watchdisneyfe.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:3a:a8:d7:f2:65:c8:f6:46:49:92:14:fe:09:be:24 was issued on by Amazon.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=watchdisneyfe.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:3a:a8:d7:f2:65:c8:f6:46:49:92:14:fe:09:be:24
Serial Number (int): 16255313721100787425571199375072935460
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3d:27:1d:a3:79:e4:34:ed:4a:c2:6d:e3:8d:eb:9d:e9:b9:b5:11:57
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 2b:7c:3f:32:ea:5e:68:78:5d:d4:90:4a:79:d3:9b:3d:3b:84:9c:f3
Fingerprint (sha256): e5:26:0f:6b:45:7e:b4:ad:28:c6:99:5f:a5:98:4f:26:e3:64:65:dd:99:43:35:8b:79:d1:12:cf:9c:e2:23:0c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate watchdisneyfe.com

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for watchdisneyfe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

watchdisneyfe.com
foxplay.com
abc-studios.com
fftvfe.com
*.disneynow.go.com
*.fftvfe.com
*.geo.hosted.watchdisneyfe.com
*.foxplay.com
abcstudios.go.com
freeform.go.com
*.freeform.com
*.abcstudios.go.com
*.watchdisneyfe.com
fxnow.fxnetworks.com
*.latamtvfe.com
abc.com
*.cdn.watchdisneyfe.com
*.freeform.go.com
*.abc.com
*.showms.freeform.go.com
abc.go.com
*.us-west-2.aws.hosted.watchdisneyfe.com
*.abc.go.com
freeform.com
disneynow.com
*.fxtvfe.com
*.disneynow.com
fxtvfe.com
*.ngtvfe.com
latamtvfe.com
*.abc-studios.com
disneynow.go.com
ngtvfe.com

Other certificates including the domain name watchdisneyfe.com

(limited to 100 certificates)
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com

Certificate

The complete raw certificate details for watchdisneyfe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lPd1pvAon87hX9l2PWT
m8+ey3SCL41zrB0cGtp2XYoxYzCyHu9cj2iF4LYcJxw0cQHOyNED7MbM9/6uDDqV
B+QMbb8vaakFaMOWQVsKOn1Vj9t4i4ZIhpH2by2bozBdh4slEXF8A8/u3Hq2VQvC
8Dc24VDImA3J8psXAL64GnxPYUcI3NJldNkRzfHPgZ3V+pY9DGw/S8Ab8erT4z6f
tvD4MaWrtGTjeAy834jsy3wXevmhjWcoFa1gS8NNJhERT0NzpfKRTlbAP/ndhdpC
TkSyPbrkGPOnO38IWF0h/zYNjTsDfKCnqaFLwWzA4j6hqu/ZC5Wf/x4mdPk8AGm5
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16255313721100787425571199375072935460
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'watchdisneyfe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29581119502143572673830261428297908069793340605547781104609165708335865311972289440638533711485074177913018734196189358462793970815978539353080928225368535302938147859887793193425300090873325580179157207998444830350248783372285050106315427680054854397810331029654463721815485314992584390186026190215821641780053238270932559742762712906378815375162834726984500822354836629958394102998421545670811555293500126471388251796440374553627057165137649910203491495216665882493894103542115676845358938841183689731347075251527121841469872471804258709294084442514525702690906644616514166124742564446730921395339204880718459681077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d271da379e434ed4ac26de38deb9de9b9b51157
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (587 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchdisneyfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc-studios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fftvfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disneynow.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fftvfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geo.hosted.watchdisneyfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcstudios.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeform.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcstudios.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchdisneyfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxnow.fxnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latamtvfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.watchdisneyfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeform.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.showms.freeform.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.aws.hosted.watchdisneyfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abc.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disneynow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxtvfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disneynow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxtvfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ngtvfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamtvfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abc-studios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disneynow.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngtvfe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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