*.bws.birst.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0d:02:f6:84:e6:99:62:9c:1d:cc:7e:14:79:51:d9:b2 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.bws.birst.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:02:f6:84:e6:99:62:9c:1d:cc:7e:14:79:51:d9:b2
Serial Number (int): 17295348541167909777888436691020143026
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f1:56:3f:88:f8:73:95:c9:ac:ea:b3:5a:01:e7:9b:14:d2:54:1c:f1
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): b1:53:75:da:ec:be:59:50:d6:c7:9d:b3:56:26:ad:86:c2:5c:e0:bf
Fingerprint (sha256): 10:1b:69:d6:58:bf:43:14:d6:04:9e:de:cd:e6:ef:f2:ed:2d:bd:99:7c:3d:0c:0c:f4:f9:42:84:4f:cc:8a:96

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.bws.birst.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bws.birst.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bws.birst.com

Other certificates including the domain name birst.com

(limited to 100 certificates)
webdav.birst.com
app3112.bws.birst.com
mrc.bws.birst.com
btm.birst.com
5663998322147328-fe1.pantheonsite.io
maps.bws.birst.com
app2101.apac1.birst.com
app2102.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
app2101.bws.birst.com
5663998322147328-fe1.pantheonsite.io
app2103.apac1.birst.com
sde.birst.com
5663998322147328-fe1.pantheonsite.io
login.bws.birst.com
5663998322147328-fe1.pantheonsite.io
rc.sde.birst.com
login.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
birstupdates.bws.birst.com
login.bws.birst.com
app2102.eu1.birst.com
5663998322147328-fe1.pantheonsite.io
vanity2.lithium.com
app2101.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
licensing.bws.birst.com
5663998322147328-fe1.pantheonsite.io
*.bws.birst.com
mrc.bws.birst.com
vanity1.jiveon.com
c43rc.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
login.bws.birst.com
5663998322147328-fe1.pantheonsite.io
stage.birst.com
5663998322147328-fe1.pantheonsite.io
app2102.apac2.birst.com
vanity2.lithium.com
app2103.bws.birst.com
freetrial.bws.birst.com
5663998322147328-fe1.pantheonsite.io
app2101.apac2.birst.com
5663998322147328-fe1.pantheonsite.io
mrc.apac1.birst.com
partners.birst.com
birstupdates.bws.birst.com
bwa.birst.com
login.apac1.birst.com
app.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
rc.birst.com
app2102.eu1.birst.com
rc.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
dev.www.birst.com
app2101.eu1.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
stage.sde.birst.com
stage.sde.birst.com
5663998322147328-fe1.pantheonsite.io
static.captora.com
*.saml.birst.com
login.apac2.birst.com
5663998322147328-fe1.pantheonsite.io
btm.apac1.birst.com
mail.birst.com
5663998322147328-fe1.pantheonsite.io
app2102.apac1.birst.com
5663998322147328-fe1.pantheonsite.io
vanity1.jiveon.com
app2102.eu1.birst.com
app2101.bws.birst.com
login.bws.birst.com
vanity2.lithium.com
sslvpn.birst.com
app2103.bws.birst.com
vanity1.jiveon.com
static.captora.com
vanity1.jiveon.com
5663998322147328-fe1.pantheonsite.io
vanity1.jiveon.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
www.birst.com
app2103.apac2.birst.com
app2101.apac1.birst.com
vanity1.jiveon.com
5663998322147328-fe1.pantheonsite.io
app2101.apac1.birst.com

