webmail.gsit.wa.edu.au

- Great Southern Institute of Technology -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:27:9a:f5:54:2a:79:d6:b8:24:08:f4:2e:8f:08:ae was issued on by DigiCert Inc.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Great Southern Institute of Technology

Organization: Great Southern Institute of Technology
Organization unit: IT DEPT
State / Province: Western Australia
Locality: Albany
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:27:9a:f5:54:2a:79:d6:b8:24:08:f4:2e:8f:08:ae
Serial Number (int): 18814834446498549926807185941850949806
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3c:b4:6a:38:53:66:32:c5:f4:91:6e:ec:6e:ae:b2:00:8e:4b:90:9a
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 1a:6f:3d:87:d6:a7:05:90:6c:63:ae:3e:96:74:ce:3e:be:ef:55:46
Fingerprint (sha256): e6:8a:2c:b3:7b:cd:b6:74:8d:94:13:cc:9a:38:e9:47:ea:f6:6c:76:e9:8b:41:90:4d:c6:c9:61:02:cc:35:52

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g2.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g2.crl

Check the revocation status for certificate webmail.gsit.wa.edu.au

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.gsit.wa.edu.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.gsit.wa.edu.au
webmail.gsinstitute.wa.edu.au
casarray.gsit.local
autodiscover.gsit.local
autodiscover.gsinstitute.wa.edu.au
autodiscover.gsit.wa.edu.au
a-exchange.gsit.local
b-exchange.gsit.local
albexch02.gsit.local
albexch01.gsit.local
cas01.gsit.local
sip.gsit.wa.edu.au
webconf.gsit.wa.edu.au
meet.gsit.wa.edu.au
dialin.gsit.wa.edu.au
lyncdiscover.gsit.wa.edu.au
webapps.gsit.wa.edu.au
pool.gsit.wa.edu.au

Other certificates including the domain name gsit.wa.edu.au

(limited to 100 certificates)
ilearn.gsinstitute.wa.edu.au
*.gsit.wa.edu.au
*.gsit.wa.edu.au
*.gsit.wa.edu.au
gstafe.moodle.com.au
ilearn.gsinstitute.wa.edu.au
ilearn.gsinstitute.wa.edu.au
webmail.gsit.wa.edu.au
webmail.gsinstitute.wa.edu.au
ilearn.gsinstitute.wa.edu.au
ilearn.gsinstitute.wa.edu.au
ilearn.gsinstitute.wa.edu.au
*.gsit.wa.edu.au
ilearn.gsinstitute.wa.edu.au
ilearn.gsinstitute.wa.edu.au
ilearn.gsinstitute.wa.edu.au
ilearn.gsinstitute.wa.edu.au
ilearn.gsinstitute.wa.edu.au
gstafe.moodle.com.au
*.gsit.wa.edu.au
ilearn.gsinstitute.wa.edu.au
webmail.gsit.wa.edu.au
*.gsit.wa.edu.au
ilearn.gsinstitute.wa.edu.au
webmail.gsit.wa.edu.au
ilearn.gsinstitute.wa.edu.au
ilearn.gsinstitute.wa.edu.au
*.gsit.wa.edu.au
webmail.gsit.wa.edu.au
*.gsit.wa.edu.au
*.gsit.wa.edu.au

Certificate

The complete raw certificate details for webmail.gsit.wa.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8GynoW5KJh442j0zJcO
4xdi40WN/cgpjuvofr7hl1O2eFPy3k6oUxbij02JUT8RSVMnQv4V8RKw3Xgbm1Zm
OiXrOU0DpjAFW9E11SEXWkAdWEOffzg38DNScEh70ZL6xJergVb+7P3WlkYNaNx3
2bjuKDNZzt4AVYOfgduGR1nxIymhPihxJNUH6lV/RlMu5LjxNFDY135Bply/+HVY
Q5ZRCkN76VGvzLiWaIka4+ZKI9apA/LN0Cy2jWi76v71zIdbDgvt9P5y3Um8GjLC
pb/vXBZ9BKeiIm3MKMZYu1S7bWDfyi5akSrJYIdRqJcQigkhGGOynB50cS9jeoxe
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18814834446498549926807185941850949806
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Western Australia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albany'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Great Southern Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT DEPT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.gsit.wa.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23702078939912948356962034078091705444593174446369768876575845895171781136794245730471046755713225299517662701535707527094045497577305083806631198132817483191661290346922441006626378266376758309276297629189705147484016331165069634339119409908553355693801090400310909653540446196922244622654475848638903232173065633055249789791812065708607970858510852816197908422760816454649682761964671591674945754846093320360107595611646723212377516031055001782350008147236953171740523090197741914740421626138621475258421907067109157962886035684683550255113082633615480094121273070022913136840312127563835658347823920268753851145731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3cb46a38536632c5f4916eec6eaeb2008e4b909a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (440 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.gsit.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.gsinstitute.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casarray.gsit.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gsit.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gsinstitute.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gsit.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-exchange.gsit.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-exchange.gsit.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albexch02.gsit.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albexch01.gsit.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas01.gsit.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.gsit.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.gsit.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.gsit.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.gsit.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.gsit.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapps.gsit.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pool.gsit.wa.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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