brandsites.api.groupe-seb.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:22:bf:21:1a:74:84:c0:49:22:5e:a8:45:bc:b1:51 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brandsites.api.groupe-seb.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:22:bf:21:1a:74:84:c0:49:22:5e:a8:45:bc:b1:51
Serial Number (int): 18789606597130139349648198538371051857
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 26:77:d1:68:3f:b6:28:da:07:c6:8d:4c:2f:76:76:21:9a:3d:7b:3d
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 42:6c:c3:d6:6d:b4:e8:56:ea:22:87:42:1e:22:75:78:1d:79:28:88
Fingerprint (sha256): 03:a8:25:26:de:60:7f:f4:7f:00:08:70:38:a0:a2:2f:37:a8:a9:25:f3:00:60:b5:dc:1f:d8:95:fa:64:57:db

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate brandsites.api.groupe-seb.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brandsites.api.groupe-seb.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brandsites.api.groupe-seb.com
*.brandsites.api.groupe-seb.com

Other certificates including the domain name groupe-seb.com

(limited to 100 certificates)
preprod-direct.api.groupe-seb.com
cert00088-azurecdn.akamaized.net
preprod.brandsites.api.groupe-seb.com
digital-ready.groupe-seb.com
brandsites.api.groupe-seb.com
*.urlbuilder.groupe-seb.com
digital-ready3.groupe-seb.com
dcp2.groupe-seb.com
mediaplan.groupe-seb.com
preprod-direct.api.groupe-seb.com
digital-ready3.groupe-seb.com
digital-ready2.groupe-seb.com
digital-ready.groupe-seb.com
appstore.dcp.groupe-seb.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
digital-ready.groupe-seb.com
dcp2.groupe-seb.com
qa.openfoodsystem.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
appstore.dcp.groupe-seb.com
PREPROD.api.groupe-seb.com
testmpu.groupe-seb.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
prod.api.groupe-seb.com
dcp2.groupe-seb.com
bat.iot.api.groupe-seb.com
PREPROD.api.groupe-seb.com
digital-ready.groupe-seb.com
preprod-direct.api.groupe-seb.com
digital-ready3.groupe-seb.com
dcp2.groupe-seb.com
cert00088-azurecdn.akamaized.net
freeze.dcp.groupe-seb.com
perf.api.groupe-seb.com
prod.rcu-eai-salesforce.groupe-seb.com
analytics.groupe-seb.com
*.moulinex.fr
cert00088-azurecdn.akamaized.net
brandsites.api.groupe-seb.com
dcp.groupe-seb.com
freeze-direct.iot.api.groupe-seb.com
cert00088-azurecdn.akamaized.net
digital-ready2.groupe-seb.com
dcp.groupe-seb.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
analytics.groupe-seb.com
digital-ready2.groupe-seb.com
cert00088-azurecdn.akamaized.net
dcp2.groupe-seb.com
apipro.groupe-seb.com
urlbuilder.groupe-seb.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
brandsites.api.groupe-seb.com
dcp2.groupe-seb.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
perf.api.groupe-seb.com
analytics.groupe-seb.com
digital-ready3.groupe-seb.com
devops.groupe-seb.com
data.groupe-seb.com
cert00088-azurecdn.akamaized.net
devops.groupe-seb.com
iot.api.groupe-seb.com
sebplatform.bo.groupe-seb.com
bat.bo-new.groupe-seb.com
appstore.dcp.groupe-seb.com
cert00088-azurecdn.akamaized.net
PREPROD.api.groupe-seb.com
preprod.iot.api.groupe-seb.com
brandsites.api.groupe-seb.com
drs.api.groupe-seb.com
freeze.dcp.groupe-seb.com
bat.api.groupe-seb.com
freeze.dcp.groupe-seb.com
cert00088-azurecdn.akamaized.net
datas.groupe-seb.com
freeze.api.groupe-seb.com
digital-ready.groupe-seb.com
freeze.iot.api.groupe-seb.com
digital-ready2.groupe-seb.com
dcp2.groupe-seb.com
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
freeze.dcp.groupe-seb.com
dcp2.groupe-seb.com
cert00088-azurecdn.akamaized.net
digital-ready.groupe-seb.com
mediaplan.groupe-seb.com
jenkins.dcp.seb.com
*.dsm.groupe-seb.com
brandsites.api.groupe-seb.com

