elevate.medallion.co

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:bc:ef:d9:8b:d3:7b:57:fe:77:46:f5:87:33:a1:d3 was issued on by Amazon.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=elevate.medallion.co

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:bc:ef:d9:8b:d3:7b:57:fe:77:46:f5:87:33:a1:d3
Serial Number (int): 12944068503149410982276559160422408659
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a9:c2:cd:d7:68:8c:ba:3e:bc:e7:ce:32:e6:37:d8:ea:80:43:e3:89
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 23:69:a1:fd:7d:a9:ba:23:96:2f:21:47:bd:24:dc:68:8c:bb:03:1f
Fingerprint (sha256): 03:f3:7a:22:7a:b5:d5:2a:65:7c:fc:6d:ba:79:16:80:62:4d:01:ae:44:42:ee:ad:14:5e:7e:57:ce:8d:54:2e

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate elevate.medallion.co

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elevate.medallion.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elevate.medallion.co
event.sparklive2023.com
pipelinesummit.qualified.com
demofest.consensus.io
creatorexperienceconference.traackr.com
live.xentral.com
event.enterprisegrowthalliance.com
events.sendcloud.com
event.ontra.ai
go.graylog.com
beyondtheperimeter2023.events.ams.goldcast.io
testevents.gcpublic.com
autoqa.supportlogic.com
innovate.radar.com
penteracon2023.pentera.io
live.axonify.com
xposure2.pentera.io
www.rippleswellglobal.com
talentsummit2023.gem.com
mimsummit2023event.venafi.com
globalwebinars.hootsuite.com
irlondemand.radar.com
beyondtheperimeter2023.events.apj.goldcast.io
www.ripplewebinar.com
guesslessandsellmore.mailchimp.com
event.hwcon22.com
2023.sxlive.com
beyondtheperimeter2023.events.emea.goldcast.io
smart2022.sysaid.com

Other certificates including the domain name medallion.co

(limited to 100 certificates)
live.events.arbinger.com
medallion.co
elevate.medallion.co
s6-sni.cloudinary.com
marketingsuccess.mailchimp.com
medallion.co
globalevents.braze.com
s6-sni.cloudinary.com
medallion.co
www.events.goldcast.io
attend.intercomevents.com
events.nasuni.com
events.nasuni.com
s6-sni.cloudinary.com
wms-unpacked.shipbob.com
www.medallion.co
medallion.co
events.nasuni.com
events.sysaid.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
attend.intercomevents.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
events.nasuni.com
events.nasuni.com
live.events.arbinger.com
live.events.arbinger.com
rko2024.ontra.ai
s6-sni.cloudinary.com
view2023.birdeye.com
events.nasuni.com
events.nasuni.com
events.nasuni.com
s6-sni.cloudinary.com
attend.intercomevents.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
marketingsuccess.mailchimp.com
s6-sni.cloudinary.com
medallion.co
attendelevate.medallion.co
s6-sni.cloudinary.com
rko2024.ontra.ai
medallion.co
www.medallion.co
events.calendly.com
medallion.co
attend.intercomevents.com
events.nasuni.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
medallion.co
medallion.co
marketingsuccess.mailchimp.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
events.nasuni.com
www.events.goldcast.io
live.events.arbinger.com
s6-sni.cloudinary.com
events.nasuni.com
events.nasuni.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
webinars.qualified.com
marketingsuccess.mailchimp.com
events.nasuni.com
s6-sni.cloudinary.com
globalevents.braze.com
s6-sni.cloudinary.com
medallion.co
medallion.co
s6-sni.cloudinary.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
medallion.co
s6-sni.cloudinary.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
events.sysaid.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
s6-sni.cloudinary.com
advantage.alpha-sense.com
wms-unpacked.shipbob.com
marketingsuccess.mailchimp.com
events.calendly.com

Certificate

The complete raw certificate details for elevate.medallion.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJlyNc7h9X1ZrDt57F++
51MM2A7m5PwMXmHBQYPGsTcRxCtTOcvjCFpzkvlpjOJZI4hjaL6OuBNWCmk3dTH+
QnNquC5Ua69uCzv1FaYH8+tC1KscLGd1Jt8nL+BpXqIAuOxCTGJBq0jWGZHh4jUi
Tl5fCztPHZzhLqH7hpGZRn6/USDorSiYSp8ZFaRh/loEW9CQMUTmiL8jn9rLMSgg
66XFjYhN63KtCvMgQeIVceU4dVADHOzD7OqhrqEgqJV45yxO0WWbtpNsk7Kcs9WV
ML/djoc32smNnWgwFs0Dygb2nGdIZ2Z6/1tnnbiJroIZbLbu+If19FkeL+lyRmMM
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12944068503149410982276559160422408659
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elevate.medallion.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24818374881951267862090634132603338816546160053534350654497520041411145523143827447749877983111050739154861544727909261617271390404014483896658607039882781958002646140128172762747908098905330201829579025021778455566399850884780838606448057977520174485039857366764512219055405598789011336851723233857037467380975681495105993272394445888448429880689840860171345260610206843984287823017123183451172968504816896986207247623549044169165985695511468605906149440107739066539588188172768914307475227901820026472500870312632635886585603677911830806048625130728448701479395456271088725098430601444303003440877086358283422469191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9c2cdd7688cba3ebce7ce32e637d8ea8043e389
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (785 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevate.medallion.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.sparklive2023.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipelinesummit.qualified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demofest.consensus.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creatorexperienceconference.traackr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.xentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.enterprisegrowthalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.sendcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.ontra.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.graylog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondtheperimeter2023.events.ams.goldcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testevents.gcpublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoqa.supportlogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovate.radar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penteracon2023.pentera.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.axonify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xposure2.pentera.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rippleswellglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentsummit2023.gem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimsummit2023event.venafi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalwebinars.hootsuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irlondemand.radar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondtheperimeter2023.events.apj.goldcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ripplewebinar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guesslessandsellmore.mailchimp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.hwcon22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2023.sxlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondtheperimeter2023.events.emea.goldcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart2022.sysaid.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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