artifacts.consensys.net

Issued by Amazon

About this certificate

This digital certificate with serial number 05:72:5d:ab:50:93:fa:35:ed:ec:f3:f6:86:b5:07:3b was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=artifacts.consensys.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:72:5d:ab:50:93:fa:35:ed:ec:f3:f6:86:b5:07:3b
Serial Number (int): 7239961657844173726356122899532023611
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 48:d3:a0:53:e5:27:74:48:4e:a4:9b:c1:bf:54:d1:24:73:35:7a:43
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d6:ab:f2:4f:dd:0e:03:2c:5e:79:98:a4:88:8a:77:73:8d:eb:52:cb
Fingerprint (sha256): 01:cf:1f:81:1f:fd:62:56:71:3c:b9:fa:d9:97:36:ca:f1:e0:2e:82:8a:91:44:0b:dd:57:59:6b:39:7d:7f:82

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate artifacts.consensys.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for artifacts.consensys.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

artifacts.consensys.net

Other certificates including the domain name consensys.net

(limited to 100 certificates)
consensys.net
o11y.cd.web3factory.consensys.net
content-mythx.consensys.net
cd.web3factory.consensys.net
consensys.net
pushgateway-o11y-dev.o11y.web3factory.consensys.net
5640082467848192-fe3.pantheonsite.io
thebrooklynproject.consensys.net
sports.consensys.net
artifacts.consensys.net
docs.orion.consensys.net
grants.consensys.net
ethon.consensys.net
supplychain.consensys.net
consensys.net
docs.eth2signer.consensys.net
*.orchestrate.ops.consensys.net
scim.consensys.net
calendar.consensys.net
report.soc.consensys.net
develop.supplychain.consensys.net
pushgateway-o11y-dev.o11y.web3factory.consensys.net
docs.ethsigner.consensys.net
*.bvp.consensys.net
staging.consensys.net
5754903989321728-fe2.pantheonsite.io
doc.gnark.consensys.net
docs.web3signer.consensys.net
module.library.consensys.net
quorum-staging.consensys.net
admin-eu-dev.villagedao.web3factory.consensys.net
content-staging.consensys.net
pages.consensys.net
expert-test-eu-dev.villagedao.web3factory.consensys.net
pages.consensys.net
explorer-dapps-dev.linea.web3factory.consensys.net
soc.consensys.net
consensys.net
consensys.net
app-us-demo.web3factory.web3factory.consensys.net
forum.academy.consensys.net
sni.cloudflaressl.com
zkevm.consensys.net
thebrooklynproject.consensys.net
swag.consensys.net
doc.orion.consensys.net
test-us-demo.web3factory.web3factory.consensys.net
dev.observability.consensys.net
o11y-pushgateway-dev.o11y.web3factory.consensys.net
hello-world.web3factory.consensys.net
mmsap.cd.web3factory.consensys.net
discourse.courses.consensys.net
ethereum.consensys.net
webapp-main-dev.mmsap.web3factory.consensys.net
5697982787747840-fe2.pantheonsite.io
scim.consensys.net
web3factory.web3factory.consensys.net
admin-eu-dev.villagedao.web3factory.consensys.net
ethsigner.consensys.net
trufflesuite-staging.consensys.net
*.rollup.consensys.net
learn.consensys.net
goquorum.consensys.net
diligence.consensys.net
5697982787747840-fe2.pantheonsite.io
soc.consensys.net
consensys.net
ethense.stage.consensys.net
api-eu-dev.backstage.web3factory.consensys.net
calendar.consensys.net
ns2.monday.vc
canada.consensys.net
argocd.prealpha.zkevm.consensys.net
swag.consensys.net
thebrooklynproject.consensys.net
docs.metamask-onramp.consensys.net
develop.supplychain.consensys.net
ethense.stage.consensys.net
operator-1-l2-sandbox-1.rollup.consensys.net
consumer-ui-eu-dev.villagedao.web3factory.consensys.net
staging-eu-dev.metamedic.web3factory.consensys.net
5640082467848192-fe3.pantheonsite.io
prealpha.zkevm.consensys.net
learn.consensys.net
consensys.net
static.app-us-demo.hello-world-dev.web3factory.consensys.net
5678807906254848-fe3.pantheonsite.io
docs.ethsigner.consensys.net
codefi.consensys.net
community.consensys.net
artifacts.consensys.net
careers.labs.consensys.net
operator-1-l1-sandbox-1.rollup.consensys.net
www.grants.consensys.net
grants.consensys.net
palm.cd.web3factory.consensys.net
5654831519760384-fe2.pantheonsite.io
consensys.net
metabase-eu-dev.villagedao.web3factory.consensys.net
thebrooklynproject.consensys.net

