*.freshservice.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:e4:60:8f:f5:df:3e:54:e7:d9:5a:d5:2a:19:25:70 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.freshservice.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:e4:60:8f:f5:df:3e:54:e7:d9:5a:d5:2a:19:25:70
Serial Number (int): 19794994141777665237077755237320172912
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d4:be:8f:88:df:71:a5:9d:06:0a:fd:e1:9d:a8:b1:04:94:06:a1:62
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 3e:16:d8:00:48:2d:39:89:60:21:18:7d:e7:00:9b:8e:fb:dc:ad:2a
Fingerprint (sha256): 04:c2:45:af:b7:75:ef:18:9d:7a:40:b2:eb:ad:de:1c:b7:e6:6e:1f:47:1a:4f:d8:46:69:85:31:56:9b:25:8b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.freshservice.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.freshservice.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.freshservice.com

Other certificates including the domain name freshservice.com

(limited to 100 certificates)
fsus-7.freshservice.com
fsus-6a.freshservice.com
*.attachments.freshservice.com
fsus-5.freshservice.com
fsus-6.freshservice.com
fseuc-1a.freshservice.com
fsus-16.freshservice.com
it.freshservice.com
fsus-7.freshservice.com
au-alerts.freshservice.com
fsus-7.freshservice.com
fsus-26.freshservice.com
fsus-26.freshservice.com
fsus-23.freshservice.com
freshdesk.com
fsus-10.freshservice.com
fsus-24a.freshservice.com
fdus-4.freshdesk.com
backuphdfclife.freshservice.com
updates.freshservice.com
support.freshservice.com
fsus-25a.freshservice.com
scim.freshservice.com
*.freshservice.com
fsus-19a.freshservice.com
*.freshservice.com
fsus-28a.freshservice.com
fsus-1.freshservice.com
fmtracks.fmsend.net
fdus-4.freshdesk.com
fsus-27.freshservice.com
fsus-5.freshservice.com
fsus-25.freshservice.com
helpdesk.ams.global
fseuc-1.freshservice.com
fsus-14.freshservice.com
*.freshservice.com
*.freshservice.com
de.freshservice.com
help.globality.cloud
fsus-3.freshservice.com
updates.freshservice.com
fsus-27a.freshservice.com
fsus-2.freshservice.com
helpdesk.ams.global
fsus-10.freshservice.com
fsus-14.freshservice.com
fseuc-2.freshservice.com
*.freshservice.com
help.globality.cloud
*.freshservice.com
blog.freshdesk.com
status.atomist.com
fsus-10.freshservice.com
fsus-23.freshservice.com
status.freshservice.com
fmtracks.fmsend.net
fseuc-1.freshservice.com
fsus-18.freshservice.com
*.status.freshservice.com
fsus-22.freshservice.com
fseuc-1a.freshservice.com
fsus-23a.freshservice.com
helpdesk.ams.global
*.freshservice.com
inceptionstatuspage.com
blog.freshdesk.com
au-alerts.freshservice.com
zoom-phone.freshservice.com
status.atomist.com
*.freshservice.com
help.globality.cloud
fseuc-4.freshservice.com
*.freshservice.com
blog.freshdesk.com
fsus-23.freshservice.com
*.freshservice.com
helpdesk.ams.global
fsus-14.freshservice.com
fdus-4.freshdesk.com
fsus-1.freshservice.com
freshdesk.com
fseuc-1.freshservice.com
academy.freshservice.com
fsus-12.freshservice.com
fsus-18.freshservice.com
euc-alerts.freshservice.com
academy.freshservice.com
fseuc-2.freshservice.com
fsus-5.freshservice.com
fsus-28.freshservice.com
fsus-13.freshservice.com
fsus-25.freshservice.com
fsus-23a.freshservice.com
fsus-4.freshservice.com
fsau-1.freshservice.com
au-alerts.freshservice.com
inceptionstatuspage.com
fsus-12.freshservice.com
fsus-14.freshservice.com

