auth-ui.simm.aidisco.sky.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 09:cf:f5:ac:ed:85:b2:62:4d:a4:d5:76:01:8e:b6:0e was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=auth-ui.simm.aidisco.sky.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:cf:f5:ac:ed:85:b2:62:4d:a4:d5:76:01:8e:b6:0e
Serial Number (int): 13042840302887376144237237777099306510
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 62:93:e7:93:4f:02:6b:a8:fd:ca:2e:d8:e3:6f:79:6e:99:c6:13:e5
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 24:3e:c1:f7:f6:73:3b:1b:fd:ab:a8:61:15:2c:6a:28:7b:1d:2f:1f
Fingerprint (sha256): 00:6b:93:a6:1b:92:bf:3c:d4:5f:2f:cd:26:01:90:b1:74:92:1f:64:fd:6a:8e:b5:b4:4b:f0:17:2b:b5:8c:2c

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate auth-ui.simm.aidisco.sky.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth-ui.simm.aidisco.sky.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth-ui.simm.aidisco.sky.com

Other certificates including the domain name sky.com

(limited to 100 certificates)
teachablemachine-api-ipt-73-2.cherry-ad-dev.aidisco.sky.com
secure03.stage.lithium.com
secure.suggest.search.sky.com
ssl.mobile-tv.sky.com
aspfiles2.sky.com
sky-tags-ingestor.data.sky.com
autodocs.sky.com
auth-ui.simm.aidisco.sky.com
staging.ingest.aidisco.sky.com
lightning.spex-3849.spex-dev.aidisco.sky.com
skyshare.sky.com
payments.sky.com
faspex.sky.com
access.isp.sky.com
skyidapp.sky.com
distributorreferrals.sky.com
www.nowtv.com
penfold.sns.sky.com
accessories.sky.com
stagefeeds.news.sky.com
stage-secure-my-offline.sky.com
cherry-app-release-chs-1502-api.cherry-ad-dev.aidisco.sky.com
pubfinder.sky.com
vmhorizon.drm.sot-dev.aidisco.sky.com
slo.oogwayintl.sky.com
isp-provisioning.isp.sky.com
stage-go.sky.com
skymail.sky.com
origin-proxy.video.sky.com
www.sky.com
stage-secure.sky.com
secure03.stage.lithium.com
internalcommscompetitions.sky.com
Secure.sky.com
secure-skynewsipad.stage.sky.com
webcamgames.sky.com
crm-ext.prd.p.ovp.sky.com
secure03.stage.lithium.com
testlauncher-1-13-2.cherry-ad-dev.aidisco.sky.com
sso-p.atlasottint.sky.com
contactus.sky.com
jobs.sky.com
hem.ogwam.sky.com
b2032.go.ingest-dev.aidisco.sky.com
internalcommscompetitions.sky.com
slo.stg2.idm.id.bskyb.sky.com
stark.sky.com
interest.sky.com
stage-archimedesretail-offline.sky.com
msh.ingest-dev.aidisco.sky.com
dev.app.sky.com
stg.cp.sky.com
www.stage.nowtv.com
www.nowtv.com
tp-vo-snsvpn.nme.enslo.sns.sky.com
cp.sky.com
services.stage.nowtv.com
f01.chtah.com
secure03.stage.lithium.com
sit-auth.iptv.interactive.sky.com
eurometer.news.sky.com
verify.sky.com
secure.mobile-gw.sky.com
*.data.sky.com
stg2.ogwam.sky.com
MOBILE-TV.SKY.COM
f01.chtah.com
stagefeeds.news.sky.com
contactus.sky.com
interest.sky.com
www.stage.nowtv.com
firmwareadmin.isp.sky.com

wifi.sky.com
vo-snsvpn.nme.bllon.sns.sky.com
stg.cp.sky.com
staging.intlott.sky.com
learning.sky.com
hkm-int.prd.p.ovp.sky.com
tx-snsvpn.nme.enslo.sns.sky.com
comeback.sky.com
staging.ott.sky.com
stg1.skyidapp.sky.com
secure03.stage.lithium.com
www.bigchristmaspresent.sky.com
go.sky.com
auth-ui-test.simm-dev.aidisco.sky.com
feeds.skynews.com
cs-cms-chcs-1932.cherry-ad-dev.aidisco.sky.com
avm-offline.sky.com
customerdata.adtech.sky.com
skyidapp.sky.com
www.sky.com
developers.sky.com
onboarding.1-14-0.cherry-ad.aidisco.sky.com
static.nowtv.it
bat-2189.idmapping-dev.aidisco.sky.com
interest.sky.com
origin-stage.proxy.video.sky.com
helpforum.sky.com

