2477c2-rolb.cpi04.sit.rolb.ife.ninja

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:e6:b9:3b:1f:fb:ff:7e:56:fa:67:f6:f7:d0:dd:25 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=2477c2-rolb.cpi04.sit.rolb.ife.ninja

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:e6:b9:3b:1f:fb:ff:7e:56:fa:67:f6:f7:d0:dd:25
Serial Number (int): 7844125186524535838900687959812529445
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 45:1a:5a:91:14:cc:8f:fc:4b:49:b3:0d:f6:88:78:12:0b:cf:88:06
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 35:75:f4:c5:81:07:93:85:91:18:65:c0:10:80:e7:b8:11:30:78:fc
Fingerprint (sha256): 1c:37:ac:98:cd:57:1a:7e:74:46:b3:bf:3f:8e:12:cf:d8:6f:20:ee:8b:4f:9a:2b:84:8e:ae:5c:25:ef:c6:38

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate 2477c2-rolb.cpi04.sit.rolb.ife.ninja

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2477c2-rolb.cpi04.sit.rolb.ife.ninja

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2477c2-rolb.cpi04.sit.rolb.ife.ninja
www.cpi04.sit.rolb.ife.ninja
r4.cpi04.sit.rolb.ife.ninja
release4.cpi04.sit.rolb.ife.ninja

Other certificates including the domain name ife.ninja

(limited to 100 certificates)
r0.wth02.sit.rolb.ife.ninja
tba-sit-green-eu-west-2.ldntbarit13.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt02.ife.ninja
tba-sit-green-eu-west-2.tbasit04.ife.ninja
tba-oat-green-eu-west-2.tbaoat01.ife.ninja
tba-sit-green-eu-west-2.tbasit10.ife.ninja
r0.cpi03.sit.rolb.ife.ninja
tba-vpt-red-eu-west-2.tbavpt02.ife.ninja
2682c1-rolb.int04.sit.rolb.ife.ninja
1174c2-rolb.wth03.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit13.ife.ninja
tba-sit-green-eu-west-2.tbasit05.ife.ninja
dss-r3.rolbdss.sit.dss.ife.ninja
tba-sit-blue-eu-west-2.tbasit13.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt03.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
tba-sit-blue-eu-west-2.tbasit11.ife.ninja
742c4-rolb.cpi01.sit.rolb.ife.ninja
tba-vpt-red-eu-west-2.tbavpt03.ife.ninja
1378c3-rolb.int08.sit.rolb.ife.ninja
754c4-rolb.int05.sit.rolb.ife.ninja
tba-sit-purple-eu-west-2.tbasit02.ife.ninja
tba-sit-red-eu-west-2.tbasit9.ife.ninja
1174c5-rolb.rtb01.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit04.ife.ninja
tba-sit-red-eu-west-2.tbasit04.ife.ninja
tba-sit-yellow-eu-west-2.tbasit11.ife.ninja
740c1-rolb.cpi01.sit.rolb.ife.ninja
bank.wth01.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit01.ife.ninja
1172c4-rolb.wth03.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit06.ife.ninja
tba-vpt-red-eu-west-2.tbavpt02.ife.ninja
tba-vpt-green-eu-west-2.tbavpt03.ife.ninja
tba-sit-green-eu-west-2.tbasit9.ife.ninja
tba-sit-green-eu-west-2.ldntbarit13.ife.ninja
tba-sit-yellow-eu-west-2.tbasit9.ife.ninja
tba-oat-red-eu-west-2.tbaoat01.ife.ninja
2611c1-rolb.rit04.sit.rolb.ife.ninja
2682c1-rolb.int04.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit11.ife.ninja
tba-oat-red-eu-west-2.tbaoat01.ife.ninja
tba-sit-red-eu-west-2.tbasit08.ife.ninja
752c2-rolb.wth01.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit05.ife.ninja
tba-sit-blue-eu-west-2.tbasit03.ife.ninja
tba-sit-green-eu-west-2.tbasit02.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt02.ife.ninja
742c2-rolb.int11.sit.rolb.ife.ninja
tba-sit-green-eu-west-2.tbasit06.ife.ninja
tba-sit-blue-eu-west-2.tbasit13.ife.ninja
740c1-rolb.cpi01.sit.rolb.ife.ninja
930c1-rolb.cpi03.sit.rolb.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt03.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt01.ife.ninja
r0.int01.vpt.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit08.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
release10.rtb01.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit07.ife.ninja
tba-sit-purple-eu-west-2.tbasit02.ife.ninja
2626c2-rolb.cpi04.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit06.ife.ninja
tba-sit-blue-eu-west-2.tbasit07.ife.ninja
tba-vpt-green-eu-west-2.tbavpt03.ife.ninja
tba-sit-red-eu-west-2.tbasit9.ife.ninja
tba-sit-yellow-eu-west-2.tbasit11.ife.ninja
tba-sit-green-eu-west-2.tbasit02.ife.ninja
tba-sit-blue-eu-west-2.tbasit08.ife.ninja
tba-sit-green-eu-west-2.tbasit9.ife.ninja
tba-sit-green-eu-west-2.ldntbarit13.ife.ninja
tba-vpt-green-eu-west-2.tbavpt02.ife.ninja
2615c2-rolb.int04.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit04.ife.ninja
tba-sit-blue-eu-west-2.tbasit05.ife.ninja
bmb.tbadev01.ife.ninja
tba-sit-yellow-eu-west-2.tbasit10.ife.ninja
r0.int01.vpt.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit10.ife.ninja
tba-sit-pink-eu-west-2.tbasit02.ife.ninja
tba-sit-yellow-eu-west-2.tbasit08.ife.ninja
tba-sit-red-eu-west-2.tbasit11.ife.ninja
tba-vpt-green-eu-west-2.tbavpt03.ife.ninja
tba-sit-red-eu-west-2.ldntbarit13.ife.ninja
tba-vpt-red-eu-west-2.tbavpt03.ife.ninja
742c1-rolb.int09.sit.rolb.ife.ninja
2615c2-rolb.int04.sit.rolb.ife.ninja
1377c2-rolb.bus04.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit08.ife.ninja
tba-sit-red-eu-west-2.tbasit06.ife.ninja
tba-sit-red-eu-west-2.tbasit01.ife.ninja
mybarclays-vpt-f.int03.vpt.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit05.ife.ninja
bmb.tbadev01.ife.ninja
tba-sit-yellow-eu-west-2.tbasit10.ife.ninja
oauthobbcl.tiaaob.awsdevln.ife.ninja
742c4-rolb.int01.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit06.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt02.ife.ninja
tba-sit-red-eu-west-2.tbasit06.ife.ninja

