*.grupaazoty.com

- Grupa Azoty S.A. -

Issued by Certum Organization Validation CA SHA2

About this certificate

This digital certificate with serial number 14:4d:48:df:f9:f6:ef:33:1d:39:7d:56:34:3f:50:88 was issued on by Unizeto Technologies S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • AttributeValue in subject RelativeDistinguishedName sequence SHOULD NOT have trailing whitespace (lint.AWSLabs certlint)

Grupa Azoty S.A.

Organization: Grupa Azoty S.A.
Organization unit: Biuro Teleinformatyki Korporacyjnej
State / Province: malopolskie
Locality: Tarnow
Country: PL

Unizeto Technologies S.A.

Organization: Unizeto Technologies S.A.
Organization unit: Certum Certification Authority
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 14:4d:48:df:f9:f6:ef:33:1d:39:7d:56:34:3f:50:88
Serial Number (int): 26985844852537495572310123589161406600
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 45:f0:7e:c0:e7:c2:84:32:a6:43:83:96:2c:33:f6:f3:13:25:da:19
AuthorityKeyId: ee:ed:e8:54:60:13:0b:35:83:a0:fa:6b:7a:46:3a:f7:3e:30:bb:66

Fingerprint (sha1): 18:3b:dc:37:b6:68:90:67:03:4c:f6:9e:55:51:f9:44:6f:9f:99:2f
Fingerprint (sha256): e8:23:bf:b0:18:8d:e6:68:96:4c:2f:d7:4c:1f:ad:72:99:4b:8b:3e:be:cc:5a:4d:58:dc:e7:1b:39:e8:45:84

Issuing Certificate URL: http://repository.certum.pl/ovcasha2.cer

Revocation information

OCSP Server: http://ovcasha2.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/ovcasha2.crl

Check the revocation status for certificate *.grupaazoty.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.grupaazoty.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.grupaazoty.com
grupaazoty.com

Other certificates including the domain name grupaazoty.com

(limited to 100 certificates)
ebaza-agro.grupaazoty.com
navigator.grupaazoty.com
webmail.grupaazoty.com
fosfory.pl
ec.grupaazoty.com
navigator.grupaazoty.com
zatlyncedge01.grupaazoty.com
platformazakupowa.grupaazoty.com
platformazakupowa.grupaazoty.com
*.grupaazoty.com
*.grupaazoty.com
ec.grupaazoty.com
webmail.grupaazoty.com
navigator.grupaazoty.com
webmail.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
navigator.grupaazoty.com
platformazakupowa.grupaazoty.com
zatlyncedge01.grupaazoty.com
*.grupaazoty.com
ec.grupaazoty.com
ec.grupaazoty.com
*.grupaazoty.com
fosfory.pl
webmail.grupaazoty.com
navigator.grupaazoty.com
navigator.grupaazoty.com
platformazakupowa.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
fosfory.pl
ec.grupaazoty.com
navigator.grupaazoty.com
*.grupaazoty.com
rekrutacja.grupaazoty.com
platformazakupowa.grupaazoty.com
webmail.grupaazoty.com
navigator.grupaazoty.com
vpn.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
fdb.grupaazoty.com
zatlyncedge01.grupaazoty.com
Zatedge01.grupaazoty.com
platformazakupowa.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
webmail.grupaazoty.com
*.grupaazoty.com
rekrutacja.grupaazoty.com
platformazakupowa.grupaazoty.com
ec.grupaazoty.com
fosfory.pl
navigator.grupaazoty.com

Certificate

The complete raw certificate details for *.grupaazoty.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEsJoLYCNEEfp5IoOr0d
D3hk1cprWePIfgaEUh5KWn00wXcSE33RaodMK1MYPvbH+hiqX5xHmj9K7RX5E6QP
nMD03SXuySKkFv9P8XEjdVxY8iE+HU3LtcmwwqNv+zn186se6LXRlTYQAT0RX4VD
rZRW0Y6s7GNPd2QH31TVz1qzv4hP+d5GmtuAzQNWf26yF7ZF76o7WslM58aq6iUF
eOAlbwg4+CRUoG50sdXKa3eE5yZ+f/pMiO+0pc+GNpBWWY/Jx8uzd8LzhRVCgy9F
BgXQiWkeedGSgVwJ8k9t0m8x4bV6YzBf3Yhs29LBosOyF+VyNhkEp8uzaTb7JK4J
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26985844852537495572310123589161406600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unizeto Technologies S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Organization Validation CA SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-10 13:03:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-09 13:03:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Grupa Azoty S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Biuro Teleinformatyki Korporacyjnej '
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tarnow'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'malopolskie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.grupaazoty.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21245037658150792814752483666436589763180976634834786338880246268343918795694661431945378550361889251513900133573027334148913125345565155871599182183812732644028337886329981158633406991000160367965601321178775039372663859347993252740880752148148796208038635227605853290221159784974272585597430322265960569510011714378314325716814190922076379144240130409451457083847038689029707689627665729485312354683222006201241156021902891748160019369876989765558284365242848616233661169290979603698209562188458660943674637215160595018642480358344089649930999402366440110376949747069533266159430856082853901900610589649542201608603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eeede85460130b3583a0fa6b7a463af73e30bb66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45f07ec0e7c28432a64383962c33f6f31325da19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ovcasha2.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/ovcasha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/ovcasha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grupaazoty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupaazoty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001665e0e9054000004030047304502206d879d7e7b0db2f8b16f64c551503f5f3a7dcc3fab84624169efa9435478c7fb022100d0ca93ee53e42ef243c63277afb6e8119c6ab1c4fed065deda9777b2db3592f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001665e0e8d280000040300473045022018e3d0cb35c8e34b10a3e49b42918080fc247dcd0d3ced0574d14e5fb6e6d2f602210081f893f10f0d98eb2d3c02c34bf8558dda2ea3ab33bed0b21bb5855fee385efa0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001665e0e8e3f0000040300473045022026cd1fdda5b9e0aa6d42de724feed042af3bf7191c42a3fbeb8cdd13674003f9022100f9d5da2f7203a330b91fe0cf1e4e5fc90d8972ab7e3c122ea51960a0f819126d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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