ufiakra.pl

Issued by Trustico RSA DV CA

About this certificate

This digital certificate with serial number b3:f7:cd:05:3b:24:e8:8a:86:bf:9c:94:bf:7f:f6:b8 was issued on by The Trustico Group Ltd.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ufiakra.pl

The Trustico Group Ltd

Organization: The Trustico Group Ltd
State / Province: London
Locality: Croydon
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): b3:f7:cd:05:3b:24:e8:8a:86:bf:9c:94:bf:7f:f6:b8
Serial Number (int): 239218466877971839891136938656707638968
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a3:af:1e:e0:c4:8c:63:df:7f:2c:ff:cc:25:04:7e:fa:dd:ef:f5:57
AuthorityKeyId: 5d:8a:d1:23:08:2f:e1:9d:81:ce:d9:2c:70:28:ba:97:1f:ae:18:35

Fingerprint (sha1): 5e:d5:0d:6c:ba:eb:1e:ab:aa:c5:80:91:6c:03:90:46:98:2a:27:c8
Fingerprint (sha256): 9c:f3:8b:51:ba:4a:fd:29:bf:07:67:f2:b1:1d:b4:3e:4e:57:fc:29:56:4a:09:d1:54:2d:b3:5a:90:ee:23:be

Issuing Certificate URL: http://crt.comodoca.com/TrusticoRSADVCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/TrusticoRSADVCA.crl

Check the revocation status for certificate ufiakra.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ufiakra.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ufiakra.pl
www.ufiakra.pl

Other certificates including the domain name ufiakra.pl

(limited to 100 certificates)

