cdata.ndev.sprinklr.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 01:a0:1d:99:3e:0e:ba:db:c3:ed:5a:86:95:f0:71:cc was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cdata.ndev.sprinklr.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:a0:1d:99:3e:0e:ba:db:c3:ed:5a:86:95:f0:71:cc
Serial Number (int): 2160595824143736858873437662215172556
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: fb:25:d2:d5:50:75:88:a8:d1:31:b2:d9:bf:a6:21:50:c8:b0:46:7e
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 62:56:d9:ae:95:de:99:a7:38:9f:44:fe:5a:6a:7c:27:ce:21:3a:b4
Fingerprint (sha256): 02:a6:aa:25:53:54:8d:f8:1e:b0:26:ad:a8:6d:85:e4:6f:8b:bf:60:02:d5:a2:5a:64:45:4d:29:48:f2:d9:56

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate cdata.ndev.sprinklr.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdata.ndev.sprinklr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdata.ndev.sprinklr.com

Other certificates including the domain name sprinklr.com

(limited to 100 certificates)
sprinklr-vpn-client.sprinklr.com
brand.sprinklr.com
cert00083-azurecdn.akamaized.net
*.apinqa.sprinklr.com
secure0019.hubspot.com
citi.sprinklr.com
azrqa-ia-assets.sprinklr.com
cert00083-azurecdn.akamaized.net
*.prod4-care.sprinklr.com
gallery-nqa.sprinklr.com
cert00023-azurecdn.akamaized.net
cert00083-azurecdn.akamaized.net
cert00083-azurecdn.akamaized.net
*.prod2-intuition3.k8s-ingress-internal.sprinklr.com
presentations-qa4.sprinklr.com
*.sprinklr.com
azrqa-content.sprinklr.com
*.survey-app.sprinklr.com
cert00023-azurecdn.akamaized.net
staging.sprinklr.com
dashboards-dev.sprinklr.com
cdata.ndev.sprinklr.com
*.nqa-origin.sprinklr.com
cert00023-azurecdn.akamaized.net
*.socialadvocacy-hsbc.sprinklr.com
*.whatsapp.sprinklr.com
brand.sprinklr.com
*.prod0-xb.sprinklr.com
sa40gl.wpc.edgecastcdn.net
cert00023-azurecdn.akamaized.net
gallery-dev.sprinklr.com
gallery-prod0.sprinklr.com
cert00023-azurecdn.akamaized.net
prod16-spx-components.sprinklr.com
*.prod8-care.sprinklr.com
testsurvey.nqa.sprinklr.com
prod3-assets.sprinklr.com
sa46gl.wpc.edgecastcdn.net
sa46gl.wpc.edgecastcdn.net
*.qa5-care.sprinklr.com
sa46gl.wpc.edgecastcdn.net
api-docs.sprinklr.com
display-api.sprinklr.com
stagingui.sprinklr.com
sa46gl.wpc.edgecastcdn.net
socialmirror.qa.sprinklr.com
cert00083-azurecdn.akamaized.net
cert00083-azurecdn.akamaized.net
cert00023-azurecdn.akamaized.net
*.sprinklr.com
survey.sprinklr.com
lead.sprinklr.com
display-nqa.sprinklr.com
segment.sprinklr.com
pz.cdata.prod0.sprinklr.com
secure0019.hubspot.com
portal.sprinklr.com
gallery.sprinklr.com
cert00023-azurecdn.akamaized.net
cert00083-azurecdn.akamaized.net
cert00023-azurecdn.akamaized.net
cert00023-azurecdn.akamaized.net
prod18-spx-components.sprinklr.com
summit.sprinklr.com
*.prod-xb.sprinklr.com
*.prod3-care.sprinklr.com
*.socialapps.sprinklr.com
presentations-staging.sprinklr.com
blog.sprinklr.com
cert00023-azurecdn.akamaized.net
*.sprinklr.com
gallery-prod2.sprinklr.com
dev-display-api.sprinklr.com
*.prod-care.sprinklr.com
cert00023-azurecdn.akamaized.net
*.prod-k8singress-intuition2-crossenv.sprinklr.com
cert00023-azurecdn.akamaized.net
cert00023-azurecdn.akamaized.net
cert00023-azurecdn.akamaized.net
*.prod12-care.sprinklr.com
prod3-spx-components.sprinklr.com
sa45gl.wpc.edgecastcdn.net
cert00083-azurecdn.akamaized.net
*.prod0-socialadvocacy.sprinklr.com
*.sprinklr.com
auth.goonlinetools.com
*.prod0-socialadvocacy.sprinklr.com
cert00023-azurecdn.akamaized.net
cert00083-azurecdn.akamaized.net
gpd.sprinklr.com
certifications.sprinklr.com
cert00083-azurecdn.akamaized.net
cert00023-azurecdn.akamaized.net
*.prod0-xb.sprinklr.com
pixel.sprinklr.com
cert00023-azurecdn.akamaized.net
*.qa4-socialadvocacy.sprinklr.com
cert00023-azurecdn.akamaized.net
azrqa-sprcdn-az.sprinklr.com
cert00083-azurecdn.akamaized.net

