nghs-ngpg.customer.kyruus.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:39:75:db:58:e7:37:80:2b:1f:5f:4d:ff:31:0e:e1 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nghs-ngpg.customer.kyruus.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:39:75:db:58:e7:37:80:2b:1f:5f:4d:ff:31:0e:e1
Serial Number (int): 2956807332911739613019838934806499041
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 73:d6:67:19:47:41:30:4f:26:cd:35:4b:0c:f8:22:f7:dd:9e:16:18
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): dc:7a:be:64:87:06:18:85:3a:f2:d0:29:6a:90:c8:a9:ab:b0:c4:81
Fingerprint (sha256): 07:6a:59:f1:34:4e:4e:ac:02:00:57:5e:2e:b2:66:b1:da:1b:30:17:27:b7:eb:fc:81:d8:9c:02:af:39:9c:8c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate nghs-ngpg.customer.kyruus.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nghs-ngpg.customer.kyruus.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nghs-ngpg.customer.kyruus.com
providers.ngpg.org

Other certificates including the domain name kyruus.com

(limited to 100 certificates)
secure0017.hubspot.com
*.customer.kyruus.com
imperva.com
unitypoint-cedarrapids.customer.kyruus.com
statuspage.io
chickentreat.craveable.support
chickentreat.craveable.support
chickentreat.craveable.support
*.customer.kyruus.com
unitypoint-waterloo.customer.kyruus.com
secure0017.hubspot.com
chickentreat.craveable.support
*.kyruus.com
imperva.com
doctors.coxhealth.com
imperva.com
doctors.palmettohealth.org
imperva.com
secure0017.hubspot.com
www.kyruus.com
doctors.lgh.org
imperva.com
doctors.ghs.org
statuspage.io
nghs-ngpg.customer.kyruus.com
uhs-edinburghchildrens.customer.kyruus.com
doctors.thephqc.org
unitypoint-fortdodge.customer.kyruus.com
imperva.com
support.kyruus.com
uab.customer.kyruus.com
corp.portal.qdoba.com
imperva.com
*.security.kyruus.com
uab.customer.kyruus.com
chickentreat.craveable.support
unitypoint-grinnell.customer.kyruus.com
test.kyruus.com
corp.portal.qdoba.com
statuspage.io
doctors.unitypoint.org
uhs-vhs.customer.kyruus.com
doctors.coxhealth.com
unitypoint.customer.kyruus.com
*.kyruus.com
northbay.customer.kyruus.com
statuspage.io
doctors.myhfn.org
unitypoint.customer.kyruus.com
doctors.thephqc.org
corp.portal.qdoba.com
adventist.customer.kyruus.com
chickentreat.craveable.support
orthoatlanta.customer.kyruus.com
2201yybo.customer.kyruus.com
nghs.customer.kyruus.com
prisma-peds.customer.kyruus.com
chickentreat.craveable.support
unitypoint-grinnell.customer.kyruus.com
corp.portal.qdoba.com
doctors.coxhealth.com
unitypoint-peoria.customer.kyruus.com
imperva.com
statuspage.io
chickentreat.craveable.support
chickentreat.craveable.support
saintlukes.customer.kyruus.com
imperva.com
unitypoint-quadcities.customer.kyruus.com
uhs-summerlin.customer.kyruus.com
statuspage.io
bellin.customer.kyruus.com
uhs-valleyhospital.customer.kyruus.com
test.kyruus.com
uhs-mmh.customer.kyruus.com
secure0017.hubspot.com
corp.portal.qdoba.com
scheduling-sentry.kyruus.com
support.kyruus.com
statuspage.io
*.phi.kyruus.com
chickentreat.craveable.support
chickentreat.craveable.support
medicos.christianacare.org
statuspage.io
*.kyruus.com
saintlukes.customer.kyruus.com
secure0017.hubspot.com
secure0017.hubspot.com
fsus-20.freshservice.com
overlake.customer.kyruus.com
*.kyruus.com
unitypoint.customer.kyruus.com
corp.portal.qdoba.com
email.mg.kyruus.com
corp.portal.qdoba.com
secure0017.hubspot.com
corp.portal.qdoba.com
secure0017.hubspot.com
corp.portal.qdoba.com

