*.freedca.mp

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:a5:cd:42:c3:ff:d6:9a:f1:1d:26:bc:d2:c9:09:15 was issued on by Amazon.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.freedca.mp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:a5:cd:42:c3:ff:d6:9a:f1:1d:26:bc:d2:c9:09:15
Serial Number (int): 20799312102118325629911853985067239701
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 94:9a:03:8b:03:03:7a:69:08:ce:66:f7:ac:eb:a8:29:a3:e6:33:15
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 43:80:cd:99:a1:16:ce:0c:d1:7e:25:7f:71:1c:39:35:c7:48:78:f3
Fingerprint (sha256): 52:4a:28:c9:00:3d:c5:31:21:e5:7b:59:62:87:b8:ca:c0:a5:df:32:f8:e3:1b:99:7a:3f:33:5b:30:64:d0:55

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.freedca.mp

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.freedca.mp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.freedca.mp
projects.crylim.com
team.owl.la
projects.vicinity.studio
projects.drenalin.biz
projects.plannit.com.au
plan.matic.co
projects.optech.net
projects.sixvirtual.com
my.huddleapp.co.uk
app.adityaraj.com
projects.budocreative.com
projects.richardsonmarketing.com.au
portal.impressive.cz
clients.completemarketer.com
portal.ntansa.com
projects.optsus.com
projects.itsecnow.com
portal.1stsupport.com
projects.experiacreative.com
project.mythoslife.com
projects.inquivix.com
projects.victoria.pm
clients.lavenderturtle.com
projects.dadscorp.com
dashboard.triadmultimedia.com
camp.texonica.com
team.blueboxglobal.com
projects.beseentoday.com
portal.phoenixallsaas.com
pm.eikonikos.com
workspace.tmnsolutions.vn
team.danugrahregency.com
projects.codevelopment.com.au
clients.ivy.social
my.webarchi.com
team.pimicro.com
project.dayella.co
cowork.abovestandard.dk
project.digitalmindsbpo.com
portail.easytek.io
projects.ecetera.si
projects.thinkingkaplearning.com
projects.eob.one

Other certificates including the domain name freedca.mp

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.freedca.mp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgNoF7beN9EfI6CaNSpd
FnFR6W21jKXaW0SL0arhh5Lb7OIvXnF720SIqJrTlvHl4+D95Re006HkYt3i8neb
uPMUdAS7ybNLG4ThRsc789y/acmYhkgPWfFjMDlJg0xWr+nbG1IyWP6hsnL/xY9O
jh0ODHSE+LPFaPzzfvc24qFw9qbHSy52wG5Bj04QOd8R2uaIJhyuZmZyc+92l/Hx
YCQuxI3plEA5MAsJqVM0W8O0MUshdwWCNDRjHM6To5l9CCYqNvKZAbUGyr6WGIow
u9qafUlESx/qxQhkH/C1sDQ46lB2I1baqL4a4ndm4WXsOAoDMT4zRviU8P8DiLKz
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20799312102118325629911853985067239701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.freedca.mp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20957238487279267632774296903094393321071333059373964451653233733247285604925020408384357696652570931362046013792499446432009453264084664864193217533211307570771570692934808549059024671637353329457310725268375775593629755236939576867708133501827582327575943083073293338822420136589809719428138913072054916993836316778495135576316048702173352028346503457028548404389529457186447806103634270480605988641506112108543030091829510491563745992666918371651865785324878670058565640176308900890663074313162719471394648002483002441054865571162851206342004149386841723657362016610351048507714082858276387610807499989578471879501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							949a038b03037a6908ce66f7aceba829a3e63315
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1029 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedca.mp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.crylim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.owl.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.vicinity.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.drenalin.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.plannit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.matic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.optech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.sixvirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.huddleapp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.adityaraj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.budocreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.richardsonmarketing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.impressive.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.completemarketer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ntansa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.optsus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.itsecnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.1stsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.experiacreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.mythoslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.inquivix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.victoria.pm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.lavenderturtle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.dadscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.triadmultimedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camp.texonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.blueboxglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.beseentoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.phoenixallsaas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm.eikonikos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workspace.tmnsolutions.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.danugrahregency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.codevelopment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.ivy.social'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.webarchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.pimicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.dayella.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowork.abovestandard.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.digitalmindsbpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.easytek.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.ecetera.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.thinkingkaplearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.eob.one'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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