123test.com

- 123Test B.V. -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 04:89:1f:a6:c6:74:9d:7b:e4:a6:84:44:7a:d7:4d:99 was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

123Test B.V.

Company registration number: 27187803
Organization: 123Test B.V.
State / Province: Gelderland
Locality: Nijmegen
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:89:1f:a6:c6:74:9d:7b:e4:a6:84:44:7a:d7:4d:99
Serial Number (int): 6028898620750636483052043040091229593
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b5:1e:d3:d4:50:04:29:87:77:37:a1:65:3b:c4:64:f5:4e:18:3e:3f
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 2c:40:db:ae:33:9b:c6:ac:a6:8f:7a:19:9b:ea:b9:a5:86:02:38:f1
Fingerprint (sha256): d4:aa:56:59:4b:79:8a:46:0b:67:15:15:06:f5:29:93:74:a6:30:f9:2b:a5:ff:54:79:1b:af:15:76:f3:93:99

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate 123test.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 123test.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

123test.com
www.123test.com
www.123test.de
123test.fr
www.123test.es
123test.nl
cdn.123test.com
123test.de
www.123test.nl
www.123test.fr
123test.es

Other certificates including the domain name 123test.com

(limited to 100 certificates)

dyn.123test.com
lowell-place-apartments.com
dyn.123test.com
developer.123test.com
qr-stage.viv-it.co
developer.123test.com
simian.co
123test.com
botanastehuacan.com
foosball-challenge.collegebasket.tech
developer.123test.com
123test.com
education.finance
inyoice.com
api2.123test.com
api.123test.com
reddit.mmastreams100.com
cdn.123test.com
123test.com
api2.123test.com
nicolascauet.me
api2.123test.com
cdn.123test.com
api24.123test.com
123test.com
123test.com
developer.123test.com
api.123test.com
cdn.123test.com
api.123test.com
api.123test.com
dyn.123test.com
www.ballhop.co
api22.123test.com
developer.123test.com
developer.123test.com
dyn.123test.com
123test.com
api.123test.com
123test.com
1450987616.rsc.cdn77.org
developer.123test.com
123test.com
123test.com
developer.123test.com
cdn.123test.com
portfolio.devsancabo.com
developer.123test.com
cdn.123test.com
dyn.123test.com
www.123test.com
cdn.123test.com
marketing.s.undertime.co
123test.com
api2.123test.com
unrealworld.co.uk
123test.com
developer.123test.com
123test.com
api2.123test.com
123test.com
cdn.123test.com
playpuzzles.link
developer.123test.com
www.123test.com
api.123test.com
developer.123test.com
api.123test.com
developer.123test.com
api22.123test.com
assessment-training.123test.com
api2.123test.com
dyn.123test.com
developer.123test.com
api2.123test.com
www.bernardobernal.com
dyn.123test.com
dyn.123test.com
api20.123test.com
doesmidwesthaveabeltsquat.com
123test.com
dyn.123test.com
api22.123test.com
developer.123test.com
www.perklone-md.cn
www.doughboyz.org
3778-care-simulator-staging.nata.dev
api4.123test.com
developer.123test.com
www.theflashpoint.tk
dev.eureka.academy
developer.123test.com
admin.reportkard.com
developer.123test.com
cdn.123test.com
123test.com
dyn.123test.com
cdn.123test.com
123test.com

Certificate

The complete raw certificate details for 123test.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArazkhXYMNdwaikRN6Q6Y
gUjMulqeewWM0nrHQLYJdldRyBbJQaJSUgaxaSONiJ88R06ievlDORvjsn+RkXK2
Q79QLKQXiRlFu/DzUQHfbTHwDN72tLx4zmDR3EsduQOi1K5B97Kj+0SuNYhduyyz
p7v8+WY4Z8xqGMD5F3L6CEMYSsOzby3IUrK0webJEo2dhEwA04YKa7LKZzuGVxcA
Ij04oODu8G9ej+A4QVDaONpsSn4J4sNad3JMf6fzRkw4ZsXqoOZnsYLltjJsQ9ZQ
kRnc39TZmiAr4UKkk5508WUvTtQ57KuGMJEI/i64+nD5nEyAMxMRBFCXxqgaofJ7
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6028898620750636483052043040091229593
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '27187803'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nijmegen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '123Test B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '123test.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21924483308046762867671070647329192333018713301037580041952268328990863422548065413490132948807444133118471903718228450863394196637008266452897670010082002562928403259506698366607804536221425511349541427320566683008079693458160185275049864617459348638699481353698681087544812501880022757805862015460890308420281910795007175575263132668032459927032265278930305409134928020848534535420341352484808679710423041748271649701919576695292169007456688237484285138812814944157460468116604581330729261917923796648786888787640238611469853269917831182506917086548239145817441355239941927755254052781740354989582307628555183487909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b51ed3d4500429877737a1653bc464f54e183e3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123test.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123test.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123test.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123test.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.123test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123test.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123test.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123test.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123test.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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