static.cx.metamask.io
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 01:24:17:94:92:3d:bc:d1:11:b4:e4:4f:18:94:21:be was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=static.cx.metamask.io
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:24:17:94:92:3d:bc:d1:11:b4:e4:4f:18:94:21:beSerial Number (int): 1516628949140553337529678494306673086
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 8f:c0:47:77:e6:16:85:f8:37:50:9a:a4:5b:09:fc:98:ee:66:ba:b2
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 0f:4c:36:37:6a:36:59:53:67:24:39:ee:40:37:73:62:d0:2a:04:42
Fingerprint (sha256): 0b:45:32:2f:b6:8f:0f:7a:8e:55:30:e5:f8:e5:d7:57:b6:74:a5:26:be:67:6f:56:42:6c:d5:57:a4:5a:cf:28
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate static.cx.metamask.io
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for static.cx.metamask.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
static.cx.metamask.io
www.static.cx.metamask.io
www.static.cx.metamask.io
Other certificates including the domain name metamask.io
(limited to 100 certificates)
blog.metamask.io
*.metamask.io
echo1.lab.metamask.io
metamask.io
metamask.io
echo1.lab.metamask.io
metamask.io
echo1.lab.metamask.io
api.cx.metamask.io
fwd.metamask.io
testfaucet.metamask.io
faucet.metamask.io
metamask.io
mobile.metamask.io
echo1.lab.metamask.io
wallet.metamask.io
home.metamask.io
rpc.metamask.io
metamask.io
echo1.lab.metamask.io
faucet.metamask.io
support.metamask.io
docs.metamask.io
wallet.metamask.io
support.metamask.io
home.metamask.io
docs.cx.metamask.io
static.cx.metamask.io
mobile.metamask.io
admin.metamask.io
fwd.metamask.io
fwd.metamask.io
metamask.io
metamask.io
support.metamask.io
docs.metamask.io
support.metamask.io
support.metamask.io
*.metamask.io
metamask.io
faucet.metamask.io
telemetry.lab.metamask.io
swag.metamask.io
home.metamask.io
metamask.io
fund-loss-investigation.metamask.io
mobile.metamask.io
metamask.io
stage.portfolio.metamask.io
blog.metamask.io
fund-loss-investigation.metamask.io
telemetry.lab.metamask.io
faucet.metamask.io
*.metamask.io
support.metamask.io
blog.metamask.io
*.metamask.io
swag.metamask.io
metamask.io
telemetry.lab.metamask.io
blog.metamask.io
faucet.metamask.io
faucet.metamask.io
snaps.metamask.io
faucet.metamask.io
mobile.metamask.io
learn.metamask.io
www.metamask.io
support.metamask.io
*.metamask.io
metamask.io
mobile.metamask.io
metamask.io
www.metamask.io
faucet.metamask.io
ipfs.lab.metamask.io
*.metamask.io
support.metamask.io
fwd.metamask.io
metamask.io
mobile.metamask.io
activity.metamask.io
community.metamask.io
echo1.lab.metamask.io
*.metamask.io
faucet.metamask.io
testfaucet.metamask.io
faucet.metamask.io
metamask.io
community.metamask.io
community.metamask.io
faucet.metamask.io
blog.metamask.io
learn.metamask.io
mobile.metamask.io
echo1.lab.metamask.io
mobile.metamask.io
metamask.io
wallet.metamask.io
ipfs.lab.metamask.io
*.metamask.io
echo1.lab.metamask.io
metamask.io
metamask.io
echo1.lab.metamask.io
metamask.io
echo1.lab.metamask.io
api.cx.metamask.io
fwd.metamask.io
testfaucet.metamask.io
faucet.metamask.io
metamask.io
mobile.metamask.io
echo1.lab.metamask.io
wallet.metamask.io
home.metamask.io
rpc.metamask.io
metamask.io
echo1.lab.metamask.io
faucet.metamask.io
support.metamask.io
docs.metamask.io
wallet.metamask.io
support.metamask.io
home.metamask.io
docs.cx.metamask.io
static.cx.metamask.io
mobile.metamask.io
admin.metamask.io
fwd.metamask.io
fwd.metamask.io
metamask.io
metamask.io
support.metamask.io
docs.metamask.io
support.metamask.io
support.metamask.io
*.metamask.io
metamask.io
faucet.metamask.io
telemetry.lab.metamask.io
swag.metamask.io
home.metamask.io
metamask.io
fund-loss-investigation.metamask.io
mobile.metamask.io
metamask.io
stage.portfolio.metamask.io
blog.metamask.io
fund-loss-investigation.metamask.io
telemetry.lab.metamask.io
faucet.metamask.io
*.metamask.io
support.metamask.io
blog.metamask.io
*.metamask.io
swag.metamask.io
metamask.io
telemetry.lab.metamask.io
blog.metamask.io
faucet.metamask.io
faucet.metamask.io
snaps.metamask.io
faucet.metamask.io
mobile.metamask.io
learn.metamask.io
www.metamask.io
support.metamask.io
*.metamask.io
metamask.io
mobile.metamask.io
metamask.io
www.metamask.io
faucet.metamask.io
ipfs.lab.metamask.io
*.metamask.io
support.metamask.io
fwd.metamask.io
metamask.io
mobile.metamask.io
activity.metamask.io
community.metamask.io
echo1.lab.metamask.io
*.metamask.io
faucet.metamask.io
testfaucet.metamask.io
faucet.metamask.io
metamask.io
community.metamask.io
community.metamask.io
