promo.customink.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0c:9d:2b:75:5b:6d:f8:b7:52:82:b9:84:04:9d:f5:18 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=promo.customink.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:9d:2b:75:5b:6d:f8:b7:52:82:b9:84:04:9d:f5:18Serial Number (int): 16766807997813012939948532253104928024
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 4a:89:ec:a9:ab:03:39:1d:f4:39:78:33:f4:15:b9:93:8b:0b:74:38
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 41:4e:22:04:9b:ee:fa:e6:8f:56:18:9c:cb:8e:81:3f:b0:3c:48:b7
Fingerprint (sha256): 08:82:e1:e7:75:ae:5c:34:20:de:45:34:a3:20:97:03:ca:b2:5e:25:b5:2b:37:3e:63:38:0e:ac:07:0c:28:17
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate promo.customink.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for promo.customink.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
promo.customink.com
Other certificates including the domain name customink.com
(limited to 100 certificates)
wiki.customink.com
artblog.customink.com
pretreat-extractor.in.customink.com
mms-cloudfront.customink.com
locations.customink.com
*.out.customink.com
affiliates.customink.com
retail.in.customink.com
samples.customink.com
embed-answers.cority.com.pagescdn.com
mms-search.customink.com
*.out.customink.com
stores.customink.com
liwxfq.customink.com
media6.adlegend.com
promo.customink.com
*.out.customink.com
technology.customink.com
technology.customink.com
retail.in.customink.com
home.customink.com
vpn.out.customink.com
blog.customink.com
blogs.customink.com
gtm.customink.com
fe-img-cloudfront.customink.com
*.out.customink.com
shirtmagic.com
shirtmagic.com
partner.customink.com
*.staging.customink.com
locations.customink.com
wiki.customink.com
nps.customink.com
samples.customink.com
www.customink.com
*.in.customink.com
ssl362571.cloudflaressl.com
wifi.customink.com
reports.customink.com
*.out.customink.com
*.lambda-dev.customink.com
hq.customink.com
*.staging.customink.com
ssl362571.cloudflaressl.com
*.staging.customink.com
blog.customink.com
mms-cloudfront.customink.com
stores.cictitlepawn.com
hq.customink.com
uploads.staging.customink.com
*.us-east-1.k8s.in.customink.com
fulcrum.in.booster.com
answers-embed.techem.de.pagescdn.com
foundry.customink.com
*.out.customink.com
technology.customink.com
mms-cloudfront.customink.com
*.staging.customink.com
staging.customink.com
nagios-vpcprod.customink.com
*.out.customink.com
e.customink.com
dyo.customink.com
inkovate.customink.com
*.in.customink.com
checkout.customink.com
pharmacy.stopandshop.com
www.customink.com
pharmacy.stopandshop.com
stores.customink.com
maintenance.staging.customink.com
hq.customink.com
www.customink.com
*.out.customink.com
blog.customink.com
nagios-vpcprod.customink.com
assisted-design.out.customink.com
www.customink.com
shirtmagic.com
*.out.customink.com
technology.customink.com
blog.customink.com
mms.customink.com
samples.customink.com
dyo.customink.com
home.customink.com
www.customink.com
dyo.customink.com
blog.customink.com
marketinglog.customink.com
*.lambda-staging.customink.com
media6.adlegend.com
embed-answers.cority.com.pagescdn.com
retail.in.customink.com
nagios-vpcprod.customink.com
inkernet.customink.com
hq.customink.com
promo.customink.com
boutique.sfr.fr
artblog.customink.com
pretreat-extractor.in.customink.com
mms-cloudfront.customink.com
locations.customink.com
*.out.customink.com
affiliates.customink.com
retail.in.customink.com
samples.customink.com
embed-answers.cority.com.pagescdn.com
mms-search.customink.com
*.out.customink.com
stores.customink.com
liwxfq.customink.com
media6.adlegend.com
promo.customink.com
*.out.customink.com
technology.customink.com
technology.customink.com
retail.in.customink.com
home.customink.com
vpn.out.customink.com
blog.customink.com
blogs.customink.com
gtm.customink.com
fe-img-cloudfront.customink.com
*.out.customink.com
shirtmagic.com
shirtmagic.com
partner.customink.com
*.staging.customink.com
locations.customink.com
wiki.customink.com
nps.customink.com
samples.customink.com
www.customink.com
*.in.customink.com
ssl362571.cloudflaressl.com
wifi.customink.com
reports.customink.com
*.out.customink.com
*.lambda-dev.customink.com
hq.customink.com
*.staging.customink.com
ssl362571.cloudflaressl.com
*.staging.customink.com
blog.customink.com
mms-cloudfront.customink.com
stores.cictitlepawn.com
hq.customink.com
uploads.staging.customink.com
*.us-east-1.k8s.in.customink.com
fulcrum.in.booster.com
answers-embed.techem.de.pagescdn.com
foundry.customink.com
*.out.customink.com
