api.ikriyo.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:3f:11:09:2d:0d:53:99:38:f6:4a:86:71:0b:48:60 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api.ikriyo.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:3f:11:09:2d:0d:53:99:38:f6:4a:86:71:0b:48:60
Serial Number (int): 9632056200541766218190305917548578912
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: eb:94:f5:2e:4e:7f:01:31:3c:62:49:71:1f:d9:38:a9:54:d8:c0:54
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 07:23:7a:15:76:b5:31:74:f6:12:8a:35:8e:37:d6:31:53:7d:4c:e0
Fingerprint (sha256): 02:9c:a7:f1:13:ab:ff:84:81:dc:df:27:94:8c:3f:39:b5:9d:05:fe:9f:71:3b:88:a5:38:5b:a4:7f:ce:a0:b6

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate api.ikriyo.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.ikriyo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ikriyo.com
www.api.ikriyo.com

Other certificates including the domain name ikriyo.com

(limited to 100 certificates)
codigopinamar.turnosweb.app
vaina.club
api.ikriyo.com
www.chrisjacobs.co.uk
traitte.app
admin.impactwrap.dev
www.emilylau.tk
pegazzo.avlmanager.mx
carcheck.city
www.hidrolig.com
app.klaytn.domains
trustudies.com
www.davidputney.com
devamin.xyz
panel.bitalium.com
alldone.app
acit1620.gaalok.com
www.youmedic.es
miles.wylynko.com
smpitnuurarradhiyyah.sch.id
vocab.so
www.director.ga
whirlofcolor.com
www.votecube.com
account.dev.tailormadedates.com
login.rcloudsoft.app
panel.bitalium.com
beta.admin.ikriyo.com
www.onvo.me
hopstopapp.com
allied.3diq.com
www.howsyourday.app
ahliit.com
www.sit.cl
www.thrillspace.co.uk
www.chrisjacobs.co.uk
ih.hockeytech.com
beta.franchisor.ikriyo.com
wiseadvice.wearede.com
eduard-elya.invito.link
reports.ikriyo.com
www.pietarivald.fi
katta.app
lemonadeart.com
track.abhibus.com
auth.tangi.co
worthlesss.com
weseeinc.co.kr
iqmaxvirtual.com
lui.sv
goranger.app
dev-app.egenya.cl
seacoastpremiereleague.com
nagapattinam.droptaxitime2time.in
mta-sts.graid.io
app.ketshop.com
link.etiqmediasites.com
track.abhibus.com
admin.ikriyo.com
quranchallenge.id
getinfluencer.me
beta.reports.ikriyo.com
staging.dinowords.com
www.startling.app
www.lucent.homes
pitacoin.app
emcsintub.lernit.app
s-api.cultandrain.com
w.antiberg.de
www.adviceai.com
www.tft-ksa.com
app.kaimo.io
quiz.rakete-ahoi.de
llamadopestcontrol.org
firebase.brenden.xyz
feedbacklet.com
hoggwarts.com
www.scrumlr.de
homeandoffice.biz
www.brilleninfo.de
www.iglesiamisionlidervirtual.org
bitswot.com
emcsintub.lernit.app
eeclub.jp
app.ketshop.com
about.kakadatabase.nz
homeandoffice.biz
cotizadorapp.depopcing.com
closetkikay.com
alejandrorodas.com
easypettrainer.com
login.rcloudsoft.app
www.tamirge.com
homypeace.com
zerodevx.com
innocation.co
laughtersaver.com
stories.money
snipetimer.app
support.boombiz.app

