dialiqrouter.dev1.velocify.net

Issued by Amazon

About this certificate

This digital certificate with serial number 09:18:4c:40:c2:5d:a2:0f:06:26:48:1a:06:96:97:d7 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dialiqrouter.dev1.velocify.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:18:4c:40:c2:5d:a2:0f:06:26:48:1a:06:96:97:d7
Serial Number (int): 12089213680554644466168432156317489111
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1d:81:4f:a8:44:28:60:81:a1:92:24:02:9d:a4:ad:fe:9e:6f:78:08
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 34:78:36:63:25:17:0d:ec:3c:69:5e:b6:ac:de:11:57:87:6d:2a:74
Fingerprint (sha256): 00:69:e4:8b:81:63:2e:b9:e5:7b:70:4e:70:47:a0:30:c3:5a:f9:d7:d4:0f:c1:6d:40:92:4f:a5:c3:09:13:dd

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dialiqrouter.dev1.velocify.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dialiqrouter.dev1.velocify.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dialiqrouter.dev1.velocify.net

Other certificates including the domain name velocify.net

(limited to 100 certificates)
ess.io.dev1.velocify.net
insights.elliemae.com
dialiqrouter.dev1.velocify.net
fieldtag-api.io.prod.velocify.net
pulse-api.qa.velocify.net
claims-provider.qa.velocify.net
insights.elliemae.com
securesend.dev1.velocify.net
insights.elliemae.com
nonprod01.elliemae.com
cdn.qa.velocify.net
insights.elliemae.com
cdn.peg.velocify.net
service.stg.velocify.net
leads-api.io.stg.velocify.net
lm.prod.velocify.net
timezone-api.dev1.velocify.net
security.dev2.velocify.net
sfadmin.io.dev1.velocify.net
webapi.qa.velocify.net
import.dev1.velocify.net
webapi.qa.velocify.net
pulseqasupport.io.stg.velocify.net
claims-provider.dev1.velocify.net
lm.dev1.velocify.net
service.stg.velocify.net
insights.elliemae.com
router.qa.velocify.net
velocify.net
cdn.peg.velocify.net
securesend.prod.velocify.net
workflow-api.qa.velocify.net
lm.dev1.velocify.net
dialiqrouter.peg.velocify.net
webapi.peg.velocify.net
leads-api.io.dev1.velocify.net
elliemae.com
encompass.prod.velocify.net
url2.io.dev1.velocify.net
dialiqrouter.peg.velocify.net
cdn.prod.velocify.net
pulse-api.prod.velocify.net
desktopprinting-api.io.dev1.velocify.net
splunk.io.peg.velocify.net
pulseautonsvc-api.io.stg.velocify.net
fieldtag-api.io.dev1.velocify.net
velocify.net
lmgateway.dev1.velocify.net
dialiqdashboard.io.dev1.velocify.net
integrations-api.dev2.velocify.net
splunk.io.dev1.velocify.net
service.dev2.velocify.net
core-api.io.prod.velocify.net
insights.elliemae.com
assetservice.peg.velocify.net
leadscorerecalc.io.qa.velocify.net
entities-api.dev1.velocify.net
entities-api.dev1.velocify.net
velocify.net
twilioify.stg.velocify.net
encompass.integrations.dev1.velocify.net
dialiqdashboard.io.peg.velocify.net
diagnosticv4sf.io.dev1.velocify.net
url3.dev1.velocify.net
email-api.io.dev1.velocify.net
qa.velocify.net
insights.elliemae.com
url2.io.dev01.velocify.net
pulse-api.peg.velocify.net
router.qa.velocify.net
emailservice-api.qa.velocify.net
webapi.peg.velocify.net
dialiqdashboard.io.dev1.velocify.net
lmgateway.qa.velocify.net
diqdashboardsvc.io.dev1.velocify.net
twilioify.prod.velocify.net
prioritization-api.peg.velocify.net
desktopprint-api.io.dev1.velocify.net
cdn.qa.velocify.net
pulse-api.prod.velocify.net
recurrcampaign-api.io.peg.velocify.net
elliemae.com
*.io.dev1.velocify.net
url3.dev01.velocify.net
*.io.dev1.velocify.net
pulse-api.prod.velocify.net
samltest.qa.velocify.net
entities-api.io.dev1.velocify.net
splunk.io.peg.velocify.net
insights.elliemae.com
assetservice.stg.velocify.net
lmgateway.stg.velocify.net
encompass.dev1.velocify.net
arnoldtest.dev01.velocify.net
diqdashboardsvc.io.dev1.velocify.net
assetservice.qa.velocify.net
dialiq.dev1.velocify.net
service.dev1.velocify.net
dialiqdashboard.io.dev1.velocify.net
entities-api.io.dev1.velocify.net

