a11519713414.testcertificates.com

- Entrust, Inc. -

Issued by Entrust Certification Authority - L1E

About this certificate

This digital certificate with serial number 4c:21:7e:6e was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [KeyEncipherment DigitalSignature] (00000101) inconsistent with ExtKeyUsage clientAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Entrust, Inc.

Company registration number: 115868500
Organization: Entrust, Inc.
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:21:7e:6e
Serial Number (int): 1277263470
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: fd:c8:58:4d:3c:48:1f:42:26:c6:d6:11:a3:ee:b6:36:a9:53:8a:8d
AuthorityKeyId: 5b:41:8a:b2:c4:43:c1:bd:bf:c8:54:41:55:9d:e0:96:ad:ff:b9:a1

Fingerprint (sha1): e4:ae:35:63:e6:20:21:41:47:52:4e:6b:96:74:e8:c9:80:22:87:c1
Fingerprint (sha256): 84:d1:20:4e:06:3c:ec:24:91:14:a3:60:91:a0:49:de:cd:11:46:4f:50:71:ef:9d:f7:c8:77:25:46:e6:69:bc

Issuing Certificate URL: http://aia.entrust.net/l1e-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1e.crl

Check the revocation status for certificate a11519713414.testcertificates.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a11519713414.testcertificates.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a11519713414.testcertificates.com

Other certificates including the domain name testcertificates.com

(limited to 100 certificates)
a11824115234.testcertificates.com
standard.testcertificates.com
a119778026.testcertificates.com
a1202384735.testcertificates.com
*.a117731066.testcertificates.com
cole.testcertificates.com
cole.testcertificates.com
a1177191343.testcertificates.com
*.wc.testcertificates.com
*.testcertificates.com
API.costa.testcertificates.com
a11877101548.testcertificates.com
cole.testcertificates.com
a114273154320.testcertificates.com
a118332112913.testcertificates.com
*.testcertificates.com
apinew.testcertificates.com
EV1.uatentrust.testcertificates.com
juan.testcertificates.com
test.testcertificates.com
fonzytech.com
uc.Testcertificates.com
a1151751391.testcertificates.com
testcertificates.com
a118213113511.testcertificates.com
dokic9222.testcertificates.com
uc.Testcertificates.com
R-API.testcertificates.com
testcertificates.com
testcertificates.com
a1178114949.testcertificates.com
a118113111547.testcertificates.com
pfortnermau2.absa.testcertificates.com
test.test.testcertificates.com
snhw07.testcertificates.com
Entrust Corporation
certbotttest.testcertificates.com
*.a117200115350.testcertificates.com
a118197135013.testcertificates.com
eurocom.autopscript.testcertificates.com
*.testcertificates.com
snwhq02.testcertificates.com
nginxtest.testcertificates.com
testcertificates.com
a1178115492.testcertificates.com
a115264152841.testcertificates.com
standard.testcertificates.com
*.testcertificates.com
a118196123012.testcertificates.com
abc.testcertificates.com
a118336104046.testcertificates.com
standard.testcertificates.com
a1173238367.testcertificates.com
a115202133128.testcertificates.com
a1169173759.testcertificates.com
testcertificates.com
CMD.testcertificates.com
website.testcertificates.com
a11992104632.testcertificates.com
DoNotRevoke7.testcertificates.com
a11527115137.testcertificates.com
Testcertificates.com
wwwtest.testcertificates.com
a118114142415.testcertificates.com
a1171061691.testcertificates.com
testcertificates.com
a117323122659.testcertificates.com
www.testcertificates.com
turbo.testcertificates.com
a11973114057.testcertificates.com
testcertificates.com
a119237132243.testcertificates.com
a11774145726.testcertificates.com
a12113872532.testcertificates.com
standard.testcertificates.com
www.a11912912549.testcertificates.com
a1176175028.testcertificates.com
ubuntu-api.testcertificates.com
testcertificates.com
www.testcertificates.com
test.test.testcertificates.com
testcertificates.com
a1177465845.testcertificates.com
testcertificates.com
a117200111038.testcertificates.com
webmail.testcertificates.com
testcertificates.com
a1182008321.testcertificates.com
333.testcertificates.com
a11434811406.testcertificates.com
11ab.testcertificates.com
a114351111539.testcertificates.com
test.testcertificates.com
a1181408026.testcertificates.com
testcertificates.com
*.testcertificates.com
www.testcertificates.com
Entrust Corporation
a12030153443.testcertificates.com
a117206135945.testcertificates.com

Certificate

The complete raw certificate details for a11519713414.testcertificates.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0l+Otqtz5+MYkmJjKlP
LX+Xlhjpk0kRG4ykS5hupm3kzrFe1/LP3f8iK37fF108C3dP7AxaM4f897HrSsl5
56P4XsterKLXKy+dYY8t8LyY8y1Q0fsBUS2PVKVNVdZqXu9HXDb5byK9dAiVAwpT
Mhw/3T5EYjpHDjtJaJnQBIyIdwMoX7P7+qLBRH6ZLtr4ii/Zl2h6phy8xu47y3hO
6tZ5ijTr0+ZB9HC94avIHplVPOZtnLz6wRh2MdEcx0TBRLoT8iG0XO7VyLkJr+9z
RzUjxC5tZZMAZnYAbctde0sAOdhB5dAXlubpZpZUqUYWXCxUInhlX+gaMvNLXw6I
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277263470
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1E'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-17 16:46:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-18 09:47:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '115868500'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a11519713414.testcertificates.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23642803819847517067899378089186067547382007516346123025010037826458788354176865861821052545558057149502150214163068049043412156576527694854683412973353589278073939453742779176713120892451470491487588806912718383829464499885754278771739749324642773749576295101215120119297590548238440202845825606398517981451146637198511508581469828852208630953184396861163156071655299716459202777219927328270527206429392243939203786047613688902929185271251361649541575040155798645932801080178217238204043784734308305901829057952703988397111959290638900616787146136113364438364751567850808293071786659725852676972398924850620850407623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a11519713414.testcertificates.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1e-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1e.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5b418ab2c443c1bdbfc85441559de096adffb9a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdc8584d3c481f4226c6d611a3eeb636a9538a8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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