sandbox.leegality.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 04:91:2f:d6:1a:b0:dc:fc:2c:10:cd:95:e0:e0:2c:c1 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sandbox.leegality.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:91:2f:d6:1a:b0:dc:fc:2c:10:cd:95:e0:e0:2c:c1
Serial Number (int): 6070765263965787950818468947323530433
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e0:03:26:98:4f:46:4c:28:2d:fe:aa:e0:a4:ec:eb:fd:8c:12:0b:73
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 31:cd:56:5a:4b:34:3e:3d:29:1b:58:25:4e:2f:21:c0:43:3b:58:f3
Fingerprint (sha256): 53:0d:3d:e1:41:44:42:a2:18:7a:e5:ec:6e:bc:14:61:8f:2a:da:f1:1c:d5:0e:41:19:1f:53:d1:12:97:8c:40

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate sandbox.leegality.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sandbox.leegality.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sandbox.leegality.com
*.sandbox.leegality.com
uat.leegality.com

Other certificates including the domain name leegality.com

(limited to 100 certificates)
careers.myverkoper.com
csp.dolorremedies.in
docs.leegality.com
ansys.support.telled.in
careers.infra360.io
sandbox.leegality.com
careers.omni-reach.com
hrm.matrixhive.com
we.lengliim.com
careers.myverkoper.com
people.jouletap.com
books.scaltron.com
careers.omni-reach.com
people.conformancex.com
www.leegality.com
careers.amaizeing.in
*.leegality.com
hr.cloudcraftz.com
support.leegality.com
careers.senthuraa.com
we.lengliim.com
books.scaltron.com
hr.whiteblink.com
support.leegality.com
support.leegality.com
books.scaltron.com
login.digitviral.com
leegality.com
career.binaryglobal.com
hrms.zptest.cf
www.leegality.com
hr.whiteblink.com
people.aciesglobal.com
people.aciesglobal.com
people.aciesglobal.com
people.aciesglobal.com
hrms.cognetrylabs.com
hr.cloudcraftz.com
leegality.com
uat.leegality.com
mlutil.leegality.com
careers.padink.in
people.aciesglobal.com
people.aciesglobal.com
docs.leegality.com
customersupport.yupit.app
www.leegality.com
myhrms.anilhashnu.in
sandbox.leegality.com
myhr.natlextech.com
people.aciesglobal.com
careers.catalyst-partners.in
careers.padink.in
people.accustra.co.in
careers.yuvakaa.com
hrms.voziq.ai
preprod.leegality.com
books.silkenpvc.com
people.aciesglobal.com
careers.padink.in
careers.padink.in
leegality.com
people.aciesglobal.com
*.leegality.com
*.leegality.com
citrecruit.congruentsoft.com
leegality.com
hrms.uniqubic.com
people.spikewell.com
careers.yuvakaa.com
sandbox.leegality.com
people.aciesglobal.com
ic.kraftpixel.com
leegality.com
preprod.leegality.com
support.leegality.com
hrm.matrixhive.com
leegality.com
citrecruit.congruentsoft.com
payroll.aztech.org.in
app.leegality.com
careers.amaizeing.in
*.leegality.com
careers.omni-reach.com
people.vnc.global
*.leegality.com
people.aciesglobal.com
careers.omni-reach.com
pulse.securdi.com
citrecruit.congruentsoft.com
books.silkenpvc.com
careers.omni-reach.com
career.binaryglobal.com
sandbox.leegality.com
hrms.zptest.cf
people.timelybills.app
books.scaltron.com
sandbox.leegality.com
books.rockdeck.co.in
careers.catalyst-partners.in

