mypocketpay.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0f:9b:40:f6:c8:e7:1b:e9:94:38:ee:a3:1c:c4:db:4e was issued on by Amazon.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mypocketpay.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:9b:40:f6:c8:e7:1b:e9:94:38:ee:a3:1c:c4:db:4eSerial Number (int): 20744543576365644233180462110826879822
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 30:ef:e9:d8:36:50:71:9b:06:4a:cc:24:ab:9c:6e:36:17:dd:29:1b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 68:c7:6f:a1:bf:76:b6:32:ab:d8:e7:96:22:70:c6:89:0c:38:67:88
Fingerprint (sha256): 04:80:bb:78:fb:e3:30:48:69:a6:57:03:b3:75:8b:f3:2e:ae:ba:8f:53:bf:df:34:a4:65:67:bc:7f:86:69:7a
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate mypocketpay.com
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mypocketpay.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mypocketpay.com
ccorders.rawlings.com
invoice.rawlings.com
rest.level4pay.com
mgmt.level4pay.com
www.mypocketpay.com
rest.mypocketpay.com
payments.pwc.com
portal.mypocketpay.com
api.mypocketpay.com
ccorders.rawlings.com
invoice.rawlings.com
rest.level4pay.com
mgmt.level4pay.com
www.mypocketpay.com
rest.mypocketpay.com
payments.pwc.com
portal.mypocketpay.com
api.mypocketpay.com
Other certificates including the domain name mypocketpay.com
(limited to 100 certificates)
mypocketpay.com
mypocketpay.com
mypocketpay.com
portal.mypocketpay.com
payments.mypocketpay.com
mypocketpay.com
mypocketpay.com
mypocketpay.com
portaltst.mypocketpay.com
mypocketpay.com
mypocketpay.com
mypocketpay.com
mypocketpay.com
mypocketpay.com
portal.mypocketpay.com
mypocketpay.com
mypocketpay.com.br
mypocketpay.com
mypocketpay.com
mypocketpay.com
mypocketpay.com
portal.mypocketpay.com
payments.mypocketpay.com
mypocketpay.com
mypocketpay.com
mypocketpay.com
portaltst.mypocketpay.com
mypocketpay.com
mypocketpay.com
mypocketpay.com
mypocketpay.com
mypocketpay.com
portal.mypocketpay.com
mypocketpay.com
mypocketpay.com.br
mypocketpay.com
mypocketpay.com
Certificate
The complete raw certificate details for mypocketpay.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIQD5tA9sjnG+mUOO6jHMTbTjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA4MjYwMDAwMDBaFw0yMTA5MjUx MjAwMDBaMBoxGDAWBgNVBAMTD215cG9ja2V0cGF5LmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAORTLmLD6NIXyWPdoXpOJrEtpfomO0el0pd06OBi d2Om7DRWCJGLhwYVlkViPEYL5JSeU8kV8awwBv6ktKTg3kZ4POfgDLpeaDtvlsXI REM4nTpgTq/WnJ61uwDehd+zKx8HoP8CMg3fzLox+Ow91OfKRAHWLpVHR1SNbtro x2E+LOd4IULgq14EbxjOZpN6vL7NVo2tKrWVvNbUhBc7tDrh260Xnh4mR9VFVMcD YYvxnmUXO7vHVpo3eZG3+5Ix8Yj57eZTK854dW4JmYzHzqnkSNooVRLIEk+aE8L2 UqhlWkTT26eXqgtBX0YrHTkl0FFQmRzYB1RqI5jE6/SNs+sCAwEAAaOCAz0wggM5 MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBQw7+nY NlBxmwZKzCSrnG42F90pGzCB2wYDVR0RBIHTMIHQgg9teXBvY2tldHBheS5jb22C FWNjb3JkZXJzLnJhd2xpbmdzLmNvbYIUaW52b2ljZS5yYXdsaW5ncy5jb22CEnJl c3QubGV2ZWw0cGF5LmNvbYISbWdtdC5sZXZlbDRwYXkuY29tghN3d3cubXlwb2Nr ZXRwYXkuY29tghRyZXN0Lm15cG9ja2V0cGF5LmNvbYIQcGF5bWVudHMucHdjLmNv bYIWcG9ydGFsLm15cG9ja2V0cGF5LmNvbYITYXBpLm15cG9ja2V0cGF5LmNvbTAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYI KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6 b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9u dHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBBAYKKwYBBAHWeQIE