*.vpn-waf-prod.px019.net
Issued by Amazon
About this certificate
This digital certificate with serial number 07:20:5f:8b:d0:49:80:10:a0:1d:39:ad:c3:06:7d:0c was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.vpn-waf-prod.px019.net
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:20:5f:8b:d0:49:80:10:a0:1d:39:ad:c3:06:7d:0cSerial Number (int): 9472687376056200383139621753284099340
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 1a:b5:cd:86:43:a1:21:12:12:98:28:4a:1e:f4:d2:91:45:d5:02:8c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): db:05:c4:b9:7b:72:17:68:1f:c9:43:f8:ee:3c:82:57:31:ca:09:fa
Fingerprint (sha256): 72:11:b6:c1:4f:97:48:3c:19:15:40:9c:93:d1:ea:9b:85:38:db:ee:7b:49:b3:0e:ff:ba:b9:42:78:aa:3d:0f
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.vpn-waf-prod.px019.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.vpn-waf-prod.px019.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.vpn-waf-prod.px019.net
Other certificates including the domain name px019.net
(limited to 100 certificates)
*.px019.net
*.px019.net
vividmoney.fr
sentry.px019.net
sentry.vivid.money
sentry.px019.net
*.private-waf.px019.net
kuku.px019.net
*.px019.net
*.px019.net
*.public-waf-test.px019.net
vividmoney.fr
kuku.px019.net
kuku.px019.net
*.px019.net
*.projectx019.com
vividmoney.fr
*.px019.net
sentry.vivid.money
*.px019.net
kuku.px019.net
*.projectx019.com
*.px019.net
*.px019.net
sentry.px019.net
sentry.vivid.money
kuku.px019.net
*.px019.net
*.px019.net
*.px019.net
sentry.vivid.money
*.private-waf-test.px019.net
*.private-waf-test.px019.net
*.private-waf-test.px019.net
sentry.px019.net
*.px019.net
*.projectx019.com
kuku.px019.net
*.projectx019.com
kuku.px019.net
*.px019.net
kuku.px019.net
*.private-waf-mgmt.px019.net
vividmoney.fr
*.px019.net
sentry.vivid.money
*.projectx019.com
kuku.px019.net
kuku.px019.net
*.px019.net
*.px019.net
*.px019.net
*.public-waf-prod.px019.net
sentry.vivid.money
*.projectx019.com
data-matillion-dev.px019.net
kuku.px019.net
*.projectx019.com
*.px019.net
*.px019.net
kuku.px019.net
*.private-waf-dev.px019.net
*.px019.net
dev.public-dev-new.px019.net
*.px019.net
*.public-waf-dev.px019.net
*.px019.net
*.px019.net
*.px019.net
vividmoney.fr
*.projectx019.com
kuku.px019.net
kuku.px019.net
vividmoney.fr
*.private-waf-test.px019.net
*.px019.net
*.private-waf-dev.px019.net
dev.public-dev-new.px019.net
*.px019.net
*.public-waf-test.px019.net
*.px019.net
vividmoney.fr
kuku.px019.net
*.px019.net
*.px019.net
kuku.px019.net
*.projectx019.com
sentry.vivid.money
sentry.px019.net
vividmoney.fr
*.px019.net
*.px019.net
sentry.px019.net
*.public-waf-prod.px019.net
kuku.px019.net
*.projectx019.com
*.px019.net
kuku.px019.net
sentry.px019.net
*.vpn-waf-prod.px019.net
*.px019.net
vividmoney.fr
sentry.px019.net
sentry.vivid.money
sentry.px019.net
*.private-waf.px019.net
kuku.px019.net
*.px019.net
*.px019.net
*.public-waf-test.px019.net
vividmoney.fr
kuku.px019.net
kuku.px019.net
*.px019.net
*.projectx019.com
vividmoney.fr
*.px019.net
sentry.vivid.money
*.px019.net
kuku.px019.net
*.projectx019.com
*.px019.net
*.px019.net
sentry.px019.net
sentry.vivid.money
kuku.px019.net
*.px019.net
*.px019.net
*.px019.net
sentry.vivid.money
*.private-waf-test.px019.net
*.private-waf-test.px019.net
*.private-waf-test.px019.net
sentry.px019.net
*.px019.net
*.projectx019.com
kuku.px019.net
*.projectx019.com
kuku.px019.net
*.px019.net
kuku.px019.net
*.private-waf-mgmt.px019.net
vividmoney.fr
*.px019.net
sentry.vivid.money
*.projectx019.com
kuku.px019.net
kuku.px019.net
*.px019.net
*.px019.net
*.px019.net
*.public-waf-prod.px019.net
sentry.vivid.money
*.projectx019.com
data-matillion-dev.px019.net
kuku.px019.net
*.projectx019.com
*.px019.net
*.px019.net
kuku.px019.net
*.private-waf-dev.px019.net
