cg4.einsteinmed.edu

- Montefiore Medical Center -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:df:e9:60:8e:d6:8f:8d:7b:97:03:9b:f5:ef:3f:52 was issued on by DigiCert Inc.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Montefiore Medical Center

Organization: Montefiore Medical Center
State / Province: New York
Locality: Bronx
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:df:e9:60:8e:d6:8f:8d:7b:97:03:9b:f5:ef:3f:52
Serial Number (int): 3821071642570609943887189402893369170
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 11:ba:0c:c9:ef:ca:33:96:df:fd:a8:e6:17:2f:3f:c4:f1:9f:f2:2b
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): f9:b1:dd:bc:e1:88:b4:9b:d7:6d:ff:c4:de:cf:55:fd:0d:cd:8d:01
Fingerprint (sha256): c3:47:4b:4d:62:40:d3:45:c7:ec:76:30:70:d0:df:04:66:2f:22:c6:c7:3c:e6:11:a3:e5:0f:6a:1a:88:a1:fd

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate cg4.einsteinmed.edu

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cg4.einsteinmed.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cg4.einsteinmed.edu
academiccommons.einsteinmed.edu
www.academiccommons.einsteinmed.edu
genomediver.einsteinmed.edu
www.genomediver.einsteinmed.edu
medicine.einsteinmed.edu
www.medicine.einsteinmed.edu
medicine.einsteinmed.org
www.medicine.einsteinmed.org
rshine.einsteinmed.edu
www.rshine.einsteinmed.edu
u19aging.einsteinmed.edu
www.u19aging.einsteinmed.edu
worms.einsteinmed.edu
www.worms.einsteinmed.edu
zdzlab.einsteinmed.edu
www.zdzlab.einsteinmed.edu

Other certificates including the domain name einsteinmed.edu

(limited to 100 certificates)
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.d8.theopenscholar.com
*.thescholr.com
*.thescholr.com
cg3.einsteinmed.edu
dev.einsteinmed.edu
magazine.einsteinmed.edu
interview.einsteinmed.edu
*.safecluster.einsteinmed.edu
*.safecluster.einsteinmed.edu
helpme.einsteinmed.edu
*.thescholr.com
*.thescholr.com
einsteinmed.edu
libcal.einsteinmed.edu
montefioreeinstein.org
*.thescholr.com
montefioreeinstein.org
grad.apply.einsteinmed.edu
*.thescholr.com
*.d8.theopenscholar.com
*.thescholr.com
beyondalbert.apply.einsteinmed.edu
einsteinmed.edu
*.thescholr.com
*.thescholr.com
einsteinmed.edu
*.d8.theopenscholar.com
printing.einsteinmed.edu
*.thescholr.com
*.thescholr.com
*.d8.theopenscholar.com
*.thescholr.com
transportation.einsteinmed.edu
*.thescholr.com
*.thescholr.com
eep.apply.einsteinmed.edu
*.d8.theopenscholar.com
cg4.einsteinmed.edu
library.einsteinmed.edu
*.thescholr.com
*.thescholr.com
Montefiore.org
*.thescholr.com
*.thescholr.com
intranet.einsteinmed.edu
Montefiore.org
einsteinmed.edu
magazine.einsteinmed.edu

Certificate

The complete raw certificate details for cg4.einsteinmed.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo3gxwh6IM5IAGRduvRy
uTcGZw6g75YHUAjcG06gzI/F08NQb6KHsAtm3/EsBOqv8s4+EgB4OIff1LsiQVZr
HjTJ5GxrvMm+sfDUYz/XEZX+nPLIVkOC7XuAvQEF6fYuLVQu4KtXafbEEPkf53+2
XAkDODu7ZNOYvXu58CiuzAwhO/bT1WV/43SPp4WExRbo6hvQS9gnN9xz7z5+QTmr
Ltx1qmgTC97uCJBAO7Yh2uqiRVIYLuiIRsR+EkjZX7Vps1QX+R1+X+uA7Kq14hDN
j+b3ZMEYHZgqtllAoV9lvMvXSSoSAk88mYSYgdj8Dz/+dE3H/JoDKkQOMQmNIBph
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3821071642570609943887189402893369170
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bronx'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montefiore Medical Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cg4.einsteinmed.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26075053490599224780237467457182996734571348293613744490047287846367618344085994337490979578053934542833800875189331548940692147319598749731811637156180083116805823304980642227896907674357868854053951075741902276065629879684071616799597165321330173648155492210866798667673908922391289286576070817591020746441276845957741524024072950969301712806860766547911540538741007863404304536648413250150535757185028549187735893678748310070810704671376272212533306925030502711340916669944579483667956281948831547660173234215545929427106891235280073642588763780777474226034483199165074966083400977726096181160810215902976642015689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11ba0cc9efca3396dffda8e6172f3fc4f19ff22b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cg4.einsteinmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academiccommons.einsteinmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academiccommons.einsteinmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genomediver.einsteinmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genomediver.einsteinmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicine.einsteinmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medicine.einsteinmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicine.einsteinmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medicine.einsteinmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rshine.einsteinmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rshine.einsteinmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u19aging.einsteinmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.u19aging.einsteinmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worms.einsteinmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worms.einsteinmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdzlab.einsteinmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zdzlab.einsteinmed.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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