www.companyregistration.playstation.com

- Sony Interactive Entertainment Europe Limited -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 75:13:72:aa:68:6b:b5:2e:3b:ab:49:a4:6a:d0:91:a8 was issued on by thawte, Inc..

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Sony Interactive Entertainment Europe Limited

Organization: Sony Interactive Entertainment Europe Limited
Organization unit: SCEE IT
State / Province: London
Locality: London
Country: GB

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 75:13:72:aa:68:6b:b5:2e:3b:ab:49:a4:6a:d0:91:a8
Serial Number (int): 155620654842946414255355116877438292392
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 4e:16:88:90:ee:24:f7:7d:37:82:95:81:2f:c9:23:40:e3:14:8c:3a
Fingerprint (sha256): 16:48:fb:e8:be:56:3d:c1:f3:64:dc:60:b9:04:fe:8c:bd:05:48:e7:49:29:b2:61:ae:c3:d7:2d:d9:fb:cf:3c

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate www.companyregistration.playstation.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.companyregistration.playstation.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.globalsystems.scee.net
www.sceexternalapps.co.uk
www.sceglobalfqa.net
www.tpr.scee.net
www.tpr.scej.jp
www.unity-external.scee.net
www.unity.scee.net
www.tprapps.scea.com
www.tpr.scea.com
www.unity.scea.com
www.companyregistration.playstation.com

Other certificates including the domain name playstation.com

(limited to 100 certificates)
transact.playstation.com
*.auth.api.prod-qa.playstation.com
support.jp.playstation.com
m.np.playstation.com
incapsula.com
d-images-dev.playstation.com
usauthor.playstation.com
support.asia.playstation.com
cdn.jp.playstation.com
incapsula.com
*.repairs.playstation.com
www.playstation.com
*.core-entitlements.e1-spint.api.playstation.com
*.e1-np.tools.playstation.com
direct-qa.playstation.com
docportal.playstation.com
*.tools.playstation.com
devsearch.playstation.com
latam.playstation.com
www.playstation.com
d-images-dev.playstation.com
soporte.playstation.com
*.e1-np.tools.playstation.com
san-15-s12.tlsprovisioning.exacttarget.com
qa.jp.playstation.com
social.playstation.com
view.mail.jp.playstation.com
my.playstation.com
shop.playstation.com
click.mail.asia.playstation.com
blog.latam.playstation.com
wwwstage.playstation.com
*.core-entitlements.e1-pqa.api.playstation.com
ear.playstation.com
www.maestro.io
*.account.mgmt.playstation.com
hardware.support.eu.playstation.com
jp.customer.support.playstation.com
www.playstation.com
my.playstation.com
*.e1.api.playstation.com
sslcertificate4.queue-it.net
www.playstation.com
cod.playstation.com
payments.direct.playstation.com
*.idmapper.d5-spint.api.playstation.com
www.jp.playstation.com
blog.asia.playstation.com
*.api.playstation.com
*.studiocrs.playstation.com
static.playstation.com
*.repairs.playstation.com
store.playstation.com
m.mgmt.playstation.com
www.unity.scee.net
qa.jp.playstation.com
securecn.scene7.com
asia.playstation.com
blog.us.playstation.com
forms.playstation.com
www.jp.playstation.com
user-data-retrieval.e1-np.api.playstation.com
wwwstage.playstation.com
cloud.txn-email03.playstation.com
redmine.asia.playstation.com
*.np.studiocrs.playstation.com
ps.playstation.com
qa.jp.playstation.com
*.api.playstation.com
smetrics.eu.playstation.com
*.core-entitlements.d1-pmgt.api.playstation.com
*.core-entitlements.d1-spint.api.playstation.com
soporte.playstation.com
rd.playstation.com
view.mail.asia.playstation.com
webforms.playstation.com
sslcertificate4.queue-it.net
smetrics.aem.playstation.com
wwwstage.playstation.com
static.playstation.com
*.e1-pmgt.api.playstation.com
tw.e-invoice.asia.playstation.com
incapsula.com
web.np.playstation.com
www.playstation.com
*.d3-np.api.playstation.com
forms-preview-dev.playstation.com
*.q1-spint.api.playstation.com
secure01.stage.lithium.com
status.playstation.com
web-toolbar.playstation.com
www.playstation.com
*.idmapper.e1-spint.api.playstation.com
vue.playstation.com
incapsula.com
secure03.lithium.com
image-ps4.api.playstation.com
forums.usstage.playstation.com
*.q2-pqa.api.playstation.com
soporte.latam.playstation.com

Certificate

The complete raw certificate details for www.companyregistration.playstation.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPbErm3uerVx2MyfWOmE
4v8CmetbBV3XT9IXta86DRFWTdhe4d6u7jz1yApbOoVWBCxgeNI2Dbh9H1hkpMjq
9EOPNDuA1odFC014VtCtzBO0qLtT6B+ZlYLhoZgh0iSXkEEei6kaBseR1VWgUyI3
jfA/+BmtoK/JZ6c/wkEnyosftEwF5lYJUkWMoID5fglBxhcJE3GMZVXCt7tcvCoR
uDrfWC4rrJQyj5BPiz81UUk/8XhCfRz7+oa6RiMweEswGOYl/NnYQKqyQQu/0QsZ
VqmWzE2XjTztCzCNoaUgYDUTwNocwDtH3g/65xEctSGzEF0Do3yE1BxydTczMLY+
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 155620654842946414255355116877438292392
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sony Interactive Entertainment Europe Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SCEE IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.companyregistration.playstation.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21834674431574020483619197995920153212782099924475332168974439541549711974365539032782717407284532225284206713538437253698954647137515991136047144999124200332767144000652033025200376378668803091584718600317544316149616096306711272338575407707015850535119953370444952437649171697346776881480821066816211616326034321225395067731587937428244086981610278895222796481140200319392957140023978957749594345399195745238647880851453594912146780590786855737632496877396825344176116077058297256065010469024078265859844751542593761283646584196229903813807079214079926313755499197902771634456272034104917128422228746997804343639619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (266 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalsystems.scee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sceexternalapps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sceglobalfqa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tpr.scee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tpr.scej.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unity-external.scee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unity.scee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tprapps.scea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tpr.scea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unity.scea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.companyregistration.playstation.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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