1377c2-rolb.bus04.sit.rolb.ife.ninja

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0c:b1:12:52:a5:f9:a1:71:e6:4d:fe:3b:d6:fd:7c:8d was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=1377c2-rolb.bus04.sit.rolb.ife.ninja

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:b1:12:52:a5:f9:a1:71:e6:4d:fe:3b:d6:fd:7c:8d
Serial Number (int): 16870144124828658416525897375806225549
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f9:0a:ce:ac:8c:1a:11:e8:e2:ed:64:b7:58:8d:50:a2:ee:11:9f:2c
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 14:ac:dd:60:fb:fb:42:54:e9:ea:6a:12:c9:43:a5:eb:5f:7b:06:53
Fingerprint (sha256): 0e:75:7b:3b:27:cc:41:84:a3:b0:d2:5a:40:1a:70:86:4e:43:48:55:5e:2f:81:a8:80:f4:b4:c6:15:d0:aa:fe

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate 1377c2-rolb.bus04.sit.rolb.ife.ninja

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 1377c2-rolb.bus04.sit.rolb.ife.ninja

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1377c2-rolb.bus04.sit.rolb.ife.ninja
www.bus04.sit.rolb.ife.ninja
r0.bus04.sit.rolb.ife.ninja
release0.bus04.sit.rolb.ife.ninja

Other certificates including the domain name ife.ninja

(limited to 100 certificates)
r0.wth02.sit.rolb.ife.ninja
tba-sit-green-eu-west-2.ldntbarit13.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt02.ife.ninja
tba-sit-green-eu-west-2.tbasit04.ife.ninja
tba-oat-green-eu-west-2.tbaoat01.ife.ninja
tba-sit-green-eu-west-2.tbasit10.ife.ninja
r0.cpi03.sit.rolb.ife.ninja
tba-vpt-red-eu-west-2.tbavpt02.ife.ninja
2682c1-rolb.int04.sit.rolb.ife.ninja
1174c2-rolb.wth03.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit13.ife.ninja
tba-sit-green-eu-west-2.tbasit05.ife.ninja
dss-r3.rolbdss.sit.dss.ife.ninja
tba-sit-blue-eu-west-2.tbasit13.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt03.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
tba-sit-blue-eu-west-2.tbasit11.ife.ninja
742c4-rolb.cpi01.sit.rolb.ife.ninja
tba-vpt-red-eu-west-2.tbavpt03.ife.ninja
1378c3-rolb.int08.sit.rolb.ife.ninja
754c4-rolb.int05.sit.rolb.ife.ninja
tba-sit-purple-eu-west-2.tbasit02.ife.ninja
tba-sit-red-eu-west-2.tbasit9.ife.ninja
1174c5-rolb.rtb01.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit04.ife.ninja
tba-sit-red-eu-west-2.tbasit04.ife.ninja
tba-sit-yellow-eu-west-2.tbasit11.ife.ninja
740c1-rolb.cpi01.sit.rolb.ife.ninja
bank.wth01.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit01.ife.ninja
1172c4-rolb.wth03.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit06.ife.ninja
tba-vpt-red-eu-west-2.tbavpt02.ife.ninja
tba-vpt-green-eu-west-2.tbavpt03.ife.ninja
tba-sit-green-eu-west-2.tbasit9.ife.ninja
tba-sit-green-eu-west-2.ldntbarit13.ife.ninja
tba-sit-yellow-eu-west-2.tbasit9.ife.ninja
release10.rtb01.sit.rolb.ife.ninja
tba-oat-red-eu-west-2.tbaoat01.ife.ninja
2611c1-rolb.rit04.sit.rolb.ife.ninja
2682c1-rolb.int04.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit11.ife.ninja
tba-oat-red-eu-west-2.tbaoat01.ife.ninja
tba-sit-red-eu-west-2.tbasit08.ife.ninja
752c2-rolb.wth01.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit05.ife.ninja
tba-sit-blue-eu-west-2.tbasit03.ife.ninja
tba-sit-green-eu-west-2.tbasit02.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt02.ife.ninja
742c2-rolb.int11.sit.rolb.ife.ninja
tba-sit-green-eu-west-2.tbasit06.ife.ninja
tba-sit-blue-eu-west-2.tbasit13.ife.ninja
740c1-rolb.cpi01.sit.rolb.ife.ninja
930c1-rolb.cpi03.sit.rolb.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt03.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt01.ife.ninja
r0.int01.vpt.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit08.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
release10.rtb01.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit07.ife.ninja
tba-sit-purple-eu-west-2.tbasit02.ife.ninja
2626c2-rolb.cpi04.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit06.ife.ninja
tba-sit-blue-eu-west-2.tbasit07.ife.ninja
tba-vpt-green-eu-west-2.tbavpt03.ife.ninja
tba-sit-red-eu-west-2.tbasit9.ife.ninja
tba-sit-yellow-eu-west-2.tbasit11.ife.ninja
tba-sit-green-eu-west-2.tbasit02.ife.ninja
tba-sit-blue-eu-west-2.tbasit08.ife.ninja
tba-sit-green-eu-west-2.tbasit9.ife.ninja
tba-sit-green-eu-west-2.ldntbarit13.ife.ninja
tba-vpt-green-eu-west-2.tbavpt02.ife.ninja
2615c2-rolb.int04.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit04.ife.ninja
tba-sit-blue-eu-west-2.tbasit05.ife.ninja
bmb.tbadev01.ife.ninja
tba-sit-yellow-eu-west-2.tbasit10.ife.ninja
r0.int01.vpt.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit10.ife.ninja
tba-sit-pink-eu-west-2.tbasit02.ife.ninja
tba-sit-yellow-eu-west-2.tbasit08.ife.ninja
tba-sit-red-eu-west-2.tbasit11.ife.ninja
tba-vpt-green-eu-west-2.tbavpt03.ife.ninja
tba-sit-red-eu-west-2.ldntbarit13.ife.ninja
tba-vpt-red-eu-west-2.tbavpt03.ife.ninja
742c1-rolb.int09.sit.rolb.ife.ninja
2615c2-rolb.int04.sit.rolb.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
1377c2-rolb.bus04.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit08.ife.ninja
tba-sit-red-eu-west-2.tbasit06.ife.ninja
tba-sit-red-eu-west-2.tbasit01.ife.ninja
mybarclays-vpt-f.int03.vpt.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit05.ife.ninja
bmb.tbadev01.ife.ninja
tba-sit-yellow-eu-west-2.tbasit10.ife.ninja
oauthobbcl.tiaaob.awsdevln.ife.ninja
742c4-rolb.int01.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit06.ife.ninja

