zip.co

Issued by Amazon

About this certificate

This digital certificate with serial number 07:c2:94:f5:2a:32:62:cd:cd:59:f2:a1:a4:c5:75:a8 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zip.co

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:c2:94:f5:2a:32:62:cd:cd:59:f2:a1:a4:c5:75:a8
Serial Number (int): 10314922781630607404019225828924945832
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 22:15:f4:f6:0e:1e:6b:bb:ac:98:07:3b:e5:31:7e:3f:18:e8:22:f5
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f6:a8:22:b1:ef:7a:72:86:8f:5d:78:ff:dc:1f:a4:5c:2e:d1:44:36
Fingerprint (sha256): 00:a0:69:69:76:fa:11:2f:e0:e8:c6:fd:01:79:ee:34:5a:81:f9:d1:31:c0:55:a9:95:e7:ab:4c:05:11:5d:d5

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate zip.co

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zip.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zip.co
*.zip.co

Other certificates including the domain name zip.co

(limited to 100 certificates)
*.sandbox.zip.co
helpdesk.ejplastics.com
ssc-sd.oshco.com
ablink.my.zip.co
zip.co
auth.tr.zip.co
image.serviciokia.com.ec
kueskistatus.mambu.com
image.serviciokia.com.ec
kueskistatus.mambu.com
servicedesk.primeenergy.ph
internal.zip.co
aramarkstatus.paradox.ai
kueskistatus.mambu.com
kueskistatus.mambu.com
pd.zip.co
image.serviciokia.com.ec
kueskistatus.mambu.com
kueskistatus.mambu.com
kueskistatus.mambu.com
zip.co
*.zip.co
t.zip.co
customer.dev.us.zip.co
image.serviciokia.com.ec
ablink.my.zip.co
aramarkstatus.paradox.ai
*.internal.labs.au.edge.zip.co
aramarkstatus.paradox.ai
sni2822bgl.wpc.edgecastcdn.net
assets.zip.co
image.serviciokia.com.ec
image.serviciokia.com.ec
aramarkstatus.paradox.ai
dev.web.internal.zip.co
*.labs.zip.co
hd.gsp.bl.it
image.serviciokia.com.ec
quadriceps.ca.zip.co
pvl2.zip.co
kueskistatus.mambu.com
hd.gsp.bl.it
desk.kavasa.in
sni.cloudflaressl.com
ablink.edm.zip.co
mage.zip.co
kueskistatus.mambu.com
image.serviciokia.com.ec
hd.gsp.bl.it
hd.gsp.bl.it
aramarkstatus.paradox.ai
staging.zip.co
image.serviciokia.com.ec
pd.zip.co
docs-nz.zip.co
*.dev.zip.co
aramarkstatus.paradox.ai
image.serviciokia.com.ec
aramarkstatus.paradox.ai
internal.zip.co
zipmoney.com.au
zip.co
promo.zip.co
kueskistatus.mambu.com
image.serviciokia.com.ec
lon.status.cloudsigma.com
hd.gsp.bl.it
image.serviciokia.com.ec
*.stag.eu.edge.zip.co
*.internal.mgmt.au.edge.zip.co
ssc-sd.oshco.com
ablink.edm.zip.co
ssc-sd.oshco.com
*.perf.zip.co
fp.zip.co
*.labs.au.edge.zip.co
sandbox.zip.co
resources.zip.co
hd.gsp.bl.it
zip.co
image.serviciokia.com.ec
aramarkstatus.paradox.ai
dev.zip.co
kueskistatus.mambu.com
*.zip.co
hd.gsp.bl.it
kueskistatus.mambu.com
image.serviciokia.com.ec
zip.co
image.serviciokia.com.ec
app.zip.co
quadriceps.sand.ca.zip.co
aramarkstatus.paradox.ai
pvl2.zip.co
kueskistatus.mambu.com
docs-uk.zip.co
zip.co
merchant.mx.zip.co
quadriceps-login.mx.zip.co
internal.zip.co

