mail.barracuda.com

- Barracuda Networks, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:a0:9a:2b:e7:4f:0b:88:4a:d2:2f:92:6c:e6:29:cc was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Barracuda Networks, Inc.

Organization: Barracuda Networks, Inc.
State / Province: California
Locality: Campbell
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:a0:9a:2b:e7:4f:0b:88:4a:d2:2f:92:6c:e6:29:cc
Serial Number (int): 18113858412046026107586371776084847052
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 42:0d:dc:fd:4f:d7:3f:2d:89:5e:d2:eb:0b:eb:47:e2:0c:95:f0:f5
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 35:80:d6:67:19:70:65:64:3f:63:19:87:41:c9:8b:47:18:88:fb:21
Fingerprint (sha256): c0:ee:84:c9:ba:90:b2:67:98:dc:d8:84:7c:c5:e9:18:25:1c:39:8c:0c:c1:00:16:4b:cc:2b:e4:51:04:f4:b4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl

Check the revocation status for certificate mail.barracuda.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.barracuda.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.barracuda.com
autodiscover.barracuda.com
mail.cuda-inc.com
autodiscover.intronis.com
autodiscover.barracudamsp.com

Other certificates including the domain name barracuda.com

(limited to 100 certificates)
netsecfeedback.barracuda.com
api.backup.barracuda.com
us.access.barracuda.com
blog.barracuda.com
statuspage.io
chickentreat.craveable.support
stage.barracuda.com
chickentreat.craveable.support
chickentreat.craveable.support
ess.cd1.barracudanetworks.com
chickentreat.craveable.support
bsf03.barracuda.com
encrypt.barracudanetworks.com
statuspage.io
statuspage.io
statuspage.io
azurecgw.barracuda.com
statuspage.io
dev.access.barracuda.com
cudaeye.barracuda.com
*.us.access.barracuda.com
downloads.access.barracuda.com
*.barracuda.com
statuspage.io
backfeed.barracuda.com
statuspage.io
collabora.aks.datainspector.barracuda.com
assets.barracuda.com
statuspage.io
content.barracuda.com
waas.barracudanetworks.com
sslvpn.barracuda.com
us.access.barracuda.com
statuspage.io
login.beta.barracudanetworks.com
hq.barracuda.com
ess.cd1.barracudanetworks.com
www.barracuda.com
statuspage.io
sni.cloudflaressl.com
ess.cd1.barracudanetworks.com
azurewaf.barracuda.com
www.barracuda.com
statuspage.io
chickentreat.craveable.support
insiders.barracuda.com
*.eu.access.barracuda.com
statuspage.io
ops.barracuda.com
statuspage.io
dev.access.barracuda.com
content.barracuda.com
statuspage.io
fr.blog.barracuda.com
ess.de.barracudanetworks.com
billing.barracudanetworks.com
*.ess.ca.barracuda.com
dev.access.barracuda.com
url.access.barracuda.com
statuspage.io
connect.barracuda.com
staging1.blog.barracuda.com
analytics.us.access.barracuda.com
statuspage.io
statuspage.io
statuspage.io
chickentreat.craveable.support
prometheus.aks.datainspector.barracuda.com
ngfirewall.barracuda.com
statuspage.io
bu.barracuda.com
netsecfeedback.barracuda.com
ess.vt2.barracudanetworks.com
csg.barracuda.com
chickentreat.craveable.support
collabora.aks.datainspector.barracuda.com
statuspage.io
community.barracuda.com
*.bmb.barracuda.com
docs.access.barracuda.com
api.dev.access.barracuda.com
webgateway.barracuda.com
azureccb.barracuda.com
qa-corp.barracuda.com
connect.barracuda.com
chickentreat.craveable.support
statuspage.io
statuspage.io
stg.access.barracuda.com
chickentreat.craveable.support
content.barracuda.com
statuspage.io
statuspage.io
portal.production-blue.cse-cudasvc.com
login.barracuda.com
statuspage.io
ess.cd1.barracudanetworks.com
*.ess.barracuda.com
analytics.us.access.barracuda.com
ess.cd1.barracudanetworks.com

Certificate

The complete raw certificate details for mail.barracuda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdhdLl9f2oRFMghctM02
Ni/9AJabycL9ytHEhLFI9x0poKabhcPieQzkPoO8H1tyApaoODNw+r+VaYJluvPb
g+bOcyHHCSatHE5ix6Q3G6+T5BEE1yLBEuLrGEn9xMnj7aBVj8OVzjF4Py62L6Fb
0AUFKkoVEloOaZppz+zN8Sh6SU4CpsUSaqD5MQTZkVkg0o7HBChVnPHWGd03muhI
l5rj24VD/P4YpPPBDJwW0vJrS/lg1PCxTSa+ejYxhDmcCn+OfYMYAt7R51SbItyD
XBQQPrKwemXOvUMr6I1IH4AFoqH3Jy82atIjACo44K9uUhycM5EsWeLZYGjk1I8P
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18113858412046026107586371776084847052
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Campbell'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barracuda Networks, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.barracuda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24470685917850632955386656316373946939064131509295457000594915862712261456860393676507961777557724113788040543849840961392408752190197222446551515365157127819945251151730093846986568648745178035902464768095183705086712957548207083732706719870522303991078094950227896977534720133180462360877227674312982524869910972678011091832942819588990689303928533812726461526371222017938111895549716103742331204104096023808715498527671525227597686784047105222190840348573724374104243543028613899483140175539218732619940570642460977382010692029701446576281769837911761607914128838586054643470881376753781185562215456557158756192141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							420ddcfd4fd73f2d895ed2eb0beb47e20c95f0f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.barracuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.barracuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cuda-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.intronis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.barracudamsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000176cf64abbf0000040300473045022100977e624ac20e857f88687bb96d7f7e395aa2f00ae946e2fdf0b4b54fdc0677a202206473966c45d25652c731b68c9e21f6236e01f516898d8a33fc7186676e785c740077002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f0200000176cf64ac280000040300483046022100b19f036a44535cc12f447f31107e32baa4a55ac599680f387ea870cb2e319b21022100cd3519db25c2c8065001d43a1287eb7e4e44e73ab79b33febf6784c12d07f9d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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