*.claremontmckenna.edu

- Claremont McKenna College -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 04:cb:16:01:3e:35:d3:e3:78:a5:3a:85:96:93:66:8a was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Claremont McKenna College

Organization: Claremont McKenna College
State / Province: California
Locality: Claremont
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cb:16:01:3e:35:d3:e3:78:a5:3a:85:96:93:66:8a
Serial Number (int): 6371394556914820644015762264569374346
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 53:3a:53:cc:9a:38:30:61:68:35:96:d6:cf:30:ac:cf:5d:90:54:60
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 36:80:2e:31:4e:89:b2:65:dd:0e:3b:70:ac:e9:91:93:ea:a3:98:df
Fingerprint (sha256): a9:46:86:be:37:1b:5b:fb:83:bf:7e:b6:0c:7a:78:19:47:d3:1c:97:74:2f:98:a7:43:ed:c0:8b:41:61:6b:de

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.claremontmckenna.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.claremontmckenna.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.claremontmckenna.edu
claremontmckenna.edu

Other certificates including the domain name claremontmckenna.edu

(limited to 100 certificates)
cmapx1.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
email.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
5689413791121408-fe4.pantheonsite.io
claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
*.claremontmckenna.edu
catalog.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
email.claremontmckenna.edu
*.claremontmckenna.edu
www.cmc.edu
5663052624035840-fe4.pantheonsite.io
5663052624035840-fe4.pantheonsite.io
5663052624035840-fe4.pantheonsite.io
catalog.claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
www.claremontmckenna.edu
webdav.claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
portal.claremontmckenna.edu
email2.claremontmckenna.edu
cmapx1.claremontmckenna.edu
statagw.claremontmckenna.edu
www.cmc.edu
*.claremontmckenna.edu
*.claremontmckenna.edu
*.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
www.claremontmckenna.edu
www.cmc.edu
5663052624035840-fe4.pantheonsite.io
5663052624035840-fe4.pantheonsite.io
claremontmckenna.edu
*.claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
*.claremontmckenna.edu
claremontmckenna.edu
claremontmckenna.edu
*.claremontmckenna.edu
*.claremontmckenna.edu
email2.claremontmckenna.edu
claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
email.claremontmckenna.edu
email.claremontmckenna.edu
email.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
email.claremontmckenna.edu
claremontmckenna.edu
email.claremontmckenna.edu
claremontmckenna.edu
claremontmckenna.edu
cmapx2.claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
claremontmckenna.edu
webdav.claremontmckenna.edu
portal.claremontmckenna.edu
email.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
*.claremontmckenna.edu
*.claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
5689413791121408-fe4.pantheonsite.io
cmapx2.claremontmckenna.edu
*.claremontmckenna.edu
statagw.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
*.claremontmckenna.edu
vpn.claremontmckenna.edu
statagw.claremontmckenna.edu
*.claremontmckenna.edu
claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
vpn.claremontmckenna.edu
claremontmckenna.edu
wlan2.claremontmckenna.edu
email.claremontmckenna.edu
email.claremontmckenna.edu
catalog.claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
*.claremontmckenna.edu
catalog.claremontmckenna.edu
*.claremontmckenna.edu
*.claremontmckenna.edu
email.claremontmckenna.edu
claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
portal.claremontmckenna.edu
www.claremontmckenna.edu
5663052624035840-fe4.pantheonsite.io
5663052624035840-fe4.pantheonsite.io
www.claremontmckenna.edu
*.claremontmckenna.edu
5689413791121408-fe4.pantheonsite.io
5663052624035840-fe4.pantheonsite.io

Certificate

The complete raw certificate details for *.claremontmckenna.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPGpvoQoO5drRVkg10D9
PdRsmhkdNuoXIctbYMnJa8drqJb//KYhPt5q6cRp4t+Vnrf3VLRSjg9A677N7TTj
+TOMZZmXKhVb1haXBOaqUWcbQQmVqc0X8St8fC4HIvouq6Pbg9H1K1n0GEUtU14F
z2DvqSlRVb+nN7cG9178BGsiptcrguDw5/L7uqqqPRWZdr2S5Bf4M2cl3S/tE5ay
U1Cfw00UyWNrUVIsd7Aqy/v9sYS2NEdmRvz1XyU541ZtFPEBpywHTdU3+4m+y0OO
w5obMO03iYqzsyjq5uXElkehR1h3nhJHpXeGOaUUobr2wynxEWg1tgXil2oBfgsE
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6371394556914820644015762264569374346
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Claremont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Claremont McKenna College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.claremontmckenna.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19307390852823455671666348446504416388531444611201442021825936008586999061420255395502227947111765967926757340172106689688611361166701339780648428146882960270561005650670534997515021034984963905509346888784222513106161710964758973096767931188764050574430498809401036289285430495071888343536578003732008709787106734286662286687904553119344952111998125794662952533038453278204742750144422425539170530778381794592863722879162726240672939869975203408333111169020883075823683765835406888402752514426932807988212419314150097462389606879486142766601409866357542618460533610073151766103353100713302626662531797353591636427879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							533a53cc9a383061683596d6cf30accf5d905460
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.claremontmckenna.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claremontmckenna.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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