Certificate

The complete raw certificate details for zip.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIQB8KU9SoyYs3NWfKhpMV1qDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA1MTkwMDAwMDBaFw0yMDA2MTkx
MjAwMDBaMBExDzANBgNVBAMTBnppcC5jbzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALnIqK/o1vOS+zsXR+klvWpYWEsp0689Vo4VLDJoQtcW0zLDnfPr
CL7xI16BziI7GyHmniWnYhoP5wdoWe1YMCRA6wyWI+Wq+BnZQCXO/BMxXsHWYw3K
vEzA9iX1BJpwZjVq/93RFQv48i0r4BULAzsd0ZumPLkQ2dFOgSFngQA1Q5qI4KOe
gmUesjpmUs9Dcz6GG+Ra696ykTZZHQHpoHocF30OJNb0INVk0T/jnndIsuBNTd5m
+CKxpe4TegYpWVFxX8kbI8Ny2inNrsEWvV67NsqePdHXpewm0tg4WrI6scgoA8Fx
JpjXUIa8PE3Hb6BbQIKQomfOGliDCn4JnZ8CAwEAAaOCAnowggJ2MB8GA1UdIwQY
MBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBQiFfT2Dh5ru6yYBzvl
MX4/GOgi9TAbBgNVHREEFDASggZ6aXAuY2+CCCouemlwLmNvMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAw
oC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3Js
MCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRp
MGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNv
bTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20v
c2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4A
dQDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWrNdTXeAAAEAwBG
MEQCICEi7/LWItw4UQlXpVHLtp81noYAxMxP1IMmOpMTuFk8AiAP/55Y0+TYdv3V
af4X+s0yOmOBbZbGpox1EEHxM16trgB1AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1
YMG06v9eoIMPAAABas11NvYAAAQDAEYwRAIgWRNEjf8OD08XX7aNmiE9KDoP30dt
p57gvlgaCd52vNoCIFRYdUmeoIPt9duysF6cNEVBCqZ6URlfovZEwCkIwaVpMA0G
CSqGSIb3DQEBCwUAA4IBAQCl6ORT8/2fabRq9ijWVXt0E7mMe2UPSXzkQX68e3SD
qqLhxDJnxhNFIKRspSFJgkD2M7x3XpwHK+6lBpvPoj1mxJDCG3xZdF11eQlDi5ZK
TyWEIX77QmsUc+iLKitXJdvxM5+uFhBLD8LSosfL61L0bUsYrotmC6Vy9l9PBgmL
4GwYnHjuG9oNjTq5rNYxH+tMnB2z5vtNHVIgBHX9q+IItW25m4ZbSMwaYu7N7Qrn
dzAqqqAEksjyDZeDxenZCJN/VjOohQTbASC/olwUImV8YVcdmunQV/6oszGuh06F
EMkbgIT9+mCjN3erVip2JGjF1zIgC7GY8D/CmkwdscGt
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucior+jW85L7OxdH6SW9
alhYSynTrz1WjhUsMmhC1xbTMsOd8+sIvvEjXoHOIjsbIeaeJadiGg/nB2hZ7Vgw
JEDrDJYj5ar4GdlAJc78EzFewdZjDcq8TMD2JfUEmnBmNWr/3dEVC/jyLSvgFQsD
Ox3Rm6Y8uRDZ0U6BIWeBADVDmojgo56CZR6yOmZSz0NzPoYb5Frr3rKRNlkdAemg
ehwXfQ4k1vQg1WTRP+Oed0iy4E1N3mb4IrGl7hN6BilZUXFfyRsjw3LaKc2uwRa9
Xrs2yp490del7CbS2DhasjqxyCgDwXEmmNdQhrw8TcdvoFtAgpCiZ84aWIMKfgmd
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10314922781630607404019225828924945832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zip.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23453035027023437495545612012722766700291207380148010163278057898151307132169241247804277709532706456074637470551573502142720634846541947725507856753242815971551411952965682457108570700478831541834378643088568916955280059849151564801580999983409886286585426880257298422372181932351007377548628194506644010898308087567626185971127582571955890796367905246930810564331639200507952147016975024470851496594529508078777000504725389347415316429997936712762002614849459757549504867194756404506515161617398346147295508595770731260255009667810876324197691348854424854969502031769875739171831464700286281611132408036658908863903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2215f4f60e1e6bbbac98073be5317e3f18e822f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zip.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zip.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016acd7535de000004030046304402202122eff2d622dc38510957a551cbb69f359e8600c4cc4fd483263a9313b8593c02200fff9e58d3e4d876fdd569fe17facd323a63816d96c6a68c751041f1335eadae0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016acd7536f6000004030046304402205913448dff0e0f4f175fb68d9a213d283a0fdf476da79ee0be581a09de76bcda0220545875499ea083edf5dbb2b05e9c3445410aa67a51195fa2f644c02908c1a569
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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