app.blackpearlmail.com

- Black Pearl Mail Limited -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 45:97:7a:27:e4:67:d1:c6:43:8d:ba:f0:b1:a5:aa:0d was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Black Pearl Mail Limited

Company registration number: 4064918
Organization: Black Pearl Mail Limited
State / Province: Lower Hutt
Locality: Petone
Country: NZ

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 45:97:7a:27:e4:67:d1:c6:43:8d:ba:f0:b1:a5:aa:0d
Serial Number (int): 92503246149356029992976660957705382413
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): ee:ec:07:df:77:60:46:69:7e:86:c6:c1:b0:06:0b:46:d5:18:6b:a0
Fingerprint (sha256): 70:30:26:3c:4c:90:f2:47:66:c9:f3:07:a5:50:91:c8:d5:84:ac:a8:c7:32:93:ab:20:05:68:30:ae:85:00:61

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate app.blackpearlmail.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.blackpearlmail.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.blackpearlmail.com

Other certificates including the domain name blackpearlmail.com

(limited to 100 certificates)
support.identitybrandingforum.net
app.blackpearlmail.com
support.pawsatpeacecremation.com
admin-help.blackpearlmail.com
sa189gl.wpc.edgecastcdn.net
support.katsana.com.bd
support.identitybrandingforum.net
support.proxycom.fr
sa19gl.wpc.edgecastcdn.net
*.blackpearlmail.com
sa22gl.wpc.edgecastcdn.net
sa22gl.wpc.edgecastcdn.net
accounting.rahisystems.com
support.katsana.com.bd
sa19gl.wpc.edgecastcdn.net
sa19gl.wpc.edgecastcdn.net
support.vizoport.com
cert00043-azurecdn.akamaized.net
sa22gl.wpc.edgecastcdn.net
support.thedatabasediva.com
sa19gl.wpc.edgecastcdn.net
*.blackpearlmail.com
cert00043-azurecdn.akamaized.net
support.thedatabasediva.com
support.identitybrandingforum.net
sa19gl.wpc.edgecastcdn.net
helpcenter.salesvee.com
sa22gl.wpc.edgecastcdn.net
*.blackpearlmail.com
support.zsphere.fr
*.blackpearlmail.com
sa22gl.wpc.edgecastcdn.net
app.blackpearlmail.com
sa22gl.wpc.edgecastcdn.net
support.thedatabasediva.com
sni19b28gl.wpc.edgecastcdn.net
sa22gl.wpc.edgecastcdn.net
support.katsana.com.bd
sa22gl.wpc.edgecastcdn.net
lilly.direct.reducio.fr
sni1a17cgl.wpc.edgecastcdn.net
support.metric.international
support.pawsatpeacecremation.com
blackpearlmail.com
blackpearlmail.com
suporte.h8brasil.com.br
support.identitybrandingforum.net
sni19b23gl.wpc.edgecastcdn.net
support.zsphere.fr
*.blackpearlmail.com
cert00043-azurecdn.akamaized.net
sa19gl.wpc.edgecastcdn.net
sa19gl.wpc.edgecastcdn.net
sa22gl.wpc.edgecastcdn.net
sa22gl.wpc.edgecastcdn.net
sni19b23gl.wpc.edgecastcdn.net
portal.support.arryved.com
support.identitybrandingforum.net
sa22gl.wpc.edgecastcdn.net
sni10bbgl.wpc.edgecastcdn.net
support.thedatabasediva.com
helpdesk.holisticbusinessconsultants.com
help.quickstream.tech
*.blackpearlmail.com
support.katsana.com.bd
support.sitebuilderone.com
support.katsana.com.bd
sa19gl.wpc.edgecastcdn.net
260dc.gestionhb.com
admin-help.blackpearlmail.com
sa22gl.wpc.edgecastcdn.net
sa19gl.wpc.edgecastcdn.net
support.identitybrandingforum.net
app.blackpearlmail.com
admin-help.blackpearlmail.com
support.identitybrandingforum.net
sa22gl.wpc.edgecastcdn.net
support.identitybrandingforum.net
sa22gl.wpc.edgecastcdn.net
www.blackpearlmail.com
support.katsana.com.bd
support.katsana.com.bd
sa19gl.wpc.edgecastcdn.net
new-stage-mta.blackpearlmail.com
support.katsana.com.bd
cert00043-azurecdn.akamaized.net
sa22gl.wpc.edgecastcdn.net
support.identitybrandingforum.net
sa19gl.wpc.edgecastcdn.net
*.blackpearlmail.com
cert00043-azurecdn.akamaized.net
suporte.h8brasil.com.br
admin-help.blackpearlmail.com
support.identitybrandingforum.net
support.thedatabasediva.com
destek2.bitexen.com
support.katsana.com.bd
sa19gl.wpc.edgecastcdn.net
sa22gl.wpc.edgecastcdn.net
accounting.rahisystems.com

Certificate

The complete raw certificate details for app.blackpearlmail.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJvYNGvUDORyVyOoyn+i
5pTnklP8Yqra04IXm7rYMLrLBEWqdNg21Jli5ebUu91j7MB8Wq/AqOeVc2Qpsp4u
u/esD3ztJO8vognnBPsq8UWVY5CEQY1rINXvSVO7+Lr3J4mGm5Pjk3w+7Fmnql9j
fOkPAMXSwgNDyT1/CMEmqx85D3H/BPpuGKkRUo9wSFEdLUnlqd5Ua6+j3gI/j2/I
eInnStijWQoKS8MrMhFtCdYLVUKKwI1deKAUpTcFVK3LNKwBx0BFbrbccRR7QPqI
029DoHN63AvCwqxclCxJlGVUqmILrQrdS3pFfC6B7R4YP9fgOD+7LhpUAnf2Yi24
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92503246149356029992976660957705382413
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4064918'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Lower Hutt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Petone'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Black Pearl Mail Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'app.blackpearlmail.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22294791485805876736678437686912664841594647869536293658708569175826321417237469080345788198354797112029313000134227596482495132825863216899431249805039149932615573835806442448292794326427850418278980303018628759267471714577771465179140201959297850328220409091702031884650964630356786294199455314901725661072563269141202293385884193767208007552757807260492413818722827276222571615800635357094784607285848345426184336512276587374629064968832937453640187010483820519328955425699323489270365877543044896112034993201429445621964830323422748453336436802620460653518280009778828248457653224862890568766512500266555799353547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.blackpearlmail.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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