onescm.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:68:95:df:0e:8d:a7:87:bd:6d:e2:82:8f:e5:01:27 was issued on by Amazon.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=onescm.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:68:95:df:0e:8d:a7:87:bd:6d:e2:82:8f:e5:01:27
Serial Number (int): 12506090586767089526569284614842810663
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: db:af:ad:48:e9:d6:cd:5c:3f:cc:c6:9b:2d:1f:57:92:47:30:fe:33
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): bd:36:e4:b8:72:c2:34:eb:ba:52:36:5b:cf:d8:de:b3:d7:8a:22:ef
Fingerprint (sha256): d1:50:48:9b:70:71:30:25:40:44:2a:31:af:e7:25:2e:f4:0b:83:77:df:29:fb:c9:d6:22:86:ea:f6:13:61:34

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate onescm.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onescm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onescm.com
*.sensage.com
*.clearorbit.net
*.verdiem.com
*.1scm.com
*.cardinalmark.net
cardinal-mark.com
clearorbit.com
*.bpainc.com
*.olivesoftware.com
right90.com
supplychainlabels.com
triactive.com
verdiem.com
1scm.com
*.1scm.net
*.telescopeondemand.com
streetsmartmobile.com
*.clearorbit.com
smartformdesign.com
*.triactive.com
*.purchasingnet.com
*.onescm.net
purchasingnet.com
cardinalmark.net
onescm.net
*.streetsmartmobile.com
sensage.com
bpainc.com
*.smartformdesign.com
clearorbit.net
*.right90.com
*.supplychainlabels.com
telescopeondemand.com
1scm.net
*.geminiseries.com
geminiseries.com
olivesoftware.com
*.cardinal-mark.com

Other certificates including the domain name onescm.com

(limited to 100 certificates)
www.onescm.com
support.engineyard.com
status.biznessapps.com
classichelp.kayako.com
support.engineyard.com
support.cardinal-mark.com
status.accept360.com
support.engineyard.com
onescm.com
imports.versata.com
www.onescm.com
support.crossover.com
onescm.com
*.onescm.com
support.infinio.com
www.onescm.com
*.onescm.com
*.onescm.com
demo.onescm.com
WWW.ONESCM.COM
support.engineyard.com
onescm.com
classichelp.kayako.com
classichelp.kayako.com
onescm.com
demo.onescm.com
classichelp.kayako.com
www.onescm.com
status.biznessapps.com
imports.versata.com
support.cardinal-mark.com
avolin.com
support.engineyard.com
dnnsupport.dnnsoftware.com
classichelp.kayako.com
support.engineyard.com
*.onescm.com
demo.onescm.com
*.onescm.com
support.cardinal-mark.com
WWW.ONESCM.COM
classichelp.kayako.com
*.onescm.com
avolin.com
onescm.com
onescm.com
imports.versata.com
status.biznessapps.com
classichelp.kayako.com
www.onescm.com
support.cardinal-mark.com
support.cardinal-mark.com
onescm.com
www.onescm.com
imports.versata.com
support.engineyard.com
www.onescm.com
support.engineyard.com
status.biznessapps.com
classichelp.kayako.com
support.engineyard.com
WWW.ONESCM.COM
imports.versata.com
avolin.com
demo.onescm.com
copilot.onescm.com
classichelp.kayako.com
imports.versata.com
*.onescm.com
status.accept360.com
classichelp.kayako.com
avolin.com
demo.onescm.com
support.engineyard.com
*.onescm.com
classichelp.kayako.com
onescm.com
www.onescm.com
status.accept360.com
*.onescm.com
*.onescm.com
imports.versata.com
support.engineyard.com
support.cardinal-mark.com
onescm.com
objectstore.com
support.engineyard.com
onescm.com
onescm.com
status.biznessapps.com
support.engineyard.com
WWW.ONESCM.COM
onescm.com
*.onescm.com
WWW.ONESCM.COM

Certificate

The complete raw certificate details for onescm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeaQDTNo28CL/jrpe7xy
Lz1Svq8/ViCeNS3ylo7g03x6ljen37LWMx4eQmKcVX5c367lCyJEXyfjJaKxB69/
AdOzHn/zBB6k2EGS9Hw5hKaOy4CuqQEiZXZG6QObyJp7AEjMoW5NDsA7Nh3pfGh+
LIfPdHugr+Pjx8jl/LssY+/7yGCoXxC1xj3PDzUg+CKQWHiRDGemTr89wJyBSvGs
9iNasaLbVhnFdESVIwwIs2jLeYdEQF/VomRtJJSppSbPJxVYTtdO4UcyfWugSFxz
cVjjW7AiJ4o1knOSsPIURoozEuArpvROJGocaZbEqcWbK5mq8aexkx9cxP8f9YCC
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12506090586767089526569284614842810663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onescm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17913295705748368991133633589576242372812567128339507982877508309471096488799849657902327678525068599772906000596726634686307499363546924578137790690009726425145442280391960788074177293178692052590462718074179483341702794173915143258770761381596581219354192140404766639991147005920052465578577466475702658293886048042472851014600862263075377145927000698116316360276110097261312209108068315003929148204286023783197736373300759717770610605288144814126094480677829901054625760202696931727510942640430222326308567722396900627137366254803320689710238005829223026404905399138953244044124100802387975735996164986595073622533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbafad48e9d6cd5c3fccc69b2d1f57924730fe33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (680 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onescm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sensage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clearorbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verdiem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1scm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardinalmark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinal-mark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearorbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bpainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olivesoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'right90.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplychainlabels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triactive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verdiem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1scm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1scm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telescopeondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetsmartmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clearorbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartformdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triactive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purchasingnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onescm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchasingnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalmark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onescm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streetsmartmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sensage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartformdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearorbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.right90.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supplychainlabels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telescopeondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1scm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geminiseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geminiseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olivesoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardinal-mark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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