ams.lumen.com

- Lumen Technologies, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:79:d4:99:b1:88:14:81:c9:12:2b:8d:00:3f:a8:b3 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Lumen Technologies, Inc.

Organization: Lumen Technologies, Inc.
State / Province: Louisiana
Locality: Monroe
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:79:d4:99:b1:88:14:81:c9:12:2b:8d:00:3f:a8:b3
Serial Number (int): 11266403933850237454150175636857006259
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9d:2f:49:81:51:d9:70:51:7a:95:22:75:3d:c7:2f:41:1d:35:93:b6
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): c4:dc:bd:99:4f:bb:30:3b:9c:65:7e:97:f9:ef:3d:c5:7c:e3:3c:91
Fingerprint (sha256): 08:36:26:c4:33:71:37:f4:79:ce:50:c1:34:22:ba:90:91:ff:00:bc:d0:eb:39:e4:27:3f:f8:0e:08:ea:37:81

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate ams.lumen.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ams.lumen.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ams.lumen.com
www.ams.lumen.com

Other certificates including the domain name lumen.com

(limited to 100 certificates)
uq-polygon.lumen.com
b4086c0abfc26a8cef90.control.sase.lumen.com
dce661b81760bbf93a0a.control.sase.lumen.com
opstatus.cert.eis.lumen.com
interact.lumen.com
ups.dev.internal.sase.lumen.com
webops.centurylink.com
uyrnpoqrsikgbdcbkjas.fpwus2-001.control.sase.lumen.com
f8a98b94dae681ddcfd5.control.sase.lumen.com
area51-customer1-ems-1.test.control.sase.lumen.com
pilot.mss.centurylink.com
df265efb8f3d76768b27.control.sase.lumen.com
test.sase.lumen.com
api.ng911.lumen.com
dev-ui.shop.lumen.com
fc0cc664efbb6256c0ee.control.sase.lumen.com
c8d20e6ec2c6bce968ef.control.sase.lumen.com
cd19ceee589ba6cbdbce.control.sase.lumen.com
e6ce7b59fa744d066da0.control.sase.lumen.com
d1faeb5fdebd77e15d7f.control.sase.lumen.com
ecd.lumen.com
adf4d1304855ab912e26.control.sase.lumen.com
infoedge.com
akamaisecure7.qualtrics.com
staging.eis.lumen.com
mdl-staging.int.edge-delivery.lumen.com
env3.eis.lumen.com
latamblog.lumen.com
ddd0c126e99d64224622.control.sase.lumen.com
akamaisecure7.qualtrics.com
env2.eis.lumen.com
e6799555e84783a48f01.control.sase.lumen.com
versa-east-4.api.control.sase.lumen.com
akamaisecure7.qualtrics.com
chasetest.demo.eis.lumen.com
d8e02707a372fc69156d.control.sase.lumen.com
df94a37db71a8c97da88.control.sase.lumen.com
bll-analytics-data.mss.lumen.com
chasetest.demo.eis.lumen.com
c51d0c3f8ed282148df6.control.sase.lumen.com
ams.lumen.com
ms-prod.int.edge-delivery.lumen.com
al-swportal.lumen.com
dev.eis.lumen.com
traefik-ms.int.edge-delivery.lumen.com
e2c6369c523820b5ac31.control.sase.lumen.com
swportal.lumen.com
api.usps.lumen.com
portal-staging.edge-delivery.lumen.com
dnp03.lumen.com
b78d458b6dbdfccd6f43.control.sase.lumen.com
d53c135ccf4805bc006c.control.sase.lumen.com
b352fabf8d88daebdac0.control.sase.lumen.com
traefik-ms-staging.int.edge-delivery.lumen.com
me-swportal.lumen.com
eckCORALgreen.ccc.lumen.com
mdl-prod.int.edge-delivery.lumen.com
batcave.eis.lumen.com
portal.local-uk1.dubber.net
superset.mdl-staging.int.edge-delivery.lumen.com
d929ee5c90a491e8672f.control.sase.lumen.com
stage.savvisstation.savvis.com
hcde-test1-east.lumen.com
f171a674e65ea175a37a.control.sase.lumen.com
versa-emea-1.api.control.sase.lumen.com
d8918dc4037f4ce42396.control.sase.lumen.com
versa-emea-1.control.sase.lumen.com
eis-pulsar-manager-prod.eis.lumen.com
akamaisecure7.qualtrics.com
bea7d4fb91543535b108.control.sase.lumen.com
a62cdcb17882714422ce.control.sase.lumen.com
c4518d645680c7a47f4a.control.sase.lumen.com
env3.eis.lumen.com
c2e20b9622a6fe39366e.control.sase.lumen.com
ui.edgeprotect.lumen.com
eisportal-pseis-38889.eis.lumen.com
engagesupport.lumen.com
e924b1b1d2a13cde8c95.control.sase.lumen.com
uq-polygonautomation-test.lumen.com
ff4bec271bd71e758b1f.control.sase.lumen.com
versa-east-1.control.sase.lumen.com
traefik-ms.int.edge-delivery.lumen.com
ga.ccc.lumen.com
d33f22a2ca4f5ba14e54.control.sase.lumen.com
chatSOCCDA.ccc.lumen.com
uq-esrisvc-test1.lumen.com
bc2f899f9d8d80ad43ab.control.sase.lumen.com
cust-001-ems.control.sase.lumen.com
a235af16276cf5c0b578.control.sase.lumen.com
dev4-ui.shop.lumen.com
versa-east-4.api.control.sase.lumen.com
e4e9d1677c4b362907a8.control.sase.lumen.com
versa-west-3.control.sase.lumen.com
akamaisecure7.qualtrics.com
test.shop.lumen.com
caesarscustomercallback.lumen.com
jwycrvaikclkpmyqbgzu.fpwus2-001.control.sase.lumen.com
d086b756ddc1bcfc6c1c.control.sase.lumen.com
hcde-east.lumen.com
c6cb15eb28640176f0d6.control.sase.lumen.com

Certificate

The complete raw certificate details for ams.lumen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn5PKL1UxC6YRHBA6+yI
KkMbJGN/K7DcuzGyju8sl1TmVTEwOM4irXfw48YVJVkzfI0ZAqbqp2hLbpjC3vyV
YROoFWdGtkk650PBnO2gl9Ho+ov5rEUS5hhqxz/mGZ2K00dPJ4aHI08h/ofBz4i7
gJwvX9RD7w8X02mLRsHerLdCHfXrGAl9w1nezJBPnS/9PD4hQU4d67BSG1sdTshf
THKsUrqS3FX1synGeuitEGNwNBt8BwFPEMpUVTFBInQ7u2X5Xrc39U2OpwU4W5iJ
L0yV/M6PtKGnHAXAk6kiX0Yc3MdNB1xHlz5EzaBwMAew8gI3igxTJ6jpDo3hz72u
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11266403933850237454150175636857006259
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Monroe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lumen Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ams.lumen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24552516558930975205580729989532855119721594474963298817031830046150983628558429064999075864062709502246840267280694744479898116494090328619067301566699995098073962426616330973063866353898269689907586244250167478757028355252920839881730849671409953749064621564799650338364102850900020191879378769836765550191465527078045652856323985156017074997430718196682416252192035073968055907940014259477263141076200504556786409338026524609383154703455480916983424984614716788198065995228906695798798722085575372030637303194736549937420968659372624950782305801621612383615151310197234598391797749735316592571696699590973792824931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d2f498151d970517a9522753dc72f411d3593b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams.lumen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ams.lumen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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