go.paytraq.com

- PayTraq SIA -

Issued by GeoTrust EV RSA CA 2018

About this certificate

This digital certificate with serial number 06:b9:9e:ac:aa:54:d3:ea:d0:db:1f:c6:0a:f0:76:8e was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PayTraq SIA

Company registration number: 40103794975
Organization: PayTraq SIA
Organization unit: IT
Locality: Riga
Country: LV

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:b9:9e:ac:aa:54:d3:ea:d0:db:1f:c6:0a:f0:76:8e
Serial Number (int): 8939161194214769955485980730149861006
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ab:6f:4e:2c:5a:93:a0:25:30:3c:c8:28:39:fb:ad:56:2f:b9:9d:20
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58

Fingerprint (sha1): c7:6f:19:f7:bc:7f:ab:d5:78:b9:d1:98:12:e5:1e:fe:5d:d3:2d:7f
Fingerprint (sha256): 78:56:0e:3b:46:ac:47:e2:a5:aa:14:e0:40:b9:fc:78:d8:fe:af:08:b2:c3:3c:f2:a1:b8:0f:6a:bb:5f:06:08

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl

Check the revocation status for certificate go.paytraq.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go.paytraq.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.paytraq.com

Other certificates including the domain name paytraq.com

(limited to 100 certificates)
control.paytraq.com
support-en.paytraq.com
go.paytraq.com
support-en.paytraq.com
support-lv.paytraq.com
paytraq.com
go.paytraq.com
sandbox-app.paytraq.com
blog.paytraq.com
support-en.paytraq.com
milkychild.com
support-ru.paytraq.com
go.paytraq.com
support-en.paytraq.com
support-en.paytraq.com
support-ru.paytraq.com
control.paytraq.com
support-sk.paytraq.com
support-lv.paytraq.com
support-en.paytraq.com
paytraq.com
b2b.paytraq.com
support-en.paytraq.com
blog.paytraq.com
blog.paytraq.com
support-ru.paytraq.com
support-lv.paytraq.com
support-ru.paytraq.com
support-sk.paytraq.com
mlm.aiglobalimpactfestival.org
support-en.paytraq.com
sandbox-app.paytraq.com
support-sk.paytraq.com
control.paytraq.com
support-ru.paytraq.com
support-lv.paytraq.com
control.paytraq.com
support-lv.paytraq.com
support-sk.paytraq.com
support-lv.paytraq.com
support-en.paytraq.com
support-en.paytraq.com
control.paytraq.com
milkychild.com
support-lv.paytraq.com
blog.paytraq.com
go.paytraq.com
go.paytraq.com
support-lv.paytraq.com
support-sk.paytraq.com
blog.paytraq.com
old.pack744.com
cloud.mycloudvip.com
mlm.aiglobalimpactfestival.org
support-ru.paytraq.com
support-lv.paytraq.com
support-ru.paytraq.com
mobile.paytraq.com
blog.paytraq.com
support-sk.paytraq.com
go.paytraq.com
go.paytraq.com
control.paytraq.com
paytraq.com
support-sk.paytraq.com
iqenta.com
cloud.mycloudvip.com
support-ru.paytraq.com
staging.budgetar.io
blog.paytraq.com
support-sk.paytraq.com
support-lv.paytraq.com
youngtravellers.blog
support-en.paytraq.com
support-sk.paytraq.com
go.paytraq.com
support-ru.paytraq.com
support-sk.paytraq.com
go.paytraq.com
support-ru.paytraq.com
blog.paytraq.com
support-lv.paytraq.com
control.paytraq.com
go.paytraq.com
support-en.paytraq.com
sandbox-app.paytraq.com
paytraq.com
support-ru.paytraq.com
support-lv.paytraq.com
go.paytraq.com
blog.paytraq.com
control.paytraq.com
support-lv.paytraq.com
go.paytraq.com
support-en.paytraq.com
paytraq.com
support-sk.paytraq.com
support-ru.paytraq.com
support-ru.paytraq.com
support-sk.paytraq.com

Certificate

The complete raw certificate details for go.paytraq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSG6tzEtTlufwtFWkLRA
owh61AuInOp2ULz52sNhLceYOCPNl0RVjTLsQQZ/F+9Lo5kRLl7YjZ86GQ2y1pAk
G4pVRuYYFfkn9euedXRsWyzgTJrWmGDkicZk1Hmr5BYquYj+beAkr0d2b/LDUNPy
kH+SKa2OzZFN2+OiFwilN4WU+ZcTCLAwPe1kl4XoKzpPeew5CwZOlRmvxfqRMP19
pU56cixY/GxCG/21kMIORSWVkTRCsDORo9ZwbyPhEdPMnEpnkepzrsS3D7/9Fs2c
JQFdY8n53kvdyze647q1symmB1mxTKYxQS/4vnK2RN6fH7DpZ4BFE3Lywi4I4f4a
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8939161194214769955485980730149861006
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '40103794975'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Riga'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PayTraq SIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.paytraq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21855859325358413656211222748944701393178233578151630177867444756180687601830912376323317513488733847838852287881529826088469576273277407996654286408715520330946516819118192332523120236012429720081932937611472017316875019261172294357090270942167383075814916686779800045198810615298882999281569709613366312742494791421732238602795231374218631431370716075192313848164408732348229552907491139329751858938739498342649576787165671601463416780870419454162306013721106684303919150889832814269497923997186581948218910593466319461196933547294300657887471442555479446336861874485887684166416856348697361187367670822109794147071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab6f4e2c5a93a025303cc82839fbad562fb99d20
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.paytraq.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000165336b076a000004030047304502205c426f6e1ee7bcb2c2ed2866664b06cbb78a514cf0cdcd322a6862d40902b872022100ec7fcfdcfc703c59f974b5dc99643fa964677ce307b0ca62bfa208c605183ec90075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000165336b06e1000004030046304402202f775aefce40a7a3c9deade0da375c8a0f2c73b93d3f050495c1531cb728e7ed0220405aa498cf33c0fd7ce4f4fb0bc704880ba4fa64d803d7f9e73b66810b6fd7bf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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