Certificate

The complete raw certificate details for artifacts.consensys.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgIQBXJdq1CT+jXt7PP2hrUHOzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTA5MDEwMDAwMDBaFw0yMjA5MzAy
MzU5NTlaMCIxIDAeBgNVBAMTF2FydGlmYWN0cy5jb25zZW5zeXMubmV0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhX4UuuVybTrmNr+A2fSTIZLAEm5
RaZcPSWH+ylpe/Ue+8cegi3/oMCpOc18vH5QU4CvJxyubIYuhxKB8aE3FHkdzH+Q
+1CwoxRNKW+7UDM4xWlIM1inOMx/1in163IkZfhbMdzwoGLnGdb4yfKebpBstxUs
ssDcqtK6Dgz7SEoiQbxqPgu/EnreIUtfummVbty1PsnLrMnw/5PEqo3Tre5MVxhy
rDBKbMfYx6CrxHfWwTPebuorj0QyIALh8oaM/BX2IdUEIkROgG+Q3jwvzy4SyBS7
nAa0uvRiULrDsDKhiOJlrWoeNEMaZlJemJcxaW/3PqbsT1tozo5hDjEAhQIDAQAB
o4IC7zCCAuswHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0O
BBYEFEjToFPlJ3RITqSbwb9U0SRzNXpDMCIGA1UdEQQbMBmCF2FydGlmYWN0cy5j
b25zZW5zeXMubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5h
bWF6b250cnVzdC5jb20vc2NhMWIuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUG
CCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1h
em9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpv
bnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkC
BAIEggFtBIIBaQFnAHYAKXm+8J45OSHwVnOfY6V35b5XfZxgCvj5TV0mXCVdx4QA
AAF7n75GhwAABAMARzBFAiAbvNWJ5yymyYXceTXapIVk7iSNaylQnz7l77uCBTfu
ZQIhALXt5yekKLD4x3JTlxfkDjbEaUZEvmU4xNrO6QYvxQ4XAHUAUaOw9f0BeZxW
bbg3eI8MpHrMGyfL956IQpoN/tSLBeUAAAF7n75GvgAABAMARjBEAiBDwJg2C8eE
8HAC+1Y5dNkWP9DcLuQbSSVszp3lBOdceAIgHs+sWPCe6/dHK24ryQt4ltvqkRcv
KUH/k1gUbXwWCYwAdgBByMqx3yJGShDGoToJQodeTjGLGwPr60vHaPCQYpYG9gAA
AXufvkZPAAAEAwBHMEUCIApNxEvDwiaEexOedpSP1zLJFBFNcYgbbIM1jw3h4RD0
AiEAxIcQTEavmAz1grGmiTTNsbALVbI0X/mAD/kGx95IJhswDQYJKoZIhvcNAQEL
BQADggEBAAW+1zxAIOf7+3oEdeooDVdw7Udjp22YO6MoxSzLE5UB2gNOw2ltMvxp
2HUk6FOIFWTw+PlaNKsD9HYxrsbE7ZFVx2q9khHxwYWXtTnQrHL4AC6yUGlHE4mx
4kH3HP/QWTikHuu6U/zsa9AaE23j7dpkFdRJ/s/ucNka55JmTtKfp51xDOqBS3c3
P0HHA4VHnZdiGj5kQ4EbgznSPeCOmFW5IU2hXC/+7qmU1o+xuR0qEEXvoToGewqF
SgMDNDdiSq4XeX/EZ1FfiwNlD5oAfgdVt11qynsdHj0Nm1L/vuy+KKjGveDwGPWW
bwuw5zJ/d3xmyHX7gafMJzziCvgMy2A=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhX4UuuVybTrmNr+A2fS
TIZLAEm5RaZcPSWH+ylpe/Ue+8cegi3/oMCpOc18vH5QU4CvJxyubIYuhxKB8aE3
FHkdzH+Q+1CwoxRNKW+7UDM4xWlIM1inOMx/1in163IkZfhbMdzwoGLnGdb4yfKe
bpBstxUsssDcqtK6Dgz7SEoiQbxqPgu/EnreIUtfummVbty1PsnLrMnw/5PEqo3T
re5MVxhyrDBKbMfYx6CrxHfWwTPebuorj0QyIALh8oaM/BX2IdUEIkROgG+Q3jwv
zy4SyBS7nAa0uvRiULrDsDKhiOJlrWoeNEMaZlJemJcxaW/3PqbsT1tozo5hDjEA
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7239961657844173726356122899532023611
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'artifacts.consensys.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24501064981723333192177755668305667369222475757407942746629877140784770016706020007693347565224805269949282100581152574019757159887094981737619242560295780723421802724032463715670097820957012841753008154374318768301798759545383721967883403574722799552768636248232536933677462671311288966481551057179359305792107961007582643971304752838533877832993787618675010519680032790588032992378550953636776974934481005749256097417100835216255220195119982117707263949682213582718184720068895139228881298859890445009946199019572234510836000712371346780998852215245458118162362164617727631853665038259814873362236287617293037404293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48d3a053e52774484ea49bc1bf54d12473357a43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artifacts.consensys.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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