simplisafe.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:18:70:f4:c8:cc:c1:43:32:76:56:9e:20:13:57:43 was issued on by Amazon.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=simplisafe.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:18:70:f4:c8:cc:c1:43:32:76:56:9e:20:13:57:43
Serial Number (int): 14748414101930708420382098354806675267
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4b:46:e2:90:25:1a:ae:67:5d:70:05:e8:df:65:84:f6:f8:31:40:fb
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): d7:9b:a2:c4:3a:6b:cf:85:87:dd:65:f8:c9:6a:27:71:2c:e2:60:89
Fingerprint (sha256): 00:91:4b:e0:3d:70:a2:55:d2:9e:93:9f:7c:89:62:b9:19:ba:ca:fa:c9:38:ae:9f:c5:c4:02:b4:93:87:b3:10

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate simplisafe.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for simplisafe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

simplisafe.com
drupal-ecs-ext.simplisafe.co.uk
crm.simplisafe.co.uk
www1.simplisafe.com
drupal-ecs.simplisafe.co.uk
nitro.simplisafe.com
drupal-ecs-ext.simplisafe.com
origin-nitro.simplisafe.com
simplisafe.co.uk
origin.simplisafe.com
crm.simplisafe.com
www.simplisafe.co.uk
www2.simplisafe.co.uk
www2.simplisafe.com
nitro.simplisafe.co.uk
www.simplisafe.com
drupal-ecs.simplisafe.com
www1.simplisafe.co.uk

Other certificates including the domain name simplisafe.com

(limited to 100 certificates)
entrypoint-api.eks.ext.app.us-east-1.prd.platform.simplisafe.com
device-logs.metrics.simplisafe.com
temp.alarming.rrms-wholesale.proxy.stg.mon.simplisafe.com
simplisafe.com
mp.simplisafe.com
drupal-dev-k8s.simplisafe.com
otel-collector.eks.int.app.us-east-1.prd.platform.simplisafe.com
uk-top-funnel-8.qa.commerce.simplisafe.com
the-first-order.stg.simplisafe.com
simplisafe.com
wfu3-test.simplisafe.com
googlehome.simplisafe.com
temp.provisioning.rrms-wholesale.proxy.stg.mon.simplisafe.com
qa.simplisafe.com
us-midfunnel-7.qa.commerce.simplisafe.com
xwing.simplisafe.com
activation-prd.stg.webapps.simplisafe.com
payments.us-east-1.prd.commerce.simplisafe.com
provisioning.dev-eu-west-1-cops.proxy.qa.mon.simplisafe.com
entrypoint-api.eks.ext.app.us-east-1.qa.platform.simplisafe.com
dispatch-hub.us-east-1.stg.aser.simplisafe.com
dng.simplisafe.com
us-west-2.pr16.suspensions.qa.platform.simplisafe.com
chronicle.us-east-1.qa.cam.simplisafe.com
simplisafe.com
streamcast.prd.simplisafe.com
suspensions.stg.platform.simplisafe.com
pr85.sscr.qa.platform.simplisafe.com
provisioning.cops.proxy.prd.mon.simplisafe.com
auth.simplisafe.com
ecomm-users-api.eks.int.app.us-east-1.qa.commerce.simplisafe.com
campaign.simplisafe.com
beta.webapp.simplisafe.com
carrier-service.stg.simplisafe.com
lando-ecs.qa.simplisafe.com
global.login.qa.platform.simplisafe.com
mediator.prd.cam.simplisafe.com
support.simplisafe.com
allocator.us-east-1.qa.cam.simplisafe.com
pr91.login.qa.platform.simplisafe.com
consul.qa.simplisafe.com
media.simplisafe.com
ss-suspensions.eks.ext.app.us-east-1.prd.platform.simplisafe.com
speedometer.us-east-1.prd.cam.simplisafe.com
speedometer.us-east-1.qa.cam.simplisafe.com
app.simplisafe.com
stg.auth.simplisafe.com
gha-webhook.prd.devops.simplisafe.com
offers.us-east-1.qa.ops.simplisafe.com
api-alb-test.stg.simplisafe.com
jyn.us-east-1.prd.siren.simplisafe.com
whd.tools.simplisafe.com
go.dng.simplisafe.com
speedometer.eu-west-1.qa.cam.simplisafe.com
campaign.simplisafe.com
alarming.cops.proxy.stg.mon.simplisafe.com
mfa-prd-api.stg.simplisafe.com
promotions-internal.us-east-1.prd.commerce.simplisafe.com
alarm-history.eks.int.app.us-east-1.qa.intmon.simplisafe.com
media.simplisafe.com
comlink.us-east-1.qa.siren.simplisafe.com
simplisafe.com
bb8.dev.simplisafe.com
otel-collector.eks.int.app.us-east-1.prd.platform.simplisafe.com
mp.simplisafe.com
api.simplisafe.com
api.simplisafe.com
*.localdavep.sdc.bi.dev.simplisafe.com
simplisafe.com
temp.alarming.no-op.proxy.stg.mon.simplisafe.com
alarm-dev-pinkoa2.qa.mon.simplisafe.com
bees.simplisafe.com
leia.qa.simplisafe.com
webapp.simplisafe.com
the-first-order.us-east-1.stg.ops.simplisafe.com
cs-api.simplisafe.com
datadip.qa.simplisafe.com
alarm-dev-unkown-user.qa.mon.simplisafe.com
login.qa.platform.simplisafe.com
temp.provisioning.cops.proxy.stg.mon.simplisafe.com
ecomm-users-api.eks.int.app.us-east-1.qa.commerce.simplisafe.com
simplisafe.com
lando.qa.simplisafe.com
carts.us-east-1.stg.commerce.simplisafe.com
api.simplisafe.com
simplisafe.com
webapp.simplisafe.com
alexa.simplisafe.com
media.simplisafe.com
campaign.simplisafe.com
clicks.simplisafe.com
alarm-dev-us-east-1-samhutchinson.qa.mon.simplisafe.com
keymaster.stg.simplisafe.com
us-midfunnel-2.qa.commerce.simplisafe.com
support.simplisafe.com
leia.simplisafe.com
speedometer.eu-west-1.prd.cam.simplisafe.com
beta.webapp.simplisafe.com
stubhubconcourse.com
provisioning.securitas.proxy.stg.mon.simplisafe.com