Certificate

The complete raw certificate details for 1377c2-rolb.bus04.sit.rolb.ife.ninja in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAu78zmas2ErAVD0wPB5
XasCuu/NIHgaIc74/xUgVs9SffWFlfZuOj7hxOJlH5M7m+8pydlWwfVmUyCiO8U0
G1qQqR5JwQh0Pg8zy0qRHLJ3a4zd4vCA38AQuWiLnk0p5GRfBo7sFFyY+772uGH+
uAwkckpBwmCtpoXOgPYZjns49IluRUpA8XXs15rxEM1rCgrEa3YYtjsGh1LVuZ0s
HvyIrDs/uwGHCDUdD/86yr8Rbr6Fs0Cf1Nycxgs0dKiv/vc9zd4IdYX8msR79Q61
PuMwLFf1KqlyHNrLQBhWbyf/WIY9dfjQh3SznnWIFHanKastbhtky6R/ea2aDg6n
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16870144124828658416525897375806225549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1377c2-rolb.bus04.sit.rolb.ife.ninja'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23738587673470995983009237101046526353617503765859052084457590479429418927471334402788542687756394895516621856917317690278656135771802086595825183628653200284301343499817957880120591165675265533369920407774887332965977892571377291568494374929844496056265988384207387037805594029072284037920761403032140771076954515534599659380635838374283940487700220025727393923929829833946988021907850834221433962276486144112088995334081085587557114022601560139345919350868773142391519253738225743845116967193371339050135279819344381489220002558103432921370389159867914185546237469801807986310810991613287937603818088118358702466991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f90aceac8c1a11e8e2ed64b7588d50a2ee119f2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1377c2-rolb.bus04.sit.rolb.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bus04.sit.rolb.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r0.bus04.sit.rolb.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release0.bus04.sit.rolb.ife.ninja'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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