AgSB9QSB8gDwAHYA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAF0 K4/AMAAABAMARzBFAiEAiqS2Z0Ms7tuUJ1y3/Zb042ax786FQf5sjil1apHZ4M4C IB/TUu+XIlf7l85GNwP1biYtYo54LH8EfJFbKEYBBda3AHYAXNxDkv7mq0VEsV6a 1FbmEDf71fpH3KFzlLJe5vbHDsoAAAF0K4/AMAAABAMARzBFAiBgT50QAsFzt0jP MhXlMwAeSkGy1snCRTxJ5zqrzyntywIhANgBmngtmYyu5tcoee4Wue75K++R6/Hm tf2xJ8dZq+JhMA0GCSqGSIb3DQEBCwUAA4IBAQAaOPKkqfu9jfMBBSW1PbVD3+ZH UQti5ml3W3GMzT6q/xWOCWzu9zFTpJBMvBYh2b5+CSdWd5hBw6qSUfI/ziuXi/Dw NEtMBWHTuZ9B9m7Nn2PzGlFRumphaVsNdDX3fZN+JBRU6yaYSRiqvdSt2wr6KLsT /2uV9Y+r9V3+T6dEBvsAIdVfxz5zlrySAXzEyAN0EA/xuVo1e5E6eUF0PREPIakJ 0KOh2wwHSxY/dCzmM3NvvOHdhFubpyv1oIal+kxo1jrd5Q1mP//fJtgO4no0w6Dm ucOzQkoBSaO6pnx1z0hfD2Og3SjllPCWaTcq+p3VYDXA1hyJB1/OHn217I7z -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FMuYsPo0hfJY92hek4m sS2l+iY7R6XSl3To4GJ3Y6bsNFYIkYuHBhWWRWI8RgvklJ5TyRXxrDAG/qS0pODe Rng85+AMul5oO2+WxchEQzidOmBOr9acnrW7AN6F37MrHweg/wIyDd/MujH47D3U 58pEAdYulUdHVI1u2ujHYT4s53ghQuCrXgRvGM5mk3q8vs1Wja0qtZW81tSEFzu0 OuHbrReeHiZH1UVUxwNhi/GeZRc7u8dWmjd5kbf7kjHxiPnt5lMrznh1bgmZjMfO qeRI2ihVEsgST5oTwvZSqGVaRNPbp5eqC0FfRisdOSXQUVCZHNgHVGojmMTr9I2z 6wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20744543576365644233180462110826879822 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-25 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mypocketpay.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28823351708056619182380137852821928918829904930987816191519146500892084573762429444306630795620061678566308689295797379856258905402947347368762825939149278857854428913587831400397103076543202143563173010136608063419847000837712869160631804124824656375739088324178892670695188401809041118213080256535816265922165190787924428150900670715537448496478587515104424768549298423172672160454520647205049124636745219865546003894734525080313960447195280196020112270959220465434061994514978251242935152896287724377297450200587633536932924898925491171789635430052218752161729218375631454057782761463008659009894669434579890058219 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 30efe9d83650719b064acc24ab9c6e3617dd291b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (211 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypocketpay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccorders.rawlings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoice.rawlings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rest.level4pay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt.level4pay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypocketpay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rest.mypocketpay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.pwc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.mypocketpay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mypocketpay.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001742b8fc03000000403004730450221008aa4b667432ceedb94275cb7fd96f4e366b1efce8541fe6c8e29756a91d9e0ce02201fd352ef972257fb97ce463703f56e262d628e782c7f047c915b28460105d6b70076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001742b8fc03000000403004730450220604f9d1002c173b748cf3215e533001e4a41b2d6c9c2453c49e73aabcf29edcb022100d8019a782d998caee6d72879ee16b9eef92bef91ebf1e6b5fdb127c759abe261 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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