laundryheap.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:bc:60:a2:a0:1e:f8:a9:62:cd:07:49:0c:3a:41:2b was issued on by Amazon.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=laundryheap.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:bc:60:a2:a0:1e:f8:a9:62:cd:07:49:0c:3a:41:2b
Serial Number (int): 20916531742017607176414732900737106219
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6e:61:26:a6:b9:9d:e6:fa:8c:50:03:d6:bf:be:1d:46:c2:62:6e:fd
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f7:0c:6c:30:60:4a:50:92:d1:63:04:bb:c3:e8:42:d1:5f:50:85:d5
Fingerprint (sha256): 58:a0:ad:ca:e6:81:e9:10:34:13:7a:03:9d:2e:06:f7:45:53:3e:ca:17:2e:ba:c2:4d:fc:68:21:73:c6:a3:69

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate laundryheap.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for laundryheap.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

laundryheap.com
*.laundryheap.no
*.laundryheap.com.sg
laundryheap.ae
*.laundryheap.com
*.laundryheap.hk
*.laundryheap.fi
lndry.app
*.laundryheap.nl
*.laundryheap.com.qa
laundryheap.ie
*.laundryheap.se
*.laundryheap.qa
*.lndry.app
laundryheap.com.sg
*.laundryheap.dk
laundryheap.com.qa
laundryheap.co.uk
laundryheap.dk
*.laundryheap.ae
laundryheap.hk
laundryheap.fi
laundryheap.no
laundryheap.nl
*.laundryheap.ie
*.laundryheap.co.uk
laundryheap.se
laundryheap.qa

Other certificates including the domain name laundryheap.com

(limited to 100 certificates)
beirut-roastery.com
laundryheap.com
tls.automattic.com
arminsolecki.com
laundryheap.com
tls.automattic.com
www.laundryheap.com
www.laundryheap.com
laundryheap.com
staging-app.laundryheap.com
tls.automattic.com
tls.automattic.com
branch-app.laundryheap.com
cdn.laundryheap.com
tls.automattic.com
tls.automattic.com
branch.laundryheap.com
tls.automattic.com
tls.automattic.com
www.laundryheap.com
app.laundryheap.com
admin-dev1.vnlp.ai
arminsolecki.com
laundryheap.com
tls.automattic.com
tls.automattic.com
laundryheap.com
tls.automattic.com
laundryheap.com
prod.laundryheap.com
tls.automattic.com
prod.laundryheap.com
laundryheap.com
app.laundryheap.com
tls.automattic.com
cdn.laundryheap.com
archive-old.laundryheap.com
tls.automattic.com
app.laundryheap.com
staging-app.laundryheap.com
tls.automattic.com
laundryheap.com
branch-app.laundryheap.com
laundryheap.com
tls.automattic.com
secure-staging-new.laundryheap.com
laundryheap.com
www.laundryheap.com
laundryheap.com
staging-new.laundryheap.com
app.laundryheap.com
www.earthquake-zen-garden.mister-life.com
app.laundryheap.com
wire-beta.io-fund.com
xn--m6t16n0udb18a.com
tls.automattic.com
www.laundryheap.com
prod.laundryheap.com
secure-staging-new.laundryheap.com
archive-old.laundryheap.com
tls.automattic.com
www.laundryheap.com
careers.laundryheap.com
prod.laundryheap.com
prod.laundryheap.com
*.laundryheap.com
www.dugoly.com
tls.automattic.com
dynamic.app.liven.com.au
xn--m6t16n0udb18a.com
prod.laundryheap.com
prod.laundryheap.com
wire-beta.io-fund.com
staging-new.laundryheap.com
tls.automattic.com
staging-new.laundryheap.com
prod.laundryheap.com
tls.automattic.com
www.laundryheap.com
www.laundryheap.com
test-system-tour.illumina.com
tls.automattic.com
admin-dev1.vnlp.ai
branch.laundryheap.com
laundryheap.com
beta-app.laundryheap.com
archive-old.laundryheap.com
tls.automattic.com
staging-new.laundryheap.com
tls.automattic.com
staging-app.laundryheap.com
archive-old.laundryheap.com
www.laundryheap.com
tls.automattic.com
beirut-roastery.com
tls.automattic.com
tls.automattic.com
laundryheap.com
staging-new.laundryheap.com
tls.automattic.com

Certificate

The complete raw certificate details for laundryheap.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Be8XrrjtQp92zngzGIT
CMMNi38fWpwRWVzKuMlNd47XPjtN3iWtOAJzEhVkNRcXM0mPIiBJ7oUlkkslC6ca
zOaB/xgQjhUeZ3LfQOwOAnxoriAp9yfyanj2MyF19mAYFQvze5k7+ygexdaIQZm4
UiTo/vZYEE70WiQ5yiMYReJxF2Rb2wOouMCC99GjcY43zPzcCW1e6725/5QH10Nx
dXijSPC5V1KUV107moB50dMAoFKHML10p1iF+b7x0VZUcbhnGLMad0eGSsYVFBXW
RLqzI3wGYz/dtQgFMI6TYNvCoYtABeN10inmfqgWhwCPVNsQfMpyRNhjXlQOIukX
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20916531742017607176414732900737106219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'laundryheap.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27784131661839782527575612489064721135105538617965532040732748420933186254492576837136228781578900905698737831800155395540768636662461702164215210449181877096987203169347317352125829540563722628534839981412196443543472105850523446300130758737304539192509630918517395829170255396031736577561512876343293568497681025480222679526177987942550312370392739415721893028190467698504826824252533565876210958139917092539587813592440845996844447514129810584992932974003945323152722996609950425907220827247973735356842062736496526983208366246517747082824918709755607970194235105333350670385438036865400360776520710306742877624139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e6126a6b99de6fa8c5003d6bfbe1d46c2626efd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (494 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundryheap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundryheap.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundryheap.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundryheap.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundryheap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundryheap.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundryheap.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lndry.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundryheap.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundryheap.com.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundryheap.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundryheap.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundryheap.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lndry.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundryheap.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundryheap.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundryheap.com.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundryheap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundryheap.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundryheap.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundryheap.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundryheap.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundryheap.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundryheap.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundryheap.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundryheap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundryheap.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundryheap.qa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017728918bc60000040300483046022100a707b820227802881da324bcc9c1c62c3bf03ce520389ad0e0c0a0f3d8d24c84022100d63b8dba5e52644794e47afef13ca7795250cabbaeefa976a7339c77e8fdb81d0076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f020000017728918bfb000004030047304502203bbf11308865e581ce07094caf9ae97d4c30c20139b892cc89f4ea0811ac0c2f022100b9cde8b183b035abc4bf7a545d3a9cff9e8029a998e9b7c77452f0e39b60134d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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