stg.stage6films.com

- Sony Pictures Entertainment, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:45:52:d9:0a:6c:67:36:c4:68:5e:9a:80:81:ce:84 was issued on by DigiCert Inc.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment, Inc.

Organization: Sony Pictures Entertainment, Inc.
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:45:52:d9:0a:6c:67:36:c4:68:5e:9a:80:81:ce:84
Serial Number (int): 10993772802842896622691494241176243844
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ee:cb:9d:33:1c:18:b6:c8:2c:9e:33:d6:83:ad:fa:42:1b:48:cd:94
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 2b:fc:b5:fe:66:51:64:28:61:af:1d:b1:e2:dd:b6:7d:b6:d4:5c:46
Fingerprint (sha256): 74:72:15:11:3a:52:62:d9:41:21:b9:10:c1:78:b7:14:50:47:23:56:f3:75:e2:0b:9a:3e:68:51:53:33:61:4c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate stg.stage6films.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stg.stage6films.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stg.stage6films.com
dev.stage6films.com
stg.thedailybugle.net
dev.thedailybugle.net
stg-benefits.sonypictures.com
dev-benefits.sonypictures.com
dev-leadership.sonypictures.com
stg-leadership.spe.sony.com
dev-stage-productionservices.sonypictures.com
stg-stage-productionservices.sonypictures.com
dev-nordics.sonypictures.com
stg-nordics.sonypictures.com
dev-benelux.sonypictures.com
stg-benelux.sonypictures.com

Other certificates including the domain name stage6films.com

(limited to 100 certificates)
www.stage6films.com
flash.sonypictures.com
flash.sonypictures.com
www.stage6films.com
www.stage6films.com
flash.sonypictures.com
flash.sonypictures.com
dev.stage6films.com
flash.sonypictures.com
stage.ghostbusters.com
stg.stage6films.com
www.stage6films.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
flash.sonypictures.com
edge-affiliates.cinesony.com
flash.sonypictures.com
sonypictures.com
www.ghostbusters.com
stage.ghostbusters.com
flash.sonypictures.com
flash.sonypictures.com
edge-affiliates.cinesony.com
stg.stage6films.com
www.stage6films.com
edge-affiliates.cinesony.com
stg.stage6films.com
www.stage6films.com
flash.sonypictures.com
edge-affiliates.cinesony.com
www.ghostbusters.com
edge-affiliates.cinesony.com
flash.sonypictures.com
flash.sonypictures.com
edge-affiliates.cinesony.com
stg.stage6films.com
www.sonypictures.com
edge-affiliates.cinesony.com
stg.stage6films.com
flash.sonypictures.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
www.stage6films.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
stg.stage6films.com
www.sonypictures.com
flash.sonypictures.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
www.stage6films.com
stg.stage6films.com
www.ghostbusters.com
stage.ghostbusters.com
flash.sonypictures.com
edge-affiliates.cinesony.com
flash.sonypictures.com
www.ghostbusters.com
flash.sonypictures.com
www.stage6films.com
dev.stage6films.com
edge-affiliates.cinesony.com
dev.stage6films.com
flash.sonypictures.com
www.sonypictures.com
www.stage6films.com
stg.stage6films.com
www.sonypictures.com
edge-affiliates.cinesony.com
flash.sonypictures.com
www.ghostbusters.com
stage.ghostbusters.com
flash.sonypictures.com
flash.sonypictures.com
www.stage6films.com
stage.ghostbusters.com
flash.sonypictures.com
edge-affiliates.cinesony.com
flash.sonypictures.com
www.stage6films.com
stage.ghostbusters.com
flash.sonypictures.com
www.stage6films.com
www.sonypictures.com
www.stage6films.com
sonypictures.com
www.stage6films.com
edge-affiliates.cinesony.com
flash.sonypictures.com
www.ghostbusters.com
dev.stage6films.com
flash.sonypictures.com
www.sonypictures.com
www.stage6films.com

Certificate

The complete raw certificate details for stg.stage6films.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLTXZS7EbV0ZbXorjbtC
lbz2IwOZEA9bVTKZx4ZUzERnHJVJJg+DUekgNMWkSud39yYvt4KigDpGUViWwUFN
qDLdXdqJyNUB1X/H0lRiFMQzb1M6dXzbNbii6liOrgIF0n/SYgm8VEzLRs9ThB3n
JbxeQQ1MyWSXgKjZQMPSjYgWa749A5BxI/5tmlDbouvVJtrc5lCkwp/TL5yVxySa
pFLE3s+Sx/HcUNVaXqOLDt70cKgJSTqNk0f3u0nXzgd1sm7jPHXgu4aGb2EJU8Oy
1wJvyJaMCVLyCMZtJyM1nDu6y1TH57jDWu+qiXLtwlrBiPzGtfiHPtFRaQlBU5ff
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10993772802842896622691494241176243844
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stg.stage6films.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20287305006474975624419097782439128581174241099220998945710135174357005266100799154031004945988693013207310546178518163141393460531854575391477558087434986152554453094311170298603447421028052462901024160956547711468241939582958662014419960276140744861590727210393246899034350130350782939835103843063113821728556032919413507819020361876087155845666886736115365554663089400136377060203873926099292070291841943396883866255803775724904209791805929469708102789878269561167661688702285424503797626410643999773457553898596407745150207319140181838200944867177998977223483394723957493551054354186602697537026097607868828606257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eecb9d331c18b6c82c9e33d683adfa421b48cd94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (430 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.stage6films.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.stage6films.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.thedailybugle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.thedailybugle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-benefits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-benefits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-leadership.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-leadership.spe.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-stage-productionservices.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-stage-productionservices.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-nordics.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-nordics.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-benelux.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-benelux.sonypictures.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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