ipass.deic.dk

Issued by TERENA SSL CA 2

About this certificate

This digital certificate with serial number 9b:36:65:5c:6c:1b:e2:eb:21:ee:81:34:fe:96:be:a3 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ipass.deic.dk,OU=Domain Control Validated

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 9b:36:65:5c:6c:1b:e2:eb:21:ee:81:34:fe:96:be:a3
Serial Number (int): 206312779222841854773152500407529291427
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ac:85:4e:5a:5c:24:84:5d:71:6e:be:0e:4a:f3:1c:c6:8d:c3:ad:0d
AuthorityKeyId: 5b:d0:8a:1c:9a:32:5b:e0:b5:dd:96:54:1b:e1:86:28:b0:fd:b6:bd

Fingerprint (sha1): 3c:93:ac:92:3f:f8:05:d0:cd:71:0e:38:76:55:4d:d9:05:cd:24:a4
Fingerprint (sha256): af:80:69:40:52:9d:0a:5a:6c:ef:57:33:b0:14:d3:d1:90:fa:5c:66:a7:2d:e2:c3:58:c6:98:9e:d3:41:b0:88

Issuing Certificate URL: http://crt.usertrust.com/TERENASSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TERENASSLCA2.crl

Check the revocation status for certificate ipass.deic.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ipass.deic.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ipass.deic.dk

Other certificates including the domain name deic.dk

(limited to 100 certificates)
gitlab.deic.dk
wayf.deic.dk
meet.deic.dk
filesender2.deic.dk
sciencedata.dk
unifi.net.deic.dk
gitlab.deic.dk
*.c.deic.dk
de161207.deic.dk
webpoint01.deic.eu
www.deic.dk
synore.sky.deic.dk
www.ddps.deic.dk
webpoint01.deic.eu
synnefo.sky.deic.dk
www.ddps.deic.dk
filesender.deic.dk
eduvpn.deic.dk
gitlab.deic.dk
pithos.sky.deic.dk
gitlab.deic.dk
*.c.deic.dk
*.nyhedsbreve.deic.dk
dmponline.deic.dk
filesender.deic.dk
www.deic.dk
eduvpn.deic.dk
pf.deic.dk
info.net.deic.dk
www.cs3.deic.dk
de161207.deic.dk
gitlab.deic.dk
gitlab.deic.dk
wayf.c.deic.dk
wayf-udv.c.deic.dk
eduvpn.deic.dk
gateway.dgw.deic.dk
www.ddps.deic.dk
digiexam.deic.dk
blog.deic.dk
node68.sky.deic.dk
webstat.deic.dk
mitfsknet.deic.dk
eduvpn.deic.dk
test.data.deic.dk
gateway.dgw.deic.dk
*.dgw.deic.dk
eduvpn.deic.dk
admin.eduroam.deic.dk
eduvpn.deic.dk
gateway.dgw.deic.dk
pithore.sky.deic.dk
pithos.sky.deic.dk
c.deic.dk
*.c.deic.dk
www.abacus.deic.dk
dtuguest.deic.dk
c.deic.dk
sol.sky.deic.dk
gitlab.deic.dk
info.net.deic.dk
synore.sky.deic.dk
wayf.c.deic.dk
*.data.deic.dk
okeanos.deic.dk
pithos.deic.dk
silo1.data.deic.dk
info.net.deic.dk
data.deic.dk
webhotel.deic.dk
webpoint01.deic.eu
gitlab.deic.dk
www.blog.deic.dk
enav.net.deic.dk
unifi.net.deic.dk
digiexam.deic.dk
gitlab.deic.dk
gitlab.deic.dk
eduvpn.deic.dk
gitlab.deic.dk
dtuguest.deic.dk
c.deic.dk
dmponline.deic.dk
deic.dk
*.dgw.deic.dk
filesender2.deic.dk
www.ddps.deic.dk
www.ddps.deic.dk
dmpsandbox.deic.dk
deic.dk
ipass.deic.dk
pithore.sky.deic.dk
synnefo.sky.deic.dk
*.dgw.deic.dk
webstat.deic.dk
radius1.eduroam.deic.dk
filesender.deic.dk
admin.eduroam.deic.dk
vidensportal.deic.dk
eduvpn.deic.dk

