secondary-prod-mm.prod-getty.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 06:fb:e7:2d:c7:eb:15:70:ab:91:31:51:dc:f6:6a:81 was issued on by Amazon.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secondary-prod-mm.prod-getty.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:fb:e7:2d:c7:eb:15:70:ab:91:31:51:dc:f6:6a:81
Serial Number (int): 9283323349959209420098420194925767297
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 26:ac:46:17:c9:60:81:4d:ed:f0:da:56:df:bb:d0:73:78:26:44:45
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 66:30:71:28:3c:ac:51:11:2c:5f:a4:a5:60:ea:6b:1d:94:1a:df:51
Fingerprint (sha256): 3b:f3:2e:ed:45:b3:71:99:83:f1:9d:5d:26:a5:41:58:78:d9:02:22:fe:40:b1:e9:ce:82:bd:dd:1d:b0:03:89

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate secondary-prod-mm.prod-getty.cloud

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secondary-prod-mm.prod-getty.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secondary-prod-mm.prod-getty.cloud
mm.gettyimages.com
*.gettyimages.com
mmpart.gettyimages.com
www.hitachiaircon-mediamanager.com
www.mbgolfmedia.com
www.lbbw-mediamanager.de
www.eondanjaq.com
www.emphotomanager.com
www.ltamediamanager.com
www.caondemand.com
www.euroleagueimagehub.com
www.nationwideimagelibrary.co.uk
www.himediamanager.com
www.bundesliga-fotodatenbank.de
www.hearstimagelibrary.com
www.samsungeasyads.com

Other certificates including the domain name prod-getty.cloud

(limited to 100 certificates)
secondary-prod-in.prod-getty.cloud
uw2-in.prod-getty.cloud
customcontent.gettyimages.com
briefs-middleware.custom-content.usw2.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
wildcard.prod-getty.cloud
prod-mm-missing.prod-getty.cloud
prod-in.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-in.prod-getty.cloud
prod-in.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
ue1-in.prod-getty.cloud
uw2-in.prod-getty.cloud
prod-mm.prod-getty.cloud
secondary-prod-in.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-in.prod-getty.cloud
usw2-unipassthru.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
wildcard.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
ue1-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
wildcard.prod-getty.cloud
ue1-mms-ws.prod-getty.cloud
wildcard.prod-getty.cloud
uw2-in.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
middleware-customcontent.gettyimages.com
uw2-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
*.asset.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
metrics.usw2.prod-getty.cloud
customcontent.gettyimages.com
uw2-in.prod-getty.cloud
prod-mm.prod-getty.cloud
ue1-mm.prod-getty.cloud
*.prod-getty.cloud
middleware-customcontent.gettyimages.com
prod-mm.prod-getty.cloud
uw2-mm.prod-getty.cloud
ue1-mms-api.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
usw2-unipassthru.prod-getty.cloud
ue1-mms-api.prod-getty.cloud
*.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
customcontent.prod-getty.cloud
prod-in.prod-getty.cloud
prod-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
ue1-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
customcontent.gettyimages.com
uw2-mms-ws.prod-getty.cloud
prod-mm.prod-getty.cloud
*.entapp-integr.prod-getty.cloud
prod-mm.prod-getty.cloud
customcontent.gettyimages.com
secondary-prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
customcontent.prod-getty.cloud
prod-mm.prod-getty.cloud
*.prod-getty.cloud
wildcard.prod-getty.cloud
wildcard.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
uw2-in.prod-getty.cloud
ue1-in.prod-getty.cloud
briefs-middleware.custom-content.usw2.prod-getty.cloud
uw2-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
middleware-customcontent.gettyimages.com
*.prod-getty.cloud
prod-in.prod-getty.cloud
wildcard.prod-getty.cloud
ue1-mm.prod-getty.cloud
uw2-mms-api.prod-getty.cloud
wildcard.prod-getty.cloud
usw2-unipassthru.prod-getty.cloud
middleware-customcontent.gettyimages.com
secondary-prod-in.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
middleware-customcontent.gettyimages.com
uw2-mm.prod-getty.cloud
ue1-in.prod-getty.cloud

Certificate

The complete raw certificate details for secondary-prod-mm.prod-getty.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CLVyVAMFxe+ivg690ho
Ag1b6CPu6DuknMxtVTgYhUNu+T0lwBEMgxGUrJEIBwWAbnxBca+r7a2OpHJfakv6
Dwziucg+/O6nh5dyigETc98KYXWcP/cRtgscvQ4tZF77Ml51CMDHonWzRiUfXaU/
Fp282qTITFRyx2R8979cQmt6iZscuR1jUx8lRDcqHwIODTzpJDPday2SiAv4gXWD
q1PjYaeTk5gOc8qOIWum83HftJmajxTNW3wGHHKrYWQMwwBEgOHUrEcq6sJWqAW4
jWi9faNqhBlh9Kz6YbWogCWQonOpxoZANnAYCDPl9F++Unxj0XdXTZWaPkLhmt2k
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9283323349959209420098420194925767297
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secondary-prod-mm.prod-getty.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26779698482338835620884796782780087690471092133668935560778887552220238085969458048466496930458886395932612264651838374046775842699679705483374773981033665647618712825282713304096145251830549367364097237679585916559474175309212346797430981449621377466248530441195498296775644207980120148836634306691566242634389903262401256590326287346659978089530857308588084949848832442422651763686766988193024857524644918930409722246477215830307995908657444133463073251745729729764911402524457025046476914187852709488366739925586319551461193402461736982116826204163268741568746166426542917879754992492086287965126862018372848952543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26ac4617c960814dedf0da56dfbbd07378264445
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (445 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondary-prod-mm.prod-getty.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmpart.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hitachiaircon-mediamanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbgolfmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbbw-mediamanager.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eondanjaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emphotomanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ltamediamanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.euroleagueimagehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationwideimagelibrary.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.himediamanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bundesliga-fotodatenbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hearstimagelibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samsungeasyads.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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