*.op1030.bastille.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 04:de:ff:b9:99:c6:3e:de:0b:1e:07:e5:09:25:0d:47 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.op1030.bastille.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:de:ff:b9:99:c6:3e:de:0b:1e:07:e5:09:25:0d:47
Serial Number (int): 6474788604984262237659260617924873543
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 43:64:6c:77:56:c6:a9:f6:45:f6:29:dc:40:3c:93:58:bb:6d:fd:a5
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 3f:37:46:a9:97:1f:66:38:b7:ed:76:ca:9f:4a:9c:5f:b4:25:5b:34
Fingerprint (sha256): 08:89:7b:fb:29:9d:fd:dc:93:d1:c9:ac:f9:a7:26:0f:b2:2b:96:33:e8:03:07:fe:04:f8:a4:82:f8:1d:18:40

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.op1030.bastille.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.op1030.bastille.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.op1030.bastille.cloud

Other certificates including the domain name bastille.cloud

(limited to 100 certificates)
www.oxidanes.com
*.op1031.bastille.cloud
harimart.in
painel.appsuabreja.com
*.op1030.bastille.cloud
drinksome.beer
fantasyfightnow.com
*.op1033.bastille.cloud
*.op1001.bastille.cloud
op1032.bastille.cloud
copyhaste.com
*.op1030.bastille.cloud
*.op1030.bastille.cloud
*.op1026.bastille.cloud
*.op1032.bastille.cloud
albertodenatale.com
arisahirata.com
howbusy.live
anilrv.com
api.m2io.net
autonum.app
*.op1030.bastille.cloud
*.op100.bastille.cloud
*.op1026.bastille.cloud
links.bucleinfinito.com.ar
autonum.app
impact.academyservices.com.au
op1001.bastille.cloud
rapnext.app
admin.op1026.bastille.cloud
*.op1026.bastille.cloud
app.haroldwaste.com
dentologicom.smartcom.mx
op1030.bastille.cloud
*.op1001.bastille.cloud
asset.renzha.net
op1032.bastille.cloud
6ixpods.ca
eu-geo.acasus.com
www.finesse.ltd
op1033.bastille.cloud
*.op1030.bastille.cloud
gibsonia.cc
*.op1032.bastille.cloud
op1001.bastille.cloud
42sanantonio.com
*.op1032.bastille.cloud
www.methodist.tk
diagnostics.op1001.bastille.cloud
*.op1033.bastille.cloud
op1026.bastille.cloud
breezebox.asia
*.op1030.bastille.cloud
*.op42.bastille.cloud
go2kart.com.br
www.rschipstech.com
www.canwork.io
*.op1026.bastille.cloud
*.op1032.bastille.cloud
www.duecentodigregorio.it
uk-vh-mob-megapush.okcupid.pp.ua
*.op100.bastille.cloud
servicemall.in
*.op1001.bastille.cloud
diagnostics.op1026.bastille.cloud
www.emcantomeu.com.br
*.bastille.cloud
jobban.info
op1030.bastille.cloud
admin.op42.bastille.cloud
*.op42.bastille.cloud
*.op1026.bastille.cloud
kuyllur.com
stories.thecompasschurch.net
partner.plumboard.io
diagnostics.op1026.bastille.cloud
www.ugurvurgun.com
*.op42.bastille.cloud
asset.renzha.net
*.op1001.bastille.cloud
tonybrands.com
nicolaas.dev
studioscreation.com
42sanantonio.com
www.vishalsingh.xyz
*.op1031.bastille.cloud
op42.bastille.cloud
*.op1026.bastille.cloud
*.op1032.bastille.cloud
www.casperhalloweenparty.com
mattchessman.com
op1031.bastille.cloud
www.morphylabs.com
fb-gm.club
approvals.shineweddinginvitations.com
op42.bastille.cloud
kateandalex.weddingcheckin.com
alexshaw.tv
miitapp.co
www.malexcob.com

