portal.crctrust.com

- 华润深国投信托有限公司 -

Issued by CA 沃通 EV Pro 服务器证书 G2

About this certificate

This digital certificate with serial number 35:a3:92:08:55:b3:dc:8a:d1:af:55:45:dc:3d:a0:39 was issued on by WoSign CA Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

华润深国投信托有限公司

Company registration number: 440301102858241
Organization: 华润深国投信托有限公司
Address: 深圳市福田区中心四路1-1号嘉里建设广场第三座第10-12层
Postal code: 518048
State / Province: 广东省
Locality: 深圳市
Country: CN

WoSign CA Limited

Organization: WoSign CA Limited
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 35:a3:92:08:55:b3:dc:8a:d1:af:55:45:dc:3d:a0:39
Serial Number (int): 71298390056692816463260494134691864633
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 05:d4:fe:80:67:bd:59:2d:39:76:ef:2c:4a:6d:64:8f:79:84:d5:a1
AuthorityKeyId: 19:f4:5f:b6:ac:56:29:27:f5:ae:8e:7b:03:b7:5f:8d:81:f2:55:b8

Fingerprint (sha1): 38:95:3e:40:b2:be:0d:2e:50:3e:da:3a:4f:ae:c9:9b:d2:64:d5:52
Fingerprint (sha256): 98:eb:74:9b:d1:d4:93:c1:19:1e:f1:36:e2:4b:8c:30:15:e4:0a:99:e4:79:4f:bc:df:af:9c:5f:55:60:2d:d7

Issuing Certificate URL: http://aia2.wosign.cn/ca2g2.server4p.cer

Revocation information

OCSP Server: http://ocsp2.wosign.cn/ca2g2/server4p
CRL Distribution Point: http://crls2.wosign.cn/ca2g2-server4p.crl

Check the revocation status for certificate portal.crctrust.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.crctrust.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication
Microsoft Server-Gated Cryptography
Netscape Server-Gated Cryptography

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.crctrust.com

Other certificates including the domain name crctrust.com

(limited to 100 certificates)
sfvpn.crctrust.com
sfvpn.crctrust.com
portal.crctrust.com
echain.crctrust.com
crctrust.com
sfvpn.crctrust.com
portal.crctrust.com
xchain.crctrust.com
sfvpn.crctrust.com
sfvpn.crctrust.com
mcs.crctrust.com
am.crctrust.com
mail.crctrust.com
crctrust.com
crctrust.com
sfvpn.crctrust.com
portal.crctrust.com
portal.crctrust.com
sfvpn.crctrust.com
crctrust.com
mcs.crctrust.com
sfvpn.crctrust.com
mcs.crctrust.com
mcs.crctrust.com
mail.crctrust.com
portal.crctrust.com
portal.crctrust.com
mail.crctrust.com
mail.crctrust.com
mail.crctrust.com
if.crctrust.com
portal.crctrust.com
portal.crctrust.com
portal.crctrust.com
mail.crctrust.com
sfvpn.crctrust.com
portal.crctrust.com
mail.crctrust.com
portal.crctrust.com
sfvpn.crctrust.com
sfvpn.crctrust.com
portal.crctrust.com
portal.crctrust.com
sfvpn.crctrust.com
portal.crctrust.com

Certificate

The complete raw certificate details for portal.crctrust.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotio3okBMIKbN0Iu3NPl
79hM+sEPwO6o/iyj3ewMQ9NGupDRjve8J3CWnBybinJPoGIO12mi75Kg3O0rXoAC
vckmgS7UBCzbznbBjQUfLihylmi2xqIcQCNrj7WwYX+s9IzCKLB9B5SdcXraeiRC
ieIc/ESVUhyA7QpM1jtNo5BSfZyV/3Zex2P/Y9CJGIQNTV0tzykonxKySqpQBp7S
GmE11NtQGeJNui1iG2yhpAMtOS2t/UzxOoI2DvnzRhlos3gmk6tIhqCPLiaxSp8h
SqdeKvPPqisAQBT3QFdPeYhFc6poHj4tJcLfU9HPmREGP8yT+gOz7Gxb1Y05gIX2
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 71298390056692816463260494134691864633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CA 沃通 EV Pro 服务器证书 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-29 01:33:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-29 01:33:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Guangdong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shenzhen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '440301102858241'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '广东省'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '深圳市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '518048'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '深圳市福田区中心四路1-1号嘉里建设广场第三座第10-12层'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '华润深国投信托有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'portal.crctrust.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20557444257693969582411709681587447226517341884676163452352816153428219067062924678582120751862782533592350401503167019680528483393648093935634181739401060112514940700991967312849053265587321491146608475190092838257771906443176998692679122054720646449944056061484311403359338053109729748208952149487066390625832297993301645454746832607981528417446444505235163503992016914251556284160724091728739841181555610692511441926726356592623693537130609389920013373754756492110980126333252891037913816314632498390173259725646946593973329077096685952262224190361782448599618005674020375141436743203618975214196121436310114531003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05d4fe8067bd592d3976ef2c4a6d648f7984d5a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 19f45fb6ac562927f5ae8e7b03b75f8d81f255b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.wosign.cn/ca2g2/server4p'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia2.wosign.cn/ca2g2.server4p.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls2.wosign.cn/ca2g2-server4p.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.crctrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wosign.com/policy/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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