Certificate

The complete raw certificate details for *.freshservice.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF3TCCBMWgAwIBAgIQDuRgj/XfPlTn2VrVKhklcDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjEwMDIwMDAwMDBaFw0yMzEwMzEy
MzU5NTlaMB0xGzAZBgNVBAMMEiouZnJlc2hzZXJ2aWNlLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAL+5pnfXVGdblkNLI3dX7uD5W+6KN+c11WWO
+W28XuIby3PUKoqQRKgjlYdAN8diCIRD8dKshGDIOVCYYuW7bQ1B/NogPZG5xEVd
4P1DXYdhS68xfS2FdC9DJIdr8rFBkmUJfIc4oUjp8QNrZtA30bGOR3xNyddfvoJN
DHOXvKjD2rReK0GYxLKaga4uXY8Qt2dHg4ftlphDVSiUS2u0eVxoE7QypWA+5t69
6APEO86f5kapNTz5ce6xlIakLCM2WdNmfSJ4NaU/bSFUF6Qu1fkwwQZYMZuz5fu+
qSOS2EI0bVATuzn34QrrmxYBY+nBw36iehhZLfvZ1mdnu/8ymOUCAwEAAaOCAu4w
ggLqMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBTU
vo+I33GlnQYK/eGdqLEElAahYjAdBgNVHREEFjAUghIqLmZyZXNoc2VydmljZS5j
b20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0
LmNvbS9zY2ExYi0xLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcB
AQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0
LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5j
b20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSC
AWsBaQB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABg5YBvo4A
AAQDAEcwRQIhALai/usN3vXvCPFyqcXMWv7eqEtdXq2kJsbj30BRmyXEAiBbockf
5l0dAUBQcxeMJZZ6vmJfokc/pBjoPy0yi/jrIgB2ALNzdwfhhFD4Y4bWBancEQlK
eS2xZwwLh9zwAw55NqWaAAABg5YBvuYAAAQDAEcwRQIhAPxY+Nm20WB5yXb+Ab5L
Ol/w1UYWrf1oAeHPI4ZYUInJAiAEmQmXPheylvh5+kxIQDrTQ/vU/xpAIbeVsInr
Y2iIMQB3ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABg5YBvqUA
AAQDAEgwRgIhAJQuD9LGxIMM21wXffi6K2KxPaOOOm38IkJCWvGBdavKAiEA4nn8
J2xcqA7x2sS8BEwqfI5R/zJvSzTh5HCAiINPTeMwDQYJKoZIhvcNAQELBQADggEB
AD3uBl+q707Y/B3NuzlzfBZSv9IZnkmIAvihI8Ssb1gDmYxbxcuhgVpvBKPrH43s
NF5YABG2Phpjy3MAGkR4VJ/d+DhCy7DUJhGwIY5dILr/xU2dTAnlHoMtcyc3G2YO
3Nei9xydL8YGJnCBuP7rEA6GxeOg854ICYKEGLfzOb3Tu5CcYMhHzSgYcZIKvY7r
jTtux9X+fytnxlAmwf3biDClai0A/BVRgfoMCxUxM+COKvxxP+HeV2TZlT/gtOyH
3d7eiB7Z+c0CLntdlCTXPu5ezyIQ96VUWjunVS1nG7d6ngwqYNbaWvXnZebw2YMx
5Ae/cih3s3XWYW7wooy99DQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7mmd9dUZ1uWQ0sjd1fu
4Plb7oo35zXVZY75bbxe4hvLc9QqipBEqCOVh0A3x2IIhEPx0qyEYMg5UJhi5btt
DUH82iA9kbnERV3g/UNdh2FLrzF9LYV0L0Mkh2vysUGSZQl8hzihSOnxA2tm0DfR
sY5HfE3J11++gk0Mc5e8qMPatF4rQZjEspqBri5djxC3Z0eDh+2WmENVKJRLa7R5
XGgTtDKlYD7m3r3oA8Q7zp/mRqk1PPlx7rGUhqQsIzZZ02Z9Ing1pT9tIVQXpC7V
+TDBBlgxm7Pl+76pI5LYQjRtUBO7OffhCuubFgFj6cHDfqJ6GFkt+9nWZ2e7/zKY
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19794994141777665237077755237320172912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.freshservice.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24203063806770392824659004684277972808194839356513620739783487123004110288690550674255740673670429804542674599788120224913148035456574261526307803803237110734384640769165779608397948347827915303341811923452108103149623118857888172476851124219519546175179682843232221230322840307105224068121046142386704785974408693309826057579256390720114251422127635686536927578936119758512234358327128721483444941483223564711106516752061157089735888083618619658619448647749757893134539135041046208286957853170264026524279455097914979117845329283560277307002677604279235405700283483568281478059688674959974426906743131316361354189029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4be8f88df71a59d060afde19da8b1049406a162
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freshservice.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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