cmapx2.claremontmckenna.edu

- Claremont McKenna College -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0f:a0:a8:e8:25:ec:97:8e:f8:ce:f5:5f:1a:86:f3:34 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Claremont McKenna College

Organization: Claremont McKenna College
Organization unit: Information Technologies
State / Province: California
Locality: Claremont
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:a0:a8:e8:25:ec:97:8e:f8:ce:f5:5f:1a:86:f3:34
Serial Number (int): 20772613271623394875603458923948340020
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bf:fe:c6:7f:46:5e:17:12:82:b9:b2:d5:92:8e:40:8b:ce:a5:cc:91
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 02:9d:59:7d:e8:a1:11:60:f3:cb:53:46:8a:50:2e:82:8e:40:da:76
Fingerprint (sha256): 96:76:8a:8a:15:3d:8a:7a:c1:5f:6a:76:b7:88:85:d4:ff:5a:68:89:94:9a:1f:d0:15:11:b4:58:ed:e5:6d:6b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate cmapx2.claremontmckenna.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmapx2.claremontmckenna.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmapx2.claremontmckenna.edu

Other certificates including the domain name claremontmckenna.edu

(limited to 100 certificates)
cmapx1.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
email.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
5689413791121408-fe4.pantheonsite.io
claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
*.claremontmckenna.edu
catalog.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
email.claremontmckenna.edu
*.claremontmckenna.edu
www.cmc.edu
5663052624035840-fe4.pantheonsite.io
5663052624035840-fe4.pantheonsite.io
5663052624035840-fe4.pantheonsite.io
catalog.claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
www.claremontmckenna.edu
webdav.claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
portal.claremontmckenna.edu
email2.claremontmckenna.edu
cmapx1.claremontmckenna.edu
statagw.claremontmckenna.edu
www.cmc.edu
*.claremontmckenna.edu
*.claremontmckenna.edu
*.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
www.claremontmckenna.edu
www.cmc.edu
5663052624035840-fe4.pantheonsite.io
5663052624035840-fe4.pantheonsite.io
claremontmckenna.edu
*.claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
*.claremontmckenna.edu
claremontmckenna.edu
claremontmckenna.edu
*.claremontmckenna.edu
*.claremontmckenna.edu
email2.claremontmckenna.edu
claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
email.claremontmckenna.edu
email.claremontmckenna.edu
email.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
email.claremontmckenna.edu
claremontmckenna.edu
email.claremontmckenna.edu
claremontmckenna.edu
claremontmckenna.edu
cmapx2.claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
claremontmckenna.edu
webdav.claremontmckenna.edu
portal.claremontmckenna.edu
email.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
*.claremontmckenna.edu
*.claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
5689413791121408-fe4.pantheonsite.io
cmapx2.claremontmckenna.edu
*.claremontmckenna.edu
statagw.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
*.claremontmckenna.edu
vpn.claremontmckenna.edu
statagw.claremontmckenna.edu
*.claremontmckenna.edu
claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
vpn.claremontmckenna.edu
claremontmckenna.edu
wlan2.claremontmckenna.edu
email.claremontmckenna.edu
email.claremontmckenna.edu
catalog.claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
*.claremontmckenna.edu
catalog.claremontmckenna.edu
*.claremontmckenna.edu
*.claremontmckenna.edu
email.claremontmckenna.edu
claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
portal.claremontmckenna.edu
www.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
5663052624035840-fe4.pantheonsite.io
www.claremontmckenna.edu
*.claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
5663052624035840-fe4.pantheonsite.io

Certificate

The complete raw certificate details for cmapx2.claremontmckenna.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20772613271623394875603458923948340020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Claremont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Claremont McKenna College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technologies'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmapx2.claremontmckenna.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839276877869451061362089024689712369463752126252920130500470164191187682278581092510529103586486829966489019682494839079488184716868412717392569573787735189552453692512025706613872429996354304850182277385777239773673247060881165965279667001690928256256024981177381901410089802983372222288167933757078145345066266578943796218789280130177243331990268797852919480247053786862379611162285845128407885170062839189320644057205871027772744545557984503085692747431503615222621365149865555795388834522342744912355092989522523477600127189547574939177707443145953086962842491750117037158569147565871901107284788661659501305744464767934571815927523764135852347049388501623724098823813350933188060221858167159656429610875315381133168074403497033574977466054974274386432950094191843286768297625755517524334985720499326237177840224946807177729102920282075305822475493163772201658169489828244003109393194571063683177011941006790277024614348392796707208441778423884498558038326929860196035549201168841036607268249032611310151575362628412391288995252552405082768232512992933226819229045936581647914973453924048181690461132372985725462136623720996174248958442826422151765860622055874653326870958645971905256483928279106107009525928159357019901474778193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bffec67f465e171282b9b2d5928e408bcea5cc91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmapx2.claremontmckenna.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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