cdn.roi5.747385846639.cloud.bayer.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 02:34:c9:0d:84:01:db:4b:7a:40:0e:e7:93:0a:83:0a was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cdn.roi5.747385846639.cloud.bayer.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:34:c9:0d:84:01:db:4b:7a:40:0e:e7:93:0a:83:0a
Serial Number (int): 2932533263364355266494576983527817994
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 69:c7:40:6f:49:ea:3a:f1:0d:75:99:26:4a:37:26:12:f8:74:41:5e
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 3e:fa:11:85:ba:6f:d0:37:54:81:92:7b:98:31:9f:17:1a:5b:a9:9d
Fingerprint (sha256): 01:4e:76:a7:49:4a:22:c4:0a:79:64:12:be:c4:b0:44:99:95:71:6c:dd:46:e1:89:98:27:6d:86:38:03:f0:d9

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate cdn.roi5.747385846639.cloud.bayer.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.roi5.747385846639.cloud.bayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.roi5.747385846639.cloud.bayer.com

Other certificates including the domain name bayer.com

(limited to 100 certificates)
sanssl15.bayer.com
sanssl11.bayer.com
cropscience.bayer.gr
*.fargate.153847173324.cloud.bayer.com
jobs.bayer.com
investor.bayer.com
mdmwebservice.cropscience.bayer.com
static.bayer.com
iqms.int.bayer.com
www.aspirin.bayer.com
dev1.esales-dev.int.bayer.com
www.bayer.com
cheers4peers-uat.int.bayer.com
development.id.bayer.com
pft.bayercropscience.us
edit-admin.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ar-experience.bayer.com
legaplus.bayer.de
sanssl3.bayer.com
www.midol.com
cdn.roi5.747385846639.cloud.bayer.com
*.sandbox.shinyrama.d360.cloud.bayer.com
auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com
poc.ftp-na.bayer.com
gitlab-gateway-dev.servicenowapi.cloud.bayer.com
diyabetnedir.bayer.com
www.midol.com
www.aspirin.me
cime.int.bayer.com
*.lunchandlearn-qa.bayer.com
*.eightfold.ai
hcp.bayer.com
cropscience.bayer.gr
qa.macs.knowledge-suite.int.bayer.com
www.cteph.com
sanssl15.bayer.com
*.deepmind.int.bayer.com
www.antikoncepce.cz
mymail.bayer.com
www.antikoncepce.cz
es.bayer.be
bayer.com
alb.dev1.esales-dev.int.bayer.com
*.fargate.219632094236.cloud.bayer.com
www.cteph.com
*.bravo.926611122902.cloud.bayer.com
bayernet-poccm.int.bayer.com
conosfnet.bayer.com
farmer-quiz.bayer.com
baytraining.bayer.com
healthpolicy.pharma.bayer.com
resources.animalhealth.bayer.com
billie.int.bayer.com
www.iberogast.es
nas-latest-1.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
dev-validatedr.int.bayer.com
development.moodlerooms.com
view.mail.consumerhealth.bayer.com
click.mail.bayer.com
www.seresto.se
sanssl7.bayer.com
*.labware8.435341552525.cloud.bayer.com
radiology.bayer.com
www.vectorcontrol.bayer.com
sanssl24.bayer.com
www.saudi-arabia.cropscience.bayer.com
*.safetrack.bayer.com
community.bayer.com
xarelto.com
bip-foodindustry.bayer.com
dev1.esales-dev.int.bayer.com
www.myfinacea.com
career.bayer.com
www.kogenate.ca
radiology-archive.bayer.com
forms.bayer.com
ps-mt-ui.473416480675.cloud.bayer.com
san-9-s50.tlsprovisioning.exacttarget.com
ssh-user1-sp18.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ex.alliance.bayer.com
*.delta.358985726119.cloud.bayer.com
val.dinos.int.bayer.com
*.fargate-infra-test.582886667106.cloud.bayer.com
varietyselect.bayer.com
image.email.opcomobilites.fr
bicanada.bayer.com
extsipsgpp.bayer.com
mytransfer-pgh.bayer.com
www.tucuenta.bayer.com
magazine.bayer.com
datapond-dev.473416480675.cloud.bayer.com
healthcare.basel.bayer.com
*.fargate.602258435465.cloud.bayer.com
www.ccresponsecenter.bayer.com
bayerpharma.de
qa.bdas-app.871367688496.cloud.bayer.com
*.fargate.689555805548.cloud.bayer.com
bcon-dev.bayer.com
*.926611122902.cloud.bayer.com
*.genetic-data.509537612977.cloud.bayer.com

