www.staplespreferred.ca

- Staples, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:9f:e7:de:53:35:24:b6:78:e2:c4:0c:75:bc:cc:71 was issued on by DigiCert Inc.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Staples, Inc.

Organization: Staples, Inc.
State / Province: Massachusetts
Locality: Framingham
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:9f:e7:de:53:35:24:b6:78:e2:c4:0c:75:bc:cc:71
Serial Number (int): 15451786005163136152251865121098091633
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7d:73:59:82:ee:6a:7f:2e:65:14:bb:92:b4:51:8d:18:d8:b3:b8:7f
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 1e:99:98:f0:8b:86:5c:0f:b6:53:d7:01:34:13:eb:e6:de:64:1c:7c
Fingerprint (sha256): b4:09:f0:f0:5b:89:ca:bb:cb:a2:27:65:8e:be:51:ce:cb:62:c4:b3:b2:90:a8:9d:0a:13:5f:e2:32:99:df:9d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crl

Check the revocation status for certificate www.staplespreferred.ca

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.staplespreferred.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.staplespreferred.ca
www.staplespreferred.com
www.eway.ca
www.BureauEnGrosPrivilege.com
www.BureauEnGrosPrivilege.ca
thor-perf.staples.com
thor-creative.staples.com
support.eway.ca
stg.eway.ca
stg-static.eway.ca
static.eway.ca
staplespreferred.com
staplespreferred.ca
staging.cexp.ca
new.staplespreferred.ca
m.eway.ca
eway.ca
creative.staplespreferred.ca
bureauengrosprivilege.com
bureauengrosprivilege.ca
api.eway.ca

Other certificates including the domain name staplespreferred.ca

(limited to 100 certificates)
www.staplespreferred.ca
weeklyad.staplespreferred.ca
smetrics.staplespreferred.ca
weeklyad.staplespreferred.ca
powdps.staplespreferred.ca
powdps.staplespreferred.ca
www.staplespreferred.ca
smetrics.staplespreferred.ca
powdps.staplespreferred.ca
www.staplespreferred.ca
powdps.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
smetrics.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
powdps.staplespreferred.ca
weeklyad.staplespreferred.ca
www.staplespreferred.ca
powdps.staplespreferred.ca
smetrics.staplespreferred.ca
weeklyad.staplespreferred.ca
powdps.staplespreferred.ca
smetrics.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
weeklyad.staplespreferred.ca
www.staplespreferred.ca
powdps.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
weeklyad.staplespreferred.ca
www.staplespreferred.ca
smetrics.staplespreferred.ca
smetrics.staplespreferred.ca
weeklyad.staplespreferred.ca
www.staplespreferred.ca
powdps.staplespreferred.ca
smetrics.staplespreferred.ca
www.staplespreferred.ca
weeklyad.staplespreferred.ca
powdps.staplespreferred.ca
weeklyad.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
weeklyad.staplespreferred.ca

Certificate

The complete raw certificate details for www.staplespreferred.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8/6yqzhq5m43jGLKU9d
V4U1/nimYLCj+EPV9Wsc85Z66Ljn6CP7v8AEs6v5BN1T54+1mD3lxjERCe5ctJLR
2LP1q4kkv17ubzW89OVgp8M0V7i4I2/UVllhJm5pOd0ca+hCs2bLF7hs/k1L6rW8
mkTORalvpKzP8Nfg85VEC5KktApy8cUSPWnZWANgWjjDl/mfZ6QXf02iF/ypzeUG
xEe/ZJr7UOtDnDj2r45CiqS2V/nXEDi2cr1hgnqH4OqDaB5t4IJMjxmXV4WnUdHZ
3e8B/iRQTFA+l5jfVdtjHNfHObO66tDuzWEmrokICGqC/ZbIuYIJsEipBNbCkOrD
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15451786005163136152251865121098091633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Framingham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Staples, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.staplespreferred.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24719028058712354003020577521069749634715631496329744672926239750885650710921029444298114619380981070239359375685395737563401317070219502440109406589224150508212187045992191212013849761067862816987736392311757255911472659387338736347089275265811018844172708365893629547850360264147882298383938458503225626072140017076188556813671437734544938981698571284446263330948911637125268607074355788903437886591688879524831357471878524832719854236442097401460024397206942257400410981347808054971735128541866738409389701116739324040014907818448436563528512463963663013889759057634601940059651907550606427753750093487067514979157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d735982ee6a7f2e6514bb92b4518d18d8b3b87f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (446 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staplespreferred.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staplespreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BureauEnGrosPrivilege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BureauEnGrosPrivilege.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thor-perf.staples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thor-creative.staples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.eway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.eway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-static.eway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.eway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staplespreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staplespreferred.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cexp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.staplespreferred.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.eway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creative.staplespreferred.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bureauengrosprivilege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bureauengrosprivilege.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.eway.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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