learn.bps.org.uk

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:ab:74:5f:65:0f:2e:3e:b7:1a:7e:10:fd:b5:67:be was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=learn.bps.org.uk

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:ab:74:5f:65:0f:2e:3e:b7:1a:7e:10:fd:b5:67:be
Serial Number (int): 18170207025479162586109868546037475262
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 33:b4:71:6b:88:cc:fb:8b:74:58:82:a4:50:b6:33:d1:8e:61:e8:0c
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 0b:e9:0f:54:9b:4d:d6:5f:f1:95:a5:15:0d:23:89:c4:b7:eb:ea:04
Fingerprint (sha256): 13:f3:01:3a:66:8b:e9:58:04:7c:9a:a5:7f:78:18:d2:89:07:1d:45:63:47:bf:bb:d6:55:a2:bc:7d:dc:97:53

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate learn.bps.org.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for learn.bps.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

learn.bps.org.uk

Other certificates including the domain name bps.org.uk

(limited to 100 certificates)
www.pugpig.com
support.bps.org.uk
dns-vetting1j.map.fastly.net
support.bps.org.uk
tls.automattic.com
*.bps.org.uk
ssl376462.cloudflaressl.com
www.pugpig.com
www.pugpig.com
ssl376460.cloudflaressl.com
vpn.bps.org.uk
dns-vetting1j.map.fastly.net
support.bps.org.uk
dns-vetting1j.map.fastly.net
tls.automattic.com
ssl376461.cloudflaressl.com
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
www.pugpig.com
support.bps.org.uk
appsrequest.nanometrics.com
tls.automattic.com
ssl376461.cloudflaressl.com
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
www.pugpig.com
www.pugpig.com
dns-vetting1j.map.fastly.net
ssl376462.cloudflaressl.com
support.bps.org.uk
*.content.pugpig-dev.com
support.bps.org.uk
support.bps.org.uk
vpn.bps.org.uk
support.bps.org.uk
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
support.bps.org.uk
support.bps.org.uk
ssl338979.cloudflaressl.com
www.pugpig.com
dns-vetting1j.map.fastly.net
connect.bps.org.uk
springboard.wiley.com
www.pugpig.com
support.bps.org.uk
tls.automattic.com
dns-vetting1j.map.fastly.net
*.content.pugpig-dev.com
ssl338979.cloudflaressl.com
dns-vetting1j.map.fastly.net
learn.bps.org.uk
*.bps.org.uk
dns-vetting1.map.fastly.net
support.bps.org.uk
www.pugpig.com
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
ssl376462.cloudflaressl.com
*.bps.org.uk
springboard.wiley.com
support.bps.org.uk
ssl376461.cloudflaressl.com
www.pugpig.com
support.bps.org.uk
www.pugpig.com
connect.bps.org.uk
support.bps.org.uk
appsrequest.nanometrics.com
www.pugpig.com
www.pugpig.com
support.bps.org.uk
www.pugpig.com
*.content.pugpig-dev.com
support.bps.org.uk
support.bps.org.uk
ssl376462.cloudflaressl.com
dns-vetting1j.map.fastly.net
ssl338979.cloudflaressl.com
www.pugpig.com
support.bps.org.uk
support.bps.org.uk
support.bps.org.uk
itsr.etax.com.au
support.bps.org.uk
vpn.bps.org.uk
ssl376460.cloudflaressl.com
support.bps.org.uk
www.pugpig.com
www.pugpig.com
support.bps.org.uk
appsrequest.nanometrics.com
iservices.zamzamgrand.com
*.bps-uat2.bps.org.uk
support.bps.org.uk
appsrequest.nanometrics.com
support.bps.org.uk
dns-vetting1j.map.fastly.net
ssl376460.cloudflaressl.com

