beta.client.agsnotificationservice.amazongames.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:17:b4:1b:24:89:d9:70:09:9b:ee:92:ac:b6:25:85 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=beta.client.agsnotificationservice.amazongames.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:17:b4:1b:24:89:d9:70:09:9b:ee:92:ac:b6:25:85
Serial Number (int): 16073811761362446707225466590824113541
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f6:8f:83:02:ba:22:28:47:31:0d:eb:f9:a9:68:42:1a:4c:4c:fc:05
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): df:2a:e7:72:56:24:94:1e:75:17:f3:42:b5:fc:c6:9c:9f:cf:49:75
Fingerprint (sha256): 0c:c1:db:29:82:b2:bd:e0:e4:81:77:c3:74:9d:44:0a:7f:b9:52:dc:3b:cc:a6:ed:92:03:e1:06:cd:b7:49:f8

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate beta.client.agsnotificationservice.amazongames.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beta.client.agsnotificationservice.amazongames.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beta.client.agsnotificationservice.amazongames.com

Other certificates including the domain name amazongames.com

(limited to 100 certificates)
beta.amazongames.com
federatedaccountservice.amazongames.com
ap-northeast-1.stats-ingestion-service.amazongames.com
*.burner929327.identity-service.amazongames.com
pentest.gamma.identity-service.amazongames.com
djdawson2.identity-service.amazongames.com
burner863824.identity-service.amazongames.com
dev.jenkins.omnisdk.tools.amazongames.com
*.emavin.identity-service.amazongames.com
pentest.beta.identity-service.amazongames.com
script-test-2.identity-service.amazongames.com
beta.stats-service.amazongames.com
beta.tokenservice.amazongames.com
download.amazongames.com
us-east-1.stats-service.amazongames.com
us-west-2.beta.stats-service.amazongames.com
*.burner292763.identity-service.amazongames.com
login.amazongames.com
www.amazongames.com
internal.beta.identity-service.amazongames.com
*.beta.identity-service.amazongames.com
us-east-1.stats-service.amazongames.com
creators.amazongames.com
callensr.identity-service.amazongames.com
cloudfront.us-west-2.beta.client.stats-service.amazongames.com
*.emavin.identity-service.amazongames.com
gamma.launcher.amazongames.com
analytics.id.amazongames.com
beta.test-mono-repo.amazongames.com
us-west-2.stats-service.amazongames.com
gamma.amazongames.com
beta.client.tokenservice.amazongames.com
amazongames.com
www.amazongames.com
beta.client.stats-service.amazongames.com
beta.client.agsnotificationservice.amazongames.com
internal.beta.identity-service.amazongames.com
us-east-1.gamma.client.stats-service.amazongames.com
beta.catalogmanagementservice.amazongames.com
test-mono-repo.amazongames.com
gamma.tokenservice.amazongames.com
client.tokenservice.amazongames.com
client.entitlementservice.amazongames.com
download.amazongames.com
gamma.stats-metadata-service.amazongames.com
beta.moderationservice.amazongames.com
beta.agsnotificationservice.amazongames.com
agssocialservice.amazongames.com
amazongames.com
beta.amazongames.com
us-west-2.beta.stats-service.amazongames.com
beta.agsprivacysettingsservice.amazongames.com
*.mansamusa.identity-service.amazongames.com
client.federatedaccountservice.amazongames.com
prod.amazongames.com
*.gamma.identity-service.amazongames.com
beta.client.agsnotificationservice.amazongames.com
gamma.identity-service.amazongames.com
us-east-1.gamma.stats-ingestion-service.amazongames.com
prod.amazongames.com
amazongames.com
internal.beta.identity-service.amazongames.com
beta.amazongames.com
us-west-2.beta.stats-service.amazongames.com
us-east-1.client.stats-service.amazongames.com
beta.agsnotificationservice.amazongames.com
beta.client.agsnotificationservice.amazongames.com
id.amazongames.com
internal.beta.identity-service.amazongames.com
us-east-1.gamma.stats-service.amazongames.com
script-test-4.identity-service.amazongames.com
devo.amazongames.com
view.amazongames.com
staging.entitlementservice.amazongames.com
internal.beta.identity-service.amazongames.com
*.prod.identity-service.amazongames.com
internal.burner008300.identity-service.amazongames.com
gamma.agsprivacysettingsservice.amazongames.com
beta.agsprivacysettingsservice.amazongames.com
gamma.csconnect.amazongames.com
beta.catalogservice.amazongames.com
click.email.amazongames.com
download.amazongames.com
beta.federatedaccountservice.amazongames.com
test-mono-repo.amazongames.com
us-east-1.gamma.stats-service.amazongames.com
gamma.amazongames.com
login.amazongames.com
internal.djdawgson3.identity-service.amazongames.com
burner-681504.identity-service.amazongames.com
beta.family-service.amazongames.com
us-west-2.beta.client.stats-service.amazongames.com
beta.client.stats-service.amazongames.com
gamma.amazongames.com
amazongames.com
us-east-1.gamma.stats-service.amazongames.com
client.tokenservice.amazongames.com
gamma.moderationservice.amazongames.com
djdawson2.identity-service.amazongames.com
www.amazongames.com

