footer-admin.mars.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:1c:73:69:30:79:a8:08:15:ff:3d:22:04:4a:08:33 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=footer-admin.mars.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:1c:73:69:30:79:a8:08:15:ff:3d:22:04:4a:08:33
Serial Number (int): 20086145059876551209336221986605107251
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a7:26:c7:07:1d:1b:a3:ae:a4:e1:7c:eb:a9:53:04:82:c8:d3:05:35
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): e6:a0:3d:af:fd:c3:d2:a7:90:17:e7:21:a1:42:a4:5f:eb:60:5b:7f
Fingerprint (sha256): 07:c3:eb:23:a2:21:c8:62:b3:4d:fa:cb:8d:07:de:c5:df:ff:cb:77:5a:01:9c:4a:7b:08:79:e7:2d:9e:2a:46

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate footer-admin.mars.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for footer-admin.mars.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

footer-admin.mars.com
www.footer-admin.mars.com

Other certificates including the domain name mars.com

(limited to 100 certificates)
www.footer.mars.com
stage-associatesconnect.mars.com
termsofpurchase-uk.mars.com
aws-cf-rd21.mars-inc.com
sni.cloudflaressl.com
stage-mfapackagingdata.mars.com
stage.promo-repo.mars.com
www.contact.mars.com
lambda-redirect24.mars-inc.com
uat-sitecorerc-cd-sportingdog.mars.com
stage.v2.footer.mars.com
www.sharedservices.mars.com
arg.mars.com
*.mars.com
stage.2025digitalvision.mars.com
oktadocs.mars.com
www.footer.mars.com
origin.stage-jobs.supplier.mars.com
wostest.effem.com.cn
dev-lighthouse.mars.com
stage-perfectfitfonts.mars.com
*.mars.com
sni.cloudflaressl.com
stage-sitecorerc-cd.mars.com
petcollege.mars.com
ucskypechatbot01.mars.com
oktadocs.mars.com
stage-retroapproval.mars.com
productcentral.mars.com
whiskas.com.br
Sitecore1-uat.mars.com
sni.cloudflaressl.com
rcdfcdn.mars.com
mix.mars.com
careers.mars.com
sni.cloudflaressl.com
survey.gradwell.com
sni.cloudflaressl.com
stage.mfapackagingdata.mars.com
meetsmart.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.mars.com
san-9-s51.tlsprovisioning.exacttarget.com
marta.mars.com
mix.mars.com
stage-marketingportal.mars.com
itservicedesk.mars.com
jobs.supply2.mars.com
sni.cloudflaressl.com
lambda-redirect26.mars-inc.com
sni.cloudflaressl.com
migration.customs-cargo.mars.com
click.eu-petcare.mars.com
ciameu.mars.com
retroapproval-units.mars.com
lambda-redirect26.mars-inc.com
migration.stage-footer.mars.com
acts.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
aws-cf-rd25.mars-inc.com
metrics.mars.com
my-cms.mars.com
mypo.mars.com
sni.cloudflaressl.com
www.cravepetfood.co.uk
stage.qfs-warehouses.mars.com
iccc-webapp-dev.mars.com
brandgateway.mars.com
guest1-NA.mars.com
efexap.mars.com
survey.mars.com
stage.specialistpettrade.mars.com
origin.stage-newsservice.mars.com
san-9-s51.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
akamai-san122.exacttarget.com
aws-cf-www-mars-com-rd01.mars-inc.com
stage-profile.mars.com
aws-cf-rd21.mars-inc.com
sni.cloudflaressl.com
footer-admin.mars.com
stage.customer.mars.com
calendar.mars.com
survey.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
stage.posm-ae.mars.com
sni.cloudflaressl.com
ppj.mars.com
customer.mars.com
survey.westernwindowsystems.com
origin.brandgateway.mars.com
lambda-redirect21.mars-inc.com
stage.petcollege.mars.com
aws-cf-www-mars-com-rd01.mars-inc.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for footer-admin.mars.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8TCCBNmgAwIBAgIQDxxzaTB5qAgV/z0iBEoIMzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDUwNTAwMDAwMFoXDTI1MDYwNDIzNTk1OVowIDEe