Certificate

The complete raw certificate details for simplisafe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYOlIXfwYTd7+Ioz9P2R
SlXw4dFoXvUaWsG9VzLM2YNivOlA0Qavj/bbRa7VI7CLMHsRHr5DizXnJnHVV5sp
X7XwLitcyzfoteDCkZkVHMpL0KoZ/Hfq0iyvXUTM6Lq7xbDMLIdbJY0gLQVR6QML
Kvle8PR4eFqN6CW+Y4kboRuWg8FS5UnMbhdP56s8LOfHExCGEFJTacfw7ljWvOy0
001PDpuQdSilXvlGxFs3atszT2jFGpIDpv6JTyFMIaeqcfBqYLFFOaaCTnNlbr6b
mUyx/U3WucpHcE0+wTqR8KVzHe3JJ5Jz3jSBef7gAMICkbHdnoelkzAnRml68qOj
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14748414101930708420382098354806675267
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'simplisafe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17359564370004562323610818311726830672386831356073408432658481303914608288350279655395493751618197911794425864836542192422749298808117597919392228081686499390181131372426919048903113246516013368330325995073646695578965523869849152446964667888874101970151145945926469619855657622672706680670382708128412901846532787261085751055901773945497021252004559206851181909010867386412718473734356991017055649835327419104205107579263710652574477301923893630828086544037686308982838379981959081019391256856567208532295674562364517084830888593128400903798141186735976214287108543264544358943738425126340655874708574476878536221681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b46e290251aae675d7005e8df6584f6f83140fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (428 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplisafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal-ecs-ext.simplisafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.simplisafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.simplisafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal-ecs.simplisafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitro.simplisafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal-ecs-ext.simplisafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-nitro.simplisafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplisafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.simplisafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.simplisafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplisafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.simplisafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.simplisafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitro.simplisafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplisafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal-ecs.simplisafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.simplisafe.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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