*.staging.atlassian.io

Issued by Amazon

About this certificate

This digital certificate with serial number 07:c4:18:1d:d0:b5:01:03:2b:03:a5:e8:f1:b9:c3:20 was issued on by Amazon.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.staging.atlassian.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:c4:18:1d:d0:b5:01:03:2b:03:a5:e8:f1:b9:c3:20
Serial Number (int): 10322775294806140276270832303912633120
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: df:8a:24:89:75:3f:2f:1b:44:f6:d0:c2:00:45:80:ef:4c:57:33:ec
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 3b:cd:4c:ef:c9:98:ff:bc:70:0f:a2:16:de:72:13:17:55:7d:75:1d
Fingerprint (sha256): 03:ff:64:cd:a9:9f:ea:ff:6d:46:fe:ac:f0:2b:6e:4b:07:53:4b:1d:89:8d:4f:30:54:36:9e:36:64:fd:e7:46

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.staging.atlassian.io

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.staging.atlassian.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.staging.atlassian.io
*.internal.staging.atlassian.io
*.uswest.staging.atlassian.io
*.internal.uswest.staging.atlassian.io
*.uswest2.staging.atlassian.io
*.internal.uswest2.staging.atlassian.io
*.useast.staging.atlassian.io
*.internal.useast.staging.atlassian.io
*.euwest.staging.atlassian.io
*.internal.euwest.staging.atlassian.io
*.staging.atl-paas.net
*.staging.public.atl-paas.net
*.us-east-1.staging.atl-paas.net
*.us-east-1.staging.public.atl-paas.net
*.us-west-1.staging.atl-paas.net
*.us-west-1.staging.public.atl-paas.net
*.us-west-2.staging.atl-paas.net
*.us-west-2.staging.public.atl-paas.net
*.eu-west-1.staging.atl-paas.net
*.eu-west-1.staging.public.atl-paas.net
*.stg.atlassian.com
*.stg.internal.atlassian.com
*.stg.intsys.atlassian.com

Other certificates including the domain name atlassian.io

(limited to 100 certificates)
*.staging.atlassian.io
*.atlassian.io
*.staging.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.staging.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.dev.atl-paas.net
*.staging.atl-paas.net
*.dev.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.csp.paas-inf.net
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.staging.atlassian.io
*.atl-paas.net
*.atlassian.io
*.staging.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.staging.atlassian.io
*.dev.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
*.staging.atlassian.io
*.atlassian.io
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.dev.atlassian.io
*.atl-paas.net
foos.platform.dev.atlassian.io
*.atl-paas.net
*.dev.atl-paas.net
*.dev.atlassian.io
*.staging.atlassian.io
*.staging.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atlassian.io
*.csp.paas-inf.net
*.atl-paas.net
*.atl-paas.net
*.staging.atlassian.io
*.atlassian.io
*.atl-paas.net
*.dev.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net

Certificate

The complete raw certificate details for *.staging.atlassian.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF9u9P0APP0WpI1UNcbG
u+MAfzzdnlJ94XYP/hVbBuPF8o+fFPYTIttaLd0yPJROX8qem+iJsI9ZUdWFI5Ye
cacmVeud5pf9KJyhbqteNYxguCENuv4GYuL72BCIPkdSefdBcAT1iHK11asTr9tH
oVFRlRB0UUcqgQExOkx/of2lhWMSH8VnbNaayv/TlDK/ks14AqsSc2UsNQY/KPZ9
lDfV0T0lDkbO6D4m0XCeHVuXF1tRL0xOyWzP4YoZsYn2qiSkiZXzv4hWovuN1a1w
MiXgY3+C6JHOZSvwhEDgi93Ld0Q5D3RF7vrXWSVvdMnHldlbT27vKOsm/M/x37Gz
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10322775294806140276270832303912633120
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.staging.atlassian.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20750141990607727108594929820474348440065904491539910489077634449373361426074052615340250578429936225432907672384950044871961016501925065705222299400445759146146974076787604925539114328864603694690389101136021423605642497294769059393439495750843056005383338040539396563611902659247063133850541942728588150935136540657465791800738324568024571257165842832099392008167297285760884710986788131581456883431662033252771584316601068009481312811663268968572534656139163345709848359957274168058789663150037060658127445546530864887433070241216337242091682458182666388167377095130984261876932574181521090007662321923999094911909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df8a2489753f2f1b44f6d0c2004580ef4c5733ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (781 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uswest.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.uswest.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uswest2.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.uswest2.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.useast.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.useast.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euwest.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.euwest.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-1.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-1.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-1.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-1.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.internal.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.intsys.atlassian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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