www.axn.com

- Sony Pictures Entertainment -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:30:25:94:39:59:6a:d1:99:11:97:30:ca:21:7b:d8 was issued on by DigiCert Inc.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment

Organization: Sony Pictures Entertainment
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:30:25:94:39:59:6a:d1:99:11:97:30:ca:21:7b:d8
Serial Number (int): 20188412378655541437663049320572746712
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 65:08:55:2c:4d:f5:78:4f:c0:b0:0a:ef:2c:3b:e0:9d:27:c6:7d:b3
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): c7:76:b9:52:c7:b7:52:ed:b1:01:56:c9:88:45:d9:8b:ce:56:ae:e1
Fingerprint (sha256): 11:cd:32:e2:2f:ab:a9:13:c4:c8:ad:11:72:88:ab:38:aa:71:a2:57:b9:ec:f6:12:9e:e5:c7:d1:02:aa:20:81

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate www.axn.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.axn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.animaxtv.com
www.axn.com
www.axnblack.com
www.axnspin.com
www.axnwhite.com
www.canalaxn.com
www.canalsony.com
www.set-tv.com
www.sonychannel-tv.com
animaxus.com
www.animaxus.com
www.sonychannel.com
sonyanimax.com
www.sonyanimax.com
sonyaxn.com
www.sonyaxn.com

Other certificates including the domain name axn.com

(limited to 100 certificates)
www.axn.com
www.sonytv.com
hu.axn.com
la.axn.com
hu.axn.com
www.axn.com
la.axn.com
www.axnspin.pl
la.sonymovies.com
la.axn.com
la.axn.com
soporte.canalsony.com
login.la.axn.com
www.axn.com
la.axn.com
www.axn.com
www.axnspin.pl
hu.axn.com
www.axn.com
www.axn.com
login.la.axn.com
soporte.canalsony.com
login.la.axn.com
www.axnspin.pl
www.axnspin.pl
www.axn.com
la.axn.com
la.axn.com
hu.axn.com
la.axn.com
login.hu.axn.com
edge-affiliates.cinesony.com
www.sonytv.com
edge-affiliates.cinesony.com
login.hu.axn.com
sonymovies.com
edge-affiliates.cinesony.com
hu.axn.com
www.axnspin.pl
hu.axn.com
hu.axn.com
hu.axn.com
soporte.canalsony.com
hu.axn.com
soporte.canalsony.com
la.axn.com
la.axn.com
www.axnspin.pl
la.axn.com
hu.axn.com
www.axn.com
www.sonytv.com
edge-affiliates.cinesony.com
hu.axn.com
hu.axn.com
www.axnspin.pl
hu.axn.com
la.axn.com
www.sonytv.com
www.sonytv.com
www.axnspin.pl
hu.axn.com
la.axn.com
soporte.canalsony.com
www.axnspin.pl
la.axn.com
edge-affiliates.cinesony.com
hu.axn.com
la.axn.com
www.sonytv.com
www.axnspin.pl
la.axn.com
edge-affiliates.cinesony.com
www.sonytv.com
soporte.canalsony.com
www.axnspin.pl
www.sonytv.com
www.axn.com
perc.sonypictures.com
login.br.axn.com
soporte.canalsony.com
la.axn.com
www.sonytv.com
soporte.canalsony.com
la.axn.com
perc.sonypictures.com
www.axnspin.pl
login.br.axn.com
www.sonytv.com
login.la.axn.com
www.axnspin.pl
www.axn.com
la.axn.com
www.axnspin.pl
hu.axn.com
la.axn.com
hu.axn.com
www.axnspin.pl
soporte.canalsony.com
edge-affiliates.cinesony.com

Certificate

The complete raw certificate details for www.axn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP3gEbSb3y1sFn/mL1yP
XNR5MOBMFQFzWd5lJmYr1cFimrGvJkrSBmmN6qTut5gPS8uVD/KeBhNzIwi8HNJS
V61aTOaeaTAQwHXfvccV0ZMIlqmLTmJApRmLDckCmwsChn7cVznAFKmkBlC7+C4X
g5v6qfX2I4j+Gm+gzz97D6qDisX6/58IxSlpKOaNbUecZaFhWrOGuEvMGRZiBHQc
CsDe5iiIG7FWwDqzHsmHVLn3EtiYuibDrHhT93NaQj/xKcUNHjYndUpCj8PmqJle
YAqi7Ud4mXZUN41timWIATWWnP1t2DZaMBROAozF5l6KtbNJkqzd27kOi/Aquuu/
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20188412378655541437663049320572746712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.axn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25372851554845989914116179735443709154771666067900547298288901534402803493431791923321053206680097029881612792851496132600220812343318647365481888476386370822495488384496936598903631988037272096492929024765666714112372841658860490463817102494601957341682300749096213111593331410285429407999706828339961363140809374667863351859399149439753369156198707206003056127834205728643373131487772161829660905418250326636950823155907303226644068507840400655563682466016957827695788392477152236082067114210978393350556028419781994631306755461954577766410909538494408476941512223614647074317642720880305978144599899552395991695127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6508552c4df5784fc0b00aef2c3be09d27c67db3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (284 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.animaxtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axnblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axnspin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axnwhite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canalaxn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canalsony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.set-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonychannel-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animaxus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.animaxus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonychannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonyanimax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonyanimax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonyaxn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonyaxn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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