www.dot2E.penndot.gov

- Commonwealth of Pennsylvania -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number be:cd:02:11:1e:55:20:35:00:00:00:00:50:e0:aa:cb was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Commonwealth of Pennsylvania

Organization: Commonwealth of Pennsylvania
Organization unit: Department of Transportation
State / Province: Pennsylvania
Locality: Harrisburg
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): be:cd:02:11:1e:55:20:35:00:00:00:00:50:e0:aa:cb
Serial Number (int): 253617781976219086644119163463708748491
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ae:57:b0:30:1f:1f:8b:2c:bd:cc:f4:5b:68:1e:3a:25:f9:8a:20:5c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 97:30:03:a0:c4:ca:30:cb:55:9a:d0:ff:3c:2f:a6:be:63:a0:8b:44
Fingerprint (sha256): 75:7e:24:5c:78:a6:d1:54:d2:5b:74:7b:19:e9:d7:88:2d:49:d7:19:59:d2:06:8c:82:47:89:81:e9:d4:fb:b2

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.dot2E.penndot.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dot2E.penndot.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dot2E.penndot.gov
dot2E.penndot.gov

Other certificates including the domain name penndot.gov

(limited to 100 certificates)
www.crashinfo.penndot.gov
CISREPORTS.PENNDOT.GOV
ESECagSANCertProd.dot.pa.gov
ESECagSANCertSyst.dot.pa.gov
gis.penndot.gov
www.ecssyst.penndot.gov
www.ecmssyst.penndot.gov
SMProxySANCertProd.dot.pa.gov
ESECSanCertProd128.dot.pa.gov
www.dot16.pa.gov
www.dottrn34.state.pa.us
qars.penndot.gov
ESECagSANCertSyst.dot.pa.gov
pathsyst.penndot.pa.gov
qars.penndot.gov
www.idealinksyst.pa.gov
www.mpmstest.penndot.gov
path.penndot.gov
dev.aem.penndot.gov
path.penndot.gov
gis.penndot.gov
ESECagSANCertSyst.dot.pa.gov
www.sbe.penndot.pa.gov
ESECagSANCertDev.dot.pa.gov
aprassyst.penndot.gov
www.dot16.pa.gov
www.dot16.pa.gov
ESECagSANCertProd.dot.pa.gov
cisreports.penndot.gov
apras.penndot.gov
analytics.penndot.gov
ESECagSANCertProd.dot.pa.gov
ESECagSANCertProd.dot.pa.gov
www.dottrn34.state.pa.us
ESECagSANCertSyst.dot.pa.gov
SMProxySANCertESECProd.dot.pa.gov
SMProxySANCertUAT.dot.pa.gov
www.ecms.penndot.gov
analytics.penndot.gov
SMProxySANCertUAT.dot.pa.gov
www.ecssyst.penndot.gov
idservicesadv.penndot.gov
a93c8e3041.nxcli.io
analytics-uat.penndot.gov
cisweb.penndot.gov
ESECagSANCertProd.dot.pa.gov
004uatcisweb.penndot.gov
www.eGov.penndot.pa.gov
ESECagSANCertSyst.dot.pa.gov
www.idealinksyst.pa.gov
sp.pwp.pa.gov
www.ecms.penndot.gov
idservicesadvsyst.penndot.gov
analytics.penndot.gov
ESECagSANCertProd.dot.pa.gov
www.dot16.pa.gov
ESECagSANCertProd.dot.pa.gov
www.bmswebservicessyst.penndot.gov
www.bmssyst.penndot.pa.gov
ppccsyst.penndot.gov
workzonecameras.penndot.gov
www.bmssyst.penndot.pa.gov
analytics-dev.penndot.pa.gov
www.dotdev34.state.pa.us
www.penndot.gov
sp.pwp.pa.gov
ESECagSANCertSyst.dot.pa.gov
ESECagSANCertProd.dot.pa.gov
path.penndot.pa.gov
ESECagSANCertProd.dot.pa.gov
gistest.penndot.gov
004uatbiwebmc.penndot.gov
www.ecmssyst.penndot.gov
www.eGovsyst.penndot.pa.gov
ppccsyst.penndot.gov
www.eGovsyst.penndot.pa.gov
004uatciswebmc.penndot.gov
www.idealinksyst.pa.gov
mobilenprd.penndot.gov
gis.penndot.gov
www.dot4E.penndot.gov
ESECagSANCertSyst.dot.pa.gov
pathsyst.penndot.gov
ESECagSANCertProd.dot.pa.gov
sqldldbcluster.penndot.gov
ESECagSANCertProd.dot.pa.gov
www.sbe.penndot.pa.gov
ESECagSANCertProd.dot.pa.gov
gistest.penndot.gov
www.idealinksyst.pa.gov
www.dot16.pa.gov
004UATCISWEBMC.penndot.gov
www.idealinksyst.pa.gov
www.mpms.penndot.gov
004UATDLDB.penndot.gov
ESECagSANCertDev.dot.pa.gov
004UATBIWEB.penndot.gov
ESECagSANCertSyst.dot.pa.gov
004BIWEBMC.PENNDOT.GOV
www.systcrashinfo.penndot.gov

Certificate

The complete raw certificate details for www.dot2E.penndot.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9IQFCRrk7y7R/dDyYgWt
Z65S5UzQR7A13oE5li8ufwnMyy31X5NEt2P8sXpnfAUE9c/FafDrRDrOor0PBw0n
hdd8lbq0u+t6Isyr9IbrWQbUOD6AmFJnhq6MXuaqG35hA429hDH7frq+KRD6fHRs
dVy6/eBo2eyAty2YW8FBWpHnNAYK/QX6ApROkv8cudNbE+4MaKrdQk8dgdGFRk9C
1aRU/mXMXOZ/twz9ANfuWMvRIx09T5OMALAA/4slMH0v/G2WdlA5sqVQYPDE1v9y
R02uaKb4QsKUquPY7207GDr32E63vBNvhs9vrt7vnFmdLKASb3Sady0+0JZThhK1
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 253617781976219086644119163463708748491
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-28 13:30:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 14:00:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harrisburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Commonwealth of Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Transportation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dot2E.penndot.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30867247737444747596134672439365518805615928484442059298793676943508354583919222918430304697422628566980467201226067094387980806742646887567256964733497536089531982658460663147328840521698235729431057918804452477344868766941875144234463681440224211741373408543252119090126508623086675723737461622600433823289418653099830311561599847760751056864031324631239662994901438725878262540984154281713700247753573273520876669188895834580386889687879723760123157989393428913068539157534158789138512065218097542088904002394574436695323478001821396820463679055549397960097766980994173882744554465663288655517861702499442055362037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dot2E.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dot2E.penndot.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae57b0301f1f8b2cbdccf45b681e3a25f98a205c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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