123test.com

- 123test BV -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 6e:77:dd:03:39:5b:a8:eb:c9:26:19:c0:52:3a:db:ad was issued on by GeoTrust Inc..

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

123test BV

Company registration number: 27187803
Organization: 123test BV
State / Province: Gelderland
Locality: Nijmegen
Country: NL

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:77:dd:03:39:5b:a8:eb:c9:26:19:c0:52:3a:db:ad
Serial Number (int): 146837445530464740585620491176074992557
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): c2:8c:46:39:9c:0f:c5:7a:6f:c6:4b:16:fd:e2:cc:fa:53:02:09:c3
Fingerprint (sha256): a3:90:e2:8f:16:cb:ed:71:51:49:35:9d:16:79:74:07:b5:90:6d:e2:1b:d7:c0:02:8c:73:66:b9:b2:27:22:20

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate 123test.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 123test.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.123test.de
123test.de
123test.nl
www.123test.nl
www.123test.fr
123test.fr
123test.es
www.123test.es
dyn.123test.com
cdn.123test.com
api2.123test.com
api.123test.com
123test.com
www.123test.com

Other certificates including the domain name 123test.com

(limited to 100 certificates)

dyn.123test.com
lowell-place-apartments.com
dyn.123test.com
developer.123test.com
qr-stage.viv-it.co
developer.123test.com
simian.co
123test.com
botanastehuacan.com
foosball-challenge.collegebasket.tech
developer.123test.com
123test.com
education.finance
inyoice.com
api2.123test.com
api.123test.com
reddit.mmastreams100.com
cdn.123test.com
123test.com
api2.123test.com
nicolascauet.me
api2.123test.com
cdn.123test.com
api24.123test.com
123test.com
123test.com
developer.123test.com
api.123test.com
cdn.123test.com
api.123test.com
api.123test.com
dyn.123test.com
www.ballhop.co
api22.123test.com
developer.123test.com
developer.123test.com
dyn.123test.com
123test.com
api.123test.com
123test.com
1450987616.rsc.cdn77.org
developer.123test.com
123test.com
123test.com
developer.123test.com
cdn.123test.com
portfolio.devsancabo.com
developer.123test.com
cdn.123test.com
dyn.123test.com
www.123test.com
cdn.123test.com
marketing.s.undertime.co
123test.com
api2.123test.com
unrealworld.co.uk
123test.com
developer.123test.com
123test.com
api2.123test.com
123test.com
cdn.123test.com
playpuzzles.link
developer.123test.com
www.123test.com
api.123test.com
developer.123test.com
api.123test.com
developer.123test.com
api22.123test.com
assessment-training.123test.com
api2.123test.com
dyn.123test.com
developer.123test.com
api2.123test.com
www.bernardobernal.com
dyn.123test.com
dyn.123test.com
api20.123test.com
doesmidwesthaveabeltsquat.com
123test.com
dyn.123test.com
api22.123test.com
developer.123test.com
www.perklone-md.cn
www.doughboyz.org
3778-care-simulator-staging.nata.dev
api4.123test.com
developer.123test.com
www.theflashpoint.tk
dev.eureka.academy
developer.123test.com
admin.reportkard.com
developer.123test.com
cdn.123test.com
123test.com
dyn.123test.com
cdn.123test.com
123test.com

Certificate

The complete raw certificate details for 123test.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHgAsMid/RUS8CoadWM9
75oDkqJhaP+6KwWYWNity6Cpl1zX0n/Zq5WysYbX0Xolk7GWq64j8eWVAUacK6o+
SJuUUUMkEtBbRoFdSvNgzzLGMOdlICb60A4ZQzxFNP7DflhEHO5e/j2lJh8Achy2
0W9jzS9+JmzA0OlBLNARTQesfN+Bf2n8So8h8ZYRqekyk93hkFNYBt415Ld1ZpcN
UzIyh+DGiqQ9M3BF6aXYsb0x+UdHAlDz+5qLevibp8OEwPk/YWDYtYNyrFJv3G3+
xX+C2iAu1v29Yc+cRXYLYUqUyritD+WmHimLg0whhE2zNm/m9mBCTED7xtp7JsZi
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 146837445530464740585620491176074992557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '27187803'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nijmegen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '123test BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '123test.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20257304330211308979065037427729825150349939960121304239565488422286062261281431148013361496920011426386434221017606712639920993827597735094626848448971896965836274816308036186205691623434816603940540674992188512889514394639753915983432084566719051994243062076885888886923100297097387160942470783245262398263115426470694440230839980806862131530838210240449483903854389380765839083793888157963505623386834062206098529663640059420048444814063196749491992235549671144210525903111014667434428011750598357844589815612658068239769624588082228043439752645199471868294393694081960178248576846773135167470130869550384882803237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (214 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123test.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123test.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123test.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123test.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123test.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123test.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123test.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123test.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyn.123test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.123test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2.123test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.123test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123test.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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