Certificate

The complete raw certificate details for api.ikriyo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF2zCCBMOgAwIBAgIQBz8RCS0NU5k49kqGcQtIYDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMTIwNDAwMDAwMFoXDTI1MDEwMTIzNTk1OVowGTEX
MBUGA1UEAxMOYXBpLmlrcml5by5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCiitwOHLM5Cw3imQ/VW+qZH3OH+g164P50V0PVWYZg7nM5dqHo1WYp
msuBhENrWK2/qFC91LkmOgd48G1bIUTk2GJ1dOYOx0mEv2bfgTI+UUT2OE6um3IK
vHxbde0BN1zOfY1fMUbDz7hSHySNw8LQyVX5otp80giCmF7RGABo6Pwl9moNOtj1
nlUWNPPYAw1GWByGqT8T2zfcqpl6p6osRjDCKIktjcIrCvggtngBs21gKTFHO4xh
07ihr2ci4n5VbWWTtim7SW9jL/fzAErQBGn7LmBhd0WrUQcE+gMyo+H24wZy6Xwz
MY+PR9HItUcaYXpGlsdzcbjZ8W+Ur+j3AgMBAAGjggL6MIIC9jAfBgNVHSMEGDAW
gBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQU65T1Lk5/ATE8YklxH9k4
qVTYwFQwLQYDVR0RBCYwJIIOYXBpLmlrcml5by5jb22CEnd3dy5hcGkuaWtyaXlv
LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6
Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcB
AQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0
LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5j
b20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSC
AWkBZwB2AM8RVu7VLnyv84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABjDP81jEA
AAQDAEcwRQIhAP05p3XUTtlaI3/XH8IzQlEpRdqab07zPDBf9Z1HOT9dAiA7PSlk
RsKAR9X+OnoIjusI4zBQfKQUSCR25RllPtEs8wB2AD8XS0/XIkdYlB1lHIS+DRLt
kDd/H4Vq68G/KIXs+GRuAAABjDP81lMAAAQDAEcwRQIgTaMYvndFJPxXiRgvtAyg
ahCUUWkTcj/s3meclEAP1poCIQCfg7iPOymT8F59Cy6qRKo6TynFvnHzV/BZqv8L
2269DAB1AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6MLnm4AAABjDP81joA
AAQDAEYwRAIgZSzMWHEfyncVtH+gwpD6AODPBvP6qAa89J7lAiQaLmUCIBAxdSxJ
WykKHGVLN/rwEq01qrG3kFTpCVYvBRbMLdlHMA0GCSqGSIb3DQEBCwUAA4IBAQBw
1ZK0RBeUkCWMtbyX3hbFnnZj5Ngrilfq5/H6zJKu2RPdFxi79DinJz5CGZVraiwY
zZe3J5eTnOFGztGBonghhaUF720dH9LMFzRCQYSApo4BI2pXoq1WjNBOnuEKKF/X
2O3ajBf/oFcrp5HwbpexZG2rMnMJ/oW45UAY2XUZpvGk0wuq00GqFbVZi/4stR4W
9ZGzb/dssn+9sMrw+opsSR6Zeo+gBKIfW2uFHWtROScGEF5E7kQrWMOWEC3qoVIr
T+GZyXhO/cdc3g8Q0AJZ1RnGMeTwhlsGD4h4Qh1D4g0RoQoDDnRI9ng4mtlseypn
eNZOQAPMeb4oV0yf96IJ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoorcDhyzOQsN4pkP1Vvq
mR9zh/oNeuD+dFdD1VmGYO5zOXah6NVmKZrLgYRDa1itv6hQvdS5JjoHePBtWyFE
5NhidXTmDsdJhL9m34EyPlFE9jhOrptyCrx8W3XtATdczn2NXzFGw8+4Uh8kjcPC
0MlV+aLafNIIgphe0RgAaOj8JfZqDTrY9Z5VFjTz2AMNRlgchqk/E9s33KqZeqeq
LEYwwiiJLY3CKwr4ILZ4AbNtYCkxRzuMYdO4oa9nIuJ+VW1lk7Ypu0lvYy/38wBK
0ARp+y5gYXdFq1EHBPoDMqPh9uMGcul8MzGPj0fRyLVHGmF6RpbHc3G42fFvlK/o
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9632056200541766218190305917548578912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.ikriyo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20519079620564029151915309482645860944477216228323040195679456990814692833757066894241576316825919488561931646031606701938289802847170843533393377646745875361779716460878493636123296263828937024334716257382656590919654767314675767997171018323527081487057804919578710325701070716669553219007099197721308357647736450392456904011238233342382115419025930434336987620422210263331906742941615057635875635908731994016977726323638679536122286165395775569054984951803059722532875484026028197587731471412358533748968382827692786547532636549295241282758301219634887415295603745104450005179430172582027993411351486844649843190007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb94f52e4e7f01313c6249711fd938a954d8c054
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ikriyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.ikriyo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018c33fcd6310000040300473045022100fd39a775d44ed95a237fd71fc23342512945da9a6f4ef33c305ff59d47393f5d02203b3d296446c28047d5fe3a7a088eeb08e330507ca414482476e519653ed12cf30076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018c33fcd653000004030047304502204da318be774524fc5789182fb40ca06a1094516913723fecde679c94400fd69a0221009f83b88f3b2993f05e7d0b2eaa44aa3a4f29c5be71f357f059aaff0bdb6ebd0c0075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018c33fcd63a00000403004630440220652ccc58711fca7715b47fa0c290fa00e0cf06f3faa806bcf49ee502241a2e6502201031752c495b290a1c654b37faf012ad35aab1b79054e909562f0516cc2dd947
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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