img.spafinder.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0d:8c:93:e1:19:fc:00:22:ce:0a:eb:10:c3:2a:c2:79 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=img.spafinder.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:8c:93:e1:19:fc:00:22:ce:0a:eb:10:c3:2a:c2:79
Serial Number (int): 18009884853988859914884789418140025465
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d7:92:3f:76:ae:43:65:ac:f1:28:6e:5b:3d:99:dd:de:13:c8:84:4b
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 0e:d2:df:52:d6:50:7c:71:fe:51:3f:4b:20:73:e2:c6:f7:46:e8:d8
Fingerprint (sha256): 18:c8:c1:eb:bf:cb:5f:ff:cc:17:e6:eb:7f:f7:6e:61:30:d6:d8:c2:a3:aa:1d:35:5c:90:8e:2e:54:e8:88:c3

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate img.spafinder.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for img.spafinder.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

img.spafinder.com
img.entreecard.com
img.wayspa.com

Other certificates including the domain name spafinder.com

(limited to 100 certificates)
cdn.spafinder.com
f164.zooz.cf
blockcommunicator.com
filipwolanski.com
www.coreputters.com
vpln.spafinder.com
singlepointsol.com
midas.spafinder.com
midas.spafinder.com
www.lamconcrete.com
scamardi.info
svs.spafinder.com
test.app.kameo.co
dev.sbsb.kr
geoip.spafinder.com
studentsa.ru
www.fastclub.app
img.spafinder.com
shop.spafinder.com
penyadap.com
link.zeugnis.codes
track.spafinder.com
pull-dev.spafinder.com
labs.spafinder.com
raven.amp.prod.spafinder.com
img.spafinder.com
painelpadreosvaldo.g2canal.com.br
getelly.app
www.trim.social
icoach.pulso-preventielab.be
www.desafio21d.com
cdn.spafinder.com
bekbakes.com.au
vpln.spafinder.com
www.ogden.co
www.devicedb.app
www.stanplus.com
coronaviruslive.io
spafinder.com
services-lakeshore.smartbuildings.app
stage.eclypsium.com
link.investo2o.com
instantglance.com
elleven.minhacentralonline.com.br
enews.spafinder.com
shop.spafinder.com
desenfila.com.br
listings.spafinder.com
brian-poole.com
webnamieru.net
beta.extraordinarygrace.com
www.gloryth.com
midas.spafinder.com
linkedin-auth.karoldepka.com
www.diofantino.com
enews.spafinder.com
links.cavalry.scenegroup.co
klondikesolitaire-online.com
lxandrx.com
midas.spafinder.com
www.giovannihomeimprovementinc.com
tsubasa2540.ml
tarjem.sam-techs.com
shop.spafinder.com
img.spafinder.com
link.chalk.com
spafinder.com
vpln.spafinder.com
rameshkry.2rk.in
rockersesports.com
rtff.mjbdevs.co.uk
goldentranscript.column.us
g4rdens.xyz
labs.spafinder.com
mrgreensplumbing.com
lm.spafinder.com
enews.spafinder.com
www.lingosong.com
labs.spafinder.com
spafinder.com
groomerbox.com.br
inscist.com
www.camilopenalver.com
www.jismunboys.com
geoip.labs.spafinder.com
rtff.mjbdevs.co.uk
www.solal-experience.com
dev.niclas.xyz
tnmop.in
dcotagroup.com
aeons.me
find.spafinder.com
www.vulturedatalabs.com
benchmarkassociate.com
grammarabic.org
aaliyahlouns.com
radio-dev.gera.fan
spafinder.com
incapsula.com
insta-homes.org

