sndceapiauth1.ual.com

- United Airlines Inc -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 07:3d:ad:49:ac:ea:dd:3d:fd:a6:7a:a0:03:84:3f:85 was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

United Airlines Inc

Organization: United Airlines Inc
Organization unit: Technology
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:3d:ad:49:ac:ea:dd:3d:fd:a6:7a:a0:03:84:3f:85
Serial Number (int): 9624840772897685993529705602046246789
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c3:6f:03:69:ef:b8:43:24:2f:6c:27:23:b8:96:14:a3:47:ca:55:f9
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 19:1c:c2:b4:c8:c3:2c:0e:82:91:2d:5f:6b:2b:68:90:24:04:58:f1
Fingerprint (sha256): 09:04:9d:c4:98:ed:8c:fb:de:0d:a0:98:fd:1b:ff:74:d0:7f:85:85:90:03:ea:15:21:60:b7:17:2b:76:d6:b3

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate sndceapiauth1.ual.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sndceapiauth1.ual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sndceapiauth1.ual.com
sndceapigw2.ual.com
sndceapiauth2.ual.com
sndceservice1.ual.com
sndceservice2.ual.com
partnerservices-stage.united.com
partnerservices-test.united.com
partnerauth-stage.united.com
partnergw-stage.united.com
apiauth-stage.united.com
apigw-stage.united.com

Other certificates including the domain name ual.com

(limited to 100 certificates)
ndccorpdpsvcauth-qa.ual.com
?.ual.com
artifactory.ual.com
usourceqa.ual.com
pilotrecords.ual.com
smtptul.ual.com
sndcapiauth.ual.com
ctmp.ual.com
unitedservices.ual.com
eserviceaerobeta.ual.com
stage.css.ual.com
unitedcargobilling.ual.com
customerwebcid.ual.com
svcgw.qa.aws.united.com
owp.iotqa.ual.com
*.ual.com
aasp-dp-qa.ual.com
cateringportalstage.ual.com
logbook-stg.ual.com
unitedtax.ual.com
ANDCDCXSACSPRI01.ual.com
unitedaccountinquiry.ual.com
resctx.ual.com
collabapiauth.ual.com
unitedclubaims-authsvc.ual.com
rfp.ual.com
vpninp.ual.com
HotelHub.ual.com
Cargo360.ual.com
ndccorpdpsvcauth.ual.com
ebso.ual.com
skyviewtng.stg.cvu.aws.ual.com
insight-mobile.ual.com
ccs-stage.ual.com
ivr-qa.ual.com
lyncdiscover.united.com
*.ual.com
gstarmac.ual.com
iom2-odev.ual.com
ucbadm.preprod.ual.com
stagendc.css.ual.com
prendcapiauth.ual.com
esftpcd.ual.com
cargoivr-sdp.auth.ual.com
mobileres.ual.com
vopcwlf5d3.opc.ual.com
apiportal-qa.ual.com
vpn3.ual.com
owp.msg.ual.com
cargoivr-pdp.auth.ual.com
K2.ual.com
xml.united.com
ustlsttpm001.ual.com
atw.prod.aws.ual.com
ocpmaster.cslaws-nonprod.ual.com
uatpadmin.ual.com
eservicetest.united.com
solace.stg.duz.aws.ual.com
geofence-api-dev.uia.ual.com
mail.ual.com
unitedperksplus.united.com
cargoivr-sdp.auth.ual.com
gndcqadpxdmz01m01.ual.com
svcgw.prd.aws.united.com
agentui2dev.ual.com
unitedservicestools.ual.com
owp.msg.ual.com
turnmetrics-dp.ual.com
wysectx.ual.com
esftwtc.ual.com
usourceqa.ual.com
airporthubops-qa-authsvc.ual.com
vpninp.ual.com
api-qa.united.com
unitedservices.ual.com
techopsservices-gateway.ual.com
vawsstgdpnvaza1m01.ual.com
cargo-iot.dev.ual.com
ccsplus-stg.ual.com
itspeech.ual.com
pinetdpweb.ual.com
ndc-prdfe-ejabberd-f5.ual.com
api.prd.aws.united.com
proderp.ual.com
mdm.ual.com
sndceapiauth1.ual.com
PUALAPISVC2.UAL.COM
pars.ual.com
vawssdpnvaza1m01.ual.com
dp-mobile.ual.com
ebt.dev.ual.com
?.ual.com
*.ual.com
ghpages.ual.com
curbside-dp.ual.com
prodqm.global.ual.com
raven-ext.pdpgw.ual.com
*.ual.com
vpn2.ual.com
svcgw.dev.aws.united.com

Certificate

The complete raw certificate details for sndceapiauth1.ual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLlyFq+E7QjRGHwcUKgd
+icWtUVTYZgkDnXNluHf5q8FbeshnPHQ8yupLuFHHfTSxIOOQo4NEKZHPEeF35KC
NDopfQ2IdSb2/g2w1dCVwsNof1sI8Zs6+5KVusqchHvZOs9CkMFHY/Aj+q77gRWL
wkFm62zZ8xMlm0VDqyTCtaXHoMAFBqXeAL8hKjRMY/qdbORuBxCZ0mQCMX65Qflc
GoR/hb1bb/XdzaUsIorOu6La+VSQq7yxd3ApXskIaboeLlxSXyIefxiHr/c2PScC
rm+9/dmfix03qrgZpWlHGGNePCEW/a9rQ0OLTXxPh1SfTwsUgHxoUPRk7uO55tyr
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9624840772897685993529705602046246789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United Airlines Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sndceapiauth1.ual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17764809357794835354512670967142510178754385072835581344057392791960936832538294578185346033881383194081354488327572691875576849254024386249016440962410139562577375618998163863378285198286873745323577776154871255566732907281356737084070138223493292686843223205266708043977326964930293694839911937537804065853496401562026590987700846316461909500119524306058852178681924614349069265990557750997430250326430131440172183550450100986834328428627656332538077287398452997461858598203666544161034590295207559511381711454081921629216447545920848249785424733632388417059024476558578207152349463021072317726376522115430878063459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c36f0369efb843242f6c2723b89614a347ca55f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (292 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sndceapiauth1.ual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sndceapigw2.ual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sndceapiauth2.ual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sndceservice1.ual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sndceservice2.ual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerservices-stage.united.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerservices-test.united.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerauth-stage.united.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnergw-stage.united.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiauth-stage.united.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw-stage.united.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001614277084b000004030046304402203647b40f2cbee70a2745f9ef9654039d8a69e3ed9ab98331ebdcdb03f827396b022055a530e4e8e2a35960c4abec79154fcbf13ecf905fa12667e6e26b9eb0c27ede0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001614277091c000004030047304502210096e632fc599b7da26453f61d96b7abeeda3156babefa74e58881abb33de3a35202200eb2361bab58c784bb3eae7b020c1bf41e46630e0ab18dbd514577cfeeb2fa71007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000161427708fc0000040300473045022100fa794cd2630488993d72933cd2498d7997b2dff9fc2cc78a122332ded41b395902204da0eb17bd08a19b156f8f414891bca762670a2c0e0c4206bd49dec04dec1821
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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