secure.rovaproducts.com

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 61:8e:d6:b6:6c:56:d8:6b:e8:6e:0b:fb:86:3e:61:ad was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=secure.rovaproducts.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 61:8e:d6:b6:6c:56:d8:6b:e8:6e:0b:fb:86:3e:61:ad
Serial Number (int): 129676776633758914951403160563460497837
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): a8:3e:80:4c:b4:17:40:4d:6f:80:ae:d5:51:42:89:d4:4f:58:30:a1
Fingerprint (sha256): 88:b1:62:86:33:5b:f3:8a:3e:a0:e6:3b:9a:e2:6a:5e:9f:2d:96:cd:cb:d1:67:25:a0:88:5a:36:fc:27:8b:88

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate secure.rovaproducts.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.rovaproducts.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.rovaproducts.com

Other certificates including the domain name rovaproducts.com

(limited to 100 certificates)
*.rovaproducts.com
*.rovaproducts.com
*.rovaproducts.com
support.sapiencebrands.com
rovaproducts.com
secure.rovaproducts.com
support.comisocoffee.com
unison.rovaproducts.com
support.rovaunify.com
secure.rovaproducts.com
rovaproducts.com
store.rovaproducts.com
rovaproducts.com
support.rovaproducts.com
rovaproducts.com
rovaproducts.com
*.rovaproducts.com
rovaproducts.com
*.rovaproducts.com
*.rovaproducts.com
rovaproducts.com
rovaproducts.com
rovaproducts.com
rovaproducts.com
rovaproducts.com
rovaproducts.com
support.rovaunify.com
rovaproducts.com
rovaproducts.com
support.rovaunify.com
secure.rovaproducts.com
secure.rovaproducts.com
store.rovaproducts.com
support.rovaunify.com
helpdesk.snap-compliance.com
secure.rovaproducts.com
secure.rovaproducts.com
support.rovaunify.com
rovaproducts.com
support.rovaproducts.com
support.rovaunify.com
support.rovaunify.com
helpdesk.snap-compliance.com
rovaproducts.com
*.rovaproducts.com
k2r.bluewanip.com
rovaproducts.com
secure.rovaproducts.com
support.rovaunify.com
support.rovaunify.com
rogers.rovaproducts.com
rovaproducts.com
helpdesk.snap-compliance.com
*.rovaproducts.com
secure.rovaproducts.com
secure.rovaproducts.com
support.rovaproducts.com
rovaproducts.com
*.rovaproducts.com
secure.rovaproducts.com
helpdesk.snap-compliance.com
*.rovaproducts.com
support.rovaproducts.com
support.rovaunify.com

