gsp-ssl-apne1-ash.ls.apple.com

- Apple Inc. -

Issued by Apple Public Server RSA CA 12 - G1

About this certificate

This digital certificate with serial number 55:aa:61:59:ec:7c:fa:8d:d9:d9:c9:7c:27:03:b3:73 was issued on by Apple Inc..

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 55:aa:61:59:ec:7c:fa:8d:d9:d9:c9:7c:27:03:b3:73
Serial Number (int): 113869044625896340203010034760889381747
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 9f:31:63:81:45:e1:49:11:10:ed:c2:e4:97:a4:32:74:9a:ff:50:f1
AuthorityKeyId: 1e:5c:17:91:05:57:02:fc:77:5c:e3:70:43:ec:6b:fd:dd:d2:d8:69

Fingerprint (sha1): a0:82:53:a3:f7:a2:ed:83:16:96:d1:9e:a8:d5:1d:cf:71:c8:ea:69
Fingerprint (sha256): 00:81:5a:f5:ae:1d:44:f3:8d:66:bf:13:a3:40:eb:f1:eb:32:b3:e9:68:1b:44:02:f8:4d:87:db:e1:83:c7:15

Issuing Certificate URL: http://certs.apple.com/apsrsa12g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-apsrsa12g101
CRL Distribution Point: http://crl.apple.com/apsrsa12g1.crl

Check the revocation status for certificate gsp-ssl-apne1-ash.ls.apple.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gsp-ssl-apne1-ash.ls.apple.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gsp-ssl-commute.ls.apple.com
dispatcher-sz.ls.apple.com
gsp57-ssl-locus.ls.apple.com
gspx57-ssl-background.ls.apple.com
gsp-ssl.apple.com
gsp57-ssl-revgeo.ls.apple.com
dispatcher-sh.ls.apple.com
gspx-ssl.ls.apple.com
gsp-ssl-apne1-ash.ls.apple.com
gsp-ssl.ls.apple.com
gspe-ssl.ls.apple.com
dispatcher-sz-staging.ls.apple.com
gsp57-ssl-background.ls.apple.com
gsp-ssl-widgets.ls.apple.com

Other certificates including the domain name apple.com

(limited to 100 certificates)
itunes.apple.com
ja.ls.apple.com
origin-discussions2-us-dr-prz.apple.com
training.apple.com
reserves-prime.prz.apple.com
app001.apple.com
deployment-pv50.ls.apple.com
itunes.apple.com
reserve-prime.apple.com
gsp81-ssl-e1118.ls.apple.com
gsp102-ssl-e1502.ls.apple.com
api.searchads.apple.com
idmsa-uat.apple.com
webpay-sh-pilot.apple.com
mzstatic.com
store-029.blobstore.apple.com
beatsglobalquality-uat.corp.apple.com
rw.apple.com
stg-pod1-smp.corp.apple.com
gr-api-video-h-aapne1a.smoot.apple.com
web-ext-mmap-ce01.apple.com
usl-expe1405.apple.com
store-995.blobstore.apple.com
sapecc-prd-ext.sap.apple.com
swdlp.apple.com
gsx.apple.com
gsp-ssl-e1134.ls.apple.com
clx-dev.apple.com
noodle.apple.com
gsp11-ty21-dlb-2.ls.apple.com
mzuserxp.itunes.apple.com
gsp64-st14-ssl-dlb.ls.apple.com
gsp45-ssl-e1356.ls.apple.com
gsp12-st14-dlb-2.ls.apple.com
discussions-uat.apple.com
dc-portal.apple.com
supplier.apple.com
gsp48-kittyhawk-qs55-ssl.ls.apple.com
gsp81-ssl-e1502.ls.apple.com
gsp48-ssl-e691.ls.apple.com
mapsconnectapi.ls.apple.com
wdg01-uat.apple.com
wellnessclassic.apple.com
api-partner-connect-uat1.apple.com
people.apple.com
supplier-registration.apple.com
gsp60-ssl-e997.ls.apple.com
ssuat.apple.com
locate.apple.com
itunes.apple.com
suppliernet.apple.com
gsp79-am31-dlb.ls.apple.com
smp-device-qa3.apple.com
eurored3.apple.com
devcon-oomnshuttleist-test.apple.com
coreservices-e1506-ms11-bistunium-k8straefik.ls.apple.com
gsp70-ssl-e706.ls.apple.com
dinah05.corp.apple.com
gsp1-ssl.apple.com
gspe85-cn-ssl.ls.apple.com
vorpal-relay.apple.com
bswe.apple.com
cma.itunes.apple.com
gsp-ssl-apne1-ash.ls.apple.com
theloop-stage.apple.com
tokenvalidation.apple.com
linkmaker.itunes.apple.com
gsp70-ssl-e1633.ls.apple.com
gsp63-ms12-kittyhawk-ssl.ls.apple.com
gsp-ssl-sl61-ipv6.ls.apple.com
aws-onepulse.apple.com
gsp12-kh-st14-1.ls.apple.com
gsp59-ssl-e506.ls.apple.com
mr-apple-com2.apple.com
ocservice.apple.com
marketing.apple.com
ioss-callbackservices-qa3.apple.com
gsp19-kh-ms12.ls.apple.com
madeforipodandiphone.apple.com
gspe19-ssl.ls.apple.com
gsp19-1-kittyhawk-ci77-ssl.ls.apple.com
cs-integrations-stage.apple.com
gsp35-ty21-ssl.ls.apple.com
gbiportal-apps-external.apple.com
plmtest2.apple.com
gsp3-sy02-ssl.ls.apple.com
gspe35-ssl.ls.apple.com
gsp76-ty21-01.ls.apple.com
ne-access.apple.com
profilebroker.apple.com
axm-scim-qa12.apple.com
gsp95-hk02-stage-ssl.ls.apple.com
contactretail.apple.com
caffemacs-aa-prz.apple.com
bam.corp.apple.com
gsp45-ssl-e709.ls.apple.com
caffemacs-qa.apple.com
cls-webdata.education.icloud.com
gsp76-ms12.ls.apple.com
gsp82-ssl-e1277.ls.apple.com

