www.axn.com

- Sony Pictures Entertainment Inc. -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 05:ea:36:c3:4c:e7:3b:2a:b3:b4:71:4f:af:db:22:db was issued on by DigiCert Inc.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment Inc.

Organization: Sony Pictures Entertainment Inc.
Organization unit: Global Intranet Services
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:ea:36:c3:4c:e7:3b:2a:b3:b4:71:4f:af:db:22:db
Serial Number (int): 7862248167232418519431939718051996379
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 65:08:55:2c:4d:f5:78:4f:c0:b0:0a:ef:2c:3b:e0:9d:27:c6:7d:b3
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 48:f7:77:8e:10:b4:44:f2:ae:72:a3:d0:e4:e0:ab:ff:3d:f2:f2:58
Fingerprint (sha256): 04:fb:34:d3:96:ec:63:b9:17:78:9b:f3:0d:a0:84:5e:c4:d7:0e:7c:4e:90:47:c5:d5:cb:9b:d0:15:72:e6:cc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate www.axn.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.axn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.animaxtv.com
www.axn.com
www.axnblack.com
www.axnspin.com
www.axnwhite.com
www.canalaxn.com
www.canalsony.com
www.set-tv.com
www.sonychannel-tv.com
animaxus.com
www.animaxus.com
www.sonychannel.com
sonyanimax.com
www.sonyanimax.com
sonyaxn.com
www.sonyaxn.com

Other certificates including the domain name axn.com

(limited to 100 certificates)
www.axn.com
www.sonytv.com
hu.axn.com
la.axn.com
hu.axn.com
www.axn.com
la.axn.com
www.axnspin.pl
la.sonymovies.com
la.axn.com
la.axn.com
soporte.canalsony.com
login.la.axn.com
www.axn.com
la.axn.com
www.axn.com
www.axnspin.pl
hu.axn.com
www.axn.com
www.axn.com
login.la.axn.com
soporte.canalsony.com
login.la.axn.com
www.axnspin.pl
www.axnspin.pl
www.axn.com
la.axn.com
la.axn.com
hu.axn.com
la.axn.com
login.hu.axn.com
edge-affiliates.cinesony.com
www.sonytv.com
edge-affiliates.cinesony.com
login.hu.axn.com
sonymovies.com
edge-affiliates.cinesony.com
hu.axn.com
www.axnspin.pl
hu.axn.com
hu.axn.com
hu.axn.com
soporte.canalsony.com
hu.axn.com
soporte.canalsony.com
la.axn.com
la.axn.com
www.axnspin.pl
la.axn.com
hu.axn.com
www.axn.com
www.sonytv.com
edge-affiliates.cinesony.com
hu.axn.com
hu.axn.com
www.axnspin.pl
hu.axn.com
la.axn.com
www.sonytv.com
www.sonytv.com
www.axnspin.pl
hu.axn.com
la.axn.com
soporte.canalsony.com
www.axnspin.pl
la.axn.com
edge-affiliates.cinesony.com
hu.axn.com
la.axn.com
www.sonytv.com
www.axnspin.pl
la.axn.com
edge-affiliates.cinesony.com
www.sonytv.com
soporte.canalsony.com
www.axnspin.pl
www.sonytv.com
www.axn.com
perc.sonypictures.com
login.br.axn.com
soporte.canalsony.com
la.axn.com
www.sonytv.com
soporte.canalsony.com
la.axn.com
perc.sonypictures.com
www.axnspin.pl
login.br.axn.com
www.sonytv.com
login.la.axn.com
www.axnspin.pl
www.axn.com
la.axn.com
www.axnspin.pl
hu.axn.com
la.axn.com
hu.axn.com
www.axnspin.pl
soporte.canalsony.com
edge-affiliates.cinesony.com

Certificate

The complete raw certificate details for www.axn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP3gEbSb3y1sFn/mL1yP
XNR5MOBMFQFzWd5lJmYr1cFimrGvJkrSBmmN6qTut5gPS8uVD/KeBhNzIwi8HNJS
V61aTOaeaTAQwHXfvccV0ZMIlqmLTmJApRmLDckCmwsChn7cVznAFKmkBlC7+C4X
g5v6qfX2I4j+Gm+gzz97D6qDisX6/58IxSlpKOaNbUecZaFhWrOGuEvMGRZiBHQc
CsDe5iiIG7FWwDqzHsmHVLn3EtiYuibDrHhT93NaQj/xKcUNHjYndUpCj8PmqJle
YAqi7Ud4mXZUN41timWIATWWnP1t2DZaMBROAozF5l6KtbNJkqzd27kOi/Aquuu/
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7862248167232418519431939718051996379
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Global Intranet Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.axn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25372851554845989914116179735443709154771666067900547298288901534402803493431791923321053206680097029881612792851496132600220812343318647365481888476386370822495488384496936598903631988037272096492929024765666714112372841658860490463817102494601957341682300749096213111593331410285429407999706828339961363140809374667863351859399149439753369156198707206003056127834205728643373131487772161829660905418250326636950823155907303226644068507840400655563682466016957827695788392477152236082067114210978393350556028419781994631306755461954577766410909538494408476941512223614647074317642720880305978144599899552395991695127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6508552c4df5784fc0b00aef2c3be09d27c67db3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (284 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.animaxtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axnblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axnspin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axnwhite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canalaxn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canalsony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.set-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonychannel-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animaxus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.animaxus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonychannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonyanimax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonyanimax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonyaxn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonyaxn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001719ec366e40000040300473045022100fa2cf6979504f76f6a917f59ab76e637c346f4d389112863ba9d0374823047000220758ad390eab91e5d3fce09077fd0eae6b4e9f2188adaaa7e7a3efaadb335019a007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001719ec3671a0000040300473045022100c1630cea09239dbda3ed47db0f211b54b0adaceab44c63165db08850c755066402204cefb493064eec29a42fd0b5bc0c43697f530e846d517aca3fd3525e40a9d626
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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