Certificate

The complete raw certificate details for ipass.deic.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIRAJs2ZVxsG+LrIe6BNP6WvqMwDQYJKoZIhvcNAQELBQAw
ZDELMAkGA1UEBhMCTkwxFjAUBgNVBAgTDU5vb3JkLUhvbGxhbmQxEjAQBgNVBAcT
CUFtc3RlcmRhbTEPMA0GA1UEChMGVEVSRU5BMRgwFgYDVQQDEw9URVJFTkEgU1NM
IENBIDIwHhcNMTQxMTI1MDAwMDAwWhcNMTcxMTI0MjM1OTU5WjA7MSEwHwYDVQQL
ExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFjAUBgNVBAMTDWlwYXNzLmRlaWMu
ZGswggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/LwecXhNLPhDjkPMy
hu4Ih18ODinyXqu/psfIisU8lRtTLJiHym8gFW9LHSvDTWuevXNoGODWoVh0jDQY
miUZH8ALe7xzcv9YhkmqjpectJOcPFC3BNqyAwlyQ3EpuJ9udcT6e6UyNNfcVDCY
1oMvcFoA38UfXBoV6f2lKSbl56eSlvlPG5NN5Yc5w/bXC1qyVkdasb2J2Yc2mJ7a
DGtX2bPxoQEwHxzTST5QQRSWTk2GBZUnYZKO3yZY5Kx45tu//n9j7GClNsU8CpRh
roBgHAM4En6RsqZfg7MlNa2ngkhu7uqaqj46KPAFqIisVdcEdfNO1eo4hb4+qTBT
JQHxowa83zi+xMtjhcbs6tR6rIlsS2kwZhjh0tRL3g3ovYewFxr75EvdpYKwY8KD
wShWDE8+rPuPv1Ox0K9WA6p1p60IUydqpoc53HYk3/Nd+x6e0pmWgG/p9hXkVos/
lwD5sG5qeEE504bHVubF318h3IQE+cFdojQylk7eVat6WaPR7Obu4sRK/Li1TItS
Ctnn2YSa5wOOXbdhWICqoDeUCtQfBOwg7EcWNORzrQhKbPdSGqcxBOUJFTJCJybj
NmU2RbxM+uNETT5e+KvMvanEl6XUEEWJm6EusxgqItGlMT3U9q6hA+H7TjEVRvrP
pRudu403eDQ2k4Z4cbHA0ifRCQIDAQABo4IBaTCCAWUwHwYDVR0jBBgwFoAUW9CK
HJoyW+C13ZZUG+GGKLD9tr0wHQYDVR0OBBYEFKyFTlpcJIRdcW6+DkrzHMaNw60N
MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAiBgNVHSAEGzAZMA0GCysGAQQBsjEBAgIdMAgGBmeBDAEC
ATA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVEVS
RU5BU1NMQ0EyLmNybDBsBggrBgEFBQcBAQRgMF4wNQYIKwYBBQUHMAKGKWh0dHA6
Ly9jcnQudXNlcnRydXN0LmNvbS9URVJFTkFTU0xDQTIuY3J0MCUGCCsGAQUFBzAB
hhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMBgGA1UdEQQRMA+CDWlwYXNzLmRl
aWMuZGswDQYJKoZIhvcNAQELBQADggEBAAkHsDebovgnSVfqxuOP7wy2zTEWlU1R
P9JLQuW+tbSAaZgmnXwU6ysH7QZnfTtfJFEmH/kuVQrPqFrdO+8ctb/ROMZK6LQ4
zdS1owGc7sAYchboo78ctpCYJJDcExbtVVm0I/uOoRtnuM1Ejj++KMOaaieBhwS/
7XmTkBxL03EuCwqXAbU7uqxo9iRwSP/oKWkCCwx+uJheh0/W2BvwSFJ6R7XmI8tV
POgTt7RLQuvraqOAuE+B/zi8ypDPgErrSWEzXPcJMJPqz/xcFkLmS8SBIRMYt+vi
xFGe8ZbRowBWPxBj5XiHNbCdll52Drto3194O0+pbOo0db6j5/wPw1A=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 206312779222841854773152500407529291427
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ipass.deic.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779961487921169053704686148646960373805971601595606063067172383185338132941520709459624081826146876015924238503566859567301525925674662570735627299073855799417986369730900029760625385785436754008570701074024032441084885397081993007341503861236415138907617431180609623285965173212340496575019106775334336528562221341955270618937260064595399375098927421343277370638957936161243124278370286236380983094139930849845422750467298421044053103446112751149620247939644808631481714439544997761755235385014760800515849063366533205117374726253260707475021368432509661555097174684791468895667118946905459788715172055699935770630804472761355004191789901284902237635904094639329926231909640117034918313245846333330645978340734348605796359792520263298595067647509159449635470624524617178189208694040946995137258161872598710789120338367992852337453637539899368403541934614985274332990512871499632026666150516132974379215778468837091522762553220564981344182610510692259736826648974966256038423477138607798869748685314967546649864944466070691739181399020813015738054493529656979532808458940603376706366014860982850031574804270983323164731226321094463881962085812752745343702578217208888808716758445921692792565641447419328628837176746767541482750988553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5bd08a1c9a325be0b5dd96541be18628b0fdb6bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac854e5a5c24845d716ebe0e4af31cc68dc3ad0d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TERENASSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TERENASSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipass.deic.dk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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