crm-aem-prod.verizonwireless.com

- Verizon Data Services LLC -

Issued by DigiCert Baltimore TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:e9:86:47:46:b7:c1:93:29:f6:2f:4f:44:ef:d6:b8 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Verizon Data Services LLC

Organization: Verizon Data Services LLC
State / Province: Florida
Locality: Temple Terrace
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e9:86:47:46:b7:c1:93:29:f6:2f:4f:44:ef:d6:b8
Serial Number (int): 5200212645365888536673665742709708472
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 49:bf:c4:76:38:91:b0:bf:26:e4:e4:fa:61:ed:ec:88:40:11:75:da
AuthorityKeyId: f2:56:9b:07:86:07:99:53:7e:12:2c:f8:7d:2f:e6:d5:26:d8:93:54

Fingerprint (sha1): 51:fa:ad:46:4e:92:fb:98:bd:02:7a:8b:e5:a1:21:27:65:10:d7:26
Fingerprint (sha256): 02:32:f2:ca:76:1d:d2:5e:3f:3f:95:48:94:d5:70:cc:29:95:db:48:14:64:76:88:59:e1:73:5a:74:de:17:83

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crl

Check the revocation status for certificate crm-aem-prod.verizonwireless.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crm-aem-prod.verizonwireless.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crm-aem-prod.verizonwireless.com
crm-aem-prod-sdc.verizonwireless.com
crm-aem-prod-tdc.verizonwireless.com

Other certificates including the domain name verizonwireless.com

(limited to 100 certificates)
secure07.stage.lithium.com
uc-impres-pub-ne1.telecom.ouroath.com
ringtones.verizonwireless.com
ringtones.verizonwireless.com
mytestbillpay.verizonwireless.com
nyhmpsa01pub01.verizon.com
ewi.verizonwireless.com
businessportals.verizonwireless.com
welktx08vzwvocs-q-nk-esmags-1.verizonwireless.com
indirectorders.verizonwireless.com
eroes-glbl.verizonwireless.com
bizqa.verizonwireless.com
newbillpay.verizonwireless.com
visit.verizonwireless.com
erpdev-srmdmo.verizonwireless.com
sl.e.verizonwireless.com
tester12.verizonwireless.com
ohtwbgs00pub01.tdc.vzwcorp.com
mdata.verizonwireless.com
erpprd-scn-inprd.verizonwireless.com
www.preprodsurvey.verizonwireless.com
timages.verizonwireless.com
cim.apps.verizonwireless.com
presupport.verizonwireless.com
agentcommdev2.verizonwireless.com
pservicedev.verizon.com
tokens.verizonwireless.com
pos-wwsqa5.verizonwireless.com
tonesqa7.verizonwireless.com
obdm.verizonwireless.com
mbwestaccessmgr.verizonwireless.com
posstore.verizonwireless.com
verizonwireless.com
secure.verizonwireless.com
pshr-uatvzwsso.verizonwireless.com
secure03.stage.lithium.com
secure02.lithium.com
presupport.verizonwireless.com
prewestaccessmgrpp.verizonwireless.com
lkg07-mediamanager.svcs.verizon.com
login.verizonwireless.com
erpdev-ws-fnbst.verizonwireless.com
newbillpay.verizonwireless.com
octes.verizonwireless.com
secure03.stage.lithium.com
vpne.verizon.com
crm-aem-prod.verizonwireless.com
newbillpay.verizonwireless.com
b2b.verizonwireless.com
psearch.verizonwireless.com
vzwqa1.sdc.vzwcorp.com
vipsvc-yzeast.verizon.com
txslries01.verizonwireless.com
vzcleanroom.verizon.com
engage.vzw.com
posstore-sqa5.verizonwireless.com
vzomsgsac.verizonwireless.com
cim-dr.verizonwireless.com
lifeonverizon-uat.verizonwireless.com
scmnsmedia.verizonwireless.com
mobilevec-uat.verizonwireless.com
wmediastoretest.verizonwireless.com
vztube.verizonwireless.com
nsavs36-ld-c.verizonwireless.com
pprd-ssoauth.verizon.com
amregnpp.verizonwireless.com
preorder.verizonwireless.com
amstage2.verizonwireless.com
mbss-west.verizonwireless.com
sa430gl.wpc.edgecastcdn.net
psearch.verizonwireless.com
odideviceuat.verizonwireless.com
2wayssl_scm_to_VLocity.vzw.com
vzc-stg1-mediamanager-origin.svcs.verizon.com
sni1d57fgl.wpc.edgecastcdn.net
ecrm.verizonwireless.com
nyorbgcolec1p2.verizonwireless.com
sa430gl.wpc.edgecastcdn.net
ptqa.verizonwireless.com
vipsvcqa1.verizonwireless.com
ewi.verizonwireless.com
onepos-ss.west.verizonwireless.com
onevzssosoe-west-yz-sit6.verizonwireless.com
mediaQA2.verizonwireless.com
icedev.verizonwireless.com
mediastore.verizonwireless.com
infodoc.verizonwireless.com
2wayssl-scm-to-TCS.vzw.com
videos.verizonwireless.com
nsavs36-w.verizon.com
sharefile.vzw.com
sposstore.verizonwireless.com
secure02.lithium.com
eroes-ss.south.verizonwireless.com
tmblogin.verizon.com
WELKTX08VZWvOCS-Q-NK-eSMUCW-2.verizonwireless.com
cimdr-test.verizonwireless.com
2wayssl-mtas-to-ecgs-lab.verizonwireless.com
secure03.stage.lithium.com
globalm2mtest.verizonwireless.com

Certificate

The complete raw certificate details for crm-aem-prod.verizonwireless.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumJJuM87csLRpu864ERk
bq0AzBIOJZEm9/AL4K4qx3qSgaroMM22JIWCUB0Fr1fJI7titdwnhrHyDlPkD6dL
qwoyHOrrCHB5P0mufwJdaM4qSa6HoFuTyPpPsLzymfPZ5C9d5QZ1Xr3gwIkuVTI9
f1V3x0By7RLHIApO9x3ADW2cIBnAEVhkYCicK/pWb/oQMUVPRCTbPnY1lHW6wd50
22R100+0xSz+eL0YYxh/q+k7e2niBiuByt9W3YMosduT1fEEFgbme+qPlhRQnKYb
TEERn2Z7/CCUCosOQYh68jTe7Mu9E7WsWf8v8wvmWTINg0+erPQtB5hjwHSWXjc+
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5200212645365888536673665742709708472
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Baltimore TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Temple Terrace'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Data Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crm-aem-prod.verizonwireless.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23528792331173055574179396321744388927888235006671441201084494804801072373696809234588388500208730803665731096108497362276961427571968291371531729122724118180807302252072816490913373952440714987652604647881140229407110136570453124564043866119268464361208160703676958735518557275764498799969044816365718975324687017975479810630588575228348171926555015454326129798371141123161495652311152864014240154265776128854755967146502434556050703556323104873041363532064975730563248217158942734808430698633328941257941872253499975607069091117517956429068127252658360388883677772844290992039396689526430500296694609884666826014437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2569b07860799537e122cf87d2fe6d526d89354
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49bfc4763891b0bf26e4e4fa61edec88401175da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm-aem-prod.verizonwireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm-aem-prod-sdc.verizonwireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm-aem-prod-tdc.verizonwireless.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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