*.janrain.com

- JanRain, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:53:aa:88:91:30:41:ed:16:04:db:09:c6:84:f1:c0 was issued on by DigiCert Inc.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

JanRain, Inc.

Organization: JanRain, Inc.
Organization unit: Operations
State / Province: OR
Locality: Portland
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:53:aa:88:91:30:41:ed:16:04:db:09:c6:84:f1:c0
Serial Number (int): 20372839405628517701370023819581125056
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a6:c5:0d:f0:7b:a8:e9:2f:22:78:80:d1:fb:ac:10:e9:92:29:13:41
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 29:9b:32:96:ca:37:e8:7b:ac:49:b2:12:70:d1:b6:da:75:39:84:24
Fingerprint (sha256): c2:4b:5b:e1:0b:c1:2b:ba:89:db:32:4c:33:43:c5:ad:4e:46:5f:34:c2:c4:be:51:0d:48:84:a3:96:79:9f:3a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g4.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g4.crl

Check the revocation status for certificate *.janrain.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.janrain.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.janrain.com
janrain.com
*.rpxstaging.com
rpxstaging.com
*.rpxtesting.com
rpxtesting.com
*.rpxtraining.com
rpxtraining.com
*.rpxnow.com
rpxnow.com
*.janrainbackplane.com
janrainbackplane.com
*.janrainsso.com
janrainsso.com

Other certificates including the domain name janrain.com

(limited to 100 certificates)
statuspage.io
truelocal.client.janrain.com
statuspage.io
statuspage.io
visiple.client.janrain.com
statuspage.io
*.dev.or.janrain.com
postmedia.client.janrain.com
findmeoutside.client.janrain.com
5651442522128384-fe2.pantheonsite.io
status.appveyor.com
statuspage.io
www1.janrain.com
sanoma.client.janrain.com
*.rpxnow.com
statuspage.io
5640887774216192-fe4.pantheonsite.io
inspire.client.janrain.com
janrain.com
5640887774216192-fe4.pantheonsite.io
*.api.cn.janrain.com
5640887774216192-fe4.pantheonsite.io
ccna.client.janrain.com
statuspage.io
www1.janrain.com
statuspage.io
statuspage.io
542digital.client.janrain.com
statuspage.io
5640887774216192-fe4.pantheonsite.io
quilt-cdn.janrain.com
statuspage.io
statuspage.io
*.janrain.com
enthusiastnetwork.client.janrain.com
5745865499082752-fe1.pantheonsite.io
cdn05.cdnsvc.com
statuspage.io
*.api.us.janrain.com
*.opx.janrain.ws
janrain.biz
statuspage.io
status.appveyor.com
janrain.com
statuspage.io
*.multi.prod.va.janrain.com
5640887774216192-fe4.pantheonsite.io
authorization.mojoportal.com
statuspage.io
statuspage.io
statuspage.io
5640887774216192-fe4.pantheonsite.io
*.api.eu.janrain.com
5651442522128384-fe2.pantheonsite.io
janrain.com
cdn10.cdnsvc.com
5745865499082752-fe1.pantheonsite.io
statuspage.io
mediaqmi.client.janrain.com
5640887774216192-fe4.pantheonsite.io
statuspage.io
5651442522128384-fe2.pantheonsite.io
statuspage.io
statuspage.io
status.appveyor.com
adoptapet.client.janrain.com
*.login.cn.janrain.com
*.multi.prod.tk.janrain.com
*.hostedlogin.dev.or.janrain.com
*.irsteam.dev.or.janrain.com
5640887774216192-fe4.pantheonsite.io
*.multi.prod.sy.janrain.com
scholastic.client.janrain.com
*.api.us.janrain.com
*.dev.janrain.com
statuspage.io
*.api.au.janrain.com
statuspage.io
5651442522128384-fe2.pantheonsite.io
cdn07.cdnsvc.com
5640887774216192-fe4.pantheonsite.io
*.multi.stg.or.janrain.com
cdn10.cdnsvc.com
statuspage.io
status.appveyor.com
statuspage.io
5640887774216192-fe4.pantheonsite.io
publiccloudovhbouyguesdtp.saagie.com
statuspage.io
5745865499082752-fe1.pantheonsite.io
statuspage.io
cdn10.cdnsvc.com
inviatravel.client.janrain.com
5640887774216192-fe4.pantheonsite.io
statuspage.io
*.janrain.com
*.janrain.com
statuspage.io
5745865499082752-fe1.pantheonsite.io
rogers.client.janrain.com

Certificate

The complete raw certificate details for *.janrain.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur2sHphw8Wuyv8gW/MLA
A0vBW7DV0KH9Q4KeNNzwC/vsEsNrh4gCZ+ipk7x+ywxu16WO7NX9T9GXwC/VrYlG
i/jcUOkTya3GdmiNCK6YkybStmagDulU2tNQSOt97SZGrXDKwh1f+HkUqDsJ6h5v
HNhhEX9n0Ptd8SIeOf+vK6MAPjTr5QEl8PjyLJitEJ7zdZEBLileRRRrXXn6OPni
UG4OAGO6DRHt61LPMDu76gKdsb49BiGYAIW6nixMDyUrbBjrf3InsdAXM0j3+n2z
C0nsmgDkqye22GUmAEErlRnWlKcT5pATG6RWP5yanKLmKeb8jbDBebI1yK+kofsM
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20372839405628517701370023819581125056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JanRain, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.janrain.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23573855641398118502459970134388500748553700125988948628191425915050757941211873913099498372785398564321100714078575953052911457015053185604323161515712250626019871317817087483242252114570403058414195258054854264849494831886521914932105088046591004022828710508558782625194538472604675358371072677794855491479994448440811253915226131681517679921778949190574272512368833340425169171709735145141835837243590096721073187632061170776219650648577070718134743759917737033419148826047780134601311840792126618274064877606380809030514483681599474918293235573590785781514497788506951815997916469213340047096447142587150102105333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6c50df07ba8e92f227880d1fbac10e992291341
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rpxstaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpxstaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rpxtesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpxtesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rpxtraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpxtraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rpxnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpxnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janrainbackplane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janrainbackplane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janrainsso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janrainsso.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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