*.playground.pbskids.org

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:d3:8d:6b:1a:46:81:44:fd:aa:ca:81:b4:f5:91:9c was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.playground.pbskids.org

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:d3:8d:6b:1a:46:81:44:fd:aa:ca:81:b4:f5:91:9c
Serial Number (int): 19707634883439020282748660362652258716
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 11:0d:d4:05:40:14:b9:9a:a3:e0:31:c0:18:42:3f:5c:8b:a5:b6:a8
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): fa:0b:e8:04:f6:33:c4:ce:f3:e3:91:8d:76:97:2c:ed:69:2c:d7:5a
Fingerprint (sha256): ab:94:8b:55:75:b3:76:8e:5d:c4:ee:aa:13:55:e3:01:16:3e:15:b7:cc:08:9f:a2:e6:0d:a7:79:29:19:6a:ba

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.playground.pbskids.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.playground.pbskids.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.playground.pbskids.org
playground.pbskids.org

Other certificates including the domain name pbskids.org

(limited to 100 certificates)
*.pbskids.org
*.services.pbskids.org
help.pbskids.org
shop.pbskids.org
*.playground.pbskids.org
springroll-stage.pbskids.org
fdus-48.freshdesk.com
help.pbskids.org
*.playground.pbskids.org
pbskids.org
*.services.prod.pbskids.org
*.springroll-qa.pbskids.org
pbskids.org
pbskids.org
pbskids.org
springroll-stage.pbskids.org
*.prod.pbskids.org
pbskids.org
das.pbskids.org
measureup.pbskids.org
springroll-stage.pbskids.org
help.pbskids.org
shop.pbskids.org
help.pbskids.org
*.console.pbskids.org
*.services.pbskids.org
measureup.pbskids.org
fdus-48.freshdesk.com
*.springroll-qa.pbskids.org
*.playground.pbskids.org
measureup-playground.pbskids.org
*.services.preprod.pbskids.org
pbskids.org
help.pbskids.org
secure.shop.pbskids.org
*.preprod.pbskids.org
shop.pbskids.org
pbskids.org
*.prod.pbskids.org
*.shop.pbskids.org
*.shop.pbskids.org
shop.pbskids.org
*.playground.pbskids.org
shop.pbskids.org
help.pbskids.org
study.supervision.pbskids.org
*.services.pbskids.org
*.preprod.pbskids.org
*.playground.pbskids.org
pbskids.org
livestream.pbskids.org
pbskids.org
help.pbskids.org
*.preprod.pbskids.org
pbskids.org
*.prod.pbskids.org
pbskids.org
help.pbskids.org
pbskids.org
image.pbs.org
pbskids.org
pbskids.org
livestream.pbskids.org
help.pbskids.org
qoe.pbskids.org
pbskids.org
*.prod.pbskids.org
help.pbskids.org
help.pbskids.org
help.pbskids.org
*.preprod.pbskids.org
help.pbskids.org
*.pbskids.org
pbskids.org
*.prod.pbskids.org
study.supervision.pbskids.org
fdus-48.freshdesk.com
pbskids.org
teach.pbskids.org
live.pbskids.org
jenkins.springroll.pbskids.org
*.playground.pbskids.org
pbskids.org
pbskids.org
*.pbs-kids-playground.pbskids.org
supervision.pbskids.org
*.services.pbskids.org
pbskids.org
help.pbskids.org
*.playground.pbskids.org
pbskids.org
livestream.pbskids.org
help.pbskids.org
livestream.pbskids.org
help.pbskids.org
local.pbskids.org
*.preprod.pbskids.org
shop.pbskids.org
*.services.pbskids.org
help.pbskids.org

