*.aws-stage-rt.veritone.com

Issued by Amazon

About this certificate

This digital certificate with serial number 04:0d:c9:10:9c:8c:e0:71:63:00:8b:a2:14:b9:43:1d was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.aws-stage-rt.veritone.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0d:c9:10:9c:8c:e0:71:63:00:8b:a2:14:b9:43:1d
Serial Number (int): 5388489922731521513354716860848358173
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c4:e7:1e:d7:ef:f8:64:4e:1b:da:fa:a7:34:34:93:20:e7:68:7b:e8
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 74:0f:7e:52:63:7e:39:bd:66:a8:a0:74:6a:29:2a:23:97:b8:6c:ca
Fingerprint (sha256): 09:b9:91:b5:47:fa:52:c5:f8:e3:05:94:7e:00:81:22:e3:c6:b7:2b:19:22:e9:82:aa:76:5a:21:72:48:52:fd

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.aws-stage-rt.veritone.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.aws-stage-rt.veritone.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aws-stage-rt.veritone.com

Other certificates including the domain name veritone.com

(limited to 100 certificates)
ssl471900.cloudflaressl.com
*.us-gov-1.veritone.com
unlock.veritone.com
tracking.duckvideo.co
app.nova.ai
bd40b874.ephemeral.dev.us-1.veritone.com
*.dv.dmh.veritone.com
investors.veritone.com
agency.ibex.co
dmshealth.dealertrack.com
ssl769726.cloudflaressl.com
*.aws-uk-prod.veritone.com
586db9f5.ephemeral.dev.us-1.veritone.com
*.wdcd01.uswest2.veritone.com
*.aws-us-gov-prod-sled2.veritone.com
agency.ibex.co
*.us-gov-1.veritone.com
agency.ibex.co
*.aws-us-gov-prod-sled2.veritone.com
ssl420571.cloudflaressl.com
san-004.ceros.com
veritone.com
*.aws-stage.veritone.com
agency.ibex.co
veritone.com
agency.ibex.co
19901b2b.ephemeral.dev.us-1.veritone.com
app.nova.ai
aiware.com
san-004.ceros.com
san-004.ceros.com
*.wpe1.euwest2.veritone.com
chiuchiu.dev
cheetah.apstra.com
san-004.ceros.com
discover.newswire.com
*.veritone.com
harbor.ops.veritone.com
san-004.ceros.com
*.pd.dmh.veritone.com
veritone.com
*.aws-stage-rt.veritone.com
www.vanord.com
chat.veritone.com
*.stage.us-3.veritone.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-43.gcs-web.com
ninjaflips.com
san-004.ceros.com
ssl2176.cloudflare.com
san-004.ceros.com
*.wizr.com
dmshealth.dealertrack.com
leapfrog-ssl-43.gcs-web.com
*.qa.dmh.veritone.com
s.bbot.menu
ssl2176.cloudflare.com
unlock.veritone.com
unlock.veritone.com
*.wpcv01.useast1.veritone.com
app.nova.ai
rev.veritone.com
*.ops.veritone.com
insidesales.veritone.com
saravanafastfood.com
san-004.ceros.com
email.veritone.com
*.aws-uk-prod.veritone.com
*.aws-stage.veritone.com
*.zsfc01.usgoveast1.veritone.com
*.wpe1.euwest2.veritone.com
leapfrog-ssl-43.gcs-web.com
*.aws-us-gov-prod-sled2.veritone.com
*.wpcc03.cacentral1.veritone.com
unlock.veritone.com
san-004.ceros.com
ssl2176.cloudflare.com
*.dmh.veritone.com
*.aws-prod-hl2.veritone.com
san-004.ceros.com
relone.veritone.com
leapfrog-ssl-43.gcs-web.com
dmshealth.dealertrack.com
jenkins.engage-dev.veritone.com
dmshealth.dealertrack.com
*.uk-1.veritone.com
salesloft.veritone.com
leapfrog-ssl-43.gcs-web.com
email.veritone.com
ssl2176.cloudflare.com
agency.ibex.co
fw1.us-gov.veritone.com
*.ops.veritone.com
app.pedidos.casadasplantas.net.br
dmshealth.dealertrack.com
*.us-3.veritone.com
fw1.us-gov.veritone.com
notary.ops.veritone.com
offers.veritone.com
insidesales.veritone.com