Certificate

The complete raw certificate details for gsp-ssl-apne1-ash.ls.apple.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nOj2LdKnulaypmhuzJ4
bPHv1W+re9ZhS657pVz//gdV575HcMB5pXMxHxSP/BksajC5h5Su1cBTj7DvS61y
Ujl6dVZmesN/uoQWrePixPMSMSqZQRFk51W6+Hs9uoQh6Okb1p5oCgUcvF7q2JNv
gFrjWzTdsTKRDcMRfnPdsH275W4BBlyuQqsH8K2eoIYFwDGEAcGvLB3rDHSWcbyX
gqriyPCiJ0+Dizy0MqzVC5jRxHpxUbylwALhxvQXTfk4Om+cKAYFGaaMmx7EpRWW
1tWOFMpvJ4INWrQiZK5kL1E0DHqBe5k8D991sHEVo2jesszm8qax46H+vHR4N52v
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 113869044625896340203010034760889381747
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Public Server RSA CA 12 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 20:50:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 21:00:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gsp-ssl-apne1-ash.ls.apple.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27072021484668675828659720881257888867725428725520331391492292626542064505590727731859471478278649405334905153204183985312647557509667196773804195879028062540149044798114060454298451482298885696515506446990602424266922617195493342039511578416834456479479794159421940400850261653362169812851548612967098748978471421747005817683461055028501394219569324721642902640510639844825160223955112617503976835851793242038744077075433544609343371816112736578392365956193153925137092177246287708133807910652471196610468804346272299773313026582112679951612474289152448277704310989284783323064595913275003395285593227280245036265301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e5c1791055702fc775ce37043ec6bfdddd2d869
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/apsrsa12g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-apsrsa12g101'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (407 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsp-ssl-commute.ls.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dispatcher-sz.ls.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsp57-ssl-locus.ls.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gspx57-ssl-background.ls.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsp-ssl.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsp57-ssl-revgeo.ls.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dispatcher-sh.ls.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gspx-ssl.ls.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsp-ssl-apne1-ash.ls.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsp-ssl.ls.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gspe-ssl.ls.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dispatcher-sz-staging.ls.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsp57-ssl-background.ls.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsp-ssl-widgets.ls.apple.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/public'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/apsrsa12g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f31638145e1491110edc2e497a432749aff50f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							01df0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cfa5367320000040300473045022100d99d2bbcc3ce9dd198a3b7c4290869cf656549649a059e6cfd18f073d2f9dbcc022078153fd3f72a0395f68900e55b75d9d197631c2967157148d01e06abe498ba5800750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cfa5366d00000040300463044022032e064506e1b69637ed0b2b8ae77e4bf42ecab36e113b308c8ee75e0e05fc2c002207052df89d07d7fef37707bc411bf3bd5086429dc33679562590900096d39c9cc007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018cfa5366b80000040300473045022100d4d311b54366c7bec396daec0b4c2a8dfd105e969211875dd3fafe8f3bca5521022065fced062e8e82c732bae0457dfd481c9df8ec1458509c02711c515c297314b3007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cfa5366bd0000040300473045022033c0bb245ece7afffacb70b87fa937ed9129c18b687f9620b5e6b50821ba341e022100a770162e4c0d86702c72d252db16ca0c0085079d0a5ec79902cc771dca8eb886
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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