Certificate

The complete raw certificate details for *.bws.birst.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIQDQL2hOaZYpwdzH4UeVHZsjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDMyMzAwMDAwMFoXDTI0MDQyMDIzNTk1OVowGjEY
MBYGA1UEAwwPKi5id3MuYmlyc3QuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx3ZSbxUzNpYSr2LbTqQdEf0bieu9NqN1hH8ThTH2JV20morAKSWY
1AD5AiQhDHaaOiuvo0Tjvb92vNYdf1pbHm4PlnqvbHsEGO5wmKKfaXcxzmLm7ge3
K/2eJypzGRolCPaWM+1tCP+veOH/60xYVT1g9+CsddwNiupEWpKatGt+bOWiP6P8
Y0DqD/imtX7Z32XX0Ewn2YoQfwTzYmOlrQbDXDIIAg3OYeTwrSo3CIrqt8gwIcmq
+nIiLSbbbwDnqk+DSQh2aPQg9kdR9JUwvV032tlXZjN++E8odR/fdXTj4UISc8Iw
D+VbOV5Vpo8jn5lZtQaLUEI+YsouyZ3KHQIDAQABo4IC6DCCAuQwHwYDVR0jBBgw
FoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFPFWP4j4c5XJrOqzWgHn
mxTSVBzxMBoGA1UdEQQTMBGCDyouYndzLmJpcnN0LmNvbTAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAu
oCyGKmh0dHA6Ly9jcmwucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNybDAT
BgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGG
IWh0dHA6Ly9vY3NwLnIybTAxLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYq
aHR0cDovL2NydC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY2VyMAwGA1Ud
EwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AO7N0GTV2xrOxVy3
nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhw/5NtsAAAQDAEcwRQIhAP5UUDesUdlQ
Os8zWq8yGkgeY/Xj+OkOeBFu93CAG/BEAiBGHw+hiH+pr4bgV4i4YxzdM9q1AkPz
9gq9e7pHQHatOwB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAAB
hw/5NxgAAAQDAEcwRQIgbxEPBjuvaoiNkQ5cf7RUx+JdnHdxJxg09kKCBysvjjIC
IQD2cBMTUyYI6o7KjbvOy7P0xCLB9X1cwgY9Phd/8d0CbwB2ANq2v2s/tbYin5vC
u1xr6HCRcWy7UYSFNL2kPTBI1/urAAABhw/5Nu4AAAQDAEcwRQIhAKRCu67VWldi
kix9D0sBVBYTEKWlqYB71Mrb2Kaoy9REAiAS549fTX1s7QUZMgEPd15vjEYPVgDS
l03xTe76G4gRczANBgkqhkiG9w0BAQsFAAOCAQEAKwJVrlYtRsIc5XsBMzeaXWhW
MW46MWh+tNZRDTZie9yVZMeCjuSeKt7fNS7sH4yGzqZyZ8QS+tkojfgVH/D/7FHZ
H86xVFYuN14bP87AvOsLtFabSDL648nill8oX+p9NbZvfsYIEq/xKd90IeDyJLlr
qS1zzI8e+OWGCdTsTC5RParyNuQFbHTtJaQEhIp9awoPVqPOxHVfSpL4eCos+TUG
RxRJUK9g9Hhu9iZLPVyYPzwI0gQ+SCh8CSuGfjh+RbEcOSE9FEDOPB5MieG+8Ncf
tvlWpdncO/uhmLift9GG5iImVzk6dHNE2TKy0Wdk0/1SfzfIYCmFyla4ft0GLw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3ZSbxUzNpYSr2LbTqQd
Ef0bieu9NqN1hH8ThTH2JV20morAKSWY1AD5AiQhDHaaOiuvo0Tjvb92vNYdf1pb
Hm4PlnqvbHsEGO5wmKKfaXcxzmLm7ge3K/2eJypzGRolCPaWM+1tCP+veOH/60xY
VT1g9+CsddwNiupEWpKatGt+bOWiP6P8Y0DqD/imtX7Z32XX0Ewn2YoQfwTzYmOl
rQbDXDIIAg3OYeTwrSo3CIrqt8gwIcmq+nIiLSbbbwDnqk+DSQh2aPQg9kdR9JUw
vV032tlXZjN++E8odR/fdXTj4UISc8IwD+VbOV5Vpo8jn5lZtQaLUEI+YsouyZ3K
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17295348541167909777888436691020143026
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bws.birst.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25179769444751989452265209506053348796609057886141628598692917581462822948913059262652714635317729623913695770973859013180489674370094656130193319229594968320585590777341078958984566371783719278298589478850002669453275395036414762100800743789807275390941105629446212963224087180349255238432497930004413728378608896981427053754100161459651349818607633563162133636690674290599045617917796707451932130207985431641623743459995660386839739712069633818800473805382950066868702349761351882197844453305698606393145467210323246673590084427033836345950860810473253423755257046565113591958793951857621017477764472880068395125277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1563f88f87395c9aceab35a01e79b14d2541cf1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bws.birst.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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