Certificate

The complete raw certificate details for beta.client.agsnotificationservice.amazongames.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEozCCA4ugAwIBAgIQDBe0GySJ2XAJm+6SrLYlhTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDEyMzAwMDAwMFoXDTI1MDIyMTIzNTk1OVowPTE7
MDkGA1UEAxMyYmV0YS5jbGllbnQuYWdzbm90aWZpY2F0aW9uc2VydmljZS5hbWF6
b25nYW1lcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcrBn6
wPNuWMXxmxjMUHFzCBmhQsxDQun9iqNwUbzNhk3lcMT0Dlgxm98H6OcCzburytfg
iaU599EtOJWuk3mQdDqYkVs3gL+H8DaAB5D8rqUJaM6mzPHG6lMA/di9guQQ2AEt
5wcuuKGOq8HftDzfokJvLKGAkt/ZIuMl5DEQPc2bgJZBgS7M6RfpOb9sAYsJTDbx
W6YsLQiWZRoqJ6Tk8qHnzNZS07HFw9QhXnXn65R7tmsOwpwNvxvNGADHeHvVTuwQ
LESSBRzJw8zqYJ/oPRDmYkhvtAy+hOjB8ax6mfwR1KV+rwiuyZKZf/+D7iAmMZyf
22kWyrUx+fFQW00rAgMBAAGjggGeMIIBmjAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0
cc7L6Zz5euuC4jAdBgNVHQ4EFgQU9o+DAroiKEcxDev5qWhCGkxM/AUwPQYDVR0R
BDYwNIIyYmV0YS5jbGllbnQuYWdzbm90aWZpY2F0aW9uc2VydmljZS5hbWF6b25n
YW1lcy5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipo
dHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYB
BQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250
cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1
c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8E
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCTCZyUoSk04v1IIJOWtddtb7ojJXSazcC
4p68JJnRRrD+rshatK/VdP6r6iVWGjWXk6EDCyLTWRgkrZGoWZKI7iby1/lau15i
iXaIIU464j6UAO9LcKaUJk6A59RiCD13ih0oehq8OZpRgY6bxy1hObNPVkZmSWJV
LL4vjz9ymk5fYq+kAyb3PueS5hpRoFdEaVw/c5m0TuiokdKO/7vdeF6Z9puzdZKZ
e/GW7Duqtf4PwRCp9j81y8Q/LVgcUidM2kvd8eZDhZm65wGnYCS2XSytj8WghUhQ
ub+dtPhZkmSQ5zehnGLyqK/Hu8r4TdUxFtKJF1Svk+NalO50c01t
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKwZ+sDzbljF8ZsYzFBx
cwgZoULMQ0Lp/YqjcFG8zYZN5XDE9A5YMZvfB+jnAs27q8rX4ImlOffRLTiVrpN5
kHQ6mJFbN4C/h/A2gAeQ/K6lCWjOpszxxupTAP3YvYLkENgBLecHLrihjqvB37Q8
36JCbyyhgJLf2SLjJeQxED3Nm4CWQYEuzOkX6Tm/bAGLCUw28VumLC0IlmUaKiek
5PKh58zWUtOxxcPUIV515+uUe7ZrDsKcDb8bzRgAx3h71U7sECxEkgUcycPM6mCf
6D0Q5mJIb7QMvoTowfGsepn8EdSlfq8IrsmSmX//g+4gJjGcn9tpFsq1MfnxUFtN
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16073811761362446707225466590824113541
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beta.client.agsnotificationservice.amazongames.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19778041978714465022487353266380515606170113752846418508437874189581741137261347309868206211311937672515439055629905753056855524766807745152048194780632844614858750956350079654532409124771911902212052712470711497562845390252114309720276417696792074725375730045244115701095618279930581418970196588422962875294325183850469659906292726340106470757658767757128580030080618314735661011990976077801082433192086978083445130703572227984155523859326337729510195598918012676683959587652661885164359455425424682320594448700795117224570320079524055405583766639923841065686006303147542372434550158338621755383287902679373220367659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f68f8302ba222847310debf9a968421a4c4cfc05
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.client.agsnotificationservice.amazongames.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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