tockify.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:7c:16:c1:9c:33:d7:f7:ad:e6:17:b3:2f:88:63:ca was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tockify.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:7c:16:c1:9c:33:d7:f7:ad:e6:17:b3:2f:88:63:ca
Serial Number (int): 16595042312266291317150457722223223754
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5f:5c:c2:0f:f6:ad:d2:a1:6c:08:2e:65:06:13:7f:38:76:f2:99:5a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): fe:6a:ab:4f:f1:60:cc:63:dd:f4:f9:54:04:17:a3:4b:35:c2:d6:9e
Fingerprint (sha256): b6:52:e6:93:83:99:cb:96:04:29:01:58:82:b7:5f:c7:a6:bd:8f:05:ec:db:32:e3:48:22:f4:c9:0d:63:b9:6f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate tockify.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tockify.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tockify.com
*.tockify.net
tockify.net
*.tockify.com

Other certificates including the domain name tockify.com

(limited to 100 certificates)
1.wl.tockify.com
2.wl.tockify.com
2.wl.tockify.com
2.wl.tockify.com
cps5.ucarecdn.com
1.wl.tockify.com
2.wl.tockify.com
cps5.ucarecdn.com
cps5.ucarecdn.com
1.wl.tockify.com
2.wl.tockify.com
1.wl.tockify.com
1.wl.tockify.com
tockify.com
2.wl.tockify.com
*.tockify.com
2.wl.tockify.com
2.wl.tockify.com
3.wl.tockify.com
*.tockify.com
1.wl.tockify.com
2.wl.tockify.com
1.wl.tockify.com
2.wl.tockify.com
cps5.ucarecdn.com
cps5.ucarecdn.com
1.wl.tockify.com
1.wl.tockify.com
1.wl.tockify.com
2.wl.tockify.com
1.wl.tockify.com
2.wl.tockify.com
*.tockify.com
2.wl.tockify.com
cps5.ucarecdn.com
2.wl.tockify.com
tockify.com
2.wl.tockify.com
1.wl.tockify.com
cps5.ucarecdn.com
2.wl.tockify.com
1.wl.tockify.com
2.wl.tockify.com
2.wl.tockify.com
2.wl.tockify.com
1.wl.tockify.com
cps5.ucarecdn.com
2.wl.tockify.com
tockify.com
2.wl.tockify.com
2.wl.tockify.com
cps5.ucarecdn.com
*.tockify.com
1.wl.tockify.com
tockify.com
tockify.com
1.wl.tockify.com
tockify.com
tockify.com
tockify.com
2.wl.tockify.com
3.wl.tockify.com
1.wl.tockify.com
*.tockify.com
tockify.com
tockify.com
tockify.com
*.tockify.com
3.wl.tockify.com
1.wl.tockify.com
1.wl.tockify.com
*.tockify.com
2.wl.tockify.com
1.wl.tockify.com
cps5.ucarecdn.com
2.wl.tockify.com
1.wl.tockify.com
2.wl.tockify.com
*.tockify.com
cps5.ucarecdn.com
1.wl.tockify.com
cps5.ucarecdn.com
1.wl.tockify.com
2.wl.tockify.com
cps5.ucarecdn.com
1.wl.tockify.com
3.wl.tockify.com
1.wl.tockify.com
tockify.com
tockify.com
2.wl.tockify.com
cps5.ucarecdn.com
*.tockify.com
*.tockify.com
tockify.com
2.wl.tockify.com
*.tockify.com
1.wl.tockify.com
1.wl.tockify.com
1.wl.tockify.com