technology.customink.com
mms-cloudfront.customink.com
*.staging.customink.com
staging.customink.com
nagios-vpcprod.customink.com
*.out.customink.com
e.customink.com
dyo.customink.com
inkovate.customink.com
*.in.customink.com
checkout.customink.com
pharmacy.stopandshop.com
www.customink.com
pharmacy.stopandshop.com
stores.customink.com
maintenance.staging.customink.com
hq.customink.com
www.customink.com
*.out.customink.com
blog.customink.com
nagios-vpcprod.customink.com
assisted-design.out.customink.com
www.customink.com
shirtmagic.com
*.out.customink.com
technology.customink.com
blog.customink.com
mms.customink.com
samples.customink.com
dyo.customink.com
home.customink.com
www.customink.com
dyo.customink.com
blog.customink.com
marketinglog.customink.com
*.lambda-staging.customink.com
media6.adlegend.com
embed-answers.cority.com.pagescdn.com
retail.in.customink.com
nagios-vpcprod.customink.com
inkernet.customink.com
hq.customink.com
promo.customink.com
boutique.sfr.fr
Certificate
The complete raw certificate details for promo.customink.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIQDJ0rdVtt+LdSgrmEBJ31GDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDMwMjAwMDAwMFoXDTI0MDEwMzIzNTk1OVowHjEc MBoGA1UEAxMTcHJvbW8uY3VzdG9taW5rLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJ75Ysxom3VmE42yBRULKGbsf2zYv12T5RuLPTolx7bqMaYG cMzHD2JDRi+et9nFRcxP13UNDWq9PaxIa1HNmxcfbhzhGASy2Sr8oc1AL9Sz83r/ E7JtksPRujjFD+DN0cyM1o+ofkKoPkVvcZ8NFRY2DaJ2MaoSu1EithRuJBtLAADZ fax95Q5tJhh3w2igG/xKyDAtdsyA+pMSeEudf0TQBAd2qN4Wt6cGMAXeGESaGZO2 ANvtA10a4eTnP5rB6uo0fJ+JunuseqDyxndl3/CrbGq2NW8GvrnEaB50NPwqUVjO aiRmheDoH3swivwVuzD/XcX21IDM9hPkhzhbXPsCAwEAAaOCAuwwggLoMB8GA1Ud IwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBRKieypqwM5HfQ5 eDP0FbmTiwt0ODAeBgNVHREEFzAVghNwcm9tby5jdXN0b21pbmsuY29tMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f BDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJt MDIuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggr BgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsG AQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5j ZXIwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHcA7s3Q ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGGoDMeNwAABAMASDBGAiEA 3ugYnjXm5NL+cbZIanKlaCMpj5O27FI39KrhAIeaeIECIQCQ20POvxmLLWCcso3M gMzcMoOv1My+WrO0iRG72L9O3AB2AHPZnokbTJZ4oCB9R53mssYc0FFecRkqjGuA EHrBd3K1AAABhqAzHl0AAAQDAEcwRQIgd2Iij+kyPOZBjQ/jQlMRNyL+Qvd1iijr qbUzwkDBgtECIQDUf34xhNHrTcKpEaD+cNyh8qpaiYVpJNN4DWfsk5L/1QB1AEiw 42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABhqAzHh8AAAQDAEYwRAIg dVO/2Zpj2B+C3uuyYdo5ok0EXnwPsYKc3s+NOKcHcscCIEWT3bYu3lvBF2IA3iJo Thi1HxBvIB8ZB2eL9FiFVlWwMA0GCSqGSIb3DQEBCwUAA4IBAQAb7uvNF3NAyGUB rd2o88ykl1gw3sW1kGI1GqG8exd3c4hRorERLMPdzT8T1YHDmPVFUDvcAhUNY50o yfA3QtikIQStGVPmPT470u150sPGGvT3esFmenxErbTGBRQmaEsBqLBKlWMczWQ1 v8pgYTpKHTm8faPegrDdLzu6J5pAsTlHdEHaMeKA3MYs2AgGnmWhnH2N04UxN30Y kHmWXylELWy89hg7KDnSCeS7pzp2mykRy3VdxWJcUmKVFzkVYAFXpLUYx6YU50ZQ BeQfpnRUtBlZDd5hIHEQ1hgOaY9sWlSy+svMswYAkV7ewgSAbcozFNodlb3J/7b4 zrNKebLk -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvlizGibdWYTjbIFFQso Zux/bNi/XZPlG4s9OiXHtuoxpgZwzMcPYkNGL5632cVFzE/XdQ0Nar09rEhrUc2b Fx9uHOEYBLLZKvyhzUAv1LPzev8Tsm2Sw9G6OMUP4M3RzIzWj6h+Qqg+RW9xnw0V FjYNonYxqhK7USK2FG4kG0sAANl9rH3lDm0mGHfDaKAb/ErIMC12zID6kxJ4S51/ RNAEB3ao3ha3pwYwBd4YRJoZk7YA2+0DXRrh5Oc/msHq6jR8n4m6e6x6oPLGd2Xf 8KtsarY1bwa+ucRoHnQ0/CpRWM5qJGaF4OgfezCK/BW7MP9dxfbUgMz2E+SHOFtc +wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16766807997813012939948532253104928024 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'promo.customink.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20068628970881333618362556786629510210643298802438635755868111545643789651056231020600729635464255243266247768466284101225370644648891707712936199909088393948783723929164955310024353279702621418685296778584730397487887745597544617191644250957050354777095266008294037685222407643473315087034346637364952577200767024268807093858873548311712925184567495217144891594405072638548090787908579383815580658198565706019197464815361845473096243609632040630008492067448181158151209055882762808763741777577378772878221281049747767312118093234042495907850399635876905480421346522175180849076129649107720660216362675879995355389179 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4a89eca9ab03391df4397833f415b9938b0b7438 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo.customink.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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