*.kgmedia.id
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 09:f9:10:e8:0c:94:85:5c:ae:f4:6e:15:a3:c2:07:ae was issued on by Amazon.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.kgmedia.id
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:f9:10:e8:0c:94:85:5c:ae:f4:6e:15:a3:c2:07:aeSerial Number (int): 13256276783220147595300066669499647918
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 36:0f:65:1f:c2:25:08:e7:4d:d1:5e:8c:91:c9:f7:00:73:ce:f3:66
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): a9:98:9d:64:c8:aa:37:da:78:d9:a3:c3:d5:25:81:78:61:51:bc:f4
Fingerprint (sha256): 4e:59:cc:a9:8d:9c:92:d5:26:f1:c7:9c:ea:48:45:1e:54:42:5d:44:bb:5b:52:f7:8b:c9:7b:95:c3:0e:e6:da
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate *.kgmedia.id
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.kgmedia.id
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.kgmedia.id
ssonew.staging.kompas.com
*.gridstore.id
*.tribunjualbeli.com
*.parapuan.co
*.kompasiana.com
*.tribunnewswiki.com
*.motorplus-online.com
*.bolasport.com
*.grid.id
*.gridoto.com
*.moview.id
*.kompas.tv
*.kompas.com
*.sonora.id
*.tribunnews.com
*.pasangiklan.com
*.temu.id
ssonew.staging.kompas.com
*.gridstore.id
*.tribunjualbeli.com
*.parapuan.co
*.kompasiana.com
*.tribunnewswiki.com
*.motorplus-online.com
*.bolasport.com
*.grid.id
*.gridoto.com
*.moview.id
*.kompas.tv
*.kompas.com
*.sonora.id
*.tribunnews.com
*.pasangiklan.com
*.temu.id
Other certificates including the domain name kgmedia.id
(limited to 100 certificates)
mail2.kompas.com
ads.kgmedia.id
www.kgmedia.id
www.kgmedia.id
kgmedia.id
www.kgmedia.id
*.kgmedia.id
mail2.kompas.com
*.kgmedia.id
kgmedia.id
www.kgmedia.id
kgmedia.id
*.kgmedia.id
www.kgmedia.id
mail2.kompas.com
mail2.kompas.com
kgmedia.id
*.kgmedia.id
*.kgmedia.id
ads.kgmedia.id
www.kgmedia.id
kgmedia.id
www.kgmedia.id
apps.kgmedia.id
www.kgmedia.id
www.kgmedia.id
ads.kgmedia.id
mail2.kompas.com
www.kgmedia.id
*.kgmedia.id
ads.kgmedia.id
www.kgmedia.id
www.kgmedia.id
kgmedia.id
www.kgmedia.id
*.kgmedia.id
mail2.kompas.com
*.kgmedia.id
kgmedia.id
www.kgmedia.id
kgmedia.id
*.kgmedia.id
www.kgmedia.id
mail2.kompas.com
mail2.kompas.com
kgmedia.id
*.kgmedia.id
*.kgmedia.id
ads.kgmedia.id
www.kgmedia.id
kgmedia.id
www.kgmedia.id
apps.kgmedia.id
www.kgmedia.id
www.kgmedia.id
ads.kgmedia.id
mail2.kompas.com
www.kgmedia.id
*.kgmedia.id
Certificate
The complete raw certificate details for *.kgmedia.id in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIQCfkQ6AyUhVyu9G4Vo8IHrjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIyMTAyNTAwMDAwMFoXDTIzMTEyMzIzNTk1OVowFzEV MBMGA1UEAwwMKi5rZ21lZGlhLmlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAh0J+woGIENhLE+p3qPDnS0jDcVIL22/xeAI1E3edzLraTCssO+xGB6J6 VYJFIeVE2YpgcWFE8I08k6QUgOxEGnG7tuDtLTBRHV1A5M4l1+smliO4aOPrwr3q BrJHZFO9UuRQdFJGzeHoCeD5W2p2GnJV+aBM2/Z2q2ExADWVa6IXxuFmM9kNwxky b3v/PXOxK2Lnuqti0gxZ2Dp8fOeWR3B/f0qRQUkORM3SeDY1E7WJiQ+KZBAyrdxX guYC4x7cwS+RBhBLL6YDwMbXuCAN7ZxdEjWAy2Wpx/t0sp3sUWRI5BuV5uJA/BXC N6wK7VdWD18Irf709uituuzM18i5zQIDAQABo4ICnjCCApowHwYDVR0jBBgwFoAU gbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFDYPZR/CJQjnTdFejJHJ9wBz zvNmMIIBOwYDVR0RBIIBMjCCAS6CDCoua2dtZWRpYS5pZIIZc3NvbmV3LnN0YWdp bmcua29tcGFzLmNvbYIOKi5ncmlkc3RvcmUuaWSCFCoudHJpYnVuanVhbGJlbGku Y29tgg0qLnBhcmFwdWFuLmNvghAqLmtvbXBhc2lhbmEuY29tghQqLnRyaWJ1bm5l d3N3aWtpLmNvbYIWKi5tb3RvcnBsdXMtb25saW5lLmNvbYIPKi5ib2xhc3BvcnQu Y29tggkqLmdyaWQuaWSCDSouZ3JpZG90by5jb22CCyoubW92aWV3LmlkggsqLmtv