Certificate

The complete raw certificate details for *.playground.pbskids.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgIQDtONaxpGgUT9qsqBtPWRnDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjA1MTgwMDAwMDBaFw0yMzA2MTYy
MzU5NTlaMCMxITAfBgNVBAMMGCoucGxheWdyb3VuZC5wYnNraWRzLm9yZzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMIcZlhjMia+JcvZs8TpF6j8dmrw
l9SRrYYiX34EnS60fE6hkjxBQR0sf2f3TbsqidTwVxz5Er/BhU3TA24fXLV78DrV
fQOqmyHgDco4p9YuwyP08eWpAN2HUhX4aEJlamW0on+8VzyqF0CiheSV3EdqMiyu
LZsrEljibyk7hAbLb78NZqDMY1iTrFyAuiuYtzCimRy0CaVlLU9mZbRtnNcG16Lg
foebFpEqDpJZ8P9wZUbsUqH6SYSM4pDd/pwnl6c71gRfyszXefmhdYhMBWS/qTUs
76+X6o3wAsWmQ9bvAv2UwLF4Q3gATmj1rNN1buO8ts04IfhY2B8Ki1kTggECAwEA
AaOCAwwwggMIMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1Ud
DgQWBBQRDdQFQBS5mqPgMcAYQj9ci6W2qDA7BgNVHREENDAyghgqLnBsYXlncm91
bmQucGJza2lkcy5vcmeCFnBsYXlncm91bmQucGJza2lkcy5vcmcwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA9BgNVHR8ENjA0
MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi0x
LmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYB
BQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF
BQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0
MAwGA1UdEwEB/wQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3AOg+0No+
9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABgNklgskAAAQDAEgwRgIhALQ3
UkMFDW3vgG9zD+0I/riv1JbNbWWl7Ein8vm5oSaXAiEAsyc4cwA0hJLlAkRrJvKf
iPfUrbsn06Ej3cOAkIfq7qMAdgA1zxkbv7FsV78PrUxtQsu7ticgJlHqP+Eq76gD
wzvWTAAAAYDZJYMBAAAEAwBHMEUCIC2hlv2r5khrT1Wivs6w7WgUV5Nq+hqZjs/C
PA0qsFo0AiEA9Z+uB02C9sTJIlxnLbE2dNkN8UdZdMudNhdhw9FU+6UAdgC3Pvsk
35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYDZJYL5AAAEAwBHMEUCID8F
qoL7xyioT1BfGkj+YmU/HvEIe2SRRlKE4fR9iNiNAiEA/g35088keK0+qPka5lEv
XyuRHw5D3wPC+tPnanfiXiwwDQYJKoZIhvcNAQELBQADggEBAGepfSjV1qiNPn8c
NY0p12c1gSrCe+7NSYjCXMGLA5gWh2MRgwvZS3O9C24ueHHhllrTT2QMSOuBoBlv
VmcXYst/OBe26OL6eeStv/XooDZEFrudBl+8cxje8AGmULYuckyJ+QhCpH8Jy9qv
j0VNsHaEnHcHVUGtpwe309PODxU5J46kVGPexsHRKpVmrNcU5rxhAe2xV/Hidubf
xiIztbcf9nQfqW4NIUm3aEddYto09ZV7mixYSMxfUgSgO39ZDvTp9sbuTtgl1kPH
xUZOLzFpzfVgMVSDW1RBwDVVFa+8tOerWxg7A+gZ+2ARSuqJxRImw/VlLitTAPb8
ExTx8IE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhxmWGMyJr4ly9mzxOkX
qPx2avCX1JGthiJffgSdLrR8TqGSPEFBHSx/Z/dNuyqJ1PBXHPkSv8GFTdMDbh9c
tXvwOtV9A6qbIeANyjin1i7DI/Tx5akA3YdSFfhoQmVqZbSif7xXPKoXQKKF5JXc
R2oyLK4tmysSWOJvKTuEBstvvw1moMxjWJOsXIC6K5i3MKKZHLQJpWUtT2ZltG2c
1wbXouB+h5sWkSoOklnw/3BlRuxSofpJhIzikN3+nCeXpzvWBF/KzNd5+aF1iEwF
ZL+pNSzvr5fqjfACxaZD1u8C/ZTAsXhDeABOaPWs03Vu47y2zTgh+FjYHwqLWROC
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19707634883439020282748660362652258716
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.playground.pbskids.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24504235619936919038235893544903608494029938469026023803214473343078500692244735817395782142633879631294184774266619382995820551992272025424970368695561622073323758223874980094348107418029362639560775096577342342782687680385739623829752588277134135991366556733024101423691311324139059423190887500232267679455320369399632963803202510303544983245975871112004306114442373342536668515545139833859040509548883545221552656692885724867976040965339699627608377126740212121507593057275995760629999552853670911807231156066313677610429814948352915549017650526707282653119508427865218371347682129283549490527550347897204202766849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							110dd4054014b99aa3e031c018423f5c8ba5b6a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playground.pbskids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playground.pbskids.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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