faucet.metamask.io
blog.metamask.io
learn.metamask.io
mobile.metamask.io
echo1.lab.metamask.io
mobile.metamask.io
metamask.io
wallet.metamask.io
ipfs.lab.metamask.io
Certificate
The complete raw certificate details for static.cx.metamask.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgIQASQXlJI9vNERtORPGJQhvjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDUxOTAwMDAwMFoXDTI0MDYxNjIzNTk1OVowIDEe MBwGA1UEAxMVc3RhdGljLmN4Lm1ldGFtYXNrLmlvMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAqdxHLRQTAluNHtrI/LW+BnitfNFN2sfJ2/uLAX3FzH4F 46cMRCHOWNjykUjgMmljmExIZAN8ccEHlJcKKQutILE1OYTUG+4ryoGgPwUI52wD cu1A2VKiwHLgMe3S7XRibFb+2qZztGOP/qwj8o9kF+oPLnu5D6uOX2jyg51YdTA8 HLJwuD4fOw9JGMTZhZy/TEeJP5KIQR4LMN3j2DVsbXrze7PYktOYOFJ1yg8oQ8EL S62saPtmvP5mcAoawocFH7mv1hnSQstyOn8H8RqxucIXOS7awIqLMzbcuyLhKu61 5fVprg7CdHCf8OvjuJeCAQgY+0ZTaA/8VJBheHwj4wIDAQABo4IDCzCCAwcwHwYD VR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFI/AR3fmFoX4 N1CapFsJ/JjuZrqyMDsGA1UdEQQ0MDKCFXN0YXRpYy5jeC5tZXRhbWFzay5pb4IZ d3d3LnN0YXRpYy5jeC5tZXRhbWFzay5pbzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6 Ly9jcmwucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNybDATBgNVHSAEDDAK MAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v Y3NwLnIybTAxLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2Ny dC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY2VyMAwGA1UdEwEB/wQCMAAw ggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8 vOzew1FIWUZxH7WbAAABiDVH4SUAAAQDAEcwRQIgF8J/TyDffnEs/f2yF8mzfQrA jM0sFbzRk4naEYk1v0wCIQD0EsGz+Ca+mwl2mBVdIK0PEHolXchW2OXIl2m6P7rx EgB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiDVH4V0AAAQD AEgwRgIhAJDV3VmKqRpvTsqIqJOZFgS70/4ziduSN0pR4AvYQozzAiEAnR50fL+/ ptBwDWehHrnykR9avNeFfAN73pDO3n0INnUAdwDatr9rP7W2Ip+bwrtca+hwkXFs u1GEhTS9pD0wSNf7qwAAAYg1R+ErAAAEAwBIMEYCIQCJ6oimJXGSiPEMndTiDFOa iFEnmCG30EhGD7zlzs9GCQIhAIf9qS0BwurJMa7pKtAgrCCM/jkdywS7/9tOkC8U 7gmWMA0GCSqGSIb3DQEBCwUAA4IBAQArMECIiKdWvdYGUbN4lSSApLBKWXyRVDCp mEzKoXQVpw1XkbzBjIoC47cSVAhisiLERaP60wPfGv0vRgVr1XICW+7mR51uxORH TRmGvCaQuB3MknYcsCFmkhDAq+WNo+M281xWqlM1l+78QaDSA6vfPHJt56mxwSaY TbuYYWQqgcsBCMWlOoyqpR3XA1rNQ6T7DM9/43MMHiHBRirk5rHdh7OlaETnTgKw CFcrUhiSOCOrO9Owqmr7yRZK5Ri1wU9fbbTGJoNj/eXYM+2YV5WP+SxZsCtmbx28 4fsWgkGqeNGPWKSr7pbOdf9Dzl0vn4pmsOlkrVBEHIo+9bmHBb7a -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdxHLRQTAluNHtrI/LW+ BnitfNFN2sfJ2/uLAX3FzH4F46cMRCHOWNjykUjgMmljmExIZAN8ccEHlJcKKQut ILE1OYTUG+4ryoGgPwUI52wDcu1A2VKiwHLgMe3S7XRibFb+2qZztGOP/qwj8o9k F+oPLnu5D6uOX2jyg51YdTA8HLJwuD4fOw9JGMTZhZy/TEeJP5KIQR4LMN3j2DVs bXrze7PYktOYOFJ1yg8oQ8ELS62saPtmvP5mcAoawocFH7mv1hnSQstyOn8H8Rqx ucIXOS7awIqLMzbcuyLhKu615fVprg7CdHCf8OvjuJeCAQgY+0ZTaA/8VJBheHwj 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1516628949140553337529678494306673086 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'static.cx.metamask.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21442896685082021827329863726552738080336297063580689791269133508442296448044113709726221058584937458145357722640186850845696015800271457669364493846530935586232220323198772365060965362727293953726410585496757820843596078014871847692529159644198063734087437427035084966330220556966290817188428895407316585259563870405448320780882530493641535281382022906020876320987991261505454285539326756865872274525642371822098945252486473783215476728407898435211435671147009216454983607901517855256802465685877737382429048604282827101053410190640465087762932621147300058229989201185864343133631933379660043968593137283827874145251 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8fc04777e61685f837509aa45b09fc98ee66bab2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.cx.metamask.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.static.cx.metamask.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001883547e1250000040300473045022017c27f4f20df7e712cfdfdb217c9b37d0ac08ccd2c15bcd19389da118935bf4c022100f412c1b3f826be9b097698155d20ad0f107a255dc856d8e5c89769ba3fbaf11200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001883547e15d000004030048304602210090d5dd598aa91a6f4eca88a893991604bbd3fe3389db92374a51e00bd8428cf30221009d1e747cbfbfa6d0700d67a11eb9f2911f5abcd7857c037bde90cede7d083675007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001883547e12b000004030048304602210089ea88a625719288f10c9dd4e20c539a8851279821b7d048460fbce5cecf460902210087fda92d01c2eac931aee92ad020ac208cfe391dcb04bbffdb4e902f14ee0996 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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