conectados.sonypictures.com

Issued by R3

About this certificate

This digital certificate with serial number 03:16:0e:54:23:c2:e7:ba:c8:2c:ae:8b:c1:a9:a9:f6:15:19 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=conectados.sonypictures.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:0e:54:23:c2:e7:ba:c8:2c:ae:8b:c1:a9:a9:f6:15:19
Serial Number (int): 268842115937744808382151845767326777873689
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 33:09:b2:0e:a5:31:65:5b:20:ee:c9:74:77:38:9b:54:bf:44:87:10
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d7:d7:20:a1:b4:6e:60:51:dd:0d:23:d1:cf:2c:da:54:74:68:44:68
Fingerprint (sha256): 00:3e:73:d3:4a:d3:02:79:12:a0:db:3e:5a:18:03:ac:3f:51:cf:a4:7c:53:a5:61:09:b8:ef:28:35:6d:fe:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate conectados.sonypictures.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for conectados.sonypictures.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

conectados.sonypictures.com

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for conectados.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgISAxYOVCPC57rILK6Lwamp9hUZMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA4MjcwMDQyNDBaFw0yMTExMjUwMDQyMzlaMCYxJDAiBgNVBAMT
G2NvbmVjdGFkb3Muc29ueXBpY3R1cmVzLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
ggIPADCCAgoCggIBAPsBCQKsX7ABAA+9KRx0ZUMX9bD4/jCCzjxVxvU69O06Bq1m
BIfvmW/KJPRh2O4dnB7+o0NHR//ilYf3B+lXZNFXZNVLeSywTBJSW9S7yvn1JnJb
pYPXgtPwjyXt5AQrXecLu7BsBI4fvW44EH0G6hTAYdhyiVCRnD0kjbr4OUXSyNJj
EY44IpSBkMGNMmPmoLw3s3T+/0uUC+x0MdBpEaYJU7Yw2cDnKnI6PZfvNDj1Xp/L
WRZDy18xCLLz5S557rECS2dYYdgBasVU3Ef+9Aj0kUWZMTI1TOhafdSebEsQx2p9
7Hf7SAYKn+SxSbNGTQBpITN26A42QSRxtIuwl3dzwBCICA4b+J5a1JpHHEywcRQw
qG9vnDJeZx106I3BbCB7t7dHo0/XH8mysiCBGJjyiLJjC26fIgfuKLyO2DduPLqu
3uPvTYckHWdUu+cAS/7egp6UFPBmoqKtufEVM9jBbPGSc50Vt2swZNsG4EBQ1Lmy
JnsXMcheYraXaCejuSsKy9uokHawburlTiRw1DoLrG97fv0unFegn4DlQysT/h0F
oiQ2X7Kip9hwazc56Pg3QYKF0MgcVhLcHCrr+g44awalBpRElSJbUXwT51Gmy/ax
OrNueoRQNvyW6LNmzbhWkY+LzRQhAw471KZs7r+RAd8be/Nq1I/5ZmyxAsUnAgMB
AAGjggJWMIICUjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDMJsg6lMWVbIO7JdHc4
m1S/RIcQMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCYGA1UdEQQfMB2CG2NvbmVj
dGFkb3Muc29ueXBpY3R1cmVzLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AG9Tdqwx8DEZ2JkApFEV/3cV
HBHZAsEAKQaNsgiaN9kTAAABe4VF+toAAAQDAEcwRQIhAOLKDstvVUbxi5ql285F
Tne8CGy1dx5a2QPNbLvI9T7qAiBai/QszE5p6LU8I5L6HmPuecITiOoiJ5mFVgSH
RgSzZAB2AH0+8viP/4hVaCTCwMqeUol5K8UOeAl/LmqXaJl+IvDXAAABe4VF+tUA
AAQDAEcwRQIhAJbMnnDw+i6PG7GYZoo/FVICTcQyCWf5UXeiuSWG09rkAiBVwpQc
mSPDTkatou0scG3XvFL4zwd8oABEQ3jcMKOYTDANBgkqhkiG9w0BAQsFAAOCAQEA
sMiZJCSaNq9ipmmuNFQO6fm2+Xy+pLKMC5XTULoaARdHfHWAvylHHuRH6+BpxFEn
R4H1aUCw+9CNdk0BYM5B6W4RdHq9pWS+ZZzYpx8AlgEeJZyRx7wrf/vJ7iuEAGRN
tDxtGtYxr5clo4Eii/nCfiejCIdg9lL8HnPidUnnon38KQ5IdZl3eNZy0rDsDWcA
H5ca1I0VdeglV1AeXgwjddi7WBpcenQptw6STnTLRWBUuUfLnV7gVJR1XM/45DVw
XGkC88oTdoXLVgspONEs1GXLNrzrewy3rfQIIiXXlNZB/5gFcuxgz74Fdb8srBSM
yopEWr+HcecvAF0aZ/UAfw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268842115937744808382151845767326777873689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-27 00:42:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-25 00:42:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'conectados.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1024007158086610621260303055316658234706291834614741039250052366005070684852943321032211140175430519091284384744803393739357962449244302847017365990069875543874580911081109358533532775933403230867051372900307157326077752750770363291071811678395184964907772242762611292470038557591615642590096731839016659988448895254913249868665442063820447773163051970177948896600964908260878678656963499814150049462175664420839494695227387578354004657400542908273495364862287535221913850801567205025203507958382696965694385844729370748414158151939570892654320126844007831370623867357955445366127167397128046807150097270522272477056067885658974479209115989192019424970824166854531922465792762215188420691188438120847065292868881141471563677805302974425978365737997760149200529472183752770176191082554635037034174020450137718638973148230969114137717359383419269532348135790708242990306316659423129056288180409435311852259987074556068751862058699980418888658022312689507033243580531352858589594144307570078426180795435592159071054716338765933202836170143212485603702058312970202126753216183640943185671298776107901321871384793152453126369107698968669285147541837150198684687333611810385600374928969209296703285353299941449118657754972978032953383896359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3309b20ea531655b20eec97477389b54bf448710
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conectados.sonypictures.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017b8545fada0000040300473045022100e2ca0ecb6f5546f18b9aa5dbce454e77bc086cb5771e5ad903cd6cbbc8f53eea02205a8bf42ccc4e69e8b53c2392fa1e63ee79c21388ea222799855604874604b3640076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017b8545fad5000004030047304502210096cc9e70f0fa2e8f1bb198668a3f1552024dc4320967f95177a2b92586d3dae4022055c2941c9923c34e46ada2ed2c706dd7bc52f8cf077ca000444378dc30a3984c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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