origin.wwe-uat.lower.k2.m1.brightspot.cloud

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:a2:78:8a:5f:76:7c:84:75:25:4b:2e:c0:69:8d:97 was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=origin.wwe-uat.lower.k2.m1.brightspot.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:a2:78:8a:5f:76:7c:84:75:25:4b:2e:c0:69:8d:97
Serial Number (int): 16794332892684814916194723785798684055
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 53:1e:82:b1:97:35:39:5d:90:27:a4:cb:8c:85:b1:a3:71:3b:d8:49
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 1c:24:13:ae:31:80:35:a6:6a:0d:03:da:f5:0f:3e:35:b1:7f:9b:fb
Fingerprint (sha256): 04:24:e7:cd:47:05:ec:b5:f1:6b:da:7d:73:68:6c:3b:7e:de:28:ae:8f:a8:3f:1a:76:76:68:d3:fc:46:e8:0d

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate origin.wwe-uat.lower.k2.m1.brightspot.cloud

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for origin.wwe-uat.lower.k2.m1.brightspot.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

origin.wwe-uat.lower.k2.m1.brightspot.cloud
*.origin.wwe-uat.lower.k2.m1.brightspot.cloud
static.wwe-uat.lower.k2.m1.brightspot.cloud
verify.origin.wwe-uat.lower.k2.m1.brightspot.cloud
*.wwe-uat.lower.k2.m1.brightspot.cloud
cms.wwe-uat.lower.k2.m1.brightspot.cloud
*.cms.wwe-uat.lower.k2.m1.brightspot.cloud
verify.cms.wwe-uat.lower.k2.m1.brightspot.cloud
wwe-uat.lower.k2.m1.brightspot.cloud

Other certificates including the domain name brightspot.cloud

(limited to 100 certificates)
cst-qa.lower.chorus.brightspot.cloud
origin.ser.production.k1.amazon.brightspot.cloud
origin.afar-media.production.k3.m1.brightspot.cloud
church-qa3.church.lower.church.brightspot.cloud
origin.uat.lower.google-marketing.brightspot.cloud
entertainment.production.k1.amazon.brightspot.cloud
origin.relay-qa.lower.k1.amazon.brightspot.cloud
biospace-qa.lower.k1.m1.brightspot.cloud
origin.kpbs.kpbs.production.k3.m1.brightspot.cloud
cms.6amcity.com
origin.pitchbook-prod.production.k2.m1.brightspot.cloud
acertus-uat.lower.k1.m1.brightspot.cloud
origin.wwe-uat.lower.k2.m1.brightspot.cloud
origin.biospace-qa.lower.k1.m1.brightspot.cloud
origin.ajga-uat.ajga.lower.k1.m1.brightspot.cloud
amazon-hvh.lower.k3.m1.brightspot.cloud
static.amazon-hvh.lower.k3.m1.brightspot.cloud
origin.acertus.production.k1.m1.brightspot.cloud
origin.cst-web.production.chorus.brightspot.cloud
aarp-content-uat2.aarp.lower.k1.m1.brightspot.cloud
origin.web.production.projectm.brightspot.cloud
tvnotas.production.k3.m1.brightspot.cloud
intsys-qa.inter-systems.lower.k2.m1.brightspot.cloud
origin.medtech.production.jnj.brightspot.cloud
origin.web.production.hca.brightspot.cloud
intsys.inter-systems.production.k2.m1.brightspot.cloud
origin.wwe-prod.production.k2.m1.brightspot.cloud
origin.jobs.production.amazon-jobs.brightspot.cloud
origin.berlin-2023-qa.berlin-2023.lower.k2.m1.brightspot.cloud
www.nbcsportsathletedirect.com
static.church-qa.church.lower.church.brightspot.cloud
origin.epe-uat.epe.lower.k2.m1.brightspot.cloud
lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
origin.pitchbook-uat.lower.k2.m1.brightspot.cloud
origin.in-investor-uat.lower.k2.m1.brightspot.cloud
origin.getgo-qa.lower.k2.m1.brightspot.cloud
ensign-qa.ensign.lower.church.brightspot.cloud
fastmarkets.com
origin.deseret.production.chorus.brightspot.cloud
static.lexipol.lower.k1.m1.brightspot.cloud
origin.aarp-states-uat.aarp.lower.k1.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
static.bwater-uat.bridgewater.lower.k2.m1.brightspot.cloud
static.farm-journal-qa.lower.k1.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
origin.web.production.teaching-strategies.brightspot.cloud
origin.thecity.production.chorus.brightspot.cloud
origin.intsys.inter-systems.production.k2.m1.brightspot.cloud
origin.church-uat.church.lower.church.brightspot.cloud
amazon-last-mile.lower.k3.m1.brightspot.cloud
church-qa4.church.lower.church.brightspot.cloud
origin.pay-uat.lower.k1.amazon.brightspot.cloud
origin.vpm.production.k1.m1.brightspot.cloud
origin.foods.wholefoods.production.k1.amazon.brightspot.cloud
aarp-content-uat.aarp.lower.k1.m1.brightspot.cloud
static.biospace.production.k1.m1.brightspot.cloud
epe-qa.epe.lower.k2.m1.brightspot.cloud
bsp.elpais.com.uy
origin.vpm.production.k1.m1.brightspot.cloud
origin.carrick.production.k1.m1.brightspot.cloud
cms.6amcity.com
static.timothy-shriver-prod.production.k1.m1.brightspot.cloud
origin.chalkbeat.production.chorus.brightspot.cloud
origin.berlin-2023.berlin-2023.production.k2.m1.brightspot.cloud
static.prod-wires.production.ap.brightspot.cloud
origin.music2-qa.lower.k1.amazon.brightspot.cloud
kpbs-qa.kpbs.lower.k3.m1.brightspot.cloud
acertus-qa.lower.k1.m1.brightspot.cloud
cms.6amcity.com
cms.6amcity.com
origin.marriott-news.production.k1.m1.brightspot.cloud
origin.ei.energy-intelligence.production.k1.m1.brightspot.cloud
origin.thecity.production.chorus.brightspot.cloud
origin.lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
static.uat.lower.dispatch-health.brightspot.cloud
entertainment-uat.lower.k1.amazon.brightspot.cloud
erepublic-qa2.erepublic.lower.k3.m1.brightspot.cloud
lexipol.production.k1.m1.brightspot.cloud
qa2.lower.forum-communications.brightspot.cloud
*.dispatchhealth.com
origin.chopra.chopra.production.k2.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
origin.qa.lower.grove2.brightspot.cloud
static.uat.lower.amazon-sell.brightspot.cloud
origin.kpbs-uat.kpbs.lower.k3.m1.brightspot.cloud
static.notmusa.production.k3.m1.brightspot.cloud
static.aarp-states-uat.aarp.lower.k1.m1.brightspot.cloud
science-qa2.topics.lower.k1.amazon.brightspot.cloud
origin.im-qa.lower.jnj.brightspot.cloud
aarp-content.aarp.production.k1.m1.brightspot.cloud
origin.uat.lower.dispatch-health.brightspot.cloud
sixam-city-uat.lower.k1.m1.brightspot.cloud
ooc.jnj-migrated.production.jnj.brightspot.cloud
origin.csx-qa.lower.k2.m1.brightspot.cloud
origin.jnj-uat.lower.jnj.brightspot.cloud
origin.rfdtv.k1.go.brightspot.cloud
static.web.production.forum-communications.brightspot.cloud
origin.music2-uat.lower.k1.amazon.brightspot.cloud
static.gbh.production.k1.m1.brightspot.cloud
origin.aji.production.k2.m1.brightspot.cloud

