*.freedca.mp

Issued by Amazon

About this certificate

This digital certificate with serial number 09:7a:ae:56:ff:aa:ca:5b:52:66:d9:3c:d1:bf:7d:f8 was issued on by Amazon.

With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.freedca.mp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:7a:ae:56:ff:aa:ca:5b:52:66:d9:3c:d1:bf:7d:f8
Serial Number (int): 12600048210823653940600185835587862008
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7c:5c:17:8f:71:d3:c0:8b:4d:1a:16:67:8b:9b:5d:4f:cd:50:d8:70
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): fe:c1:93:a2:35:ca:7c:aa:57:f9:65:ed:40:0e:ae:4d:b3:fe:7a:8f
Fingerprint (sha256): 59:77:fe:e6:28:fd:79:ba:f1:f2:cf:1f:28:80:5b:bc:e2:c5:1f:42:b3:67:57:df:84:63:45:11:38:1c:da:79

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.freedca.mp

41

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.freedca.mp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.freedca.mp
projects.plannit.com.au
projects.vicinity.studio
projects.richardsonmarketing.com.au
portal.impressive.cz
projects.eob.one
project.digitalmindsbpo.com
team.owl.la
plan.matic.co
projects.drenalin.biz
app.adityaraj.com
projects.crylim.com
projects.optech.net
projects.sixvirtual.com
projects.codevelopment.com.au
project.dayella.co
projects.thinkingkaplearning.com
team.pimicro.com
portail.easytek.io
my.huddleapp.co.uk
pm.eikonikos.com
clients.lavenderturtle.com
camp.texonica.com
clients.ivy.social
team.danugrahregency.com
projects.ecetera.si
portal.ntansa.com
portal.phoenixallsaas.com
projects.inquivix.com
projects.beseentoday.com
portal.1stsupport.com
projects.victoria.pm
clients.completemarketer.com
my.webarchi.com
projects.dadscorp.com
dashboard.triadmultimedia.com
projects.experiacreative.com
project.mythoslife.com
projects.budocreative.com
projects.optsus.com
team.blueboxglobal.com

Other certificates including the domain name freedca.mp

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.freedca.mp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2BVhp6bxSFwqDJ3awZy
nUQj3cw9/KmgoXNYI4FqZxL4ML1a7iLQ1OHuawWGh8ti1Dkd2LCRV57qs9CQI49D
zclOlqsB4kn/rAcMRo+ZlOz19EqhHFXwHUq10EJBBN6J7K8eXF1aSXWEKNwlfFBN
fmYqJN61bPshChmnrgrNIoyI2vtlcYVtleDOLC49avN21SRlpNMqFd0Lz93EbXFX
6F5UNvqcr+oXYfbTe3zguD3M7q6gxcyyVzSw1NK1C61IeKcc3QCKXvT2vxDSIoCa
fldOXWuEFsj8+LmekN5RP89d3mMUBJpB3IJLfGd6FVq8X/tCf/W0pi/lCNWhy+/Y
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12600048210823653940600185835587862008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.freedca.mp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26178833235978121949330304060539872725961160864761392210763243374572248350208678974587120296814963907918809840838213561601977802592174852592937336639316094654383313132480401565800131349472673615682258077320765495881250585376439864452073494405293786324415938817146660887073285681185609983678925761869651128119249111958033742915939079434447137332551919465143841469403372281877377026743787520840159743447748665716160582963085593537648697675310716574884083312729721740799071517398343090633901280732744118259926092394801383074661188502295864416578942916479125730605726611243178984282436683470610121230553604078653800437987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c5c178f71d3c08b4d1a16678b9b5d4fcd50d870
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (954 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedca.mp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.plannit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.vicinity.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.richardsonmarketing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.impressive.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.eob.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.digitalmindsbpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.owl.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.matic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.drenalin.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.adityaraj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.crylim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.optech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.sixvirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.codevelopment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.dayella.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.thinkingkaplearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.pimicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.easytek.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.huddleapp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm.eikonikos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.lavenderturtle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camp.texonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.ivy.social'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.danugrahregency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.ecetera.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ntansa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.phoenixallsaas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.inquivix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.beseentoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.1stsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.victoria.pm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.completemarketer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.webarchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.dadscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.triadmultimedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.experiacreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.mythoslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.budocreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.optsus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.blueboxglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001709f0f64ad0000040300473045022100e62a183946bd4e281dfd77b36d0dd8af27261adc0ab83e17a9c4a009b2f4e11102204f7d27dc9431a121906a0a1bb1ed3992ab5ae9459b29179c7888f1253f44a7170076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001709f0f64ca0000040300473045022100b802ffc2edf2a994a398e7d5831e63a7f827649d411f3391387e3363f983465b022069266ba9168a4c08575d16812971d2ed904391f6ee9ff5ddff288ec5d93f24fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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