Certificate

The complete raw certificate details for dialiqrouter.dev1.velocify.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIQCRhMQMJdog8GJkgaBpaX1zANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAyMjUwMDAwMDBaFw0yMTAzMjUx
MjAwMDBaMCkxJzAlBgNVBAMTHmRpYWxpcXJvdXRlci5kZXYxLnZlbG9jaWZ5Lm5l
dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLPeKiGImuyHsFGZ5Rq
DMbFz+SDOaVFPD3e84As34qzrrCgN1hqQaw2f12fXNZGg0o6XLQzHzv6f449NzIE
5ydcNDM6IQrGdC+sJZlCFVjapmiAbpk8i44IdgSAXlZ2RLbkumjYhoTuMsySRx1c
SwLEWoV1S5NWHH/9bqCteo/DkkeoQO1dw8aRYJnBCkhlFZs5oiQF0h1o32sxrPlY
jDGNXvdSv7GNoyKJiQnype09954/i4rLDMxWeGFovK+1IKis85J5Ccgd5PdX20Tg
rUVTANZVsoTuDA4I3W08Wq3kTbiX37Lee/aFgtchL0rQgwAhpANHMdqTceGO0PFf
CP0CAwEAAaOCAokwggKFMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3Q
MB0GA1UdDgQWBBQdgU+oRChggaGSJAKdpK3+nm94CDApBgNVHREEIjAggh5kaWFs
aXFyb3V0ZXIuZGV2MS52ZWxvY2lmeS5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRw
Oi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkw
FzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEF
BQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUF
BzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQw
DAYDVR0TAQH/BAIwADCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AO5Lvbd1zmC6
4UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABcHrhIEYAAAQDAEYwRAIgXqsiQ328
8wuC2snrPy88IY5o3qi7e5XfIPYRW+iA1YICIFcQfylYOa7BBoMNKGi2ulmiqe0p
3o4lxbAIb1rBwuMpAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8A
AAFweuEgXAAABAMARzBFAiEAxrAeNVSKRbcTRYfOpGh1iLjjBBMVRC+za47f0wic
3hkCIAjkRs2vgUryzP0oTrFMTWhwJWWX6jIUQOE+15xPZYBsMA0GCSqGSIb3DQEB
CwUAA4IBAQAdOus5OZc7wrZcVOxJZqgJvj/xKd7IoKXBY670vpeME94dpVCOzv2q
Dt0Jw/kSTtBtKW8aSCU0WZlw7uyB8Hy4uamYzncPa3Sp7R9NkE5+vfSoPflH1sI5
m3zMobc9sxQjmXILxjbgqjF1sTkAtEJSX6SDlB46tLb3BsxKiblT2vCOqTthrivP
Zs/YHU2eaJfzpDph5Cm9ikheUnyD5U2ZNf8uhOlyOrXh+fGNNZXveUN7xddRVRKW
ud9etbppLrmUwBsJllaZVz6XT6aWB5GqKz52qCeoZagbpsagb45cegLZUwA0M6SD
Mxd6OCl0TUorWf3DxSeTBLKoPLMDKL4G
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss94qIYia7IewUZnlGoM
xsXP5IM5pUU8Pd7zgCzfirOusKA3WGpBrDZ/XZ9c1kaDSjpctDMfO/p/jj03MgTn
J1w0MzohCsZ0L6wlmUIVWNqmaIBumTyLjgh2BIBeVnZEtuS6aNiGhO4yzJJHHVxL
AsRahXVLk1Ycf/1uoK16j8OSR6hA7V3DxpFgmcEKSGUVmzmiJAXSHWjfazGs+ViM
MY1e91K/sY2jIomJCfKl7T33nj+LissMzFZ4YWi8r7UgqKzzknkJyB3k91fbROCt
RVMA1lWyhO4MDgjdbTxareRNuJffst579oWC1yEvStCDACGkA0cx2pNx4Y7Q8V8I
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12089213680554644466168432156317489111
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dialiqrouter.dev1.velocify.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22572726205644539890096472398531671530678707491825368969593228323041173821976988157625851161462337313799182717516610300505887474677367696921931609805711658873145956555758582231697220642002940931080965805290655924077258651187113201925682061339678312828554510006927604613687650404086728688143819557361487098557007678325431380419745852513247472015496652552508238178979303446731696896828678243613879456342434184633835393262245320639877237834735731196743307947612829669032064360870966469060359928666544533962570629827115748608143054666354001720679696251237469491055286834435719899521899923945388751774383396074785463011581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d814fa844286081a19224029da4adfe9e6f7808
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.dev1.velocify.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001707ae12046000004030046304402205eab22437dbcf30b82dac9eb3f2f3c218e68dea8bb7b95df20f6115be880d582022057107f295839aec106830d2868b6ba59a2a9ed29de8e25c5b0086f5ac1c2e3290076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001707ae1205c0000040300473045022100c6b01e35548a45b7134587cea4687588b8e3041315442fb36b8edfd3089cde19022008e446cdaf814af2ccfd284eb14c4d6870256597ea321440e13ed79c4f65806c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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