*.coordinate.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:68:33:90:41:8e:13:17:52:ea:63:19:77:e0:f9:c6 was issued on by Amazon.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.coordinate.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:68:33:90:41:8e:13:17:52:ea:63:19:77:e0:f9:c6
Serial Number (int): 20479464642094831716166204147783236038
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 66:44:1c:57:24:0b:8f:5f:14:ae:e3:b0:a1:e2:df:bc:8f:94:d1:80
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 9c:68:72:19:c7:b8:b9:aa:3c:a6:b3:a2:d6:81:8a:f4:db:92:5b:88
Fingerprint (sha256): 3a:51:23:02:88:5b:33:a8:20:11:69:91:f2:12:fc:5a:01:a9:03:9d:28:e8:9e:d0:0c:1a:68:e6:ba:b8:71:16

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.coordinate.cloud

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.coordinate.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.coordinate.cloud
bookings.castlefordtigersfoundation.co.uk
bookings.demosports.co.uk
bookings.coordinate.team
es.mbasportscoaching.com
healthyholidays.calderdale.gov.uk
fuelled.northlincs.gov.uk
*.staging.coordinate.cloud
bookings.eliteyouthsports.co.uk
bookings.staging.coordinate.cloud
bookings.watfordfccsetrust.com
ne.mbasportscoaching.com
bookings.rocketholidaycamps.co.uk
booknow.united-education.co.uk
bookings.bwitc.org.uk
bookings.kssp.co.uk
bookings.sambasportscoaching.co.uk
sw.mbasportscoaching.com
haf.youngcamdenfoundation.org.uk
wc.mbasportscoaching.com
book.mbasportscoaching.com
ws.mbasportscoaching.com
bookings.activeme360.co.uk
bookings.mbasportscoaching.com
peel.mbasportscoaching.com
bookings.thepsdgroup.org.uk
bookings.achieve4all.co.uk
bookings.soccerstarsuk.co.uk

Other certificates including the domain name coordinate.cloud

(limited to 100 certificates)
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
coordinate.cloud
islington.coordinate.cloud
staging.coordinate.cloud
support.anevia.com
coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
coordinate.cloud
share.coordinate.cloud
ignite.coordinate.cloud
coordinate.cloud
support.anevia.com
*.coordinate.cloud
demo.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
support.anevia.com
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
support.anevia.com
support.anevia.com
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
coordinate.cloud
islington.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
coordinate.cloud
*.coordinate.cloud
intranet.coordinate.cloud
coordinate.cloud
support.anevia.com
*.coordinate.cloud
coordinate.cloud
staging.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
support.anevia.com
coordinate.cloud
support.anevia.com
support.anevia.com
*.coordinate.cloud
support.anevia.com
support.anevia.com
coordinate.cloud
demo.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
ignite.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
islington.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
support.anevia.com
*.coordinate.cloud
share.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
*.dramakidsadmin.com
ignite.coordinate.cloud
islington.coordinate.cloud
*.coordinate.cloud
*.coordinate.cloud
intranet.coordinate.cloud
support.anevia.com
ignite.coordinate.cloud
*.coordinate.cloud
coordinate.cloud
test.coordinate.cloud
*.coordinate.cloud

Certificate

The complete raw certificate details for *.coordinate.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAvJbR0wN2vIvnZDDu6c
87aMjtvtAGxjah7SqZv9DSMBSp/N0QFLo4gKHs26iZSEvEzmsRVxn4N27dixw6Mw
4gvN7+uoiDjBsWtjSZl8qWjLEcFbpLKaKA+18aHx5AXdYkeoHyn7zbkwxGMGLRNZ
r4n58hJAw5g7rlBMSR5rRcwadnmYGAIHpPTKbdYloSKJcSjmrECqmQ8tZr/hz2/n
UUHdDyzvIx+7olSO/XXc++dvebWJix5aT1NJMlIFfNw3sTgtzersW4jr4RT628RE
4FXzrjb9oWYMeG3ZrOm/q+fmsKmwHLk99kf3Vpk+Z9BuMjRGDPqxaSZGUBstn//d
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20479464642094831716166204147783236038
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.coordinate.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22223753972186256349336587629428198027699361689778708050965368170749568929638201144730584896578960497497144743781303302258842976873050142186173294707273519633476721696507466082918306806760747213953189850953416368740229527725930367667497564160555175688208592681172956119196258329556987369908187240014605476667977989644248598874507228105486004547272058674230236752441829207212214302372267500970161054362509478800777549396322712112708695347112267803451782645560324656321951777835558221444844758931304041718011618410205619528103426022889921360869797825044615196990254934574939579848973861744301755535020828731556390493543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66441c57240b8f5f14aee3b0a1e2dfbc8f94d180
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (824 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coordinate.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.castlefordtigersfoundation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.demosports.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.coordinate.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.mbasportscoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyholidays.calderdale.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuelled.northlincs.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.coordinate.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.eliteyouthsports.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.staging.coordinate.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.watfordfccsetrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ne.mbasportscoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.rocketholidaycamps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booknow.united-education.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.bwitc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.kssp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.sambasportscoaching.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw.mbasportscoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haf.youngcamdenfoundation.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc.mbasportscoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.mbasportscoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.mbasportscoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.activeme360.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.mbasportscoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peel.mbasportscoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.thepsdgroup.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.achieve4all.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.soccerstarsuk.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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