Certificate

The complete raw certificate details for origin.wwe-uat.lower.k2.m1.brightspot.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqOz7yTLpVYRxbIghE1A
3o9bWCWw3OkTTatJc/8fUQzLSFXoiVomNLkuBTNm9N8la87JBBRaWKCFM6v5V/Cy
wmCbG5TPKia+pkUw0XsqxNGC4L53YS68Z61H/Xznm+Tg8llNcsm3ukE/mkPa13Xp
l89dL/5umur1YT4yk/U7k9txCp3pMqB8Elm1aVfqncgHB6A/IoLPZcEck3RpVopm
EJqF7oC0Lka+ccVoEQPYCi3+0twRVFpnz6JICW7veqVcwKgQ4XEyGJeoXkd5BlrB
XoT/I01EZ8wWgC/Ivakf9Q7kRGXX6hgfPVaMiuWoCFOjkCZPOsSUllHQ4HMKToCT
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16794332892684814916194723785798684055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'origin.wwe-uat.lower.k2.m1.brightspot.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17501610978083152681628897955559737573991461696797029825264906630575572523224180471234057410509867844990823809386892994670162848692146869798287319991572153805285529347283086096452567276154210069714282142972048495477241680366203673225180765519067052312146950408304808705155004567744264098195463996820479830342650529915021373835133977537176649522716551201090925917144902831916993824038375276681453838828992354169509371048061567514184502831792261709265408743302799951792538983142654685221457187262938475155857657211596697739055214811288266821022494529324948887748899387067278733135471725977543675144378917309872575910841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							531e82b19735395d9027a4cb8c85b1a3713bd849
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (406 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.wwe-uat.lower.k2.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.wwe-uat.lower.k2.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.wwe-uat.lower.k2.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.origin.wwe-uat.lower.k2.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwe-uat.lower.k2.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.wwe-uat.lower.k2.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cms.wwe-uat.lower.k2.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.cms.wwe-uat.lower.k2.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwe-uat.lower.k2.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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