static.adobesigncdnstage.com

- Adobe Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:0e:d9:c7:5e:55:a7:21:77:26:07:1c:2f:90:de:57 was issued on by DigiCert Inc.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Adobe Inc.

Organization: Adobe Inc.
State / Province: California
Locality: San Jose
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:0e:d9:c7:5e:55:a7:21:77:26:07:1c:2f:90:de:57
Serial Number (int): 6723249213427538572808071079198252631
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: cb:1a:32:7f:1c:56:95:84:53:2d:aa:27:21:56:f3:97:26:5f:5b:34
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 85:ee:6a:41:53:e3:0a:a7:ad:0c:c7:8f:02:dd:30:b7:37:64:e4:fe
Fingerprint (sha256): 50:87:d3:8c:87:58:b4:04:d1:dd:c6:43:2f:93:3b:d3:71:e9:cf:cf:60:12:cc:14:52:01:cb:4a:e1:90:26:74

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate static.adobesigncdnstage.com

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for static.adobesigncdnstage.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

static.adobesigncdnstage.com
get.stage.adobe.com
dc-stage.documentcloudtest.com
sharepointonline.adobesignstage.com
get.dev.adobe.com
sharepointonline.echosignstage.com
static.adobesigncdnpreview.us
stage.acrobat.adobe.com
dev.documentservices.adobe.com
dev.acrobatservices.adobe.com
dev.acrobat.adobe.com
get.devdc.adobe.com
dc.dev.dexilab.acrobat.com
stage-dc.acrobat.adobe.com
stage.acrobatservices.adobe.com
sharepointonline.echosignawspreview.com
static.echocdnawspreview.com
dc-dev.documentcloudtest.com
static.echocdnstage.com
dc.stage.acrobat.com
stage.documentservices.adobe.com
sharepointonline.adobesignpreview.com
static.adobesigncdnpreview.com
get.stagedc.adobe.com
static.adobesigncdnstage.us

Other certificates including the domain name adobesigncdnstage.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for static.adobesigncdnstage.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Bbiu4MTtYx3n20z2GPP
wo6+tqMNyr3y/BU5xoN+H2SNGwDn4ZGcP/yTCVtSpnHM3fsQtRCnks11oR/83rqp
p51pBgtL7DwVlBy2Vm+0CNajsB1zsY+7NYnqPMu9q9VXyMkiY8adPcZd6KRSs1VE
GG5//7ouMft1TqUphAWryb3+IweFWLm/9R0MdM9wqp6Ck6OgnTxnF1uzbZ52/jqi
auZwF2GLI7Ma+IBhkoVYGmlJsoEIXhDiBjppYxRebBVXQ9lNHueSU3wDkso6q4P/
m/EIb4XfKBUxJ2XeZOIILYJzXDIDe2VrYiAeaOdzm2DBnn9M/bopoHVlFDuTYbyC
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6723249213427538572808071079198252631
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adobe Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'static.adobesigncdnstage.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28288665658712350839663679463864575219373647076295209956092463931218026937312607956489680472323448916842541136625050901251090327897885216120834672758910940809475685589249411154366135474024016080945716284998769566168834779698578892680882078577820086809032564916161400542979919890833403806789344872306272521362263654041649274298831528871317490053494260813782964703964640584618586145323954364212022714339568753000627061033365726339780728647205939987823434003346316413196368163306575978936150748765994409167424331590127074905639663492734763913289109187838485994248280032309280459004622744617030829888748773315253655863979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb1a327f1c569584532daa272156f397265f5b34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (736 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.adobesigncdnstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.stage.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc-stage.documentcloudtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepointonline.adobesignstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.dev.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepointonline.echosignstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.adobesigncdnpreview.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.acrobat.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.documentservices.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.acrobatservices.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.acrobat.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.devdc.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.dev.dexilab.acrobat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-dc.acrobat.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.acrobatservices.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepointonline.echosignawspreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.echocdnawspreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc-dev.documentcloudtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.echocdnstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.stage.acrobat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.documentservices.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepointonline.adobesignpreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.adobesigncdnpreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.stagedc.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.adobesigncdnstage.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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