*.px019.net
dev.public-dev-new.px019.net
*.px019.net
*.public-waf-dev.px019.net
*.px019.net
*.px019.net
*.px019.net
vividmoney.fr
*.projectx019.com
kuku.px019.net
kuku.px019.net
vividmoney.fr
*.private-waf-test.px019.net
*.px019.net
*.private-waf-dev.px019.net
dev.public-dev-new.px019.net
*.px019.net
*.public-waf-test.px019.net
*.px019.net
vividmoney.fr
kuku.px019.net
*.px019.net
*.px019.net
kuku.px019.net
*.projectx019.com
sentry.vivid.money
sentry.px019.net
vividmoney.fr
*.px019.net
*.px019.net
sentry.px019.net
*.public-waf-prod.px019.net
kuku.px019.net
*.projectx019.com
*.px019.net
kuku.px019.net
sentry.px019.net
*.vpn-waf-prod.px019.net
Certificate
The complete raw certificate details for *.vpn-waf-prod.px019.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEhjCCA26gAwIBAgIQByBfi9BJgBCgHTmtwwZ9DDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAzMzAwMDAwMDBaFw0yMTA0MzAx MjAwMDBaMCMxITAfBgNVBAMMGCoudnBuLXdhZi1wcm9kLnB4MDE5Lm5ldDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJMKQ4Zbc9BRltYnDRtjcoYUnYnY njn3Iy8jhWUtRrjvRjNRp50OARcOYIE1Q04Edr3202XRtKy3EgXAMLoUVmLrqI6F 9Yy6BbA9PT3sAASFI9z+6/6rqJ32fhcqvrlp6FfsNvpk1ieedyCWyFbBCPRPsPpi ZaY8DK2N0ycaPPy0nv/rt5UxK1nKrX2iqkTL+9zmloN/qrNOCU4VYtU9s7JAgzWY Mg96fziHPrH5TTOZGzVIed6LOXyEWWp3b+BeCZjr7v7wCysYGLSzSR4nZVvWdC9d oZkU0hoGbLIroRE8sEd9JAuz68j1y5AWhSxCkMuQSgpj60rTmciicy6vJYUCAwEA AaOCAZEwggGNMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1Ud DgQWBBQatc2GQ6EhEhKYKEoe9NKRRdUCjDAjBgNVHREEHDAaghgqLnZwbi13YWYt cHJvZC5weDAxOS5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFi LmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1s AQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDov L29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8v Y3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIw ADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIjFztWP CJH11518z/t1h5CSKhwgiP1MY9puu05k9MTeNJfV6Z08BfvfX2apgJORNTynjo/O qHgXqaz0e4ZEjomeSSl6gmwLu4T9yoTYj0CKpDjkAeQ7MtShSWHTsg9vynq4AwjJ 6NDhxQTJwuzBVqkd/VvSEQvBLinfnwEz9JmfoFqW2XGEAehkkDsITX+S6DB85hxK Jyky0tYahwesATG+jViIkyVaDHhqsEMENPbMcPcwvkjQAW++wNMnzzGMsFXLCqBH XyH+/7s6+BL72rNUsvDAejk37CYh2cXSvGrFE4szVqJ5vobjpp2ctKwWG41xrV12 QEOuR+tqzCrs2Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwpDhltz0FGW1icNG2Ny hhSdidieOfcjLyOFZS1GuO9GM1GnnQ4BFw5ggTVDTgR2vfbTZdG0rLcSBcAwuhRW YuuojoX1jLoFsD09PewABIUj3P7r/quonfZ+Fyq+uWnoV+w2+mTWJ553IJbIVsEI 9E+w+mJlpjwMrY3TJxo8/LSe/+u3lTErWcqtfaKqRMv73OaWg3+qs04JThVi1T2z skCDNZgyD3p/OIc+sflNM5kbNUh53os5fIRZandv4F4JmOvu/vALKxgYtLNJHidl W9Z0L12hmRTSGgZssiuhETywR30kC7PryPXLkBaFLEKQy5BKCmPrStOZyKJzLq8l hQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9472687376056200383139621753284099340 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-30 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vpn-waf-prod.px019.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18562092083080200497793116601273433600303620753972308614445464449932716162852796819416786821722741708745836772489851403769546592226614344124687061960542767011324642225479064562010283037858396140321125563715988909156352368012411491910699162282370278064555492415621749836260067083323125677514634982221110805582986380428486585410329254958732713109798014102847764754189180835002077877236976698259531838269563731531954607002721422109398700331823395395530801398091697505195801063235957772736987860515617893846914563356272864726723449771065490328847717328213800484154263265362821341696000436895985256855946220662915656000901 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1ab5cd8643a121121298284a1ef4d29145d5028c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vpn-waf-prod.px019.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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