sit.sopsapi.news.com.au
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 09:49:44:73:90:53:d2:13:f4:51:de:52:32:a6:2c:64 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sit.sopsapi.news.com.au
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:49:44:73:90:53:d2:13:f4:51:de:52:32:a6:2c:64Serial Number (int): 12343477992496197049360982452029762660
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 9a:04:86:6c:34:3b:4f:a6:3c:02:fa:7a:c9:91:89:e5:42:2d:37:3e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 14:db:b9:b9:b4:88:ae:2a:38:42:a7:e6:cc:0e:b8:f7:98:81:cc:b7
Fingerprint (sha256): 00:41:e6:b5:18:a7:96:74:3e:1a:18:fb:23:94:d0:ce:0f:9a:f3:27:bd:a6:4f:c1:a9:4b:26:ee:e7:29:8c:60
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate sit.sopsapi.news.com.au
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sit.sopsapi.news.com.au
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sit.sopsapi.news.com.au
Other certificates including the domain name news.com.au
(limited to 100 certificates)
sit.sopsapi.news.com.au
*.talk.kuraprod.cp1.news.com.au
www.stacksocial.com
stacksocial.com
www.stacksocial.com
stacksocial.com
www.stacksocial.com
idpdev3.news.com.au
stacksocial.com
sslcam.newsdev.com.au
nlm.uatproxy.news.com.au
news.com.au
stacksocial.com
sslcam.newsdev.com.au
news.com.au
akamai-san174.exacttarget.com
stacksocial.com
stacksocial.com
stacksocial.com
news.com.au
stacksocial.com
www.stacksocial.com
uat.subscriptions.news.com.au
news.com.au
chrome-dot-gng.news.com.au
news.com.au
news.com.au
api.edtech.news.com.au
www.stacksocial.com
stacksocial.com
traktr.news.com.au
news.com.au
sslcam.newsdev.com.au
subscriptions.news.com.au
support.news.com.au
sit.commerceapi.news.com.au
stacksocial.com
news.com.au
*.dcs.news.com.au
amp.news.com.au
stacksocial.com
news.com.au
subscriptions.news.com.au
stacksocial.com
auth-connect.news.com.au
newsletters.news.com.au
news.com.au
ausbots.fbbot.news.com.au
news.com.au
news.com.au
www.stacksocial.com
stacksocial.com
*.news.com.au
www.stacksocial.com
newsletters.news.com.au
news.com.au
stacksocial.com
*.kurator.kuradev.cp1.news.com.au
stacksocial.com
uat.commerceapi.news.com.au
chrome-dot-gng.news.com.au
stacksocial.com
news.com.au
stacksocial.com
stacksocial.com
news.com.au
newsdev.com.au
newsdev.com.au
uatproxy.news.com.au
amp.news.com.au
gng.news.com.au
news.com.au
markets.news.com.au
sslcam.newsdev.com.au
stacksocial.com
stacksocial.com
www.stacksocial.com
stacksocial.com
newsdev.com.au
newsdev.com.au
news.com.au
*.talk.kuradev.cp1.news.com.au
sit.graphql.news.com.au
uatproxy.news.com.au
news.com.au
newsdev.com.au
stacksocial.com
stacksocial.com
chartbeast.news.com.au
metrics.news.com.au
stacksocial.com
sslcam.newsdev.com.au
stacksocial.com
www.stacksocial.com
myprofile.news.com.au
news.com.au
news.com.au
newsletters.news.com.au
weather.news.com.au
news.com.au
*.talk.kuraprod.cp1.news.com.au
www.stacksocial.com
stacksocial.com
www.stacksocial.com
stacksocial.com
www.stacksocial.com
idpdev3.news.com.au
stacksocial.com
sslcam.newsdev.com.au
nlm.uatproxy.news.com.au
news.com.au
stacksocial.com
sslcam.newsdev.com.au
news.com.au
akamai-san174.exacttarget.com
stacksocial.com
stacksocial.com
stacksocial.com
news.com.au
stacksocial.com
www.stacksocial.com
uat.subscriptions.news.com.au
news.com.au
chrome-dot-gng.news.com.au
news.com.au
news.com.au
api.edtech.news.com.au
www.stacksocial.com
stacksocial.com
traktr.news.com.au
news.com.au
sslcam.newsdev.com.au
subscriptions.news.com.au
support.news.com.au
sit.commerceapi.news.com.au
stacksocial.com
news.com.au
*.dcs.news.com.au
amp.news.com.au
stacksocial.com
news.com.au
subscriptions.news.com.au
stacksocial.com
auth-connect.news.com.au
newsletters.news.com.au
news.com.au
ausbots.fbbot.news.com.au
news.com.au
news.com.au
www.stacksocial.com
stacksocial.com
*.news.com.au
www.stacksocial.com
newsletters.news.com.au
news.com.au
stacksocial.com
*.kurator.kuradev.cp1.news.com.au
stacksocial.com
uat.commerceapi.news.com.au
chrome-dot-gng.news.com.au
stacksocial.com
news.com.au
stacksocial.com
stacksocial.com
news.com.au
newsdev.com.au
newsdev.com.au
uatproxy.news.com.au
amp.news.com.au
gng.news.com.au
news.com.au
markets.news.com.au
sslcam.newsdev.com.au
stacksocial.com
stacksocial.com
www.stacksocial.com
stacksocial.com
newsdev.com.au
newsdev.com.au
news.com.au
*.talk.kuradev.cp1.news.com.au
sit.graphql.news.com.au
uatproxy.news.com.au
news.com.au
newsdev.com.au
stacksocial.com
