go.th.knightfrank.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0e:68:71:14:3e:60:06:31:ff:e8:6a:a1:18:01:73:1a was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=go.th.knightfrank.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:68:71:14:3e:60:06:31:ff:e8:6a:a1:18:01:73:1a
Serial Number (int): 19151484330429063962200989778179093274
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5b:4f:bd:b9:e3:d9:5d:ba:ee:e8:f8:b2:f4:5d:03:3c:f4:9b:a6:0a
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): f9:88:00:74:b1:85:6a:a3:7c:d7:cc:35:ff:03:18:8d:95:af:33:07
Fingerprint (sha256): 2d:4d:57:63:db:8f:65:54:2a:4b:a5:24:fa:b3:a1:fb:b7:29:78:8e:95:6a:3a:e4:10:20:01:63:99:22:82:18

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate go.th.knightfrank.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go.th.knightfrank.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.th.knightfrank.com

Other certificates including the domain name knightfrank.com

(limited to 100 certificates)
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
media.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.acumenthirdsector.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
emails.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
secure.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
www.webmail.ke.knightfrank.com
globalprotect.in.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
secure.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
mail.tz.knightfrank.com
webmail.ke.knightfrank.com
www.acumenthirdsector.net
mail.knightfrank.com
mail.tz.knightfrank.com
secure.knightfrank.com
support4.cdnetworks.net
remote.kfdublin.ie
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.webmail.ke.knightfrank.com
support4.cdnetworks.net
sip.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
mail.knightfrank.com
support4.cdnetworks.net
draganddrop.knightfrank.com
mail.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
emails.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
meet.hk.knightfrank.com
lyncweb.au.knightfrank.com
www.webmail.ke.knightfrank.com
support4.cdnetworks.net
vxprint.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.acumenthirdsector.net

support4.cdnetworks.net
mail.knightfrank.com
mylets.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
*.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
media.knightfrank.com
support4.cdnetworks.net
draganddrop.knightfrank.com
go.th.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
sip.au.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net

Certificate

The complete raw certificate details for go.th.knightfrank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIQDmhxFD5gBjH/6GqhGAFzGjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTIyNjAwMDAwMFoXDTI1MDEyMzIzNTk1OVowIDEe
MBwGA1UEAxMVZ28udGgua25pZ2h0ZnJhbmsuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA8MGuls4D0112gW7rL1pnLQLeLWIR7aapi80IZ/Cfpki3
xc9i85FdhHkd1+JYhEtowelEyRoaRhmrFwDTQOFpjADW4/o84jmRaBcJfUtUqC8O
Wb68DlBB/zOsnRcGCkceEdJ+aBEXb49nWr+cj9t0VJeZq0iYWBQzEVA2OqUahD/x
vFQKjzeCxXUSTAy2qAKMW6Cxz1T4BNjKWm8b10olnrFP9oruQdtlsY0v6HLTipps
xWjYn3SvBlqqsYAtMd0oD+ABABf1yr7bgNDT0o98ZTBiXQEkKKGElRUR0Tr6UxVn
iPTj5bAVkB5t3eZEqCFzbxMHPVqetxz61kyJmJzwHQIDAQABo4IC7jCCAuowHwYD
VR0jBBgwFoAUVdkYX9IczAHhWLS+q9lVQgHXLgIwHQYDVR0OBBYEFFtPvbnj2V26
7uj4svRdAzz0m6YKMCAGA1UdEQQZMBeCFWdvLnRoLmtuaWdodGZyYW5rLmNvbTAT
BgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu
cjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcw
LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2
BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJt
MDMuY2VyMAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2
AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjKRkzj0AAAQDAEcw
RQIhAPZ5J2a7pZH4/Wpu9BZTs+hRwR3fjQWUH6jCNh8e59tNAiB5Ty5vYZ411Kzl
MfHimNTHq9zKko5Ga6I7mfxNwScXvAB2AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWe
uQMv2Q6MLnm4AAABjKRkzmUAAAQDAEcwRQIhAJsvBh10SGlGcN5pRFgok4Bj6t0m
/wIJynccZRT+qNiLAiAddziZQVM+WWok5EUvYaFXWRzq5PLiQW2OKZJcvLJuIwB2
AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAABjKRkzokAAAQDAEcw
RQIgWkJsIlf6Lh8AV3ldaL5sEzpYcZTD5/QCFhS5mx8Y72gCIQCvGD7bfNjCNhrl
46LwXseX50e+OFHmyGVRbgR2scXW5DANBgkqhkiG9w0BAQsFAAOCAQEAnUY1FjBb
2Pfm9TNn2iNCJuGqnLVCjck1ZhZR9Ij12iVTmQ0GNcFuvxVu7ufZbGrL4Ux8pRgo
GGV1oaHWCaOgxl2/8gL4hAXjMdzRtfhJJWfpZCsp6WUF1YKXig9riiGdzDcqWLOV
kdt3KQD5XO54SJ/nMGTTfDRrOd/pbbI5a9OP+XwYkB+2rEx7ihfqIEhPRvf/U+Pj
/JPoI5CSqNJiiVIacZG6aJG0Z21D5qNP7AokHDoA2frdhQndsrnIuC3Dfc0LqmVL
sqe8cNd/138iVVwpYXYFQMtxFuEwU88+zb5uCnljeyILfQDf3NTKqjI20ftzkQlw
zsKr3D8xdGLX8Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MGuls4D0112gW7rL1pn
LQLeLWIR7aapi80IZ/Cfpki3xc9i85FdhHkd1+JYhEtowelEyRoaRhmrFwDTQOFp
jADW4/o84jmRaBcJfUtUqC8OWb68DlBB/zOsnRcGCkceEdJ+aBEXb49nWr+cj9t0
VJeZq0iYWBQzEVA2OqUahD/xvFQKjzeCxXUSTAy2qAKMW6Cxz1T4BNjKWm8b10ol
nrFP9oruQdtlsY0v6HLTippsxWjYn3SvBlqqsYAtMd0oD+ABABf1yr7bgNDT0o98
ZTBiXQEkKKGElRUR0Tr6UxVniPTj5bAVkB5t3eZEqCFzbxMHPVqetxz61kyJmJzw
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19151484330429063962200989778179093274
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.th.knightfrank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30392701340069079655092537739252579218005685771967934971342404491187360797102133219476461878936369838851202713383513033602637199551541168064885924873613337769828858941850752656287792391163615629131054352622772762385268111494412250271109124750448298941147466789640183407747932991087401921162164384182563325111933395034233900534269603032381974232502025447329397870464889878155508651250181518490170919784644440416835058768597881605876287830610319337962286767842538825124860563936053371326535236765813850033077420374053008751300652875554011500942563308033185968367650707232083217463535572281677622556273619089220186206237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b4fbdb9e3d95dbaeee8f8b2f45d033cf49ba60a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.th.knightfrank.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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