Certificate

The complete raw certificate details for *.op1030.bastille.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIQBN7/uZnGPt4LHgflCSUNRzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODExMDIwMDAwMDBaFw0xOTEyMDIx
MjAwMDBaMCIxIDAeBgNVBAMMFyoub3AxMDMwLmJhc3RpbGxlLmNsb3VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMVVpekciSDvtMU65QlyM9vNtCwB
XDBMW/LlB/cM1/PFrGyabIjRDYQIt636RO1PxfvrS5JhQYoLQOy9w09oJW1Qe50v
DiqrwhD+tCVrcXugVdxgfrRsqI5gHwAzRzfbqm5Qhe6XhQWijv3xJR092rm90lnS
/AoH+wqgIaoDkf9av5iUob2JsU2xZzDHvDpNzwFzQk8nd91klAlEG+eLr50txjPl
jpMg+vD5kV16e4yfl1tEXx3Swf9H8aHh9HeuruATwVMcpm4oqDOdtgbRxkkWZfGh
JP2gqs9+tFaraQ+N16R2hChK6Iq1vdIsbPK3TEE7chWuxYMBaKTfYpJ+DQIDAQAB
o4ICgTCCAn0wHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0O
BBYEFENkbHdWxqn2RfYp3EA8k1i7bf2lMCIGA1UdEQQbMBmCFyoub3AxMDMwLmJh
c3RpbGxlLmNsb3VkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5h
bWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAEC
MAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v
Y3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2Ny
dC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAw
ggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdACkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb
37jjd80OyA3cEAAAAWbWk2y5AAAEAwBFMEMCIB+PUvOpLD6afLl/ZhJyhcVaAFpn
sq7wjZi+1itM4a+yAh8CkUe6vrME+rGXSUK3ADVlL1cKP5h/D6EK/q7UZrEAAHYA
h3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFm1pNtmAAABAMARzBF
AiEAquzlbQCD9+zYOq+F7v30+U+TTjlMfnRTlMWWwcdwrSICIHOE9HmtTL9eL4XG
+z18ceP8fIn5FcK2OnFJzkR0Ku9CMA0GCSqGSIb3DQEBCwUAA4IBAQBl2Ia5vTYz
WNSlS1qzwjoRkwA4UuNviFiregTKr4TYBGFxdfGiRuCz+CTtA7utUO/3lEilfNtL
9l/0T0qDd8I2ugsJyFbE01/LL/MPz/7NynJiCBi2BS8308oMqt+g5CqaLJVNpOqn
uhhAuCX7x+IlUQqN3YItSk8TnCmExa0PjJb0sVTZF+bBeFagO3f+VwLr4yYw9Vzs
XtOzZPONofmd20JKf71ONldB8K53LoDHOGNJyZKaHiMoM600EtEC2kI47YeG0e7c
LJNNuBlsvNGwQx3rA5B6VCzAr5p3ymWPwjP1QRejEeMxe9D/ucH1uV2w6kWcqmx7
PEu5LwkwaAx3
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMVVpekciSDvtMU65Qly
M9vNtCwBXDBMW/LlB/cM1/PFrGyabIjRDYQIt636RO1PxfvrS5JhQYoLQOy9w09o
JW1Qe50vDiqrwhD+tCVrcXugVdxgfrRsqI5gHwAzRzfbqm5Qhe6XhQWijv3xJR09
2rm90lnS/AoH+wqgIaoDkf9av5iUob2JsU2xZzDHvDpNzwFzQk8nd91klAlEG+eL
r50txjPljpMg+vD5kV16e4yfl1tEXx3Swf9H8aHh9HeuruATwVMcpm4oqDOdtgbR
xkkWZfGhJP2gqs9+tFaraQ+N16R2hChK6Iq1vdIsbPK3TEE7chWuxYMBaKTfYpJ+
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6474788604984262237659260617924873543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.op1030.bastille.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23830110633325020267978150019452322035925727754382651237315487187306026300957074542235018891732743617277209462441235713625461294982645446638427493746056374708022760788651526927857773273166676345215738041372851139170244846633649903795041760856070580276843220807960748838721156550132539008073549460881457007064088049229057097197433438550791782970727749628139634525038570795953340643306440546866852574911445445654194331511263608684289599695088093715502263122543386092336399816194595336078995160921232973752732626507861993499678596878932243701715034772787461193984346707799468480545934747497373122981059695273328942153229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43646c7756c6a9f645f629dc403c9358bb6dfda5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.op1030.bastille.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007400a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000166d6936cb9000004030045304302201f8f52f3a92c3e9a7cb97f66127285c55a005a67b2aef08d98bed62b4ce1afb2021f029147babeb304fab1974942b70035652f570a3f987f0fa10afeaed466b1000076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166d6936d980000040300473045022100aaece56d0083f7ecd83aaf85eefdf4f94f934e394c7e745394c596c1c770ad2202207384f479ad4cbf5e2f85c6fb3d7c71e3fc7c89f915c2b63a7149ce44742aef42
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0065d886b9bd363358d4a54b5ab3c23a1193003852e36f8858ab7a04caaf84d804617175f1a246e0b3f824ed03bbad50eff79448a57cdb4bf65ff44f4a8377c236ba0b09c856c4d35fcb2ff30fcffecdca72620818b6052f37d3ca0caadfa0e42a9a2c954da4eaa7ba1840b825fbc7e225510a8ddd822d4a4f139c2984c5ad0f8c96f4b154d917e6c17856a03b77fe5702ebe32630f55cec5ed3b364f38da1f99ddb424a7fbd4e365741f0ae772e80c7386349c9929a1e232833ad3412d102da4238ed8786d1eedc2c934db8196cbcd1b0431deb03907a542cc0af9a77ca658fc233f54117a311e3317bd0ffb9c1f5b95db0ea459caa6c7b3c4bb92f0930680c77