mail.clearwater.ca

- Clearwater Seafoods Incorporated -

Issued by USERTrust Legacy Secure Server CA

About this certificate

This digital certificate with serial number 34:e9:13:6f:82:88:96:16:94:3f:01:5d:2d:90:ce:f6 was issued on by The USERTRUST Network.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Clearwater Seafoods Incorporated

Organization: Clearwater Seafoods Incorporated
Organization unit: Unified Communications
Address: 757 Bedford Highway
Postal code: B4A 3Z7
State / Province: Nova Scotia
Locality: Bedford
Country: CA

The USERTRUST Network

Organization: The USERTRUST Network
State / Province: UT
Locality: Salt Lake City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 34:e9:13:6f:82:88:96:16:94:3f:01:5d:2d:90:ce:f6
Serial Number (int): 70330055149360922653250607571667046134
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 76:a1:f4:f7:d2:cc:77:e8:9e:b2:02:83:96:b3:f0:ef:b4:db:be:1a
AuthorityKeyId: af:a4:40:af:9f:16:fe:ab:31:fd:fb:d5:97:8b:f5:91:a3:24:86:16

Fingerprint (sha1): 42:97:64:ff:d6:fe:a7:27:07:6f:25:57:47:71:15:ad:22:b5:15:54
Fingerprint (sha256): 67:56:1d:9d:93:92:b5:15:a7:15:78:72:c3:4b:4d:87:72:86:2b:86:cc:7b:69:23:6c:81:cc:9a:92:84:00:d3

Issuing Certificate URL: http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl

Check the revocation status for certificate mail.clearwater.ca

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.clearwater.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.clearwater.ca
autodiscover.clearwater.ca
clearwater.ca
excaht1.clearwater.ca
legacy.clearwater.ca

Other certificates including the domain name clearwater.ca

(limited to 100 certificates)
test.clearwater.ca
www.clearwater.ca
webapp.clearwater.ca
www.clearwater.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
www.clearwater.ca
msan1.myabsorb.ca
www.clearwater.ca
msan1.myabsorb.ca
www.clearwater.ca
clearwater.ca
msan1.myabsorb.ca
wsa.clearwater.ca
msan1.myabsorb.ca
clearwater.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
www.clearwater.ca
clearwater.ca
msan1.myabsorb.ca
test.clearwater.ca
clearwater.ca
test.clearwater.ca
msan1.myabsorb.ca
test.clearwater.ca
webmail.clearwater.ca
www.clearwater.ca
webmail.clearwater.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
clearwater.ca
www.clearwater.ca
www.clearwater.ca
msan1.myabsorb.ca
test.clearwater.ca
clearwater.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
psnbedford.clearwater.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
mobile.clearwater.ca
clearwater.ca
test.clearwater.ca
www.clearwater.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
*.clearwater.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
clearwater.ca
msan1.myabsorb.ca
test.clearwater.ca
msan1.myabsorb.ca
*.clearwater.ca
clearwater.ca
www.clearwater.ca
clearwater.ca
mail.clearwater.ca
mobile.clearwater.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
clearwater.ca
www.clearwater.ca
www.clearwater.ca
msan1.myabsorb.ca
clearwater.ca
webmail.clearwater.ca
msan1.myabsorb.ca
*.clearwater.ca
test.clearwater.ca
test.clearwater.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
www.clearwater.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
clearwater.ca
msan1.myabsorb.ca
*.clearwater.ca
msan1.myabsorb.ca
edge.clearwater.ca
wsa.clearwater.ca
secure.clearwater.ca
msan1.myabsorb.ca
clearwater.ca
msan1.myabsorb.ca
www.clearwater.ca
www.clearwater.ca
test.clearwater.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
www.clearwater.ca

Certificate

The complete raw certificate details for mail.clearwater.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotGUlYI57x0JS3OtOpQJ
wmyury0fbH9rp/u4HEREmlyJUBu8gzb6EkmGkFh5URGbaCXIqzdZXoWSz/UiM6yC
7/Ka3A4fcXJwagSz7Ob1Jhct6warUjNar95yWL0FakNtjiySjab3MJyLkco5mpQn
Hl07viDItImXncMslPxouQljz5X+QUP4JiCY0ZP4vDMAogux3R8wiatblmcM1j1T
wzR78W/2VbDBp8Qs8clMiTLII/u9nipFWVuXmJxIjlrOnKXCJNklSv5vHyMzQ9sq
UxXk9ya6HfcnsgM0MW5CIPk9ve2Yv0UN/2iosCOWgyHWOB7aI7Lh1kpPb19D0T8Y
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70330055149360922653250607571667046134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Legacy Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-08-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'B4A 3Z7'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nova Scotia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bedford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '757 Bedford Highway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Clearwater Seafoods Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.clearwater.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20553953354689561526834036049420626806892973935443784393021855867863933030812637980295572797112534763465551070131487447237609000025648503439922745504173925086998092989291950216647352808288380958060370900467966803410701621759353748852271696177903551161246209080379611254350804362781799318215891301766157285337419499320551563159077838321519640806158066244500663725234513071591259836190438571124734106018442158799217232144858208151342871975408476875575608169320669968307069842468463331182507574005132625425395198700045597831243241482377810909809288096227093962121186381803371618921880402051678757961072153808593206843609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName afa440af9f16feab31fdfbd5978bf591a3248616
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76a1f4f7d2cc77e89eb2028396b3f0efb4dbbe1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.clearwater.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.clearwater.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearwater.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excaht1.clearwater.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.clearwater.ca'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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