bXBhcy50doIMKi5rb21wYXMuY29tggsqLnNvbm9yYS5pZIIQKi50cmlidW5uZXdz LmNvbYIRKi5wYXNhbmdpa2xhbi5jb22CCSoudGVtdS5pZDAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAu oCyGKmh0dHA6Ly9jcmwucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNybDAT BgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGG IWh0dHA6Ly9vY3NwLnIybTAxLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYq aHR0cDovL2NydC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY2VyMAwGA1Ud EwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB AMxfGW7tWYBNF+xOGPpyr2dVvfNHZwPfu700GZw14TjHzA50nkVPxwjkZZ+8wt50 Qwoq8Hr2fLdUotCDywoyua0EdvGjGz1fIUbkH5YrScIHJEtEDpaCl5G2/oGzaVgD 3/66orIBMj8fbpJWm7L22m20iD+PNeXn5cwFekds3P6wNvASLkbmNMuqz47803mC puVmPivN94+EgWwdwitCg0bZRr1+04hwBtt0VxRgpf3NFdFRyHoC8MjcY3lfkvAB aw/yLKILltDnm+5gq+FeIY7aEVRF4oX0oDCN9bSJyvjxxfvOn68K2P3KNcm38oHi Ra0facC+GxwJZQYHUrTzCDs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0J+woGIENhLE+p3qPDn S0jDcVIL22/xeAI1E3edzLraTCssO+xGB6J6VYJFIeVE2YpgcWFE8I08k6QUgOxE GnG7tuDtLTBRHV1A5M4l1+smliO4aOPrwr3qBrJHZFO9UuRQdFJGzeHoCeD5W2p2 GnJV+aBM2/Z2q2ExADWVa6IXxuFmM9kNwxkyb3v/PXOxK2Lnuqti0gxZ2Dp8fOeW R3B/f0qRQUkORM3SeDY1E7WJiQ+KZBAyrdxXguYC4x7cwS+RBhBLL6YDwMbXuCAN 7ZxdEjWAy2Wpx/t0sp3sUWRI5BuV5uJA/BXCN6wK7VdWD18Irf709uituuzM18i5 zQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13256276783220147595300066669499647918 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kgmedia.id' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17074961153657766561614116771038290695577052647713234945146116720872386158005872626425338197796941611279690495855106261584942021136363977732106244597741766338726279113212479005515608161944991428253094630830050349945476678744336656041675226177257554755830464943186073403939623624142599821333060971675392377062470361025707992902523774642908906455047346525972724528177756201354137341394623962835014913785733596182865536506408838898900787540940969572266423794315457385775761227242516360870914680007528858020012046345268158210100092712572470150325952747003202208683554474870007215962106857100938889203863085070635667864013 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 360f651fc22508e74dd15e8c91c9f70073cef366 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (306 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kgmedia.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssonew.staging.kompas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gridstore.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tribunjualbeli.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parapuan.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kompasiana.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tribunnewswiki.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motorplus-online.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bolasport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grid.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gridoto.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moview.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kompas.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kompas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonora.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tribunnews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasangiklan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.temu.id' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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