Certificate

The complete raw certificate details for brandsites.api.groupe-seb.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgIQDiK/IRp0hMBJIl6oRbyxUTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDMwMTAwMDAwMFoXDTI0MDMyOTIzNTk1OVowKDEm
MCQGA1UEAxMdYnJhbmRzaXRlcy5hcGkuZ3JvdXBlLXNlYi5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCViTKy4sdnAP3XqB7mWwS7i5+4UOYlvYyh
qEr6/OdJBY4zL0iZEJltCwFJ1kbuN033w1jQiQp274f/VH6LPxGxld2MnVGGfwup
Euo8F2ciCXrUUut80WJ5Rrp8XQBQsCw1KQWezPnJwi7g3eKC6FtbNsQV422YtmCk
VUFI7joit0J5Nte6Xjs2Yi+QeZXHmdEk1/1r1GEFP4MhK8XYMEpiC8hmAawjpvZU
dr+qIV/NVjk9HIKdq/q5OH4VyKz+1XoR/RgGWhB+ImLozTRZ6MPTbr8ozykF98yJ
GWMRi/yzBxWRGgyvtRLfUFicswi35PvKTxVQRcJoHTM5lpn11vNjAgMBAAGjggMY
MIIDFDAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQU
JnfRaD+2KNoHxo1ML3Z2IZo9ez0wSQYDVR0RBEIwQIIdYnJhbmRzaXRlcy5hcGku
Z3JvdXBlLXNlYi5jb22CHyouYnJhbmRzaXRlcy5hcGkuZ3JvdXBlLXNlYi5jb20w
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7
BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNv
bS9yMm0wMi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBn
MC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20w
NgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3Iy
bTAyLmNlcjAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkA
dgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYabSPgfAAAEAwBH
MEUCIQC/BO2uq6RriZjeHoOUhD8AZ7utrKv10wW2LrXIZBv1VQIgDRMEDt5wih1l
90JZTtkV5PnbCSLk8TMtjbXS1lk1AjYAdgBz2Z6JG0yWeKAgfUed5rLGHNBRXnEZ
KoxrgBB6wXdytQAAAYabSPh+AAAEAwBHMEUCIQDPhAf8gKnMuCHDSJZ91gk1nNbL
SfuTN782PkQDs8/UfwIgb3Zwx3cMxCGcegSRbkRbmYlydzO2p5p01W3F6RCAZR0A
dwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYabSPg4AAAEAwBI
MEYCIQDvwkcSmXq+WgI2BnwTV0EYgurZhfM2Txh/wy+SE6FhAgIhALyr4nqvlFWI
MXh+un586dfIE14lG8Gf4rljcp7J2r0aMA0GCSqGSIb3DQEBCwUAA4IBAQA6m9z4
2KcS2csEH3uRM66NqqTjAYt+wLK+I1s2p/9Uh8HdvYrjeywuVYjkakaDhoWyO6Kx
ZqvLSqbhdbReErGkF6lc/Iv6+lXuavVCj9mTnrGk4Lgt2eb1zvXdk9Aa8KFhe4Nd
ZDZL5PlBGqQB5Uye4uNilQKokfT9DMuTgvOIsELHNfj3LADgbwGbRj5SYXwUSnre
S4yXZXrVcanI7e22GihQ8cJ8y6CcG0zy1KeVGcXSrhoUVRWZiYFs8ty5SfcDbdBe
gdkxNSLqvB9TqzGKz0oiTuo5DKvXnvY4cgPR36OQ5pNm6QmQI31v5N61szGxTsGH
Rb83l298dNI9xgNC
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYkysuLHZwD916ge5lsE
u4ufuFDmJb2MoahK+vznSQWOMy9ImRCZbQsBSdZG7jdN98NY0IkKdu+H/1R+iz8R
sZXdjJ1Rhn8LqRLqPBdnIgl61FLrfNFieUa6fF0AULAsNSkFnsz5ycIu4N3iguhb
WzbEFeNtmLZgpFVBSO46IrdCeTbXul47NmIvkHmVx5nRJNf9a9RhBT+DISvF2DBK
YgvIZgGsI6b2VHa/qiFfzVY5PRyCnav6uTh+Fcis/tV6Ef0YBloQfiJi6M00WejD
026/KM8pBffMiRljEYv8swcVkRoMr7US31BYnLMIt+T7yk8VUEXCaB0zOZaZ9dbz
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18789606597130139349648198538371051857
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brandsites.api.groupe-seb.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18877162316024899976562361112137059722385552967331801871840367451153760253675643904683512493387391318272059237888531420774624167322908506822028918689877599509782064304138873671808602574630682037807636808461780189319997059528197662912055136404042946622293403554117114615356690437519565425651613642786509388756167437150603128431141211439653017496986248137574705350602542363601834545503903920765400319164194181965785400388692423650544592701932948839151794737282313716681788606495746568334766629407603810819943590460078307727368289796114598557223923807171579094757073820939693308646412923388182613924775729826562133390179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2677d1683fb628da07c68d4c2f7676219a3d7b3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandsites.api.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brandsites.api.groupe-seb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:27|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:1|t:25|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 93862038588967701652988587819948981429061261129173755732659887002677729547391
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 50415992519544060159519419440249484355195178312682461906093308689059372098845
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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