Certificate

The complete raw certificate details for learn.bps.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIQDat0X2UPLj63Gn4Q/bVnvjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMTIxODAwMDAwMFoXDTI1MDExNTIzNTk1OVowGzEZ
MBcGA1UEAxMQbGVhcm4uYnBzLm9yZy51azCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMlx9k/Vfg82uIcAPo6iQfSiI+Bt+ALO4d8OuqlIm7HQS1TIIDVW
gmxEHE4x1MP+aJ1wq9hUjdg4D1r3ZOjZAp+89X4tV4EpJnIoQ+3Kdd/WuLwKyQsh
klI+ieXAoXcmGfY13FMpuLhvZl6BCxiOEdTWKEdsAd8HNEE2dLKFMiPT27CE1I9a
73AM15DIKciLeqWZyYnuy08YisI6ItMh/7OdHiDrKXtqFRJ5Sftq20QikSqjn2Oc
yhMw7UDKrb71razbtTvpGi1flJFhYPbhveT71ojoAS80DOYYUrQUTve/cua71c/b
8DIAhr5GgtyolVy6XCMeuSydwSxtxjKY1zcCAwEAAaOCAugwggLkMB8GA1UdIwQY
MBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBQztHFriMz7i3RYgqRQ
tjPRjmHoDDAbBgNVHREEFDASghBsZWFybi5icHMub3JnLnVrMBMGA1UdIAQMMAow
CAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6
b250cnVzdC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcw
AYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAC
hipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYD
VR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYAzxFW7tUufK/z
h1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGMekw89gAABAMARzBFAiEAuXmkkdlt
xtAX7zVQbqu2zlpHb/h4Twp0cALxzKF8FWACIGAtdGJcINlMSx7YhY//2Oby0Prv
eAahpjb3Dkem8u3vAHYAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4A
AAGMekw84wAABAMARzBFAiEAz8YPeZ7FbDJIc0GzYeWDh9bSpWy5BVUNmJ8EB3d4
2tsCIGPZqwasJoVUxES9+W+nXf2wEtm1U6y9qv83yqGxJA7dAHUAfVkeEuF4Knsc
YWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGMekw80wAABAMARjBEAiAC5zHfCGPQ
W/4gXC1tnCh3aJ38vWlFKly880t2lbzKmgIgA1gcX5+5oVRsNa33E5ujnL8RASk1
kKRXYk4hlBWTVNQwDQYJKoZIhvcNAQELBQADggEBAB4w+xrdqkFfPe7HWRKJ93bg
5/Pmnw3vKOLB4KMRVlZAHfmH7mYaXjMGxp4zzsFGJW7GmRte3a+7a/NqlfeCUoA9
utE5/UY3fHvlasw5WkcvquleGvrALVAKzz14axCLz57KpFl3F7zkdXkUgZqTNGhh
ia6kAhNTFPSvPrMTJsPX/t53bsW8yUNLP4wIGikg1K/7bjPhgAPcCz42PGl8K/as
IhS7W7pgpJKMlboWTxVQ0XqlVpPP0MqqZIiitRJ9PfWOTJ4TJr1FUoi81X1sZ0Yr
d89h+1dJ+WGo9rCm/zqXHVZz+GEmsmh5um5s4vjUycpqxQDYPrK1ie7jyh2Pc4o=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXH2T9V+Dza4hwA+jqJB
9KIj4G34As7h3w66qUibsdBLVMggNVaCbEQcTjHUw/5onXCr2FSN2DgPWvdk6NkC
n7z1fi1XgSkmcihD7cp139a4vArJCyGSUj6J5cChdyYZ9jXcUym4uG9mXoELGI4R
1NYoR2wB3wc0QTZ0soUyI9PbsITUj1rvcAzXkMgpyIt6pZnJie7LTxiKwjoi0yH/
s50eIOspe2oVEnlJ+2rbRCKRKqOfY5zKEzDtQMqtvvWtrNu1O+kaLV+UkWFg9uG9
5PvWiOgBLzQM5hhStBRO979y5rvVz9vwMgCGvkaC3KiVXLpcIx65LJ3BLG3GMpjX
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18170207025479162586109868546037475262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'learn.bps.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25430096131623067174378479511114259590307284373429987831969435353060458082945923719278761392246683938534888165039399298681668039886007916014578066598555138461364576027749691899653971778319862513012875031231789766195221725455253413292038671817010601632684210688977483613601555522344607726807028020325416503868451061245428312359916417211001115260214980909338305769578608795831298852890398080099484290412829071162800372227370636401543136150165707527206530294145989337046273920549436546198411604642522036190747426266100221404411352600965473810690777349426842037836513868041312158153262079458785877343090314732590434146103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33b4716b88ccfb8b745882a450b633d18e61e80c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.bps.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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