testflexguideadmin.extra.chrysler.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 06:82:e5:42:40:b0:57:3b:08:5e:f3:d2:9f:09:55:4a was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=testflexguideadmin.extra.chrysler.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:82:e5:42:40:b0:57:3b:08:5e:f3:d2:9f:09:55:4a
Serial Number (int): 8655016487197208510768528606108407114
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b2:a5:12:3e:24:87:d4:db:40:2c:e2:82:29:3c:9b:86:c5:c4:6c:29
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 49:94:ea:90:83:b3:8d:2c:22:0b:72:41:16:92:5b:4d:00:c6:e4:8c
Fingerprint (sha256): 00:90:af:c9:25:c1:52:ba:24:b0:d2:35:06:20:13:8d:33:d2:3f:15:12:8a:84:e0:cb:70:18:bf:fa:f8:24:d3

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate testflexguideadmin.extra.chrysler.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for testflexguideadmin.extra.chrysler.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

testflexguideadmin.extra.chrysler.com

Other certificates including the domain name chrysler.com

(limited to 100 certificates)
dev.keycode.extra.chrysler.com
lync-na-access02.extra.chrysler.com
m.stagdealerconnect.extra.chrysler.com
manweb.chrysler.com
qradar.appl.chrysler.com
magentocloud20.map.fastly.net
rmsstage.extra.chrysler.com
soa.extra.chrysler.com
oauth-dev.chrysler.com
zclmda02.extra.chrysler.com
magentocloud20.map.fastly.net
sharepoint.fileshare.extra.chrysler.com
testflexguideadmin.extra.chrysler.com
sharepoint.fileshare.extra.chrysler.com
obtstage.extra.chrysler.com
www.chrysler.com
wearmopar.com
zshcda02.extra.chrysler.com
calendarcontest.chrysler.com
federation-dev.chrysler.com
w03.testfieldconnect.extra.chrysler.com
zclmda01.extra.chrysler.com
discovery-ex.extra.chrysler.com
lync-na-access02.extra.chrysler.com
hrapps.extra.chrysler.com
comdash.extra.chrysler.com
exprep-6.extra.chrysler.com
techauthorityonlineqlop.extra.chrysler.com
www.chrysler.com
stg.fleetportal.chrysler.com
monroneyservice.chrysler.com
wifilogin.extra.chrysler.com
www.jeep.com
owners.chrysler.com
orderstatus.extra.chrysler.com
wsdealerconnect.chrysler.com
magentocloud20.map.fastly.net
sodddm08.extra.chrysler.com
aemdevms4-connectivity.alfaromeo.com
ddprfc.extra.chrysler.com
aemstagems4-connect.alfaromeo.com
ecm.fleetfactsdc.chrysler.com
shi009hprs01.shdc.chrysler.com
stghrapps.extra.chrysler.com
swrstest.extra.chrysler.com
pdq.extra.chrysler.com
oauth.chrysler.com
webprod.extra.chrysler.com
gpsisdev.extra.chrysler.com
tcwsdaasdealerconnect.chrysler.com
w02.dealerconnect.chrysler.com
uconnectict.extra.chrysler.com
moparsmdc.extra.chrysler.com
rp.extra.chrysler.com
solr.chrysler.com
valhub.extra.chrysler.com
cadet-test.extra.chrysler.com
w02.dealerconnect.chrysler.com
uat-blog.chrysler.com
shopcessnagifts.com
wstestdealerconnect.extra.chrysler.com
swrs.extra.chrysler.com
vam9stage.extra.chrysler.com
www.collection.chrysler.com
www.ccmvr.chrysler.com
dealerconnect.chrysler.com
monroneystage.extra.chrysler.com
evpconnect.com
tcavtst.intra.chrysler.com
magentocloud20.map.fastly.net
arvmtest.extra.chrysler.com
testb2cuserdirectory.appl.chrysler.com
w07.dealerconnect.chrysler.com
linkentry.fiat.com
test.sharepoint.fileshare.extra.chrysler.com
quicklinks.extra.chrysler.com
www.ea.chrysler.com
iqpd.extra.chrysler.com
evpconnect.com
sctcdm01.extra.chrysler.com
dealermaildirector.chrysler.com
zodddm02.extra.chrysler.com
stgercentralarchive.extra.chrysler.com
ws-03.cmm.intra.chrysler.com
cvptestapps.extra.chrysler.com
ma-01.cmm.intra.chrysler.com
monroneyservice.chrysler.com
aemstagems4-connect.alfaromeo.com
psvprod.extra.chrysler.com
stg.partners.quicksites.chrysler.com
webprod.extra.chrysler.com
discovery-ba.extra.chrysler.com
shop02hrws01.shdc.chrysler.com
*.stage.asdp.chrysler.com
uat3.alfaromeousa.com
lyncaccess01.emea.fcagroup.com
if9oauth.si.extra.chrysler.com
test3270.extra.chrysler.com
supdashboard.extra.chrysler.com
reportgate.extra.chrysler.com

