staging.forge.gnab.fr
Issued by Amazon
About this certificate
This digital certificate with serial number 05:3d:b6:cb:18:e2:c0:91:4a:f9:6c:0a:cb:dc:5d:9c was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=staging.forge.gnab.fr
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:3d:b6:cb:18:e2:c0:91:4a:f9:6c:0a:cb:dc:5d:9cSerial Number (int): 6966577576861825695027342990917787036
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: a9:f7:73:e9:fa:5c:d1:07:5f:86:b3:08:1a:df:90:fd:44:6f:f2:ef
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 83:56:f6:88:8b:7d:93:4a:41:5a:b0:f0:81:1e:6a:01:29:15:cf:d7
Fingerprint (sha256): 17:dc:3e:11:d9:1f:e4:4d:63:4c:d7:67:c1:71:63:e2:7f:9e:23:5d:76:22:69:07:d9:02:fb:5d:51:1f:dd:90
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate staging.forge.gnab.fr
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for staging.forge.gnab.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
staging.forge.gnab.fr
Other certificates including the domain name gnab.fr
(limited to 100 certificates)
staging.forge.gnab.fr
firebaseapp.com
app.myco.immo
pumpables.ferreiraz.com.br
forge.gnab.fr
www.cafesanclemente.com.co
rootomega.llc
cat.gnab.fr
www.khoaapp.com
staysure.asia
www.pspkdevtest.net.au
id-admin.plizz.co
next.launchany.com
firebaseapp.com
loananalysis.aialtar.ai
firebaseapp.com
split.gnab.fr
firebaseapp.com
cmaxinstitutes.com
firebaseapp.com
jupiter.gnab.fr
tint.gnab.fr
tint.gnab.fr
www.nomu.io
gnab.fr
cleanonline.media
staging.forge.gnab.fr
johnpucciarelli.com
firebaseapp.com
www.folkia.eu
firebaseapp.com
kvplaos.com
contractbookworm.com
forge.gnab.fr
forge.gnab.fr
firebaseapp.com
sqlite.tk
forge.gnab.fr
morganblackhurst.com
www.dashboardevaluations.com
reservas.wokiapp.com
ollert.michaelclark.co
www.losfogueterostenerife.com
msp4.biz
firebaseapp.com
tint.gnab.fr
redux-saga-firebase.js.org
cook.gnab.fr
firebaseapp.com
*.gnab.fr
thesimplegeography.de
firebaseapp.com
thesimplegeography.de
tls.gnab.fr
fateptz.com
beespan.com
www.apur.am
firebaseapp.com
translate.gnab.fr
www.hived.ai
forge.gnab.fr
yop.gnab.fr
firebaseapp.com
marie-et-seb.com
paulosimoes.nerit.app
slack.jeffreylee.dev
admin.iotdataroom.com
firebaseapp.com
firebaseapp.com
qcasaimoveis.com
wygoda.net
app.cardiotracker.app
flyingtophat.co.uk
worlddancecongo.be
sensibangkok.com
spotimixify.bradyisom.com
naked-waffles.com
ploypiti.me
chapter.gnab.fr
agorapacific.com
hkcda.curtisoft.net
wegloo.it
sistema.hidronet.org
slyke.ca
translate.gnab.fr
exodus.minhacentralonline.com.br
oppstart.stolpejakten.no
ab.jng.kr
www.soccerbond.com
reports.applied.digital
firebaseapp.com
info-extraction.glib.ai
redux-saga-firebase.js.org
app.rundiffusion.com
chat.wanttip.com
vecinos360.com
www.lattam.hu
app.inovenow.com
jupiter.gnab.fr
www.flairboat.com
firebaseapp.com
app.myco.immo
pumpables.ferreiraz.com.br
forge.gnab.fr
www.cafesanclemente.com.co
rootomega.llc
cat.gnab.fr
www.khoaapp.com
staysure.asia
www.pspkdevtest.net.au
id-admin.plizz.co
next.launchany.com
firebaseapp.com
loananalysis.aialtar.ai
firebaseapp.com
split.gnab.fr
firebaseapp.com
cmaxinstitutes.com
firebaseapp.com
jupiter.gnab.fr
tint.gnab.fr
tint.gnab.fr
www.nomu.io
gnab.fr
cleanonline.media
staging.forge.gnab.fr
johnpucciarelli.com
firebaseapp.com
www.folkia.eu
firebaseapp.com
kvplaos.com
contractbookworm.com
forge.gnab.fr
forge.gnab.fr
firebaseapp.com
sqlite.tk
forge.gnab.fr
morganblackhurst.com
www.dashboardevaluations.com
reservas.wokiapp.com
ollert.michaelclark.co
www.losfogueterostenerife.com
msp4.biz
firebaseapp.com
tint.gnab.fr
redux-saga-firebase.js.org
cook.gnab.fr
firebaseapp.com
*.gnab.fr
thesimplegeography.de
firebaseapp.com
thesimplegeography.de
tls.gnab.fr
fateptz.com
beespan.com
www.apur.am
firebaseapp.com
translate.gnab.fr
www.hived.ai
