aac.thenottingham.com

- Nottingham Building Society -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 2b:97:19:35:96:73:58:6e:9c:f7:ea:d6:40:38:cb:04 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Nottingham Building Society

Company registration number: 200785
Organization: Nottingham Building Society
Organization unit: IT
State / Province: Nottingham
Locality: Nottingham
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:97:19:35:96:73:58:6e:9c:f7:ea:d6:40:38:cb:04
Serial Number (int): 57941351950285041605702850172602075908
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): f1:ae:24:67:8e:ee:df:8b:7a:a9:a0:ac:9b:e5:bf:87:b8:61:68:e3
Fingerprint (sha256): 6c:89:41:08:30:1b:10:0e:98:ff:70:38:d0:e4:93:cb:3c:f6:49:ad:28:78:03:21:bb:7e:ba:c5:b3:f1:4b:40

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate aac.thenottingham.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aac.thenottingham.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qac.thenottingham.com
aac.thenottingham.com

Other certificates including the domain name thenottingham.com

(limited to 100 certificates)
suport.staff.utcluj.app
www.thenottingham.com
helpdesk.centurionukrs.com
image.campaigns.neckermann.be
int-np-api.thenottingham.com
servicedesk.cheaperwaste.co.uk
akamai-san133.exacttarget.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
image.campaigns.neckermann.be
np-api.thenottingham.com
servicedesk.restoredigital.co.uk
support.tuxexpert.com
helpdesk.ampcleanenergy.com
support.ecctis.com
image.campaigns.neckermann.be
servicedesk.thenottingham.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
np-api.thenottingham.com
helpdesk.pfleiderer.pl
helpdesk.ampcleanenergy.com
ithelpdesk.uteco.com
sd.sch1584.su
image.campaigns.neckermann.be
servicedesk.hidefsurveying.co.uk
it-support.drkbg.de
www.thenottingham.com
int-np-api.thenottingham.com
esavings.thenottingham.com
helpdesk.ampcleanenergy.com
servicedesk.thenottingham.com
mail1.thenottingham.com
image.campaigns.neckermann.be
servicedesk.ibisacam.at
support-services.gruener-punkt.de
aac.thenottingham.com
servicedesk.quorumdev.com
image.campaigns.neckermann.be
www.thenottingham.com
gold.thenottingham.com
msp.thenottingham.com
dsi.alivetravel.com
suport.staff.utcluj.app
servicedesk.cheaperwaste.co.uk
thenottingham.com
san-7-s50.tlsprovisioning.exacttarget.com
servicedesk.barnardos.ie
msp.thenottingham.com
www.thenottingham.com
helpdesk.zultys.com
sd.sch1584.su
support-services.gruener-punkt.de
support.tuxexpert.com
image.campaigns.neckermann.be
webmail.thenottingham.com
aac.thenottingham.com
helpdesk.derbigum.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
ithelpdesk.uteco.com
helpdesk.ampcleanenergy.com
true.thenottingham.com
techteam.awayresorts.co.uk
aac.thenottingham.com
estest.thenottingham.com
support.gjesdal.kommune.no
www.thenottingham.com
ithelpdesk.uteco.com
ithelpdesk.uteco.com
image.campaigns.neckermann.be
dsi.alivetravel.com
servicedesk.envisionpharma.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
webmail.thenottingham.com
servicedesk.cheaperwaste.co.uk
helpdesk.ampcleanenergy.com
servicedesk.cheaperwaste.co.uk
www.thenottingham.com
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
msp.thenottingham.com
msp.thenottingham.com
www.thenottingham.com
akamai-san133.exacttarget.com
aac.thenottingham.com
support-services.gruener-punkt.de
image.campaigns.neckermann.be
helpdesk.ampcleanenergy.com
helpdesk.derbigum.com
aac.thenottingham.com
helpdesk.ampcleanenergy.com
gold.thenottingham.com
aac.thenottingham.com
akamai-san133.exacttarget.com
servicedesk.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie

Certificate

The complete raw certificate details for aac.thenottingham.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuM9STbQdLOz3UwRwCS/
qehMS/ZnYVRsgOYjkxQ0td01eGxkmk2p9XwREKAPI6YXdRLTYeHDWvy0ecU9wLlq
y2+qjvjMCGuZ91tGSIjGdM7MDsgALQ7EJqewcEVugqiS+cGqOkhdM33IHgrprdcU
JVgVX1CstZJFXaUxgP/l2RNhUyyJpMMishgg9Mi0wEwNFa0N7m4/xSWHmb8O1dhq
0KQvx5vAxS6El+qnbYig5j1V6/zc9oecj1JR7QemDS7PTp1CeQNQV4FsNArUpJF0
BPHyUksynRsZRQMAsmhc/RJHiQkdcrVT0CQOc1etFQmbAKaclivk6ZNEQMjrNLfv
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 57941351950285041605702850172602075908
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '200785'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nottingham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nottingham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nottingham Building Society'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'aac.thenottingham.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23087427427559513732741974001302970665622721776220007812370869351599709074973384846411357643152650327029983184973556785023266243922798572867830252391378094440621054863041109146608448850780409896430046555500729035573219429305489753996769476623017573168876778793170274528829000470931814064605059879168182982887995966135974244218323785051166092895486795563618266562649660521152596993967234159050465751227990008500044605761093944149693231122042890700594888685924150145522116442079614167514000027123903487181644193357741650871174665717640872681380043064915864808879617798044293795536998528192689349330377785210421428875213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qac.thenottingham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aac.thenottingham.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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