Certificate

The complete raw certificate details for secure.rovaproducts.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGQDCCBSigAwIBAgIQYY7WtmxW2Gvobgv7hj5hrTANBgkqhkiG9w0BAQsFADBm
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UECxMU
RG9tYWluIFZhbGlkYXRlZCBTU0wxIDAeBgNVBAMTF0dlb1RydXN0IERWIFNTTCBD
QSAtIEczMB4XDTE2MTIxOTAwMDAwMFoXDTE4MTAwNTIzNTk1OVowIjEgMB4GA1UE
AwwXc2VjdXJlLnJvdmFwcm9kdWN0cy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjBhoOxnYnshMcDaS4YfmkJukTGYXEEN92OB7cC3dx2lIyRQNL
XYxU9CkCzFuKBlJ4xMl24McQNwyvBekoyyBzl3UdQ8Pjd/d6su+xQ6tbmjMUS5v4
7M4KPl4kcWJuFCjcQ/7ipEw/TE1Q47t2tLgzcnuLc5h2YxTbxf47A2/pPS42hiGn
wUxAcDq5BopWfYi7cJ/VE0qNTTKvuPmBDHWi3wnds6A66F2JlhdoADTIt9ZUaDCn
meIVd/+7ddHTC92wxCmUpilnxoUhquiWBGNnnkWtiz+x3DKHqQzYpJQPST9fAHOr
I96Fu5NRIzXtK3FBZ7eXL5U4SMiV+/h/wE/NAgMBAAGjggMsMIIDKDAiBgNVHREE
GzAZghdzZWN1cmUucm92YXByb2R1Y3RzLmNvbTAJBgNVHRMEAjAAMCsGA1UdHwQk
MCIwIKAeoByGGmh0dHA6Ly9ndC5zeW1jYi5jb20vZ3QuY3JsMIGdBgNVHSAEgZUw
gZIwgY8GBmeBDAECATCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1
c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUM
M2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9s
ZWdhbDAfBgNVHSMEGDAWgBStZSKFkNA746FJizf58QsdXxegdzAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEB
BEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2d0LnN5bWNkLmNvbTAmBggrBgEFBQcw
AoYaaHR0cDovL2d0LnN5bWNiLmNvbS9ndC5jcnQwggF/BgorBgEEAdZ5AgQCBIIB
bwSCAWsBaQB2AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABWRjl
qyoAAAQDAEcwRQIhAP4iotoK8L+fsigGglQeE5XtOvPhHwNtJIHogBxyAN0yAiBC
bPvXxIhULU91qlrSxRZiwadDCI9QBBoaEGCCDVFOigB3AO5Lvbd1zmC64UJpH6vh
nmajD35fsHLYgwDEe4l6qP3LAAABWRjlq3sAAAQDAEgwRgIhAPlbz67Z0h0sScTe
KXkdA0apLZH+A8+QNaY0r15OJWjRAiEAzpZa8XXp/9eQY8oS7d+0vGeXMzWet7AN
ARmYBzPgHN4AdgC8eOHfxfY8aEZJM02hD6FfCXlpIAnAgbTz9pF/Ptm4pQAAAVkY
5awfAAAEAwBHMEUCIQCIkV7ibnce1WW4xmY9nrG4cuY0mYJQrLr0lFI8sQ81sgIg
BzyYySsYTUDuTPAjsFtB93g14lFltjRobanZ+iV7JOgwDQYJKoZIhvcNAQELBQAD
ggEBAFIRVGXX9nstMI8ANAWL64c3aW9WAvFSQRKBryYC9VvSo3zroq0y19I3B20M
EfZKyXnLqFFJjLhze6RqokyGALpSatRHpLXc5BaVkVTP2u5fHGHlKoZErQrnywjy
YyFL2OCVFVybzhhyMv3biEL9UggTHT2fgTjBC7njZNLdtZwXYRHqnabPT/ZDnKDG
QYdnpkvzqtpSVAQrlHhEYjgctnjrb6jNuTHCbAHyIFRNxshTvyDrn9Q3x20bMEM1
hWy8WgJ2a2IdHKgfRg8uQo6xS3QWBe1lpqaLRX/nMCW80+yN52mVl+kkTfRfZKOj
tJtypbnncOCNn6Ha1AOeCTDeYIQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wYaDsZ2J7ITHA2kuGH5
pCbpExmFxBDfdjge3At3cdpSMkUDS12MVPQpAsxbigZSeMTJduDHEDcMrwXpKMsg
c5d1HUPD43f3erLvsUOrW5ozFEub+OzOCj5eJHFibhQo3EP+4qRMP0xNUOO7drS4
M3J7i3OYdmMU28X+OwNv6T0uNoYhp8FMQHA6uQaKVn2Iu3Cf1RNKjU0yr7j5gQx1
ot8J3bOgOuhdiZYXaAA0yLfWVGgwp5niFXf/u3XR0wvdsMQplKYpZ8aFIarolgRj
Z55FrYs/sdwyh6kM2KSUD0k/XwBzqyPehbuTUSM17StxQWe3ly+VOEjIlfv4f8BP
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 129676776633758914951403160563460497837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'secure.rovaproducts.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28659104131077954611518776805763150128141776818277511211740215361889722564697542728806022454052062336939045731262808096350064367401680518624587990582204630299745765693012664778972983165494360603722446864113590943523262157415946026895132739688212017148446443607875950136442002728220036996379802245278416103882439893123748102992118293993981322120436553130764853720478077779305194008307340107156309604170501656591825959874323683700385693744602545696052588295601451720738972706869321951330946106330914883626630740497251034153340855198244194429703114274184713282316139297034922218341457637738198516578283702125359402078157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.rovaproducts.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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