Certificate

The complete raw certificate details for ufiakra.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGMzCCBRugAwIBAgIRALP3zQU7JOiKhr+clL9/9rgwDQYJKoZIhvcNAQELBQAw
bjELMAkGA1UEBhMCR0IxDzANBgNVBAgTBkxvbmRvbjEQMA4GA1UEBxMHQ3JveWRv
bjEfMB0GA1UEChMWVGhlIFRydXN0aWNvIEdyb3VwIEx0ZDEbMBkGA1UEAxMSVHJ1
c3RpY28gUlNBIERWIENBMB4XDTIxMTIxNzAwMDAwMFoXDTIzMDExNjIzNTk1OVow
FTETMBEGA1UEAxMKdWZpYWtyYS5wbDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAOaMm5BQtN827a+fJCyxrm9OwpHumSi6RQsz+SkAEG95pX30zeB9rlYO
xAsHCazIHB1R6Pb3Gv1JTYi43ntiFZQ9m/jPvspIALR7v0457WV/yqpB0rfj/uiZ
G/T+8V8nv/YzVAlqPXGT6inv51NzeCBms2gcV4ia9dnvaDtlnlCcj9YOiw0dbhXO
Zf/dwXc7mKr3p67A3Ym+qvZP7vAJyqs1CWGkrDkGY6dmtmMJFa6x+GlvEonoxVE2
oCntxE7CRTGAL/zOUiCn1Ub1GDlehZsc5w+KV/y9GUTE3eRlpybf4l6PoCTM8vGC
i43l4O3TO/t75C7qge+y4lYJZCxso70CAwEAAaOCAyMwggMfMB8GA1UdIwQYMBaA
FF2K0SMIL+Gdgc7ZLHAoupcfrhg1MB0GA1UdDgQWBBSjrx7gxIxj338s/8wlBH76
3e/1VzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICOjAlMCMG
CCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgEwPAYD
VR0fBDUwMzAxoC+gLYYraHR0cDovL2NybC5jb21vZG9jYS5jb20vVHJ1c3RpY29S
U0FEVkNBLmNybDBtBggrBgEFBQcBAQRhMF8wNwYIKwYBBQUHMAKGK2h0dHA6Ly9j
cnQuY29tb2RvY2EuY29tL1RydXN0aWNvUlNBRFZDQS5jcnQwJAYIKwYBBQUHMAGG
GGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTAlBgNVHREEHjAcggp1Zmlha3JhLnBs
gg53d3cudWZpYWtyYS5wbDCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYArfe+
+nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAF9yJJ+qgAABAMARzBFAiB0
aQHLYjVRhcK1NrsQWbN5Dk397S9URzkTb5F+E42XrwIhAM4sxdGueFIb6knmbO4q
gySFH4QzoEfy4Y0yG9FtHfefAHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6
V6NS61IAAAF9yJJ+bgAABAMARzBFAiB0dIfmhXXRq+sfm8QBo9KLfnCb4pshdCWy
XipphEU62wIhAKOC5GArcOM32y1wXkLLif4RPPp0/OVYT2cxxvLIpIajAHcA6D7Q
2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAF9yJJ+RQAABAMASDBGAiEA
qSF2BM7dbqVFHasCOjnBZTvn//BOi0+3qj0dIiGdX3ICIQDfF38CjlE7H3qOTh/P
0eYjw4SJw15p4A3iiGOYNNh6QDANBgkqhkiG9w0BAQsFAAOCAQEAeFa8xrLgJcE4
nW2mfHN2JBDjNJQTUoKhhd+pqguZgEeD1PC2cJRtHecChLrjF+J9Lodi+VbJGAOT
XHglQEJrIfuGDYPsIe5ZQagaK+gkhRO5AecbTqWBUGo6fVvsA8PT8L13ZdbtJ66S
QwFBeLS1xvh9h2upqCxelS4dmsYLIoh1n5HHPLEI1MtrGhLcmC4YOrXBZt+HDBHp
HYUfPG5QKPUJzK0v9vwrV1ObH4YMnt4vJQM09el11C5yIcoof8/Uiy0mvw31k6bD
jgnmdQoBiKWEtqfUJyrKTGKVRerikA0o3IPQAepmm8gGGfvyFB1ecBREQJX6aUic
Us3bHIqfpw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oybkFC03zbtr58kLLGu
b07Cke6ZKLpFCzP5KQAQb3mlffTN4H2uVg7ECwcJrMgcHVHo9vca/UlNiLjee2IV
lD2b+M++ykgAtHu/TjntZX/KqkHSt+P+6Jkb9P7xXye/9jNUCWo9cZPqKe/nU3N4
IGazaBxXiJr12e9oO2WeUJyP1g6LDR1uFc5l/93BdzuYqvenrsDdib6q9k/u8AnK
qzUJYaSsOQZjp2a2YwkVrrH4aW8SiejFUTagKe3ETsJFMYAv/M5SIKfVRvUYOV6F
mxznD4pX/L0ZRMTd5GWnJt/iXo+gJMzy8YKLjeXg7dM7+3vkLuqB77LiVglkLGyj
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 239218466877971839891136938656707638968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Croydon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Trustico Group Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustico RSA DV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ufiakra.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29104146368874395409894206420968279730829799639292573756377552757713396719847745589693189340746732460912775114085149327766248936120544080407176291640785195663143862135743148777834431584238786520636672884396916854214261760190316540453008814147301238757864000807363513821747203264529134597124187081339881111725563032306407761659563060581892973583977107567589392993942798747464046848594597226156418666124597983612609604497189561767267653669592102544219619851595620460629633734751663815029505939241244820051114122297915305119750494357657261872133762631788408848490730040003282133187035707084990506672288683208466712273853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d8ad123082fe19d81ced92c7028ba971fae1835
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3af1ee0c48c63df7f2cffcc25047efaddeff557
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.58
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/TrusticoRSADVCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/TrusticoRSADVCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufiakra.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ufiakra.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017dc8927eaa00000403004730450220746901cb62355185c2b536bb1059b3790e4dfded2f544739136f917e138d97af022100ce2cc5d1ae78521bea49e66cee2a8324851f8433a047f2e18d321bd16d1df79f0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000017dc8927e6e00000403004730450220747487e68575d1abeb1f9bc401a3d28b7e709be29b217425b25e2a6984453adb022100a382e4602b70e337db2d705e42cb89fe113cfa74fce5584f6731c6f2c8a486a3007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017dc8927e450000040300483046022100a9217604cedd6ea5451dab023a39c1653be7fff04e8b4fb7aa3d1d22219d5f72022100df177f028e513b1f7a8e4e1fcfd1e623c38489c35e69e00de288639834d87a40
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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