iam.app.dev.botshelf.ai
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0a:5a:3f:e3:fe:b5:ae:1b:c2:04:e3:7f:cc:b0:0b:e8 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=iam.app.dev.botshelf.ai
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0a:5a:3f:e3:fe:b5:ae:1b:c2:04:e3:7f:cc:b0:0b:e8Serial Number (int): 13760882530544044280629711610181585896
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e2:78:8d:42:2d:2a:10:f0:d3:ef:a9:65:6a:94:75:0f:d8:48:b5:4b
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): be:9b:7a:bf:cf:05:2c:8a:58:1f:8e:11:59:75:68:aa:a2:fb:aa:ae
Fingerprint (sha256): 7e:07:b4:21:03:e4:71:3f:db:5d:77:4c:8f:cb:47:cd:7f:10:11:6a:8a:16:89:0f:61:85:5e:f2:86:d5:b5:d5
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate iam.app.dev.botshelf.ai
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for iam.app.dev.botshelf.ai
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
iam.app.dev.botshelf.ai
Other certificates including the domain name botshelf.ai
(limited to 100 certificates)
botshelf.ai
botshelf.ai
assets.dev.botshelf.ai
shadi.world
assets.dev.botshelf.ai
assets.dev.botshelf.ai
test.api.botshelf.ai
www.dev.botshelf.ai
www.dev.botshelf.ai
timehascome.ca
treasureacademy.org
assets.dev.botshelf.ai
app.test.botshelf.ai
jobs2.api.botshelf.ai
directus.playg.botshelf.ai
botshelf.ai
assets.dev.botshelf.ai
assets.dev.botshelf.ai
missionschurchorlando.org
theantimaskers.club
www.botshelf.ai
directus.dev.botshelf.ai
jobs.test.botshelf.ai
freedomprojectschool.org
test.botshelf.ai
directus.dev.botshelf.ai
us.playgcf.botshelf.ai
jobs2.api.botshelf.ai
assets.dev.botshelf.ai
assets.dev.botshelf.ai
principleofgoodness.org
directus.dev.botshelf.ai
assets.dev.botshelf.ai
www.botshelf.ai
botshelf.ai
www.prod.botshelf.ai
test.api.botshelf.ai
iam.app.dev.botshelf.ai
directus.dev.botshelf.ai
iam.app.dev.botshelf.ai
api.playg.botshelf.ai
jobs.api.botshelf.ai
api.botshelf.ai
directus.dev.botshelf.ai
directus.dev.botshelf.ai
jobs.api.botshelf.ai
jobs.api.botshelf.ai
assets.terraform.playground-tatooine.botshelf.ai
saprivateschool.org
directus.dev.botshelf.ai
assets.dev.botshelf.ai
api.playground-tatooine.botshelf.ai
www.prod.botshelf.ai
test.api.botshelf.ai
playground-tatooine.botshelf.ai
playground-tatooine.botshelf.ai
directus.dev.botshelf.ai
assets.dev.botshelf.ai
test.api.botshelf.ai
assets.dev.botshelf.ai
assets.dev.botshelf.ai
valoralgo.org
assets.dev.botshelf.ai
assets.dev.botshelf.ai
directus.dev.botshelf.ai
directus.dev.botshelf.ai
zinnia.consulting
directus.dev.botshelf.ai
directus.dev.botshelf.ai
directus.dev.botshelf.ai
wy.cosfacts.org
www.botshelf.ai
api.app.dev.botshelf.ai
assets.dev.botshelf.ai
directus.dev.botshelf.ai
assets.dev.botshelf.ai
survivalonpurpose.tv.masscorts.org
us.playgcf.botshelf.ai
us.playgcf.botshelf.ai
api.app.dev.botshelf.ai
jobs2.api.botshelf.ai
directus.dev.botshelf.ai
directus.dev.botshelf.ai
playground-tatooine.botshelf.ai
directus.dev.botshelf.ai
docs.botshelf.ai
botshelf.ai
assets.dev.botshelf.ai
shadi.world
assets.dev.botshelf.ai
assets.dev.botshelf.ai
test.api.botshelf.ai
www.dev.botshelf.ai
www.dev.botshelf.ai
timehascome.ca
treasureacademy.org
assets.dev.botshelf.ai
app.test.botshelf.ai
jobs2.api.botshelf.ai
directus.playg.botshelf.ai
botshelf.ai
assets.dev.botshelf.ai
assets.dev.botshelf.ai
missionschurchorlando.org
theantimaskers.club
www.botshelf.ai
directus.dev.botshelf.ai
jobs.test.botshelf.ai
freedomprojectschool.org
test.botshelf.ai
directus.dev.botshelf.ai
us.playgcf.botshelf.ai
jobs2.api.botshelf.ai
assets.dev.botshelf.ai
assets.dev.botshelf.ai
principleofgoodness.org
directus.dev.botshelf.ai
assets.dev.botshelf.ai
www.botshelf.ai
botshelf.ai
www.prod.botshelf.ai
test.api.botshelf.ai
iam.app.dev.botshelf.ai
directus.dev.botshelf.ai
iam.app.dev.botshelf.ai
api.playg.botshelf.ai
jobs.api.botshelf.ai
api.botshelf.ai
directus.dev.botshelf.ai
directus.dev.botshelf.ai
jobs.api.botshelf.ai
jobs.api.botshelf.ai
