stash.dev-charter.net

- Charter Communications Operating, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:64:b4:b7:32:33:b9:9b:39:6b:1c:0a:54:1b:e1:a7 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Charter Communications Operating, LLC

Organization: Charter Communications Operating, LLC
State / Province: Missouri
Locality: St. Louis
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:64:b4:b7:32:33:b9:9b:39:6b:1c:0a:54:1b:e1:a7
Serial Number (int): 8498263008582157620375675465228870055
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 30:5a:80:52:29:74:96:56:b5:f4:05:02:c7:8d:b6:f6:58:f7:c6:92
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 90:17:c3:6a:ef:ac:58:f2:95:4a:13:a7:5a:7d:2a:46:30:79:c8:bc
Fingerprint (sha256): 11:ba:33:fe:ac:16:9c:4e:2b:08:64:e9:56:32:3f:de:a1:70:0d:9f:4d:00:16:f1:5d:13:50:79:c4:0a:a8:36

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate stash.dev-charter.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stash.dev-charter.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stash.dev-charter.net
stash-public.dev-charter.net

Other certificates including the domain name dev-charter.net

(limited to 100 certificates)
*.dev-charter.net
ip-eas-sit-east-https-cdn.dev-charter.net
ip-eas-staging-west-https-cdn.dev-charter.net
ip-eas-sit-east-https-cdn.dev-charter.net
eks-nlb-int.us-east-1.perf.tau.dev-charter.net
ip-eas-sit-tm-west-https-cdn.dev-charter.net
*.dev-charter.net
troubleshooting.dev-charter.net
stash.dev-charter.net
*.mediaportals.dev-charter.net
*.develop.dev-charter.net
logpull-perf.tau.dev-charter.net
cms.prd-aws.charter.net
mediaportals-news-64.dev-charter.net
advisor2.engprod-spectrum.net
jenkinsdocker.dev-charter.net
*.mediaportals.dev-charter.net
*.dev-charter.net
ip-eas-dev-east-https-cdn.dev-charter.net
ip-eas-lab-west-https-cdn.dev-charter.net
sdev-ns.dev-charter.net
*.dev-charter.net
*.mediaportals.dev-charter.net
ip-eas-dev-west-https-cdn.dev-charter.net
*.us-east-1.engprod.tau.dev-charter.net
jenkinsdocker.dev-charter.net
*.dev-charter.net
*.tau.dev-charter.net
ip-eas-lab-west-https-cdn.dev-charter.net
stash.dev-charter.net
*.tau.dev-charter.net
*.mediaportals.dev-charter.net
jenkins-glb.dev-charter.net
stash.dev-charter.net
*.scpcj.dev.dev-charter.net
metadata.dev-charter.net
ui-srta.vod.dev-charter.net
atvchtr.dev-charter.net
serenity.vod.dev-charter.net
*.us-east-1.perf.tau.dev-charter.net
*.us-east-1.dev3.tau.dev-charter.net
*.dev-charter.net
ip-eas-sit-tm-west-https-cdn.dev-charter.net
*.scpcj.perf.dev-charter.net
*.dev-charter.net
cms.prd-aws.spectrumbusiness.net
*.us-east-1.dev2.tau.dev-charter.net
*.mediaportals.dev-charter.net
*.scpcj.dev.dev-charter.net
stashs.dev-charter.net
cms.prd-aws.charter.net
*.mediaportals.dev-charter.net
best-specflow.best.dev-charter.net
*.dev-charter.net
ip-eas-dev-east-https-cdn.dev-charter.net
ipvs.dev-charter.net
*.us-east-1.int.tau.dev-charter.net
crowd.dev-charter.net
ip-eas-sit-east-https-cdn.dev-charter.net
nexus.mediaportals.dev-charter.net
crescendo-stacka.vod.dev-charter.net
logpull-dev3.tau.dev-charter.net
*.dev-charter.net
ip-eas-dev-west-https-cdn.dev-charter.net
engprod-spectrum.net
search.dev-charter.net
ip-eas-staging-east-https-cdn.dev-charter.net
serenity.vod.dev-charter.net
ip-eas-staging-west-https-cdn.dev-charter.net
*.dev-charter.net
*.dev-charter.net
nexus.global.dev-charter.net
*.scpscl.dev-charter.net
ip-eas-sit-west-https-cdn.dev-charter.net
*.figaro.dev-charter.net
advisor2.engprod-spectrum.net
*.us-east-1.dev3.tau.dev-charter.net
*.mediaportals.dev-charter.net
ip-eas-autotest-https-cdn.dev-charter.net
stashs.dev-charter.net
ip-eas-staging-east-https-cdn.dev-charter.net
*.tau.dev-charter.net
*.mediaportals.dev-charter.net
*.us-east-1.perf.tau.dev-charter.net
jenkinsdocker-glb.dev-charter.net
troubleshooting.engprod-spectrum.net
*.us-east-1.dev.tau.dev-charter.net
ip-eas-sit-west-https-cdn.dev-charter.net
stashs.dev-charter.net
*.mediaportals.dev-charter.net
*.us-east-1.sbox1.tau.dev-charter.net
ip-eas-autotest-https-cdn.dev-charter.net
lantern.dev-charter.net
*.siadev.dev-charter.net
*.mediaportals.dev-charter.net
stash.dev-charter.net
dbm-translate.spectrumaws.dev-charter.net
*.us-east-1.dev2.tau.dev-charter.net
*.mediaportals.dev-charter.net
*.us-west-2.sbox1.tau.dev-charter.net

Certificate

The complete raw certificate details for stash.dev-charter.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyywlDKbB+EF2YU/HdqG
rtGWRrzY1Re48ZNHV9t8BJ/VvUUWKzkOgbLGYL6kRAQoYMvKa2q9AmfqeIF1xO/k
hxckOa+Ze2Z67Fyaf9wykiX+snnwQcM8XSmapKfPGGoNZZOetTGTNyZldpIY3Nug
7XJmClByKhqjPdTrNIliGH/Z4vhB/DZUVkdjVD6fhoZJoP2DC/ramikYbRZVNh3V
s94P/p7NvjGA+0ajUpbXqlg+8T5+4OlaU12iTvKfCl9OXpe3fiMYDgYjLbpIVR+v
eYikOjcGb/93+L1aEFxGRsIeNsPSzN/uYn6BwqjROhB7kN7ROMFnKBNG+m2YcFla
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8498263008582157620375675465228870055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charter Communications Operating, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stash.dev-charter.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25143460030894140935503113029068144427346886448026147632589425405674190786651495606919780434050923247635785194307361080439652663091010815188660392546278985915731894624353132029591478244924505623058249538468182367215296902041073661129820231871104814802894572241387073188850656860010737023716221631130391527350668113815967192485994627538537359308389337225666352615215739368785488786621327637388982230871823465522624170497943895303514695362295544594939642777526126800993275265631312158883162398714691090706939355478962352643068781608582061273993174088641551466626363434388622526445507563025309197580937488773932058761783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							305a805229749656b5f40502c78db6f658f7c692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stash.dev-charter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stash-public.dev-charter.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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