Certificate

The complete raw certificate details for img.spafinder.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgIQDYyT4Rn8ACLOCusQwyrCeTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTEyODAwMDAwMFoXDTI0MTIyNjIzNTk1OVowHDEa
MBgGA1UEAxMRaW1nLnNwYWZpbmRlci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZaRw+sr76C3P2ZgCboufUmN503wgxgyDTwL/Ucq+4BGz2f3uY
bCvEmDESDS5Kx06fOAg+bXeeUEUSMx5JZPWPKFqft1GGdC4I14LGgHW7LtdmQYJc
QpXqUQFwXeh6icOaXcUNXGv5I+Fg2XxyZSYCQG2KM3vo67nBiqP9GK7iv0cKpPGf
rZCAqUUBK/nzcVmREy9avPG1TJchMeyJ/x2E9knDHgEyStwgByaoC2U01YKz5R+W
PjFf11w4TUnCgetzVu3w0VlbO4dW3Bnl0/xFlUVR5nhwXD+FY9VQ3e/hjY7+K35V
MwCf/ekVCXDHLF6CQ9NfvcWNfU/j6l4vLLj9AgMBAAGjggMOMIIDCjAfBgNVHSME
GDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQU15I/dq5DZazxKG5b
PZnd3hPIhEswQAYDVR0RBDkwN4IRaW1nLnNwYWZpbmRlci5jb22CEmltZy5lbnRy
ZWVjYXJkLmNvbYIOaW1nLndheXNwYS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7
BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNv
bS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v
b2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j
cnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAA
MIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgB2/4g/Crb7lVHCYcz1h7o0tKTN
uyncaEIKn+ZnTFo6dAAAAYwUnorpAAAEAwBHMEUCIQDW4FwS1LYZXTxvTErQ7qU0
rQZiSwIdAp/NPOWrLNdI7AIgMLQ6dKfXOQZKRrhnh7zaR/aLYwS31bblKdaMGpak
+IsAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYwUnorjAAAE
AwBHMEUCICZXXfS1ZCqXejghwMay48cpbMVtYXte7nkMHJVwLza/AiEA5wCeOk5h
o5Tt9rtKQTZJCWjg6yL28BLqe/bGzNP7sxMAdgDatr9rP7W2Ip+bwrtca+hwkXFs
u1GEhTS9pD0wSNf7qwAAAYwUnor0AAAEAwBHMEUCID4eoIxZX3CVq4a0UeAuSpZU
Jd6v54MHljsZM2RMGWziAiEAnvXlpcGuJDVyCcgjADAK7BfPNfagj6RqQjz2KP52
A/IwDQYJKoZIhvcNAQELBQADggEBAHqvSb8/z3RVc3lwxRE93hp/eKMfcV2hb3/i
dxVczXVIlpLKaRruFFtLaQcK9LKLjWwL+8MRCoCUIVxiF5Cq5t9CB3IGDlcVzwk1
/4xualL9K1rZSCXV8iQrS7QxqLbB4A2/ZpZTtB10q6hQ0aP0pg73n9mBnkCY0KfQ
ZXtK68ZcOKqBKuv7zd3hLS/PS4xucwtrkQUwfXRZykVk8SMZyJW94bPTyT0vrI5S
8KE2Dz4eH+eelPQMumm4w1mIGMeOPiw00p70PDNNU30X1GZASGLbHUKSzVWb8SA2
CQM7bddwGoI8e2Ap4+WcYFZQHwj03UvbVIHftacaDrEQzDc7jNg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WkcPrK++gtz9mYAm6Ln
1JjedN8IMYMg08C/1HKvuARs9n97mGwrxJgxEg0uSsdOnzgIPm13nlBFEjMeSWT1
jyhan7dRhnQuCNeCxoB1uy7XZkGCXEKV6lEBcF3oeonDml3FDVxr+SPhYNl8cmUm
AkBtijN76Ou5wYqj/Riu4r9HCqTxn62QgKlFASv583FZkRMvWrzxtUyXITHsif8d
hPZJwx4BMkrcIAcmqAtlNNWCs+Uflj4xX9dcOE1JwoHrc1bt8NFZWzuHVtwZ5dP8
RZVFUeZ4cFw/hWPVUN3v4Y2O/it+VTMAn/3pFQlwxyxegkPTX73FjX1P4+peLyy4
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18009884853988859914884789418140025465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'img.spafinder.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27445544013994501083507762454610858639987419900575894047090143121881442262661886388521152336337406892743064418820588339827967508687797014490060952198504276113613823918489220125945603437306841404793354365466528192989316618430428195885082269378547054271113474505069723461257189438610824650895077684072183857409163206895418897794211413892093521242039614218762890317466378673721233391466064329762704069136847286531240187626094492956745280263807120244787706388469605514153702879123504651544791426806354253928058921384123629481265280607784733852439333425348574250833497617903259873331963430071746053969028437573321372776701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7923f76ae4365acf1286e5b3d99ddde13c8844b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.spafinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.entreecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.wayspa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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