www.bevnet.com

- BevNET.com, Inc. -

Issued by GeoTrust EV RSA CA 2018

About this certificate

This digital certificate with serial number 08:fa:75:fc:dd:27:c8:f0:d6:92:9e:73:0a:21:6d:51 was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BevNET.com, Inc.

Company registration number: 1509868
Organization: BevNET.com, Inc.
State / Province: Massachusetts
Locality: Watertown
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:fa:75:fc:dd:27:c8:f0:d6:92:9e:73:0a:21:6d:51
Serial Number (int): 11934291256777898923874732998993734993
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 04:d8:4a:41:43:79:bf:49:c8:fc:f1:87:e2:c3:8e:c7:78:30:8b:1b
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58

Fingerprint (sha1): 2d:04:ec:b1:a9:d8:ad:9f:26:8c:a0:a3:b8:1b:a0:e4:a8:b4:c6:0f
Fingerprint (sha256): a5:67:4a:77:90:be:8c:a5:95:dc:9f:5f:ac:7b:82:e0:1c:4d:57:44:bf:a1:e7:21:72:06:fe:3e:9f:cc:02:fd

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl

Check the revocation status for certificate www.bevnet.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bevnet.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bevnet.com
bevnet.com
app.bevnet.com
www.projectnosh.com
app.brewbound.com
www.tasteradio.com
admin.bevnet.com
mediakit.bevnet.com
app.projectnosh.com
admin.projectnosh.com
www.brewbound.com

Other certificates including the domain name bevnet.com

(limited to 100 certificates)
support.bevnet.com
support.bevnet.com
www.bevnet.com
www.bevnet.com
app.bevnet.com
www.tasteradio.com
BevNET.com, inc.
BevNET.com, inc.
www.bevnet.com
www.bevnet.com
www.tasteradio.com
www.bevnet.com
www.bevnet.com
api.bevnet.com
app.bevnet.com
www.bevnet.com
www.bevnet.com
www.bevnet.com
app.bevnet.com
www.bevnet.com
www.bevnet.com
support.bevnet.com
www.bevnet.com
support.bevnet.com
www.bevnet.com
www.bevnet.com
subscribe.bevnet.com
www.bevnet.com
www.bevnet.com
www.bevnet.com
app.bevnet.com
www.bevnet.com
www.bevnet.com
www.bevnet.com
www.bevnet.com
www.bevnet.com
support.bevnet.com
act.bevnet.com
BevNET.com, inc.
act.bevnet.com
support.bevnet.com
www.bevnet.com
www.bevnet.com
support.bevnet.com
www.tasteradio.com
BevNET.com, inc.
www.bevnet.com
support.bevnet.com
www.bevnet.com
support.bevnet.com
act.bevnet.com
support.bevnet.com
support.bevnet.com
www.bevnet.com
www.bevnet.com
www.bevnet.com
www.tasteradio.com
www.bevnet.com
www.bevnet.com

Certificate

The complete raw certificate details for www.bevnet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqP+5Y528BxAlMoI0CIY
2/nox9ohDWwbquIFg7n4+gOsQaqAFKf8oD9JQH913Bh3scoH0ZKA73ar8iBXbFWb
F3c9nLxmMDkB54PXEbnicWGWu+kn1YxWRIx79K7NdRI2rxE/CmEYWArMBRa79Kql
hGJneJArClrXkP0WE67fdFr39DkCDwhUtpt6lWPWGRvAraDYsNIZOT+Rgdj/szL9
dU4P4EvTotmmDSyAK4wmQ6F0AwyMS/CPg2pn9QChn+RU/DKdijQWGhAxFkTYPabz
zGuUNPdEeu6Zlj3ytw3UbEQs7j/7gfLLtrnGOVAyGJlSCXg5RPDHMWn7KWpn1BmK
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11934291256777898923874732998993734993
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1509868'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Watertown'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BevNET.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bevnet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22551287572862477553614986510369190082483764477822316904751326325404800321987475362764892800458136458479117733218488982262375846992973975010235224636431030549042703465372663649529424630044532082517841809969488104682240926847649153887755486608586993803530689556351825771185949180376767940414551530799344968489925404174216519561283771868339513726875664826293613359307634232302518211593731230809905601871272516667772698363699844517010984097143705317805940245936068558191168395547087067829294455127456724556392261923231995047266205810687781498221380122308301501569936750618027988257750608563734262943561686917382208588413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04d84a414379bf49c8fcf187e2c38ec778308b1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (209 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bevnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bevnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bevnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectnosh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.brewbound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasteradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bevnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediakit.bevnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.projectnosh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.projectnosh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewbound.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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