assets.terraform.playground-tatooine.botshelf.ai
saprivateschool.org
directus.dev.botshelf.ai
assets.dev.botshelf.ai
api.playground-tatooine.botshelf.ai
www.prod.botshelf.ai
test.api.botshelf.ai
playground-tatooine.botshelf.ai
playground-tatooine.botshelf.ai
directus.dev.botshelf.ai
assets.dev.botshelf.ai
test.api.botshelf.ai
assets.dev.botshelf.ai
assets.dev.botshelf.ai
valoralgo.org
assets.dev.botshelf.ai
assets.dev.botshelf.ai
directus.dev.botshelf.ai
directus.dev.botshelf.ai
zinnia.consulting
directus.dev.botshelf.ai
directus.dev.botshelf.ai
directus.dev.botshelf.ai
wy.cosfacts.org
www.botshelf.ai
api.app.dev.botshelf.ai
assets.dev.botshelf.ai
directus.dev.botshelf.ai
assets.dev.botshelf.ai
survivalonpurpose.tv.masscorts.org
us.playgcf.botshelf.ai
us.playgcf.botshelf.ai
api.app.dev.botshelf.ai
jobs2.api.botshelf.ai
directus.dev.botshelf.ai
directus.dev.botshelf.ai
playground-tatooine.botshelf.ai
directus.dev.botshelf.ai
docs.botshelf.ai
Certificate
The complete raw certificate details for iam.app.dev.botshelf.ai in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEbTCCA1WgAwIBAgIQClo/4/61rhvCBON/zLAL6DANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDYwODAwMDAwMFoXDTI0MDcwNjIzNTk1OVowIjEg MB4GA1UEAxMXaWFtLmFwcC5kZXYuYm90c2hlbGYuYWkwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDeh4uvgtBjuHK9JK/vcjY5DFp2VZhnf9f7ESi45ENN 9b/YH42PXa3VzL4FPvUaBxU+tdcqZe5BKbknOOhk+R3k43qz5pFtr+gKPn3zzKG2 bdzyynxnHyP8uiY+HjbuScZyDJOGzYQ29+sRc4oVT62GoUkIiGV7zE9je/A5rEVt YVwaAntU8iROXo+dELc73ZmIpliLkxX9428LTtNRPG1P7v/QLp7zCMcct4SC9cyf w8c2+b4M1C0xC/p+bVGzUUDytY0Axk7e0vIcrjmAySLJ1b6nBLgD4oot9u4jJDff 7i3guIieER01GUxzv3lnxzzLdM92BW3dKFfRGvj7btmxAgMBAAGjggGDMIIBfzAf BgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQU4niNQi0q EPDT76llapR1D9hItUswIgYDVR0RBBswGYIXaWFtLmFwcC5kZXYuYm90c2hlbGYu YWkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0 LmNvbS9yMm0wMi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEE aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5j b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29t L3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQA7VkECOrlQmPj4vfDFFWotSdZ4FLCeaxRVKyo5Zx5v LuJwMTzxTJQwlyT4gdDbVEycFZnwTxTAh1zcO4BVYzcSdvlmKb/mm3rNuvUTOkCT w/eZAxvy/MS3OYoYWFrZ7yNTx933bMQdUOXDTtKnTFPLz9LF13XdOBwaUYOjhKXV bIr05+c6aYdNP7k/RnfNYKHPtMajVcCuLlZZupEfciqPZs+Sfhmzjwb26aPg+dmb mA9iYHeAPEWkF1ty1bv/e2nLZoddEVIsMgHQadrjr386lRaVT2+KxWj2gb9Q7ory ELYW+66VyvGUyoFxsR8DzoSLmUZOwyTo3zi+GKoKjX2m -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oeLr4LQY7hyvSSv73I2 OQxadlWYZ3/X+xEouORDTfW/2B+Nj12t1cy+BT71GgcVPrXXKmXuQSm5JzjoZPkd 5ON6s+aRba/oCj5988yhtm3c8sp8Zx8j/LomPh427knGcgyThs2ENvfrEXOKFU+t hqFJCIhle8xPY3vwOaxFbWFcGgJ7VPIkTl6PnRC3O92ZiKZYi5MV/eNvC07TUTxt T+7/0C6e8wjHHLeEgvXMn8PHNvm+DNQtMQv6fm1Rs1FA8rWNAMZO3tLyHK45gMki ydW+pwS4A+KKLfbuIyQ33+4t4LiInhEdNRlMc795Z8c8y3TPdgVt3ShX0Rr4+27Z sQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13760882530544044280629711610181585896 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iam.app.dev.botshelf.ai' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28091743752082220476378826009715252640465294398046505766796925344148559607220839518223541459374452947426552845869204395322758941230076313043921770225368935118300752720464080645012452304865760488890806815271693349747991357124812984247716422918868351170396675470265724351440979385960164527899902982246313093600683611010126549230193337644834777094520448884716609416817851876491964073836299243845743168987468566429776792606934192728662049530861487414960298825260419468148521701897804883982620607124529877869039822206675667597790057435538173167370885674694608761912467068687946384276782711562904662817799952788732987234737 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e2788d422d2a10f0d3efa9656a94750fd848b54b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iam.app.dev.botshelf.ai' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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