MBwGA1UEAxMVZm9vdGVyLWFkbWluLm1hcnMuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAnO0lu0DvFOI5EBWDIsvDSdW5HropJKajNYlCn1BFXbBh
3NmgfclgU+kCZj8mjBpo7uVhv0F/kfFQXrxtWg2aWQIsagB41onXQtUwIEZ325Kz
cpafOmSXtvlXVdtV3DYu41I3WuZOa0cpIny00vHqL/Bi9uge0A3nnThqDTRoq5rS
AmA3Qnh0Ftuczwvby0YAW2l9kcmd78LyPHm4rSL3IeZypOB2jJsi75a1UnN4Oihr
wuXveI8NskbSu0P/v7XChfrkObBY36jTjCO937TIcZMullB0hMLbq6GFvY6MqSDm
nA9pDFR34QvX82Izi68/7lppXpAfzZZI9J6icYkGzQIDAQABo4IDCTCCAwUwHwYD
VR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFKcmxwcdG6Ou
pOF866lTBILI0wU1MDsGA1UdEQQ0MDKCFWZvb3Rlci1hZG1pbi5tYXJzLmNvbYIZ
d3d3LmZvb3Rlci1hZG1pbi5tYXJzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG
A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29t
L3IybTAyLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v
Y3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2Ny
dC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAw
ggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB3AE51oydcmhDDOFts1N8/Uusd8OCO
G41pwLH6ZLFimjnfAAABj0cSdCsAAAQDAEgwRgIhAPahG7mIbrtf9j0NlLyiOa6D
xQf3ajc0VN7+9hAS3DsxAiEA9XSrjtoYsCXOpn6KAFE0po/NP64LogI1STqZ5mtt
7ioAdgB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kOjC55uAAAAY9HEnRKAAAE
AwBHMEUCIFpwX/m//cjdhzZcDpyHr//fAShL31HDdZqY9xUyE7ULAiEAri5BPEBT
g4p82HYVRhI1/kVzlnw25tr778oFt13oQ1EAdQDm0jFjQHeMwRBBBtdxuc7B0kD2
loSG+7qHMh39HjeOUAAAAY9HEnRhAAAEAwBGMEQCIHAOtnXq6vYWPDJstF/jmDIJ
lq3MFgNM2ER13JKkbGGcAiA7K6US/zNx0Daj+dDFU3XXZ4hE7qpd/p28aE6HrHdU
EzANBgkqhkiG9w0BAQsFAAOCAQEAmrUUv+xIQhk6d7H1vjqbj32Ys2Lr4PUvF34N
85nbUtZEWMbNRB7pKrL+IvicEbGhcyPVXQf/H2fkscLcX9ZA0+lIAWKB/phULAiX
NYYf4DpWTG0wj/HyukD9Ab2YdmJzbZ9qBbffPP3WzsUI6aRxfW/IWF28hO3VRRqp
yq+93J+5uStRWmk/i+cRAFSlF39Y9fh413K1K93tNDP101Ge5pQO4c1uKbW5Tnsl
gpp4H5WNA91oaGA0C3ALrCHrBjCfxI7qYrIGDQIJ4jDcvmj9Y5wscfb/qKEvctT3
9nUhb7X+YpDyNW5Md03dsdrgfQ5y1YIeYT49PuPRRP4wtoOfCA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO0lu0DvFOI5EBWDIsvD
SdW5HropJKajNYlCn1BFXbBh3NmgfclgU+kCZj8mjBpo7uVhv0F/kfFQXrxtWg2a
WQIsagB41onXQtUwIEZ325KzcpafOmSXtvlXVdtV3DYu41I3WuZOa0cpIny00vHq
L/Bi9uge0A3nnThqDTRoq5rSAmA3Qnh0Ftuczwvby0YAW2l9kcmd78LyPHm4rSL3
IeZypOB2jJsi75a1UnN4OihrwuXveI8NskbSu0P/v7XChfrkObBY36jTjCO937TI
cZMullB0hMLbq6GFvY6MqSDmnA9pDFR34QvX82Izi68/7lppXpAfzZZI9J6icYkG
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20086145059876551209336221986605107251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'footer-admin.mars.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19810117310459536875831948023931112677732932692704604880463129983318091998583058354634424617256133579936432439063500877040558308203860382329828184293018030832803926809356640618735999916038761604901311613358366246949069692311698249111592006599692115627796318002623532548140344237209236557211798654931282815378701227531303783219694880732629237184611540969363510890592265261606128326010721725536642378910361464499523101886929093208547424950287085591795613970827901535412417446350872696205261407327425366639443726485894440463745899072664880955367734864124108628804741316583668078285185933766895449229044854310216361641677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a726c7071d1ba3aea4e17ceba9530482c8d30535
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footer-admin.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footer-admin.mars.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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