yamaguchi.lg.jp
mm.police.pref.yamaguchi.lg.jp
www.choruru.pref.yamaguchi.lg.jp
naibu.kagayaki.pref.yamaguchi.lg.jp
kigyo-r.pref.yamaguchi.lg.jp
naibu.kagayaki.pref.yamaguchi.lg.jp
forestgis.pref.yamaguchi.lg.jp
haikibutsu.pref.yamaguchi.lg.jp
d-bousai.pref.yamaguchi.lg.jp
kenko.pref.yamaguchi.lg.jp
www.choruru.pref.yamaguchi.lg.jp
dokugeki-kanri.pref.yamaguchi.lg.jp
library.pref.yamaguchi.lg.jp
monozukuri.pref.yamaguchi.lg.jp
doubutuaigo.pref.yamaguchi.lg.jp
acs.e-bids.pref.yamaguchi.lg.jp
www.kaigo.pref.yamaguchi.lg.jp
acs.e-bids.pref.yamaguchi.lg.jp
haikibutsu.pref.yamaguchi.lg.jp
iks.police.pref.yamaguchi.lg.jp
doubutuaigo.pref.yamaguchi.lg.jp
doubutuaigo.pref.yamaguchi.lg.jp
www.city.yamaguchi.lg.jp
bunkazai.pref.yamaguchi.lg.jp
acs.e-bids.pref.yamaguchi.lg.jp
www.kenmin.pref.yamaguchi.lg.jp
www.kenmin.pref.yamaguchi.lg.jp
acs.e-bids.pref.yamaguchi.lg.jp
t-bousai.doboku.pref.yamaguchi.lg.jp
ssl.danjo.pref.yamaguchi.lg.jp
www.kagayaki.pref.yamaguchi.lg.jp
ppi.pref.yamaguchi.lg.jp
bunkazai.pref.yamaguchi.lg.jp
doubutuaigo.pref.yamaguchi.lg.jp
ppi2.pwms.intra.pref.yamaguchi.lg.jp

Certificate

The complete raw certificate details for bunkazai.pref.yamaguchi.lg.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H6lW9SjdvFWr7SERbgZ
lhCDaFU0Xmss5u7Cto/lmqfoFmX1JpEdx2xNzkepbN/zcmjShT6pUqJ+TFRB0nSF
UQZBMMCu0mMnSffRQ2MZvu8NZIGYGWqAgarTNq5hQruqmvq/VjXRo9/SfCP/gQQA
LFhHh3QEiL3kKRW2V8gPWf7Lgbyv0HoMbmzgZkKFyDCqIniY3jybAKRADbib1CoL
bZNZUMUr5pN14aaJqRSRt+uuP2+yJN3Emlj58Ty5V8QJ3lJg9poKGo3Ik37B/HJb
Ab6fPpNzHb3ymNWMkaTBt06/xUWpn9uyS3domcfD90BwVBoazSOgHGdxLB7eJtQW
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167820747390180079882159648674353143619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Passport for Web SR 3.0 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-21 05:55:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-21 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Yamaguchi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Yamaguchi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Yamaguchi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bunkazai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bunkazai.pref.yamaguchi.lg.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28339831749297013649174272485142820756249089912786993307098340802220635407687592926849408610579265250114226461123340856206895200610200712814824569975506140991851771267786160432623510728752586096973197611444131950161020254452534242684137704775176512616077532210824716879350480744842001379728056192992079896042863558020453151201283185635196136742429383900463444803261993056377670314761907664764520180065636626620037178505034712416759205110517552078241020463732067744518069186960519979699912047283708172035373740144392446907605414785979391458122819370897579774424050958200462931488622197028045212654196946513640507577951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cbef3def8374a1a842f03b4036fa6d8294a92736
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr30.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bunkazai.pref.yamaguchi.lg.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.100.751.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/fullcrl2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e21b3aed2364d142afb67ab3dd13298c71d0a8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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