Certificate

The complete raw certificate details for testflexguideadmin.extra.chrysler.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIQBoLlQkCwVzsIXvPSnwlVSjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTExNzAwMDAwMFoXDTI0MTIxNTIzNTk1OVowMDEu
MCwGA1UEAxMldGVzdGZsZXhndWlkZWFkbWluLmV4dHJhLmNocnlzbGVyLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKyE4japsBAXpGI1TweiyuNW
7Ukh4GQnfAbR2aRyl8PtAavkgoMvkFr1TCek6QeMllNuN5Eqw8IhMWMxGN6dLZEG
kPsBcYV0EEf7T5vlTNtcnn+arnKElatLABdl/YM3CGYT6AW9sp3m6TWaU2gv72QO
GA9ooTagnPZG0Pafb3sxxqxJIx1mVIWP2s5PDO7RSb2nArdf7so0egPipqmhw5hq
dhrUFLVYnWjcOqLZo//e4m/cCNACUXk4eKJPyIrQbW8MrrbQligMiTioUgkuVKSp
WESZQ5rzsBWMp7TnSsnOoZanG4CxwIY73AmzuB0zQHSAi34tW2YWxHXDp1NIXbcC
AwEAAaOCAv8wggL7MB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0G
A1UdDgQWBBSypRI+JIfU20As4oIpPJuGxcRsKTAwBgNVHREEKTAngiV0ZXN0Zmxl
eGd1aWRlYWRtaW4uZXh0cmEuY2hyeXNsZXIuY29tMBMGA1UdIAQMMAowCAYGZ4EM
AQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMy5hbWF6b250cnVz
dC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0
cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw
Oi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jZXIwDAYDVR0TAQH/
BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHUA7s3QZNXbGs7FXLedtM0T
ojKHRny87N7DUUhZRnEftZsAAAGL3WpO7QAABAMARjBEAiASZWJAHlptDyLLm3mZ
6kehoFWHfP0720BS866m6uPOzAIgDarcOSfasE5AfM7jK7m9EYQEFVxb7S5tcqVK
Tu5yA0cAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYvdak8G
AAAEAwBIMEYCIQDRq00pBbT8qjLC6YblLY1p2/2UbCVc8ChbIKr/ANPqswIhAO1/
1P0AJAkvAMq0o81AHneyGX66V4SIucCB9oYzPNyLAHcA2ra/az+1tiKfm8K7XGvo
cJFxbLtRhIU0vaQ9MEjX+6sAAAGL3WpO6AAABAMASDBGAiEAmXqYiXO4reHElzb6
bEYBJH9WeWFcoOakOLCeNk3tcAcCIQCGeC7+TC5P/L4aP4t+5uCn/FUjJmwZiIIn
TIqcRHapazANBgkqhkiG9w0BAQsFAAOCAQEAai1hpPQ2qxvms19scn4Oz0iKnfnR
K5AfNrHh6yo1sJyEcxAfLYj4Md+XOCLTQov21ZjFNbM8Wp1RLbXfXuDE8b90eJx3
VHxuVRQBVQowi8yKpfZWpKgwrywxbqBxlsVkeoRLyHDF0iPtR05Qw2CpAWYAUpMz
rxG5gB7dzaphTqD7aL5NWNMzbhRmFr0oVYAZW8cX8etXLrPtxE/kx0PliJW5bKtJ
wIsof+T/bqv36yh9VNVkqPNLuzRzBR3DwaoJ1bcaW4Mq/ZAHlBBPVFjTce45DUpY
LXT+sLtI4iNfs3zhd2T4mj+hMgLMa9ucYoaTkUpk+Lhmv9KyjPu6Os3Z4g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArITiNqmwEBekYjVPB6LK
41btSSHgZCd8BtHZpHKXw+0Bq+SCgy+QWvVMJ6TpB4yWU243kSrDwiExYzEY3p0t
kQaQ+wFxhXQQR/tPm+VM21yef5qucoSVq0sAF2X9gzcIZhPoBb2ynebpNZpTaC/v
ZA4YD2ihNqCc9kbQ9p9vezHGrEkjHWZUhY/azk8M7tFJvacCt1/uyjR6A+KmqaHD
mGp2GtQUtVidaNw6otmj/97ib9wI0AJReTh4ok/IitBtbwyuttCWKAyJOKhSCS5U
pKlYRJlDmvOwFYyntOdKyc6hlqcbgLHAhjvcCbO4HTNAdICLfi1bZhbEdcOnU0hd
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8655016487197208510768528606108407114
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'testflexguideadmin.extra.chrysler.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21778515822533478617898202918263820106387982793203607548214728012514308538106380145924945333422119326918214923482393868162866579447619436567779058991445568870203045608243221882305693312156506552873871700853773383714343949457108302326583182604921965545752121554129273826059434252858610380534561144489838434142613323132095446582664460653328635395120715887849076475610983402467724618941308096596155627170686372499361133826432066155935446782321088058089007164439953106730411856939192872464400481754106068078372612537666139845519470079669574339908191672917304119592140091694726005858136375151021631402957269077220150238647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2a5123e2487d4db402ce282293c9b86c5c46c29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testflexguideadmin.extra.chrysler.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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