stacksocial.com
chartbeast.news.com.au
metrics.news.com.au
stacksocial.com
sslcam.newsdev.com.au
stacksocial.com
www.stacksocial.com
myprofile.news.com.au
news.com.au
news.com.au
newsletters.news.com.au
weather.news.com.au
news.com.au
Certificate
The complete raw certificate details for sit.sopsapi.news.com.au in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIQCUlEc5BT0hP0Ud5SMqYsZDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDIyODAwMDAwMFoXDTIzMDgwMzIzNTk1OVowIjEg MB4GA1UEAxMXc2l0LnNvcHNhcGkubmV3cy5jb20uYXUwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDzhQpuiOpBSfq6qFzZOtNKmhrdpjbL1i7YxHV4Iz2v drvD1RoMI1rXv9ZjNRpb12E0UQk9rNmewlrUzKNxxTuDBbBKwHdYUROfM26oVfGv NjkwKe8R5QY2bxLfiTHchYeBnVy2EZSIAKosArlcrtwiPTpu8/60BPcyiZ7wYMa+ Nc1ZqHRUT2h9vcChNKIpwqdavYm6Ioizn4/sX7R40dfpY7KhO52uoJz75x3cpu0E vj9LQ1jotRj3ru4spjv0tAkuD6bwoK7JM87JU1NzntkuT4XNYCscoTDImcg9Hm6j aMi+zaKrZF4P9loMlVmUoJ+G2yT1HysKglKXc7eZbVYTAgMBAAGjggLyMIIC7jAf BgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUmgSGbDQ7 T6Y8Avp6yZGJ5UItNz4wIgYDVR0RBBswGYIXc2l0LnNvcHNhcGkubmV3cy5jb20u YXUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0 LmNvbS9yMm0wMi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEE aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5j b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29t L3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFs AWoAdwDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYaZPxR3AAAE AwBIMEYCIQCV8L2goQoqaImcqIUtc50ZGqIRplXYG/RwFboTfs1YjQIhAOy6kV6p O1fP1k/4LEsNdRYq2AgLYzUz8CQMUd9xXMv7AHcAs3N3B+GEUPhjhtYFqdwRCUp5 LbFnDAuH3PADDnk2pZoAAAGGmT8U5gAABAMASDBGAiEApxoO8JGoSaeVCf8iQMCN IspkDUDqHBOFeYNhK50gSUQCIQDcs/4UkOJ4bKSxP5YtmV7nJoJu5a/tMsZ12W4N T82mUgB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABhpk/FJ0A AAQDAEcwRQIgGEAbqvaWFdc/YDpx0h4G5q/hQ05oga40YLAX4tZK6vsCIQDjjxp3 /TtyiXqm1iei9SDBhLWQjaYQCo3gMN+/0RnlLTANBgkqhkiG9w0BAQsFAAOCAQEA fRVS7bFV6XNj99w80avcskLYKvxvR7XgG2B4pgIcv2urB8lAOxnvc6awcFdnhPQu M7xiXuXZfAkAPbhmOYtZjp8ivrksj7EQSVeS031nX0f/vvxWbR0DAzjnDAeTCigW o8pgPYKcf66OTmRqYx9achAsf4OEPx/y5O6g5OYN0B9DxvY9e5rqnsRLnsimDk8T ZPjhtOi5Ct64YgwqS7HrVs22fXFpSQZVIWMBdcfqzVvWSgD5W9Sns0n8gON1MrwP 4zK6LjxbSbQxIynFZUCwTTtTICN2Nco3viM1lKRnFcCE6SRJfDk1WUxR4i1Wgx4/ aJ+SAKZ0EpnsdUFt6QwTXQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84UKbojqQUn6uqhc2TrT Spoa3aY2y9Yu2MR1eCM9r3a7w9UaDCNa17/WYzUaW9dhNFEJPazZnsJa1MyjccU7 gwWwSsB3WFETnzNuqFXxrzY5MCnvEeUGNm8S34kx3IWHgZ1cthGUiACqLAK5XK7c Ij06bvP+tAT3Mome8GDGvjXNWah0VE9ofb3AoTSiKcKnWr2JuiKIs5+P7F+0eNHX 6WOyoTudrqCc++cd3KbtBL4/S0NY6LUY967uLKY79LQJLg+m8KCuyTPOyVNTc57Z Lk+FzWArHKEwyJnIPR5uo2jIvs2iq2ReD/ZaDJVZlKCfhtsk9R8rCoJSl3O3mW1W EwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12343477992496197049360982452029762660 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sit.sopsapi.news.com.au' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30741512945272866769899568152845338742424887120833563078572428416176286563921059862580185512000758540068657180456409962676209716751994834489647754422549170406629939040175214973206873937136373536346467265097055926510478026963818538260313904808808162494875643284764384977478545498417192495440456171283704340100695285648563418028517592503177872918237894191453533129317188017670365235000512599414903237124663050296447897785401951284854839330306103909387875457188099437330845694566194386487386783721589114932307617018912424194718661357825468181710189083932455712177240083774634757765819541054047458956381498222665867810323 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9a04866c343b4fa63c02fa7ac99189e5422d373e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit.sopsapi.news.com.au' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186993f1477000004030048304602210095f0bda0a10a2a68899ca8852d739d191aa211a655d81bf47015ba137ecd588d022100ecba915ea93b57cfd64ff82c4b0d75162ad8080b633533f0240c51df715ccbfb007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000186993f14e60000040300483046022100a71a0ef091a849a79509ff2240c08d22ca640d40ea1c13857983612b9d204944022100dcb3fe1490e2786ca4b13f962d995ee726826ee5afed32c675d96e0d4fcda652007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186993f149d0000040300473045022018401baaf69615d73f603a71d21e06e6afe1434e6881ae3460b017e2d64aeafb022100e38f1a77fd3b72897aa6d627a2f520c184b5908da6100a8de030dfbfd119e52d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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