Certificate

The complete raw certificate details for tockify.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIQDHwWwZwz1/et5hezL4hjyjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAyMTcwMDAwMDBaFw0yMzAzMTcy
MzU5NTlaMBYxFDASBgNVBAMTC3RvY2tpZnkuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAprzYLpbVEHE0XwgvHLEdXzxiwBMK+Qn97sLIoqUdExIy
7R7c8R7drXpqWQ3s7xPthM0SI7nul63apZemjTx/Bj/Xu3FoTdULguhls7miS1qo
bKekHRcExjA/DLfn9YfVUy9NCHehvmRF51mGhq7btvMIVxXWwtWO9Nbrfnk7VNpZ
eH35RZSn1IZYRyu90cwOAzvJ9qvF9EaihXhYM1tSBzEtq0/LfLs8D3tzapw/CPvt
LjEIZt+Y9FHjQlp1/dtMgc4FPMsqpe0c5HUneBGEEzCQMk79TsFAVGuKqMKTDqgE
izNQOVQNnqAyyFqJY9Wd2Xz/wNgKLXwAhr2kF+TDiQIDAQABo4IDETCCAw0wHwYD
VR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFF9cwg/2rdKh
bAguZQYTfzh28plaMEEGA1UdEQQ6MDiCC3RvY2tpZnkuY29tgg0qLnRvY2tpZnku
bmV0ggt0b2NraWZ5Lm5ldIINKi50b2NraWZ5LmNvbTAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD0GA1UdHwQ2MDQwMqAwoC6G
LGh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLTEuY3JsMBMG
A1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYh
aHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipo
dHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0T
AQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYArfe++nz/EMiLnT2c
Hj4YarRnKV3PsQwkyoWGNOvcgooAAAF/BwcnCAAABAMARzBFAiBrouhQCd5WJrop
cWs7dBHiZWbDfw/eZ6kyjiESjo9Z9AIhAKbCYP+tMDu/tAnOF00D7hxfbOBQGpVO
j+5Wd80D/JC9AHYANc8ZG7+xbFe/D61MbULLu7YnICZR6j/hKu+oA8M71kwAAAF/
BwcnDwAABAMARzBFAiBQn4b5EvWG1fd1b/YA59tdVQaEmInBPb2vttov2in4VAIh
AJmuyjtnn7ej+T5iiT5Ugu1oBmldtl1VUWEhp0l82dDqAHYAs3N3B+GEUPhjhtYF
qdwRCUp5LbFnDAuH3PADDnk2pZoAAAF/BwcnLwAABAMARzBFAiEAlBjbASN+gfd+
8IyMKXfz2BdFgdO7Ax9Vh/qRufpDM+8CIEPjyRk/59PZoXE5FEejb1MmzBZBLn4z
M6MyzNBzzvDdMA0GCSqGSIb3DQEBCwUAA4IBAQBps5MFapAEmeL2DV9zg5CnY/FW
IViLm3CWSzKXiQNmrt9OuxulHEI8aEetdwTSemV0zzEm+sJZSFH+Naz9xQnjq52C
2U05WGFCzwFTRDqqyGk0ni1sZS1WBMu4ni0u67p7ZXLdXVyfRod6mPOVmrgiI/yV
JZoLMCSPWqzCsD9CmNgnAbhvG/94e33vLiSARfYBVsQcF3gQ+m2dfuQYsFG5DUCd
d4D2ZGTX1eT+KCFmTcNlXPiIlh4mZtEZTqstK/vBXgHuT7ueJjD3wBjM0rY2wm2s
wE+run/DV09AvX8z1fEh9Simva9sb/jxRJs9qeE1um5+9um8wnflkmcL0+Vs
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprzYLpbVEHE0XwgvHLEd
XzxiwBMK+Qn97sLIoqUdExIy7R7c8R7drXpqWQ3s7xPthM0SI7nul63apZemjTx/
Bj/Xu3FoTdULguhls7miS1qobKekHRcExjA/DLfn9YfVUy9NCHehvmRF51mGhq7b
tvMIVxXWwtWO9Nbrfnk7VNpZeH35RZSn1IZYRyu90cwOAzvJ9qvF9EaihXhYM1tS
BzEtq0/LfLs8D3tzapw/CPvtLjEIZt+Y9FHjQlp1/dtMgc4FPMsqpe0c5HUneBGE
EzCQMk79TsFAVGuKqMKTDqgEizNQOVQNnqAyyFqJY9Wd2Xz/wNgKLXwAhr2kF+TD
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16595042312266291317150457722223223754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tockify.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21048681298762464235463016051909145250199342131282375822356636144674583643573060961862624758567044477965121200249294236029441060739064605621550893012633355210910603668564007293226029687989168441992829931777906342493395593778447598216489028218297724213362818280860196372401380056781451707011643463137665636481525779799165439930031150734807513000379482402948289379867876057561555615441833506480500140248159232610509223594186290428774482287345200560961426273056433672000989334800059239197995430062037814596184743249103988765090042226779872732791483362723772578121619171454645359487501180873695367856018546587785962505097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f5cc20ff6add2a16c082e6506137f3876f2995a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tockify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tockify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tockify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tockify.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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