forge.gnab.fr
yop.gnab.fr
firebaseapp.com
marie-et-seb.com
paulosimoes.nerit.app
slack.jeffreylee.dev
admin.iotdataroom.com
firebaseapp.com
firebaseapp.com
qcasaimoveis.com
wygoda.net
app.cardiotracker.app
flyingtophat.co.uk
worlddancecongo.be
sensibangkok.com
spotimixify.bradyisom.com
naked-waffles.com
ploypiti.me
chapter.gnab.fr
agorapacific.com
hkcda.curtisoft.net
wegloo.it
sistema.hidronet.org
slyke.ca
translate.gnab.fr
exodus.minhacentralonline.com.br
oppstart.stolpejakten.no
ab.jng.kr
www.soccerbond.com
reports.applied.digital
firebaseapp.com
info-extraction.glib.ai
redux-saga-firebase.js.org
app.rundiffusion.com
chat.wanttip.com
vecinos360.com
www.lattam.hu
app.inovenow.com
jupiter.gnab.fr
www.flairboat.com
Certificate
The complete raw certificate details for staging.forge.gnab.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEdTCCA12gAwIBAgIQBT22yxjiwJFK+WwKy9xdnDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTEyMDcwMDAwMDBaFw0yMzAxMDUy MzU5NTlaMCAxHjAcBgNVBAMTFXN0YWdpbmcuZm9yZ2UuZ25hYi5mcjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAK3WBXI1O6U6cXN93w/yt+kVuvkZxpU9 9/4CGyamnmL4A/FIuBqSvNZd9t7b1iejXFNeLCWHD7qKLWoNJz549eoLrN9PNuEq QQZVIecRjulLO5+GIEuk2XCKiP1Wx7RKh/ZpKXUufrLus+xOUob0HxhfReZOgWY/ I8p0+6AqCAQoTpgKopMhilIgVsu4VzN5oslEbJs8+JbmkvjZQQhrw1GIxRedEIbJ Cb5f4ENejQBD4v4B/WxOgqjARNooOOqc4KSmuDDgRCE579ccuGi2X10QRxUnuuvx 8FdsqnlK28U3wDBNZUMKid8S2PmRDOZ9H7FHvSL1zS7VN38tOkvwmXkCAwEAAaOC AYMwggF/MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQW BBSp93Pp+lzRB1+Gswga35D9RG/y7zAgBgNVHREEGTAXghVzdGFnaW5nLmZvcmdl LmduYWIuZnIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFtYXpv bnRydXN0LmNvbS9zY2ExYi0xLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1Bggr BgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpv bnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250 cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB /wQCBQAwDQYJKoZIhvcNAQELBQADggEBADo95XvRk3f3aeMGNjpDlqDotCYOVTmb zgkdMWQw2FIM9MGU1ochWYIG1rV5aZiR3jmj3DnXmYlzF90qbE0p8YWmWgXEIm/F wcgjOr9rsGeWv4U/B4f04HVM5HvnvTvGhQ1pp9AOOmtyq+/4PjPf2mM+MlLUxveH x9qMy6Qe1eM3KXcXVTAVH8DmQcWo+GQRCfOt8b58t9xp3UJB0ncqYYA4sMiRHeMw OgJrDT9cNkBVZ+i1QikOca/GDWoBnhpAJ8vq92OVF9HjaJH6Jdfs+DiKSRSjue62 OIuhGTFTPU3R+771MxPxMtbQm55fe/y9gR5Hgy3Mieb09P35BMl/oIc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdYFcjU7pTpxc33fD/K3 6RW6+RnGlT33/gIbJqaeYvgD8Ui4GpK81l323tvWJ6NcU14sJYcPuootag0nPnj1 6gus30824SpBBlUh5xGO6Us7n4YgS6TZcIqI/VbHtEqH9mkpdS5+su6z7E5ShvQf GF9F5k6BZj8jynT7oCoIBChOmAqikyGKUiBWy7hXM3miyURsmzz4luaS+NlBCGvD UYjFF50QhskJvl/gQ16NAEPi/gH9bE6CqMBE2ig46pzgpKa4MOBEITnv1xy4aLZf XRBHFSe66/HwV2yqeUrbxTfAME1lQwqJ3xLY+ZEM5n0fsUe9IvXNLtU3fy06S/CZ eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6966577576861825695027342990917787036 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.forge.gnab.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21944764582749056505237357709480414174599146280498692140108880689738853250287298063061005550516369065377189225350467493193068724665195283948521990075359601899699410616542844934882796230658994296443153111541539361948916332200827168898539641052302505405590681968288115202855978922576007398376469224383867429046785714091365942497078001852650126160216703404317925808203425313945255113260077553587573965307477872209326466380966568509717734775365857464612901276449658983996421392861671399962009149925129575669199130453858106487161603814068422003892680237411777873704920549867702938649242744616057141597720732618582043695481 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a9f773e9fa5cd1075f86b3081adf90fd446ff2ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.forge.gnab.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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