esign.egov-nsdl.com

- NSDL e-Governance Infrastructure Limited -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 03:98:06:3a:b8:f1:25:c1:6b:56:64:5e:81:1a:df:8a was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NSDL e-Governance Infrastructure Limited

Organization: NSDL e-Governance Infrastructure Limited
State / Province: Maharashtra
Locality: Mumbai
Country: IN

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:06:3a:b8:f1:25:c1:6b:56:64:5e:81:1a:df:8a
Serial Number (int): 4777039456779860380772751178330726282
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f2:e1:3c:24:50:0c:9b:b9:d0:5a:0c:02:7a:35:ea:14:c2:ca:1a:54
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 73:90:65:03:f2:ce:98:d2:11:ec:c7:41:88:3f:54:55:fa:71:58:63
Fingerprint (sha256): ed:c3:79:2f:ab:d9:54:56:de:19:6c:c2:ce:70:c5:62:69:7f:72:5c:61:1d:91:45:65:dc:be:53:75:c1:03:b3

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate esign.egov-nsdl.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for esign.egov-nsdl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

esign.egov-nsdl.com
www.esign.egov-nsdl.com

Other certificates including the domain name egov-nsdl.com

(limited to 100 certificates)
preprodauth.egov-nsdl.com
tin.tin.nsdl.com
ua.egov-nsdl.com
pandashboard.egov-nsdl.com
pantan.egov-nsdl.com
esign.egov-nsdl.com
pregw.esign.egov-nsdl.com
protean-health.com
tin.tin.nsdl.com
onlineservices.epayment.nsdl.com
pandashboard.egov-nsdl.com
ua.egov-nsdl.com
pregw.esign.egov-nsdl.com
pandashboard.egov-nsdl.com
esign.egov-nsdl.com
preprodsa.egov-nsdl.com
preprodsa.egov-nsdl.com
sa.egov-nsdl.com
preprodsa.egov-nsdl.com
ua.egov-nsdl.com
esign.egov-nsdl.com
tin.tin.nsdl.com
od.paammobile.egov-nsdl.com
pregw.esign.egov-nsdl.com
www.tin-nsdl.com
opvapi.egov-nsdl.com
ua.egov-nsdl.com
tin.tin.nsdl.com
test.elearningservices.egov-nsdl.com
preprodsa.egov-nsdl.com
test.assisted-service.egov-nsdl.com
onlineservices.epayment.nsdl.com
pandashboard.egov-nsdl.com
tin.tin.nsdl.com
opvapi.egov-nsdl.com
pregw.esign.egov-nsdl.com
assisted-service.egov-nsdl.com
egovcafservices.nsdl.com
preprodauth.egov-nsdl.com
www.tin-nsdl.com
sa.egov-nsdl.com
tin.tin.nsdl.com
www.tin-nsdl.com
pantan.egov-nsdl.com
opvapi.egov-nsdl.com
preprodsa.egov-nsdl.com
tin.tin.nsdl.com
egovcafservices.nsdl.com
tin.tin.nsdl.com
onlineservices.tin.egov-nsdl.com
pantan.egov-nsdl.com
assisted-service.egov-nsdl.com
pantan.egov-nsdl.com
tin.tin.nsdl.com
sa.egov-nsdl.com
ua.egov-nsdl.com
test.assisted-service.egov-nsdl.com
sa.egov-nsdl.com
onlineservices.epayment.nsdl.com
esign.egov-nsdl.com
pandashboard.egov-nsdl.com
ua.egov-nsdl.com
preprod.assisted-api.egov-nsdl.com
opvapi.egov-nsdl.com
ua.egov-nsdl.com
sa.egov-nsdl.com
www.tin-nsdl.com
esign.egov-nsdl.com
assisted-service.egov-nsdl.com
onlineservices.epayment.nsdl.com
pantan.egov-nsdl.com
tin.tin.nsdl.com
egovcafservices.nsdl.com
opvapi.egov-nsdl.com
pregw.esign.egov-nsdl.com
pandashboard.egov-nsdl.com
protean-health.com
tin.tin.nsdl.com
protean-health.com
pandashboard.egov-nsdl.com
pandashboard.egov-nsdl.com
pantan.egov-nsdl.com
health.egov-nsdl.com
esign.egov-nsdl.com
opvapi.egov-nsdl.com
od.paammobile.egov-nsdl.com
egovcafservices.nsdl.com
pregw.esign.egov-nsdl.com
www.ekyc.egov-nsdl.com
www.tin-nsdl.com
pantan.egov-nsdl.com
assisted-service.egov-nsdl.com
opvapi.egov-nsdl.com
pregw.esign.egov-nsdl.com
esign.egov-nsdl.com
preprodauth.egov-nsdl.com
ekycservices.egov-nsdl.com
tin.tin.nsdl.com

Certificate

The complete raw certificate details for esign.egov-nsdl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hY6fC8vtSEML7zOiGlS
7MaXvlnhrrxXhPJ3baQaTNyk7jUsA+IZNv3twB7nUztlcQSk3zB0TxU0iLvKVZAl
vtwdtnhf6II1RlIafM1iTzdFz/qIV4Sr5EPtcT8c/n4sF6OSMSrp3PJ2aDIVY+J7
G4EMvSeM7OasqQTQbYXRcKI8Rhb4bhVeQh2LMc106vlAo2T1QP4xkycW5jIlMcVH
nRHLe1lfR5zRsibOzix+5BB3trADADH1jHOPQhuk41eWQm4QvoA7HAfrgAmdY4li
yq2wxr3ZwyH5hzeCyb+UDhmgarjieoD3QXa2kwiymtcXpoXSvJfKPTYYASgxjcfw
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4777039456779860380772751178330726282
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-03 05:05:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-03 05:05:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NSDL e-Governance Infrastructure Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'esign.egov-nsdl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28035864963341910260520910533710243868005384806928156711707679373054503469306582852587629585093545289137447677855038461128772278156434987899027499649454068872271412207696953695870070210134681131695425362550275127543985544918687340339732060560823941765481022057545549938857780947756201571169740614275553657192909906672402169237237548389970511470999652723389850471060243690537813542102183145152188256556536200234130550875841918022588615601981959463248013705461265781525007321412659746432454742647495282477238116377293417081805246651674116698118062302128367261878097986049037032139663833649853466839892858440281722712077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2e13c24500c9bb9d05a0c027a35ea14c2ca1a54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign.egov-nsdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esign.egov-nsdl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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