th76vk7xjq.studio.locatone.sony.net

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 03:6c:44:d2:17:b4:da:08:4c:9f:3f:66:4c:4b:24:68 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=th76vk7xjq.studio.locatone.sony.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:6c:44:d2:17:b4:da:08:4c:9f:3f:66:4c:4b:24:68
Serial Number (int): 4549847897180476814102427222942622824
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: a9:f2:17:84:0c:ad:68:78:dc:48:3f:5d:2c:6a:22:6c:57:8a:83:de
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 29:96:d5:7e:47:fa:eb:ab:9d:13:78:6a:2f:a4:ad:a9:1b:b1:73:d1
Fingerprint (sha256): 08:34:90:55:c3:92:e0:74:76:94:1c:bd:71:f4:83:2d:12:b7:4c:ba:18:18:e7:aa:63:fe:8e:20:fe:a6:f6:ae

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate th76vk7xjq.studio.locatone.sony.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for th76vk7xjq.studio.locatone.sony.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

th76vk7xjq.studio.locatone.sony.net

Other certificates including the domain name sony.net

(limited to 100 certificates)
kxqh0m6485.smp-auth-api.sony.net
dns-vetting1b.map.fastly.net
preview-production-pdp.sony.co.uk
*.dev.iot.imagingedge.sony.net
www.sony.at
mycare.dxservice.sony.net
poc.imagingedge.sony.net
dev-online.techub.sony.net
www.sony.net
preview-production-pdp.sony.co.uk
*.nucleus-live.sony.net
bizftp.dev.imagingedge.sony.net
www.sony.at
b-trainerblog.smartsports.sony.net
secure.sony.net
www.sony.net
f2.shared.global.fastly.net
*.authenticity.ppf.sony.net
f2.shared.global.fastly.net
b-trainerblog.smartsports.sony.net
qa.concierge.support.sony.net
*.stg.mdm.ppf.sony.net
b-trainerblog.smartsports.sony.net
production-api-gateway-public.videoprism.sony.net
tennisblog.smartsports.sony.net
imperva.com
dns-vetting1b.map.fastly.net
f2.shared.global.fastly.net
f2.shared.global.fastly.net
*.dev.payment.ppf.sony.net
www.sony.net
tv.update.sony.net
www.sony.net
biz-bravia.sony.net
s.sony.net
f2.shared.global.fastly.net
preview-production-pdp.sony.co.uk
www.sony.net
v-online-info.techub.sony.net
preview-production-pdp.sony.co.uk
dev.biz-bravia.sony.net
s.sony.net
preview-production-pdp.sony.co.uk
opt.imagingedge.sony.net
test.sony.com
d.newssuite.sony.net
calc.sony.net
stg-online-manage.techub.sony.net
dev.pro-bravia.sony.net
hav.update.sony.net
dev.search.pro-bravia.sony.net
f2.shared.global.fastly.net
stg-online.techub.sony.net
clock.imagingedge.sony.net
personalspace.sony.net
prd2022-visitor-tracker.techub.sony.net
cdn.rms.biz-bravia.sony.net
tennisblog.smartsports.sony.net
preview-production-pdp.sony.co.uk
f2.shared.global.fastly.net
socialife.sony.net
developer.pjfield.sony.net
*.taxi-safety.mobility-ai.sony.net
www.sony.net
f2.shared.global.fastly.net
b-trainerblog.smartsports.sony.net
*.cmtpqa.pre.payment.ppf.sony.net
www.sony.net
nh-data.sony.co.jp
techub.sony.net
*.csn.sony.net
dns-vetting1b.map.fastly.net
v-online-info.techub.sony.net
stg.biz-bravia.sony.net
stg.biz-bravia.sony.net
intra.techub.sony.net
www.global-careers-student.sony.net
th76vk7xjq.studio.locatone.sony.net
tv.update.sony.net
f2.shared.global.fastly.net
preview-production-pdp.sony.co.uk
ulms.sony.net
dx.sony.net
*.personalspace.sony.net
*.tr.imagingedge.sony.net
workstyle.sony.net
szf8pabtof.studio.locatone.sony.net
pro-id.sony.net
f2.shared.global.fastly.net
socialife.sony.net
studio.locatone.sony.net
imperva.com
preview-production-pdp.sony.co.uk
lic.dev1.sandbox.dev.ppf.sony.net
*.personalspace.sony.net
preview-production-pdp.sony.co.uk
www.grouplogo-gl.sony.net
www.sony.net
f2.shared.global.fastly.net
*.mobility-ai.sony.net