Certificate

The complete raw certificate details for nghs-ngpg.customer.kyruus.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgIQAjl121jnN4ArH19N/zEO4TANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTExMDQwMDAwMDBaFw0yMjEyMDIy
MzU5NTlaMCgxJjAkBgNVBAMTHW5naHMtbmdwZy5jdXN0b21lci5reXJ1dXMuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpeWLKfskqZnIrxZucy5
lulG76VxKY8/jyTCjb+g+OicERwa3j32QUhp5alkI9DBrkoZCF7+IBweyE7Vu+Yf
/PTZESePb4wo9bJfMsgqrwocsoseoR77FLegXnAYOb5sQhnFiJf+97AJZy+ID99J
gl+qcxFIXa0sfMxUML2QwTIUoMqlHbvWG4EoiAhtmViRSFo3foi8T+L1YqbvhoQw
Lty7ylOxkeN/z5nCNFjeqlpAqEhDPQZg8YK4B6jhdmQm9fwWEMw3guT8/3CwBT82
xcsGaT3B+aBnYNjm9R6Q6V8WhrknJu3G8TZdrdTK9AZiqQslBR4SwBTtw/OFRYf7
mwIDAQABo4IDCzCCAwcwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAw
HQYDVR0OBBYEFHPWZxlHQTBPJs01Swz4IvfdnhYYMDwGA1UdEQQ1MDOCHW5naHMt
bmdwZy5jdXN0b21lci5reXJ1dXMuY29tghJwcm92aWRlcnMubmdwZy5vcmcwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA9BgNV
HR8ENjA0MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9z
Y2ExYi0xLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcw
LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2
BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh
MWIuY3J0MAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1
ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceEAAABfOl3vmUAAAQDAEYw
RAIgUuJ4E+TcInFFNG9py8FfBvSCxqVo0TZRpmkd+QgwQeQCIB60lxEmq4r5bYwN
ccu4/unq7u9GNFuRuem0Wa37YNJoAHcAUaOw9f0BeZxWbbg3eI8MpHrMGyfL956I
QpoN/tSLBeUAAAF86Xe+fAAABAMASDBGAiEA+WVwTwjOw8de6eFAZzuOi4fji05o
M+dtKdzqaX7cAwsCIQDhy2v9hrWgDkBE/75CpLCInA7/Cshx992VEJUpV9xmYQB1
AEHIyrHfIkZKEMahOglCh15OMYsbA+vrS8do8JBilgb2AAABfOl3vf8AAAQDAEYw
RAIgF9KsIKQqh3CKNzo5Q0P6/FufdaogOIBHeeSoKfEvKKwCIBDY2iwHN0KKI7Bw
WG/6MoAlXNxqbJLpVeOojc+2KNyxMA0GCSqGSIb3DQEBCwUAA4IBAQBZPGcyxYz7
Av0arbABfOXCaN9qDYVgO7DfV0rVzAywF47r+womARqG90CuhzSW/aF05DPwGjoY
WWg+XJZQ+mV8CtfI8dqIECqI7GNKRuyWQzxefmKrTAJcd5oNMhPkLoadi323QV8l
SKrnAl3Ij++vWQTo2+20FnD/k54Jvkmbllc3ajZCKZpcb7gmzr/S99qsm2R4eG7j
d9CCzc8kNWpANnb4vHkCjCstgZh3EpmvMW9PlBYEJjmYpMpMWXOGx/8s5D98fleL
oJ797YOZuEwcmljSxP95uLROFMF3zeBvO+dCRZQUa0O/yNtrMVJ7tAruhMhtgxpz
jmv1B33LPPBR
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpeWLKfskqZnIrxZucy5
lulG76VxKY8/jyTCjb+g+OicERwa3j32QUhp5alkI9DBrkoZCF7+IBweyE7Vu+Yf
/PTZESePb4wo9bJfMsgqrwocsoseoR77FLegXnAYOb5sQhnFiJf+97AJZy+ID99J
gl+qcxFIXa0sfMxUML2QwTIUoMqlHbvWG4EoiAhtmViRSFo3foi8T+L1YqbvhoQw
Lty7ylOxkeN/z5nCNFjeqlpAqEhDPQZg8YK4B6jhdmQm9fwWEMw3guT8/3CwBT82
xcsGaT3B+aBnYNjm9R6Q6V8WhrknJu3G8TZdrdTK9AZiqQslBR4SwBTtw/OFRYf7
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2956807332911739613019838934806499041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nghs-ngpg.customer.kyruus.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26079840970761742806851389632100735175501473627645098172689930981010535686124079128162173378213601126544641717087632144804467504338519372824826652813769937069575066401628904412472244519275808956069227307508101800115716421560330773326164384432946034290701786929649128558718904158059235967435777802954876281854647161003853663752404929284643178862656330857446945745793049695829840769849720691034532063269459153966605276868606945226483152894395941423104840364168514308922283107476112931424431085861993128501334826092330648650484363622129318441455166960018891381551630335742364142033894993226670990433085766875133086530459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73d667194741304f26cd354b0cf822f7dd9e1618
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nghs-ngpg.customer.kyruus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.ngpg.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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