Certificate

The complete raw certificate details for *.aws-stage-rt.veritone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgIQBA3JEJyM4HFjAIuiFLlDHTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMTUwMDAwMDBaFw0yMTAyMTUx
MjAwMDBaMCYxJDAiBgNVBAMMGyouYXdzLXN0YWdlLXJ0LnZlcml0b25lLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJm2k7sg0zPI/ZFimMkvKd4z
/vALTvP4nQx9l7HsV/RUEHAIuItyL9ldW7ygLh64CVPLW87JvCS29etXYkQWiJqk
EBio9w3YYxKnav8wrmF/9K1edTn8l5PKc+gZHXuxPJ0MvSy8elhpmBc+qF5ozbWw
Jay8kCSbYksEWSFUlJCw5XcBWVFthKwpLyRZ4yVinyqZ0cWiDg3/21PHp+EeF3ce
eH3OKfJckravAHdCyochSFnyLH8mDJCtQ3oe94xGKUxNrEPceDO2zaTlkH3iTuUH
/pLXHDjuACOluVuORrrQw4YXlGVcDQWaIdw3b3m7OcvuSnhh+HkqATCHsK/JQXUC
AwEAAaOCAogwggKEMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0G
A1UdDgQWBBTE5x7X7/hkThva+qc0NJMg52h76DAmBgNVHREEHzAdghsqLmF3cy1z
dGFnZS1ydC52ZXJpdG9uZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3Js
LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglg
hkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYh
aHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipo
dHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0T
AQH/BAIwADCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AKS5CZC0GFgUh7sTosxn
cAo8NZgE+RvfuON3zQ7IDdwQAAABb6bB+SoAAAQDAEcwRQIhAIOxF5rSfkNo2jcb
+vCm+vwqcFvSuq04tkqWXz8HjPO0AiB7q6XOcyacjy1qg3S/4RgoCd9L94uQlI+x
P2KGVic/FAB3AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABb6bB
+cEAAAQDAEgwRgIhAPmtbALWndnO821tHay4KAqpuGaBFSxZ77Q68V2oNvAeAiEA
g1nebfbZxf12LVVqhJNZYS79NIQG0fKpz+XgfjdZTswwDQYJKoZIhvcNAQELBQAD
ggEBAEDYWJM9FasMz3ISOHG/CJOdbsVhwCaPMLULA8mozSStyIUWd4v/G7LywsKm
J1vvKm7pvhxUr/b94ABWZUT4onIMTYNZ3j6/kEk3Dvb2MGcm2pCaRz74W0MHzxtN
pCWCRAMnKbZmpgnWuHUGbm2UFyFz2nCTl/0D4ETKC4Y6C27brkyAGgyRNRfzHI1z
r7kc1qKrLA2mK12JOjPvAxjhfpp64m6ZrkWK/VYtzbH7uJIFL4ee3ntTJF/jcf5H
6nneufUqdaheh3aHYHk3YhTGUxzG/98GF1bq7TkHsaWc6uOAcPvLttmKWJ/bD2Z0
Gvi9lo4JNkrR7DbHRBqjxPP9t2Q=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbaTuyDTM8j9kWKYyS8p
3jP+8AtO8/idDH2XsexX9FQQcAi4i3Iv2V1bvKAuHrgJU8tbzsm8JLb161diRBaI
mqQQGKj3DdhjEqdq/zCuYX/0rV51OfyXk8pz6Bkde7E8nQy9LLx6WGmYFz6oXmjN
tbAlrLyQJJtiSwRZIVSUkLDldwFZUW2ErCkvJFnjJWKfKpnRxaIODf/bU8en4R4X
dx54fc4p8lyStq8Ad0LKhyFIWfIsfyYMkK1Deh73jEYpTE2sQ9x4M7bNpOWQfeJO
5Qf+ktccOO4AI6W5W45GutDDhheUZVwNBZoh3Ddvebs5y+5KeGH4eSoBMIewr8lB
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5388489922731521513354716860848358173
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aws-stage-rt.veritone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19404492770588439089144871162766908177349893794291960084386523362721429219290776439362733823034901119084033448227564594170699471643471679781070677032624269832270465473288740979453487159100333902370547812734050843672260845224070355835613931520354963343908869485964207755531239897905926915011367024308865891684407993668562921378214358891788507578136099119600030071559375585942895753082685978115279782765247011293938716175777489836931223233759241235186035457165043084558168666372325094330493848275551105291923742341496185811923801031444858679194787012487221597002163838162031967622744733331121453430911857909039100412277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4e71ed7eff8644e1bdafaa734349320e7687be8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aws-stage-rt.veritone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016fa6c1f92a000004030047304502210083b1179ad27e4368da371bfaf0a6fafc2a705bd2baad38b64a965f3f078cf3b402207baba5ce73269c8f2d6a8374bfe1182809df4bf78b90948fb13f628656273f140077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016fa6c1f9c10000040300483046022100f9ad6c02d69dd9cef36d6d1dacb8280aa9b86681152c59efb43af15da836f01e0221008359de6df6d9c5fd762d556a849359612efd348406d1f2a9cfe5e07e37594ecc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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