Certificate

The complete raw certificate details for cdn.roi5.747385846639.cloud.bayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIQAjTJDYQB20t6QA7nkwqDCjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDgxNDAwMDAwMFoXDTI0MDkxMjIzNTk1OVowMDEu
MCwGA1UEAxMlY2RuLnJvaTUuNzQ3Mzg1ODQ2NjM5LmNsb3VkLmJheWVyLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANRdaesjD2N+AIKL9fA8BJif
hYCRoIAhySOWfvcJweKauuCKhZ4PB7AZh+IZCHFZV7Fk9fTV8f8PpxzA4fmA4pwk
ZszGDzg1Gm+Y1+sAiYyBBZFeqTcH5GKrsmCP/AGlfvXngUYJON9R13Rj+r6+u6Jf
nswO2l1dcZS2ddPFVLNyprduhD003BZI1V8NMHLwnCP7IYv/PjavLAGEUGUb6DjL
LBZJglSWhDJlyxC7HF0p+9k4MkNxBOw2V3uL7yfmbRHLHVyDQ4iUS1ZPgP7gIbMk
5v3tiog3Shwr9c0e7pB244GVrxHCjGnL8Vb153Egu61BkPQHCIMo2BjlQ2nDU1kC
AwEAAaOCAwAwggL8MB8GA1UdIwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0G
A1UdDgQWBBRpx0BvSeo68Q11mSZKNyYS+HRBXjAwBgNVHREEKTAngiVjZG4ucm9p
NS43NDczODU4NDY2MzkuY2xvdWQuYmF5ZXIuY29tMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYq
aHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY3JsMBMGA1Ud
IAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0
cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw
Oi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/
BAIwADCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHYA7s3QZNXbGs7FXLedtM0T
ojKHRny87N7DUUhZRnEftZsAAAGJ8pSpRwAABAMARzBFAiBdFmc3pq56gx9jYSTp
9gJIu6M3F4GPe+ki9fEdK8IVxQIhANzWAiiF8YVy7T5Xs7MUGtIAw5kyLWesGoGt
2DrsOTYwAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGJ8pSp
EQAABAMASDBGAiEA3AUCd/NCP2/hbQy0y28J0ZaZ0Dn/oZZrAh/eCjqmaq0CIQD4
a+bUKVvzykysrNabMmve0HYSHgwBgyjPlCZZIlZo9AB3ANq2v2s/tbYin5vCu1xr
6HCRcWy7UYSFNL2kPTBI1/urAAABifKUqNsAAAQDAEgwRgIhANfRhuDDgpGvnlk/
zOpuhFWWEm7hDKl6zXW/gT/8d1gPAiEAqxsv4TBqw1EhO8Kbdt/zRu5bUTStG0rj
V6XITTnulj0wDQYJKoZIhvcNAQELBQADggEBAH9iBn0LmNjjngzMn8XgLFGndrh3
UkdrtRKVe0ZKqHqjdKW34KmQquMUHbe1J8kPyduTNXPRrUfM+hj+mqXxMcwo9tzX
A4e9cVbD99ZfD5+7pRAr4ModcmCl37R6L17B1RUIfmHNrxIdtqGKpKhSvab4w9zG
sPBnC7HtxWeTYQlNco+mGsKrKCDH2/j4fa5Kb06rSbqJuS1MH2Y1lkRAcAZyb+H6
uEDeDZF6tNo+/3l3C1iwX1gOlSSiO+7pLS2Pa7HtpckFRMvGIayyqmcepxVHv+kf
c1IioybD8V+Hdi2ReYXxfMccFukmAzIsTgLXBE8oR6WXBkmPG4VYvCf75+Y=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F1p6yMPY34Agov18DwE
mJ+FgJGggCHJI5Z+9wnB4pq64IqFng8HsBmH4hkIcVlXsWT19NXx/w+nHMDh+YDi
nCRmzMYPODUab5jX6wCJjIEFkV6pNwfkYquyYI/8AaV+9eeBRgk431HXdGP6vr67
ol+ezA7aXV1xlLZ108VUs3Kmt26EPTTcFkjVXw0wcvCcI/shi/8+Nq8sAYRQZRvo
OMssFkmCVJaEMmXLELscXSn72TgyQ3EE7DZXe4vvJ+ZtEcsdXINDiJRLVk+A/uAh
syTm/e2KiDdKHCv1zR7ukHbjgZWvEcKMacvxVvXncSC7rUGQ9AcIgyjYGOVDacNT
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2932533263364355266494576983527817994
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.roi5.747385846639.cloud.bayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26808584686877405980640692002736930002535607236984937659547738187950146921249882513703406469804382695244482534521533566283359497855454868674380488594075005312333754860272574501836325331369698446481249415579436733681063242824542132380343723659559164184224978340053878571501595406816770243580789743528561036157908467302903724983721955792409609996995807545723438072587908164461504886102051930214594105371152767046120434200316588956426213861003018822699318437608025744064617918610393748729311659927649600650426456427124886347776103711669568726412368270341813024733054377681003040639285740849803857664853401792108715791193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69c7406f49ea3af10d7599264a372612f874415e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.roi5.747385846639.cloud.bayer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189f294a947000004030047304502205d166737a6ae7a831f636124e9f60248bba33717818f7be922f5f11d2bc215c5022100dcd6022885f18572ed3e57b3b3141ad200c399322d67ac1a81add83aec39363000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000189f294a9110000040300483046022100dc050277f3423f6fe16d0cb4cb6f09d19699d039ffa1966b021fde0a3aa66aad022100f86be6d4295bf3ca4cacacd69b326bded076121e0c018328cf942659225668f4007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189f294a8db0000040300483046022100d7d186e0c38291af9e593fccea6e845596126ee10ca97acd75bf813ffc77580f022100ab1b2fe1306ac351213bc29b76dff346ee5b5134ad1b4ae357a5c84d39ee963d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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