Certificate

The complete raw certificate details for 2477c2-rolb.cpi04.sit.rolb.ife.ninja in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz91PaL0eu9Xw5BCAmkWf
YPqqz7xlZTYiltB/hAcIBAmIoLgTv3nqAEpAjWhy5UjXc0tJ+iybUFNjBCgBglTf
6MzPUuyOxp4KTpNoYd1AAXiz+rwgz2c1ebYaS1A6J4/Q0bXFLIYmbKadG2Mopq9a
bQ3pahvXI9iyrMC/aAZ1zajcvb9RYxP9FseoPZRCzWXxd1NhD+zWkhoDPei2HnpN
qNkNBlxXjS082S4+46j2T3Veho+gHz3gTOCniVz0NP/gD/YYlgcAeP9kfzoLaHlq
jHHB2gmWom42Y+magAFn1HJ13sCYPSxDBI2vVlBD/5ARn9pSq3JoynAzPOwy1wGG
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7844125186524535838900687959812529445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2477c2-rolb.cpi04.sit.rolb.ife.ninja'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26240461251027948734109996156119817785633460034415930674245170202227257386704115423929859541211358671613908000031815780684424380197185403220523660318477942838015916893192935275639238366765529067508980973904947957309435552650096700498037199091895557160085168778523000428083980883476923028258805181948109585707532154165269981217494660603067758833575810599042885685786505452854648530119514057601306115058735373755710951176202907091578861366263067898275199121363588714486098059499407861834684855533278127231514436244480948427642283133615066033926710881157762484160857853207881481171919063745220766363052521134052167747299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							451a5a9114cc8ffc4b49b30df68878120bcf8806
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2477c2-rolb.cpi04.sit.rolb.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpi04.sit.rolb.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r4.cpi04.sit.rolb.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release4.cpi04.sit.rolb.ife.ninja'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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