*.q1-np.tools.playstation.net

- SONY INTERACTIVE ENTERTAINMENT LLC -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:02:37:2d:12:fd:b2:bc:a1:1d:d1:a8:03:88:36:03 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SONY INTERACTIVE ENTERTAINMENT LLC

Organization: SONY INTERACTIVE ENTERTAINMENT LLC
State / Province: California
Locality: San Mateo
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:02:37:2d:12:fd:b2:bc:a1:1d:d1:a8:03:88:36:03
Serial Number (int): 1340731693174931981907591867702720003
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 95:89:86:04:9e:a3:3c:3f:7d:27:59:c5:8b:5d:e8:bf:93:90:cb:f1
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 7d:d6:89:24:7c:dc:e0:d2:0a:12:47:ca:37:9c:44:97:8a:1e:fa:aa
Fingerprint (sha256): 04:d6:9f:37:24:58:d3:41:3b:2f:f7:cf:fe:8d:d9:61:30:39:3e:cb:35:af:30:43:86:aa:b1:1d:d3:93:29:d0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate *.q1-np.tools.playstation.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.q1-np.tools.playstation.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.q1-np.tools.playstation.net
q1-np.tools.playstation.net

Other certificates including the domain name playstation.net

(limited to 100 certificates)
q1-np.uks.lacloud.playstation.net
fbapp.ww.np.community.playstation.net
secure.api.np.ac.playstation.net
api.upro.playstation.net
poseidon.e1.dataocean.playstation.net
www-stg.upro.playstation.net
report.playstation.net
*.jp.biz.playstation.net
csapi-ext.e1-np.tools.playstation.net
*.tools.playstation.net
*.intg.pt.playstation.net
*.playstation.net
sgs2.prod.scdn.dl.playstation.net
publish.playstation.net
theia.mgmt.dl.playstation.net
*.sp-int.lacloud.playstation.net
*.pcs-nonprod.nonprod.pcs.playstation.net
presto.prod.dataocean.playstation.net
vl.api.mgmt.ac.playstation.net
cdnauth.e1-spint.scdn.dl.playstation.net
a.ad.playstation.net
*.shield.tools.ce.playstation.net
teams-s2s.playstation.net
combine.upro.playstation.net
*.jp.biz.playstation.net
pspc.np.playstation.net
email.stg.pt.playstation.net
static-resource.e1-np.community.playstation.net
*.e1-pmgt.tools.playstation.net
sessionshare.e1-np.dl.playstation.net
learn.playstation.net
galactica2.api.d1.tools.playstation.net
*.test.tools.ce.playstation.net
sgs2.e1.scdn.dl.playstation.net
email.qa.pt.playstation.net
*.dl.playstation.net
*.usw2.01.central.etc.s0.playstation.net
*.e2-np.playstation.net
*.auth.np.ac.playstation.net
*.e1-np.community.playstation.net
account.np.ac.playstation.net
gs2-sec.ww.prod.dl.playstation.net
*.dl.playstation.net
*.ace.msys.playstation.net
pc.ps5.update.playstation.net
*.uks-3929-e1np-usw2-e1z9.dev21.kcloud.playstation.net
resource.e1-np.ac.playstation.net
*.ac.playstation.net
psn-rsc.prod.dl.playstation.net
secure.api.q1-np.ac.playstation.net
*.mgmt.community.playstation.net
vulcan.dl.playstation.net
*.q1-np.tools.playstation.net
auth.np.ac.playstation.net
*.api.sp-int.playstation.net
*.prod21.kcloud.playstation.net
*.dl.playstation.net
*.sp-int.lacloud.playstation.net
tokenizer.pqa.dataocean.playstation.net
a.ad.playstation.net
*.prod-qa.rds.s0.playstation.net
*.jp.biz.playstation.net
apsnobj.prod.dl.playstation.net
*.np.ac.playstation.net
*.deep.tools.ce.playstation.net
manuals.playstation.net
*.jp.biz.playstation.net
api.upro.playstation.net
www-stg.upro.playstation.net
sgs2.e1.scdn.dl.playstation.net
*.api.e1-np.playstation.net
*.shield.tools.ce.playstation.net
docserver.jp.biz.playstation.net
e1-np.str.us-west-2.dev.kcloud.playstation.net
email.dev.pt.playstation.net
*.e1-spint.lacloud.playstation.net
sgs2.e1.scdn.dl.playstation.net
develop.playstation.net
*.prod-qa.tools.playstation.net
kiki-stage.biz.playstation.net
*.dev.dl.playstation.net
tokenizer.pqa.dataocean.playstation.net
*.ww.np.community.playstation.net
psapp.updptl.np.community.playstation.net
sbahn-subscribe.pqa.dataocean.playstation.net
codes-internal.playstation.net
web.mgmt.playstation.net
reg.api.km.playstation.net
psn-rsc.e1.dl.playstation.net
nsx.sec.np.dl.playstation.net
psn-rsc.prod.dl.playstation.net
www-dev.upro.playstation.net
sgst.prod.dl.playstation.net
secure.api.q1-np.ac.playstation.net
recorder-clust02-lb.crs.playstation.net
*.kcnchoudhary.raptor-alpha-usw2-01.h.km.playstation.net
trident-token.prod.dataocean.playstation.net
web.prod-qa.playstation.net
*.np.communication.playstation.net
*.kcnchoudhary.raptor-alpha-usw2-01.h.km.playstation.net

Certificate

The complete raw certificate details for *.q1-np.tools.playstation.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b1d5JuVzod3N62vvsxA
/qrrePmFtM828oyKx3ITeuIg1ad4cpO30D/0pdu+Qon5O5+GCnZ/YSu0IsSz7LW+
yqQwrsy2Y/RCemU6k9+pZZghhu1aW0GzD83rEOvK6pcjKybJDAqaCr3N0Lsu0XKS
xEyJHsqMDo2Fl7h7M7aYTI4pqJHhRuMyuEi1W/uP9eltGd//43wpwrhPsIRGpoFv
ljlqp2WGiXummZBtLh3sTp7fuBRMLtkUKKwyYSkkuFpGRRuqA/QMgzQvwsitdOLY
+zloLi4t0hXo0qAb9HhZMMEdvo2BYT/5CHxs0s8dDCKSzQEWvqcIka7MHTbfgTTb
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1340731693174931981907591867702720003
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Mateo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SONY INTERACTIVE ENTERTAINMENT LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.q1-np.tools.playstation.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26982139192153496750851291391994510733011193364664281337264186744706004214831339361193654191165180577510100056914356734305994981550443150785213696293352491093160540825282062348849028615712453287157859922152240907828600135047297320288704491166888824163254128641382783180330805956530981507007558083734432338231930671956558340718583648907714224007834757194461347138964320854939943073728551190536290620665616855849335527052646316207431635471647356857599970538170544562070251973826500961148047507937181214075935409332462191209878439200433211091350896500139636422630504931382623913672113754889311672048751715736976767638303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							958986049ea33c3f7d2759c58b5de8bf9390cbf1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.q1-np.tools.playstation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q1-np.tools.playstation.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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