webmail.gtefinancial.org

- GTE Financial -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:8b:a0:36:6e:fd:10:d0:03:9e:b7:91:83:a5:14:c3 was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

GTE Financial

Organization: GTE Financial
State / Province: Florida
Locality: Tampa
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:8b:a0:36:6e:fd:10:d0:03:9e:b7:91:83:a5:14:c3
Serial Number (int): 3383434753112821531473214372778939587
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 3d:9c:e1:17:2c:cb:6c:4f:3f:46:39:34:ee:c5:e0:d5:40:fd:00:b4
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 1c:81:81:54:dd:f3:d4:3e:8d:b4:6b:07:f6:2c:14:bb:6d:dc:53:e4
Fingerprint (sha256): ac:db:10:a8:a3:3e:45:4e:93:35:fe:15:ab:bc:96:46:b0:82:ee:bb:cb:14:55:4c:45:8f:d4:c6:d8:a0:4c:97

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g4.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g4.crl

Check the revocation status for certificate webmail.gtefinancial.org

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.gtefinancial.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.gtefinancial.org
webmail.gtefcu.org
autodiscover.ads.gtefcu.org
legacy.gtefcu.org
pluto.ads.gtefcu.org
casarrayhq.ads.gtefcu.org
casarraydr.ads.gtefcu.org
jupiter.ads.gtefcu.org
saturn.ads.gtefcu.org
webmaildr.gtefinancial.org
autodiscover.gtefinancial.org

Other certificates including the domain name gtefinancial.org

(limited to 100 certificates)
*.gtefinancial.org
akamaisecure6.qualtrics.com
online.gtefinancial.org
webmail.gtefinancial.org
akamaisecure6.qualtrics.com
gopoints.gtefinancial.org
akamaisecure6.qualtrics.com
online.gtefinancial.org
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
gopoints.gtefinancial.org
akamaisecure6.qualtrics.com
www.gtefinancial.org
online.gtefinancial.org
builderprod.gtefinancial.org
akamaisecure6.qualtrics.com
*.gtefinancial.org
mobile.gtefinancial.org
*.gtefinancial.org
online.gtefinancial.org
akamaisecure6.qualtrics.com
online.gtefinancial.org
gopoints.gtefinancial.org
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
gopoints.gtefinancial.org
online.gtefinancial.org
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
gopoints.gtefinancial.org
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
mobile.gtefinancial.org
www.gtefinancial.org
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
mobile.gtefinancial.org
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
*.gtefinancial.org
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
gopoints.gtefinancial.org
gopoints.gtefinancial.org
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
gopoints.gtefinancial.org
polycr01.gtefinancial.org
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
www.gtefinancial.org
akamaisecure6.qualtrics.com
mobile.gtefinancial.org
*.gtefinancial.org
*.gtefinancial.org
www.gtefinancial.org
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
mobile.gtefinancial.org
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
gopoints.gtefinancial.org
akamaisecure6.qualtrics.com
gopoints.gtefinancial.org
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
*.gtefinancial.org
akamaisecure6.qualtrics.com
gopoints.gtefinancial.org
builderprod.gtefinancial.org
akamaisecure6.qualtrics.com
polycr01.gtefinancial.org
gopoints.gtefinancial.org
www.gtefinancial.org
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
buildercert.gtefinancial.org
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
*.gtefinancial.org
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com

Certificate

The complete raw certificate details for webmail.gtefinancial.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JhHl+ZF7Ly/yZSTUTn8
/r2U0ge2Y5mhwBD4Xfd3zwZony0vCGT2yhaqPh2LefrG7a5BrTGjDxuBQNO7kZVA
570tdxHQCumIjmlshuA+FOXaq4+e87Slh4bp9EJfKfeUz51H/Mt4gkVcYaT5qOoc
7NH73rhI7FnGms4fwuNvdRv2U2u0+3bLJ8VzmHkiWge/V1stFd6fS52daBEm/2nD
nzGInNGb52xKNeAKZuaAQ+U1e6UbMAkQbe/jvdab/k8xMxWT5ZOVzLL2OjDQI19y
1ji03TSfkBBIg9jFFYeb9+RbH1weHW24jDHxxUQI4OYyzBTeUkxGJW5vclccocSN
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3383434753112821531473214372778939587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tampa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTE Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.gtefinancial.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28352472212222101520658326505726616828646104599799550835205001390119610979475345457881698142082585071272686522232014001380377289195489031848112347665906312471573747778329796207367968411575916531821214171527897770593978441542141896249076524958377705522491961601299392676859306652591494239810022244501564217127607179601895291951640235053668467268286254967463955432424406876032470026074996131741118267008409177982366045565235485243145440990094641637756731517742142962763982722877891107505613074989081265930608184385367685523146285309653968801560423790117577195282555907817429332763941278498011983673519536131517616262593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d9ce1172ccb6c4f3f463934eec5e0d540fd00b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (280 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.gtefinancial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.gtefcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ads.gtefcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.gtefcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pluto.ads.gtefcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casarrayhq.ads.gtefcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casarraydr.ads.gtefcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jupiter.ads.gtefcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saturn.ads.gtefcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmaildr.gtefinancial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gtefinancial.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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