Certificate

The complete raw certificate details for sandbox.leegality.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIQBJEv1hqw3PwsEM2V4OAswTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTI0MDEzMTAwMDAwMFoXDTI1MDIyODIzNTk1OVowIDEe
MBwGA1UEAxMVc2FuZGJveC5sZWVnYWxpdHkuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAp2ucxEpCpgy82jEsS20+Oi6Urmk0o3/iBzlhO56PGLay
vonL6rOrzaFNQUpCTC8Dyhjvvsg848hcn8yuXBP9k3Rp+iaD8OGf3YKTrSbwhaXq
u28YROPVE0xTNqep3VLliw9+z1LtVNXEUGVdCIgPjBvRLkw7iRqyASAUW23ScJ8d
S/MZc8m0djE99PLPbtyE1RHMt5Pci90e3ycyKqAdfc2D6pdsuxEdsG2n4AVa8hi4
nX7tjlxrFEWGTGg7oQeiUxRVjrslrXSOe7GdRzlLHmh32qI0uL+XVl7RngTHHijO
/OY5Tiu89Xiu2b0PmmzW27jnKAZciInFa0DMQmiNiwIDAQABo4IDGjCCAxYwHwYD
VR0jBBgwFoAUVdkYX9IczAHhWLS+q9lVQgHXLgIwHQYDVR0OBBYEFOADJphPRkwo
Lf6q4KTs6/2MEgtzMEwGA1UdEQRFMEOCFXNhbmRib3gubGVlZ2FsaXR5LmNvbYIX
Ki5zYW5kYm94LmxlZWdhbGl0eS5jb22CEXVhdC5sZWVnYWxpdHkuY29tMBMGA1Ud
IAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0w
My5hbWF6b250cnVzdC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggr
BgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29tMDYGCCsG
AQUFBzAChipodHRwOi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5j
ZXIwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHUATnWj
J1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGNX85kxQAABAMARjBEAiBs
fjmVAxKx3exSXg9U/eubrqLjLPQKofdT1uO+FSAwcAIgdD56sOZPMlFbduZRYGYD
iWRhH4SRdlyp1V3uiEcQTyQAdwB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kO
jC55uAAAAY1fzmTJAAAEAwBIMEYCIQC5McGyOQ2zbnJKOrYEGSKWl1uIAFFUjIVS
yzfxfoNqwAIhAM3o0BTcrTCinmssVzbrAWubgrwc8REeM05Tjrt63QQ8AHYA5tIx
Y0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGNX85k8AAABAMARzBFAiAj
f8vvzZJ0k3iBerMMlDKC1BkF/fz8p512w6gqmvRfEwIhAMA8mAz8UoxE3E3bMWZg
TQonJDGIkNNbldTtMyVw8yHiMA0GCSqGSIb3DQEBCwUAA4IBAQAci8mw5IOxEJGj
ZVmkbI29Z1X799xrA5vSdjNebvm7nAtUq1b3YRk2Musw90PFZ7VJwuhzo4Lk5CtR
W0Xw7cgBmj71XI7bw0FbwnJz3K4+6fpqfihu9ZWP/kpSpo6zJAfsdFufpGxCsJ2e
uSHsTbGZVJVAXL8zHPtX0P9PE9mP7h9BybcqvpuXnFYxL3TpmvMYKbiEgy+Ll0eZ
52TIFqP0w7/OdQDUiGF2+VyYBXJt1DmB9+RmjMSBXy8n194LKx/Y4GM5m1HRi8UU
kV3qfkFh+ucrMefDJjTfziHbSjc4tHMcRdUrdrLL3emP+5LgvHQbDzT8FhOAUgmc
tgKsYj0d
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2ucxEpCpgy82jEsS20+
Oi6Urmk0o3/iBzlhO56PGLayvonL6rOrzaFNQUpCTC8Dyhjvvsg848hcn8yuXBP9
k3Rp+iaD8OGf3YKTrSbwhaXqu28YROPVE0xTNqep3VLliw9+z1LtVNXEUGVdCIgP
jBvRLkw7iRqyASAUW23ScJ8dS/MZc8m0djE99PLPbtyE1RHMt5Pci90e3ycyKqAd
fc2D6pdsuxEdsG2n4AVa8hi4nX7tjlxrFEWGTGg7oQeiUxRVjrslrXSOe7GdRzlL
Hmh32qI0uL+XVl7RngTHHijO/OY5Tiu89Xiu2b0PmmzW27jnKAZciInFa0DMQmiN
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6070765263965787950818468947323530433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sandbox.leegality.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21134862566835615971426181759009962874163540673741504741134695042760256892147163273045265798647906645531852960242959120810684704242097095980487866280661297552461234167712815391531463950641165148706891387452964263160852385340253155896257831276045568935877246558730901383743018813085385752568660797494453804933556369915113336013786582000295330944333745115849091684595162299049793676375313754421137871550525202126680697875446074578607404055129971955904317170531146959007859962204693371276799646137150124569274730139478551801032773208670544196837585795782652024421754245868765777825379670677456050852939911836599662972299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e00326984f464c282dfeaae0a4ecebfd8c120b73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.leegality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.leegality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.leegality.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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