Certificate

The complete raw certificate details for cdata.ndev.sprinklr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIQAaAdmT4OutvD7VqGlfBxzDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTI0MDExNzAwMDAwMFoXDTI1MDIxNDIzNTk1OVowIjEg
MB4GA1UEAxMXY2RhdGEubmRldi5zcHJpbmtsci5jb20wggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQCpQsaMyhPhRX1vJq+vRYJWusNrMBKzrNeZhN10IhFN
vJqBouWh4NC1xqVmneyl1gPnnCAdJxu3Hso+sAEE2qgKgoa91hXts+z/YrxBwa0V
FW9dervSkASGZ14LeQG0r8p/AMXW6hW7Vsu4N6MYEm+4dHnTgmTaH58zjb9MhlIl
Vj7tRRfPKJ/pQWggy9C7+L7eAIpzO5nvdgraQn2FjM4VB8Gdq9RLk6yCYA5T0dAc
uezuZ0gInavh/bX0+iC61LbaEkcXc+nsUCP4AICNAEDBhKQ25SkViVSR9JZjAHp2
L2eiNHSdH7zdAYxo4gpTa8KtE6ujWA/1AtmNCuU2sucFAgMBAAGjggLuMIIC6jAf
BgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQU+yXS1VB1
iKjRMbLZv6YhUMiwRn4wIgYDVR0RBBswGYIXY2RhdGEubmRldi5zcHJpbmtsci5j
b20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8v
Y3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEE
aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250cnVzdC5j
b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1c3QuY29t
L3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFo
AWYAdQBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY0VYfAwAAAE
AwBGMEQCIHqoj2Bm3HMRSeSNVzl1qIe+bCyVRnVDPni+oBjGL50/AiAb4VhayiTD
lhwlzeFCT77zCq5YtyKkZd/C3MRIIuQFAQB2AH1ZHhLheCp7HGFnfF79+NCHXBSg
TpWeuQMv2Q6MLnm4AAABjRVh8DYAAAQDAEcwRQIgbCFWtImB+9eh0wTQATfBky2K
ugipZYp+dvn1W8LJJPkCIQDHZVuUvc223ez1TJH2QSLZJ98KuSjWgF5sYJw/P0H0
xQB1AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAABjRVh8GMAAAQD
AEYwRAIgR2GqK1C0+SdyuX2ivItJhdOu/LftzEl97jUgBG3TIt4CIGuEpCGtS8AR
oisnDJISzG9GBq6wvel16CZvBbSk4xBrMA0GCSqGSIb3DQEBCwUAA4IBAQBUNT23
KhWUuWKwJFsHjZnfctqlbXCkrD6sJuq35wxvC6XsanZ1A4IRvrMt3pxLc7eNv3sY
SIe7IdpKM9PIva3tTo6R+Li7oaTZN/0o/91Lfyu7sUABljXhaAXm0/Ch/gBNZT3A
hvuJzF3pMGJlj1PaNLh7cwvi2YUHSMjxEwzHJzGv/IVpfF2aHzNk7H+nRvP5xbu4
/ls4GZ3OwDg/85yl0aibX1i25YcY2fHwZH3OVyjERnA5TzMPhUXICWC/w5BNn+WJ
Aq7yVDrdTntwH6PCoWcettg51cFl4hdpzlFzmt8AQ6dcbbnN/8zMhlxuG7gSKApA
KtdbmxRkXn5N86O5
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqULGjMoT4UV9byavr0WC
VrrDazASs6zXmYTddCIRTbyagaLloeDQtcalZp3spdYD55wgHScbtx7KPrABBNqo
CoKGvdYV7bPs/2K8QcGtFRVvXXq70pAEhmdeC3kBtK/KfwDF1uoVu1bLuDejGBJv
uHR504Jk2h+fM42/TIZSJVY+7UUXzyif6UFoIMvQu/i+3gCKczuZ73YK2kJ9hYzO
FQfBnavUS5OsgmAOU9HQHLns7mdICJ2r4f219PogutS22hJHF3Pp7FAj+ACAjQBA
wYSkNuUpFYlUkfSWYwB6di9nojR0nR+83QGMaOIKU2vCrROro1gP9QLZjQrlNrLn
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2160595824143736858873437662215172556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdata.ndev.sprinklr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21367201807863053277891827918384959751830893902067033770077900123396498035822710365404924988434637149138414649749241087876934818981661695375939676733886125460288098938957539816347380682806094143942926252214678275788852635317813377431689964565327461188542584365437218259574795290871691113979311282679041609947847881159311306222877679124284776646416481623319756883126470753151500709743624242136184092281615902697335875896272415250871712931310612743652499870082138964183579529932334031130537206316731327104069083926651415724597147314428427339646709611460290708188568027471057346699213458540901711587526486855932464785157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb25d2d5507588a8d131b2d9bfa62150c8b0467e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdata.ndev.sprinklr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							01660075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d1561f030000004030046304402207aa88f6066dc731149e48d573975a887be6c2c954675433e78bea018c62f9d3f02201be1585aca24c3961c25cde1424fbef30aae58b722a465dfc2dcc44822e405010076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018d1561f036000004030047304502206c2156b48981fbd7a1d304d00137c1932d8aba08a9658a7e76f9f55bc2c924f9022100c7655b94bdcdb6ddecf54c91f64122d927df0ab928d6805e6c609c3f3f41f4c5007500e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018d1561f063000004030046304402204761aa2b50b4f92772b97da2bc8b4985d3aefcb7edcc497dee3520046dd322de02206b84a421ad4bc011a22b270c9212cc6f4606aeb0bde975e8266f05b4a4e3106b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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