Certificate

The complete raw certificate details for th76vk7xjq.studio.locatone.sony.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgIQA2xE0he02ghMnz9mTEskaDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTIwNjAwMDAwMFoXDTI1MDEwNDIzNTk1OVowLjEs
MCoGA1UEAxMjdGg3NnZrN3hqcS5zdHVkaW8ubG9jYXRvbmUuc29ueS5uZXQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWhfazCdhPIDCVPgxj2Dg6QkQF
nhw/T7O6W5ms8SsQ0UEIdVfYsMLdHv+wMN16TnP+Jp9VzcsImGJ7FQ8/xcdWn3zt
z/HFIYrWJQjsMMyPxaolfgDBHQcAKVieDj/iOzwkkXXDdZ0y2NBIaFHfbrpE2f5x
pljT4nZ+ZSImA/lmIzaVfJg/+vGBzfhUZg3XoMDCqM/YFOxi3ts8U3f2BaasQkVw
S/rYgM9cKceAH+INyau4netUGx4jeiURP4CGUfjptK2+2dXPRp5c1qY458FkjC+l
TQol1W2fIEQR0PTZ+b/QC01OTUzx/2Pph6S2H0a1eMgkxQtYPaBENm9PwCoDAgMB
AAGjggL8MIIC+DAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNV
HQ4EFgQUqfIXhAytaHjcSD9dLGoibFeKg94wLgYDVR0RBCcwJYIjdGg3NnZrN3hq
cS5zdHVkaW8ubG9jYXRvbmUuc29ueS5uZXQwEwYDVR0gBAwwCjAIBgZngQwBAgEw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7
BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNv
bS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v
b2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j
cnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAA
MIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdwBOdaMnXJoQwzhbbNTfP1LrHfDg
jhuNacCx+mSxYpo53wAAAYw9jb3LAAAEAwBIMEYCIQDFoZgvseQCvadSc3Xxltsf
5BHu9DyqWqAKErbUgSESRgIhAKND0KRjssUkifWxTjLnThZe0qT5RoEwIeN+2pl5
rHFDAHYAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGMPY295AAA
BAMARzBFAiBa98ytM3s3YPo06ssEvXHSweFdCltU9UStykjUJC7IdgIhAJO4Sulf
OhlZB6MWQtAmFfzREuerkEZGKUTg9DIdjah5AHUAfVkeEuF4KnscYWd8Xv340Idc
FKBOlZ65Ay/ZDowuebgAAAGMPY290QAABAMARjBEAiBlgS15i0m04sDejR7IrRz9
ZmvMEhyjgKOI2V8i583fhAIgQ1MFv/MRNcaEbCtEQvb4ZRJbpeGr3PhUWEC6Fu4k
S1AwDQYJKoZIhvcNAQELBQADggEBABnF7tRAL8BL/ALMtu+JEvf2j5ayK1I4FpJH
0VFixCFou77XZKS8qA62OwgXy3Xnx1PDG+SRPhn5M9nio1jafC9MExfxVIsEaw1w
0fHXv0QbwHeYt1g/xJ4372y8tYDcv7IYVv8t8VY0SiMgJfmU/JeRHjqvCXkcJklD
Oy+ZegyKKRcjrS80VDPcazV6RB9jN57XHLk43bJX5FO3fvLzH3xmitOaeyEgmeXq
bP0ANgLHmKmjpWHbyUGyvzYXLGGyXMAoZj+VGOFauk5mU14XOCYTIiWCFmuJJG3z
zRudLeAJu655ncMc/o3w23YScULhXjWRTKfueSPZ86q5SFgt9gc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloX2swnYTyAwlT4MY9g4
OkJEBZ4cP0+zuluZrPErENFBCHVX2LDC3R7/sDDdek5z/iafVc3LCJhiexUPP8XH
Vp987c/xxSGK1iUI7DDMj8WqJX4AwR0HAClYng4/4js8JJF1w3WdMtjQSGhR3266
RNn+caZY0+J2fmUiJgP5ZiM2lXyYP/rxgc34VGYN16DAwqjP2BTsYt7bPFN39gWm
rEJFcEv62IDPXCnHgB/iDcmruJ3rVBseI3olET+AhlH46bStvtnVz0aeXNamOOfB
ZIwvpU0KJdVtnyBEEdD02fm/0AtNTk1M8f9j6Yekth9GtXjIJMULWD2gRDZvT8Aq
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4549847897180476814102427222942622824
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'th76vk7xjq.studio.locatone.sony.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19001805692382847320541630457249657353926859259572915005023808067467426023902063574072536082583520541131286955561358409063534686401901909649111519841108546059849129914643554081998267029770661935151568975734234669386147269836174487517257511024607148820158454105157384631997761808022816785966536947439006506885298300180563562423324840768517115543513120637524309706692810708676744513811370101056201188447333789391641971802390591510289025113227240050462634322839424280993036879112217218019339875332600442242982708952344576003816183451993280821346470246070651558593013616514750360853343418381570521380115595644920309754371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9f217840cad6878dc483f5d2c6a226c578a83de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'th76vk7xjq.studio.locatone.sony.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018c3d8dbdcb0000040300483046022100c5a1982fb1e402bda7527375f196db1fe411eef43caa5aa00a12b6d481211246022100a343d0a463b2c52489f5b14e32e74e165ed2a4f946813021e37eda9979ac71430076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018c3d8dbde4000004030047304502205af7ccad337b3760fa34eacb04bd71d2c1e15d0a5b54f544adca48d4242ec87602210093b84ae95f3a195907a31642d02615fcd112e7ab9046462944e0f4321d8da8790075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018c3d8dbdd10000040300463044022065812d798b49b4e2c0de8d1ec8ad1cfd666bcc121ca380a388d95f22e7cddf840220435305bff31135c6846c2b4442f6f865125ba5e1abdcf8545840ba16ee244b50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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