*.ziffdavis.com

Issued by Amazon

About this certificate

This digital certificate with serial number 03:98:75:0a:90:00:11:0a:81:82:bf:bb:93:6a:c1:9d was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ziffdavis.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:75:0a:90:00:11:0a:81:82:bf:bb:93:6a:c1:9d
Serial Number (int): 4779286988623215694634605994373202333
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: eb:d9:f0:86:0d:f1:23:5b:21:18:34:d7:01:77:76:a3:31:f4:48:cd
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 2c:ce:66:cc:8a:ee:c2:d3:a1:c2:1a:e3:2a:86:39:a1:28:49:a0:5b
Fingerprint (sha256): 19:2b:99:0d:dc:4a:41:6e:a3:c8:43:ad:73:d9:46:99:a6:ee:2c:f0:d9:b5:f3:65:fe:24:8c:3e:9e:aa:9a:06

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.ziffdavis.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ziffdavis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ziffdavis.com
ziffdavis.com

Other certificates including the domain name ziffdavis.com

(limited to 100 certificates)
ziffdavis.com
ziffdavis.com
vpn-eu.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
*.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
vpneast.ziffdavis.com
*.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
*.ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
dev.signals.ziffdavis.com
*.ziffdavis.com
vpn-eu.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
vpn-usw1.ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
vpneast.ziffdavis.com
ziffdavis.com
webmail.ziffdavis.com
sli.ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
*.ziffdavis.com
vpn-eu.ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
team.ziffdavis.com
*.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
vpn-eu.ziffdavis.com
ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
shoppinginsights.ziffdavis.com
vpn-usw1.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
ziffdavis.com
*.ziffdavis.com
vpn-usw1.ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
webmail.ziffdavis.com

Certificate

The complete raw certificate details for *.ziffdavis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgIQA5h1CpAAEQqBgr+7k2rBnTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTExMTAwMDAwMDBaFw0yMjEyMDky
MzU5NTlaMBoxGDAWBgNVBAMMDyouemlmZmRhdmlzLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKlSapPVJBFGTNgd+qagh0fkyjxNBKD4L8puvAas
RcTA51kGbBW8abg7rrN/1P0dvajVAKkp69UlwhVXawsRX7iP7vjz7gsyPGOP4V1Q
h9mlRefG+qMSaHxLlzc8dIqyCYzpYuaXd9JW4sdGcgUdn7Bmv6usK8ABOZm/YrRO
GRPp/v4sQboFVhPMwcusIGL8ld+snmGHk9eXh4b/F+emIlg9keeQUqcEBQ4AzKfs
Kcg7xtT9vFP8XBK+hXca1xC2EWPS3D4YgHLW+T6sT+mc+G3EUx7WWbTOdyUMqiDa
sJMqUdHZvTpdlGLCNgV0wdIFcskYGTUZhlle3uVhRW+EVhECAwEAAaOCAvowggL2
MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBTr2fCG
DfEjWyEYNNcBd3ajMfRIzTApBgNVHREEIjAggg8qLnppZmZkYXZpcy5jb22CDXpp
ZmZkYXZpcy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFt
YXpvbnRydXN0LmNvbS9zY2ExYi0xLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1
BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFt
YXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6
b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggF/BgorBgEEAdZ5
AgQCBIIBbwSCAWsBaQB3ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceE
AAABfQqktU8AAAQDAEgwRgIhAOp2wGPQayyOIkq7H4CsJADisptj0LlgaZ9dezcD
u5bkAiEA9y6a3D3Vt2wvQcbrNmQBluN7q4ace0BoGy29az/HqxMAdgBByMqx3yJG
ShDGoToJQodeTjGLGwPr60vHaPCQYpYG9gAAAX0KpLTdAAAEAwBHMEUCIQDwAbaJ
gsPBlFAIY9JGyq+KIdMWzQiIP2XiRr0In2ZFGwIgdl3iSB9k0R5xJ8qF3HTKt3hx
QHJ+pvD6gQO3Hz3Kdx4AdgDfpV6raIJPH2yt7rhfTj5a6s2iEqRqXo47EsAgRFwq
cwAAAX0KpLUKAAAEAwBHMEUCIFajogavQLO7g6BYYLUEKT1ZPU5+gS7VQPCVSP0k
QFD+AiEAiLn8BLfgqSlR7DjI31y9OkFgEGbnEnlbKokzROw/TjEwDQYJKoZIhvcN
AQELBQADggEBACr99iG8ok6GkqfP5GIJVaW+dDyVapxgrPQz2uOmuVXC+J63f7/L
A3B9IOdpLL+KKcgj+MVSCeJvKArgFKDc32erjW/CSS1mqycW1UTAta9xMUXaDYob
iZdr7x2KT9z8ep8Xz524E1aKLAutixY1TzqM/XK2pjZQRtrOZRoSajzeAHRMBl2d
qbpwv7E0Z3xMCq5oOVZyAGxy7J2V9rH6Ken8bkkjVjjtIi0aws2uYLlUmKC58hNH
sRGhyy1uAMyKGfBWHYpicw6AyKgRKaNzmElZxIFBIBKHEeoMzz0JOrWPqbqF8K1r
DavmNj/vIxxbok6zTUoC1CtjFQhVbUMK/fY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVJqk9UkEUZM2B36pqCH
R+TKPE0EoPgvym68BqxFxMDnWQZsFbxpuDuus3/U/R29qNUAqSnr1SXCFVdrCxFf
uI/u+PPuCzI8Y4/hXVCH2aVF58b6oxJofEuXNzx0irIJjOli5pd30lbix0ZyBR2f
sGa/q6wrwAE5mb9itE4ZE+n+/ixBugVWE8zBy6wgYvyV36yeYYeT15eHhv8X56Yi
WD2R55BSpwQFDgDMp+wpyDvG1P28U/xcEr6FdxrXELYRY9LcPhiActb5PqxP6Zz4
bcRTHtZZtM53JQyqINqwkypR0dm9Ol2UYsI2BXTB0gVyyRgZNRmGWV7e5WFFb4RW
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4779286988623215694634605994373202333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ziffdavis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21374914540501957569004671886758129231359999281054532770829329401888000406740687057696352275812658422318361302584426933442254279856553051750864121025219646339563199823224781721754985237288645236958233029650757114179489766093070907383961474400335234487815412436360295473054875793373976074654845859492957310963103615297435136482556688339760276655640208517806263565904713216156862032268002872039473849601625505368241843105770507735396369253845298285274250081964005563028877636246506419155507691416522925151198656750763843194986158339370187526080669128350220093325448757218007080509922405157234405398745488552169876772369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebd9f0860df1235b211834d7017776a331f448cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ziffdavis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziffdavis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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