Certificate

The complete raw certificate details for auth-ui.simm.aidisco.sky.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIQCc/1rO2FsmJNpNV2AY62DjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTAyMjAwMDAwMFoXDTI0MTExOTIzNTk1OVowJzEl
MCMGA1UEAxMcYXV0aC11aS5zaW1tLmFpZGlzY28uc2t5LmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAJ//Mw1oCOvLtdg1APijP0NeY0kpG9s2ZGK+
lMHcDDnJjIWmiH59qp4j3XJ7g8GZ+pfTthCrfBFVZ6/wJPR+uM4jY226EcSKSMMO
L50zTUCaR1kvZ2uzrEzjsxnHpJgYOT3BXIf7ds0BpeSD2tgHL7BQQAm5RZYAXNnW
EW4wrIbt7BSpewT1ZTAdEMWAqcsCFM8xIpmvBrFe9HlbVckwuN+an2sDXB3e1PlW
46DhcOJIvnQoyOF+3lWviZrGwV/OvzJkpIqSM9Tb7cTlimCEmmixeF0GnlUmRder
lNvxohvFt7KsorCuLU/XU3qox45ltlm87k3fORdaBJLjyTdCA30CAwEAAaOCAvMw
ggLvMB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBRi
k+eTTwJrqP3KLtjjb3lumcYT5TAnBgNVHREEIDAeghxhdXRoLXVpLnNpbW0uYWlk
aXNjby5za3kuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6g
LIYqaHR0cDovL2NybC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY3JsMHUG
CCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDMuYW1h
em9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAzLmFtYXpv
bnRydXN0LmNvbS9yMm0wMy5jZXIwDAYDVR0TAQH/BAIwADCCAXwGCisGAQQB1nkC
BAIEggFsBIIBaAFmAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQA
AAGLVlPisQAABAMARzBFAiEAtg0F6RCH3QJTrkTN2zfH7MjhIkHhoIzubFTWsE/k
AaECIHWGpulkVgMUa9RRvD3b+kmWqnHeU3YAMZUduWyFWUOpAHUASLDja9qmRzQP
5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGLVlPirgAABAMARjBEAiA+Zgjd2cIk
LypH+b++1MdlBp0iZDqoJp4LJq0ZeE4wjgIgCpQdIUMDKJlQBJPV58++0RqyF4zj
cL/hKNcRoAp8oNkAdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAA
AYtWU+MGAAAEAwBGMEQCIFnz9qZdrdggYmWNQS4yJlj04XUvvHPyhqYsqHs1kbrD
AiB3/4muNU5J77HQaReXwFzPFw2jRNvt3tjDgWra/b2jqDANBgkqhkiG9w0BAQsF
AAOCAQEAdM4fqOSdfmwwLgTUwCbkDFcLkN5plazr6ZCKU/UpQLQ5xbS2G3U2oJkS
c3PLvmrR9vw3XMOElxQ2NJHcgAwt6ADVQP67+io1CDdPFkCkXgl3xlzRAU4U7FIz
an6tprtcdICgkqevCQosmBNCbZi2YS+1npQUXgZZvz3/0DGFRm4718CYZ+qsA7ex
lojjOK6npaRKcPy6yWTYEl5T4ettOr6ELNCvmjQkr/hWN3qP85xxthAZIR+wB8Qp
IlNPygsSy6TOd6ZQk9eM/KXEkyG5SS1GmWSj20134CZtPzhOzU8+HjqdZ20Ui22R
IaZ/grldwiQVhepl9Ci36rqKaCfshg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/8zDWgI68u12DUA+KM/
Q15jSSkb2zZkYr6UwdwMOcmMhaaIfn2qniPdcnuDwZn6l9O2EKt8EVVnr/Ak9H64
ziNjbboRxIpIww4vnTNNQJpHWS9na7OsTOOzGcekmBg5PcFch/t2zQGl5IPa2Acv
sFBACblFlgBc2dYRbjCshu3sFKl7BPVlMB0QxYCpywIUzzEima8GsV70eVtVyTC4
35qfawNcHd7U+VbjoOFw4ki+dCjI4X7eVa+JmsbBX86/MmSkipIz1NvtxOWKYISa
aLF4XQaeVSZF16uU2/GiG8W3sqyisK4tT9dTeqjHjmW2WbzuTd85F1oEkuPJN0ID
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13042840302887376144237237777099306510
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth-ui.simm.aidisco.sky.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20197734015492495851313022313735720161820145693167458818708462993908731271011122112397497501678066920548331578000963594063906363196613923437735803473357094989420171593021716675551703909553951592303404792203430036011709954593558488996356098410053630516059800624570413642681801744363625960375407182080837804050729140375166164522955471847074817926398975802672362525547234940040941079102478177159831314357459644879856690789842889779865352210406389062046158746540808482304223405930493640389488383720707057973857192461969813554755496967943731412914126193670082264147592369611706668052715309500806603842801174416734556390269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6293e7934f026ba8fdca2ed8e36f796e99c613e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-ui.simm.aidisco.sky.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							016600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b5653e2b10000040300473045022100b60d05e91087dd0253ae44cddb37c7ecc8e12241e1a08cee6c54d6b04fe401a102207586a6e9645603146bd451bc3ddbfa4996aa71de53760031951db96c855943a900750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b5653e2ae000004030046304402203e6608ddd9c2242f2a47f9bfbed4c765069d22643aa8269e0b26ad19784e308e02200a941d2143032899500493d5e7cfbed11ab2178ce370bfe128d711a00a7ca0d9007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b5653e3060000040300463044022059f3f6a65dadd82062658d412e322658f4e1752fbc73f286a62ca87b3591bac3022077ff89ae354e49efb1d0691797c05ccf170da344dbedded8c3816adafdbda3a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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