inf.connect.opel.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:7f:00:f9:ca:60:30:f0:e9:2e:89:b0:2f:9e:25:28 was issued on by Amazon.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=inf.connect.opel.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:7f:00:f9:ca:60:30:f0:e9:2e:89:b0:2f:9e:25:28
Serial Number (int): 20597861428252387234407522096472007976
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 97:81:93:19:0a:64:4b:5d:cc:64:e1:ea:97:5c:ff:3a:59:14:a8:10
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 80:e5:07:86:cb:e7:a7:64:34:a6:23:8a:ef:61:0f:11:9d:a5:6b:37
Fingerprint (sha256): 07:b4:aa:28:56:36:94:ba:78:51:a4:34:19:f8:7f:62:77:ef:12:e1:f9:44:fe:dc:56:db:24:5b:3b:c3:fe:cf

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate inf.connect.opel.com

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for inf.connect.opel.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

inf.connect.opel.com
inf.connect.vauxhall.co.uk
inf.connect.opel.se
inf.connect.vauxhall.com
inf.connect.opel.be
inf.connect.opel.lu
inf.connect.opel.ch
inf.connect.opel.hr
inf.connect.opel.cz
inf.connect.opel.ie
inf.connect.opel.hu
inf.connect.opel.es
inf.connect.opel.de
inf.connect.opel.ro
inf.connect.opel.nl
inf.connect.opel.sk
inf.connect.opel.pt
inf.connect.opel.dk
inf.connect.opel.at
inf.connect.opel.si
inf.connect.opel.is
inf.connect.opel.pl
inf.connect.opel.gr
inf.connect.opel.no
inf.connect.opel.fr
inf.connect.opel.fi
inf.connect.opel.it

Other certificates including the domain name opel.com

(limited to 100 certificates)
*.opel.com
tis2web.service.opel.com
www.opelusadoscertificados.pt
abarth.pt
s.opel.com
prd.connect.opel.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
uat-admin.connect.opel.com
dev.connect.opel.com
uat.connect.opel.com
aemdevms4-connectivity.alfaromeo.com
aemstagems4-connect.alfaromeo.com
www.opel.cz
rusipvmns0001.rus.opel.com
media.gm.com
www.gm.com
new-odnm.opel.com
wpg-wpfarm2-prdl2x.opel.com
aemstagems4-connect.alfaromeo.com
pat.connect.opel.com
dev.services-store.dsautomobiles.com
prechat.opel.com
abarth.pt
prd-admin.connect.opel.com
rusipvmova010.ad.opel.com
dpromo.abarth.it
rusitvmcrd011.rus.opel.com
www.opelusadoscertificados.pt
gf.preprod.opel.com
rusipvmova003.ad.opel.com
trn-admin.services-store.dsautomobiles.com
inf.connect.opel.com
gmid.opel.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
lm2insciv002-vl1729.lm2.opel.com
www.buick.com
ppr.connect.opel.com
abarth.pt
abarth.pt
www.asconnect.opel.com
rusipvmova006.ad.opel.com
spoepc.xw.gm.com
pat.services-store.dsautomobiles.com
www.opel.cz
dev-admin.connect.opel.com
trn.services-store.dsautomobiles.com
aemstagems4-connect.alfaromeo.com
www.gm.com
abarth.pt
rimpsa.opel.com
inf.connect.opel.com
dev.services-store.dsautomobiles.com
sip-hr.mpsa.com
gsa.rus.opel.com
sip-hr.mpsa.com
www.buick.com
dev-admin.services-store.dsautomobiles.com
rusipvmpsa1189.ad.opel.com
spoepc.xw.gm.com
pat.connect.opel.com
media-professional.peugeot.ru
abarth.pt
aemdevms4-connectivity.alfaromeo.com
CRMIT.ext.opel.com
accessr.opel.com
dev-admin.connect.opel.com
pat.services-store.dsautomobiles.com
abarth.pt
services-store.peugeot.fr
dev.connect.opel.com
www.buick.com
abarth.pt
ipgidvmdev117.ipg.opel.com
iessapdt4.opel.com
spoepc.xw.gm.com
www.buick.com
www.opel.cz
rusipvmpst152.rus.opel.com
dpromo.abarth.it
aemdevms4-connectivity.alfaromeo.com
www.opel.cz
admin.connect.opel.com
sip-hr.mpsa.com
www.gm.com
www.opel.cz
pat.services-store.dsautomobiles.com
dev.connect.opel.com
sip-be.mpsa.com
lm2ipvmpsa056.lm2.opel.com
abarth.pt
mves.opel.com
cps.opel.com
admin.connect.opel.com
www.opel.cz
sip-be.mpsa.com
ipgitvmtst182.itpg.opel.com
dev-admin.connect.opel.com
pat-admin.connect.opel.com

Certificate

The complete raw certificate details for inf.connect.opel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4dnI6RIdIw+DzOdALxM
3fggZ3h8NHfDcgnzxn6nPPt4ZIJaG6pESlfXGohIDipVHe9KFbac4xYe4m5HaI3H
I42p3cNiG4BeN5yHiUe7QR2plCqZEZyikz36IgZmtQBlMrLs1Lio4HbyPDow6KMO
MfnGbYhlYQJFq52A9lP/tjTU4BtWP/TJGUs+EAuqVwTpOMS9eTqzMHbmTEm3lBC6
J4HnLtcDHauEopmr/iZkqJlOdYqNXUoiVBW3P9Aa2FMg9rwEuQNYg6rREfdcJScn
dY5imJ+NyGV17eGsQMdJJpe1z+a6oDqsL7K/sO8r0LssQXNV+lZwUJ7WILXmUpIk
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20597861428252387234407522096472007976
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'inf.connect.opel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21653519801610436183501203211447047443705021703462933273690170786993252777572104325557615987315097217312309646866641097080694650317412270770941330733843456582319140561091353481416051385752109493185564056243328262347729882810223777314130186241261242645881811975972973427883220653501719221588929917178782703015864885288086213166366635275439034689595291654000565667475022986728584042091750416408391434979470015020602501530142679875657783601265524471779155913733076089315356305980060533092405985723187797137289281667626251975908639169481431338329724429269410018486226328268894033970382434351740755594280724465353156076647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							978193190a644b5dcc64e1ea975cff3a5914a810
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (584 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.vauxhall.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.vauxhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.connect.opel.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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