qa-profiles.timeinc.net

- Time Inc. -

Issued by AOL Member CA

About this certificate

This digital certificate with serial number 70:00:11:1d was issued on by America Online Inc..

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Time Inc.

Organization: Time Inc.
Organization unit: Time Inc. Interactive
State / Province: New York
Locality: New York
Country: US

America Online Inc.

Organization: America Online Inc.
State / Province: Virginia
Locality: Dulles
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 70:00:11:1d
Serial Number (int): 1879052573
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 87:3b:c9:c4:a5:05:e4:09:0d:b1:69:46:8f:3f:37:b8:cd:94:ee:c0
AuthorityKeyId: 61:a6:99:6d:24:9f:0e:11:88:e6:39:e0:fe:74:d1:05:69:52:a9:43

Fingerprint (sha1): 23:fd:84:5a:2a:9a:98:19:51:62:24:7e:a2:cd:ea:5b:54:87:6f:4c
Fingerprint (sha256): 0d:77:fb:d2:4b:91:63:07:b9:f9:fe:37:ea:92:f1:df:77:90:d3:fa:8d:6e:da:a0:c1:89:1e:23:c7:8d:33:72


Revocation information

OCSP Server: http://ocsp.web.aol.com/ocsp
CRL Distribution Point: http://crl.aol.com/AOLMSPKI/aolServerCert.crl

Check the revocation status for certificate qa-profiles.timeinc.net

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa-profiles.timeinc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa-profiles.timeinc.net
qa-profiles.allyou.com
qa-profiles.coastalliving.com
qa-profiles.cookinglight.com
qa-profiles.golf.com
qa-profiles.instyle.com
qa-profiles.myhomeideas.com
qa-profiles.myrecipes.com
qa-profiles.people.com
qa-profiles.realsimple.com
qa-profiles.southernaccents.com
qa-profiles.southernliving.com
qa-profiles.sunset.com
qa-profiles.time.com

Other certificates including the domain name timeinc.net

(limited to 100 certificates)
coredev-i4.timeinc.net
*.allyou.com
app.dreader.timeinc.net
office.timeinc.com
tools.timeinc.net
editor.timeinc.com
www.oxmoorhouse.com
www.timeinclistrental.com
cgi.pathfinder.com
office.timeinc.com
tia.timeinc.net
dev-dcms.www.timeinc.net
prod-dcms.www.timeinc.net
www5.timeinc.net
dev-wpcom.timeinc.net
app.dreader.timeinc.net
www.meredith.com
qa-tips-1.timeinc.net
content-api.timeinc.net
dev-wpcom.timeinc.net
cgi.timeinc.net
tmpldev-tips-1.timeinc.net
myrecipes-mobile.timeinc.net
tools.timeinc.net
www.reference.dcms-sa.timeinc.net
qa-profiles-uat.timeinc.net
qa-profiles.timeinc.net
www.reference.dcms-sa.timeinc.net
tmpcaa.enterprise.corpad.timeinc.com
csp-endpoint.timeinc.net
profiles.timeinc.net
dev-profiles.timeinc.net
timeinc.net
csp-endpoint.timeinc.net
www.timeinclistrental.com
staging.timeinc.net
rails.timeinc.net
prod-dcms.www.timeinc.net
www.reference.dcms-sa.timeinc.net
timeinc.net
office.timeinc.com
www.oxmoorhouse.com
prod-dcms.www.timeinc.net
dev-subs.timeinc.net
npd.timeinc.net
www.timeinclistrental.com
prod-dcms.www.timeinc.net
www.meredith.com
dev-dcms.www.timeinc.net
tia.timeinc.net
editor.timeinc.com
qa-profiles.timeinc.net
applenews.meredithcorp.io
www.timeinclistrental.com
www.oxmoorhouse.com
*.shinken.eces.timeinc.net
editor.timeinc.com
qa-ucs.timeinc.net
railsdeployprod.timeinc.net
omns.timeinc.net
content-api.timeinc.net
dev-ucs.timeinc.net
www.oxmoorhouse.com
*.allyou.com
adops-static.timeinc.net
i4.timeinc.net
www.reference.dcms-sa.timeinc.net
www.oxmoorhouse.com
applenews.meredithcorp.io
cp.timeinc.net
dev-app.dreader.timeinc.net
rails.timeinc.net
*.dcms-test.timeinc.net
rails.timeinc.net
editor.timeinc.com
amp.timeinc.net
*.timeinc.net
railsadmin.timeinc.net
*.timeinc.net
fb.ipsoft.timeinc.net
www.timeinclistrental.com
content-api.timeinc.net
office.timeinc.com
spare-tips-4.timeinc.net
dev-app.dreader.timeinc.net
ucs.timeinc.net
tia.timeinc.net
www.timeinclistrental.com
test-editor.dcms-ioe.timeinc.net
tips-1.timeinc.net
cmdb.timeinc.net
amp.timeinc.net
www.timeinc.net
cp.timeinc.net
editor.timeinc.com
www.oxmoorhouse.com
www.timeinclistrental.com
shinken.timeinc.net
railsdeploy.timeinc.net
i2.timeinc.net

Certificate

The complete raw certificate details for qa-profiles.timeinc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0cNVVvd4h2H0ZvJrEdz
s57M4Pg/qILhezjyrvhCz4yZ/GMWUq5nfjItqqprgAswBbm3ru0fbQVMBLo8RSEd
qTpMqFzdqM1M9R9nS+GN9VCkkxdVEO/Y9SqAXShK292cmHsdjEZuzoth1ONAXWzr
b6roH25Qzi2K5G4vxeyeWgT8fENULay1rKBqmUKbJO/l+G7pOwUOE+hu9oVctsQe
i7PT3Kd+aQRbAjEd+1Il5c07DnNd8l0JWIeEf1D44zFLkhu4ZXLgMbVdQNBUAma7
RemgC/4dB547eS9y4aQUiuemajLpcfn2Gw1kEeVDwn+SsnziUd5uVkBnHvF6K3FO
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1879052573
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dulles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'America Online Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AOL Member CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-08-06 16:13:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-08-06 16:13:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Time Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Time Inc. Interactive'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa-profiles.timeinc.net'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24146553336851052227458445961506546985439678793512321116274465111488348099067697587591980045246269323549134369116219182248016409654360530985029889748233968767715973016216350269000051130377753005742926395185115778181821628741899691445302057720384015798067173083884488879413944077206262637578311664576030239643621328090320786633707777183049776039027897570428938067839046426989257193179027023514530163805034155426023170478038856489740313651006983434407603157569324993398795018521444765729533733252776784177385014161041099151214335468428498168865916224561381979355349323617411861266163735691514376547246477995696154824231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (380 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-profiles.timeinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-profiles.allyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-profiles.coastalliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-profiles.cookinglight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-profiles.golf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-profiles.instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-profiles.myhomeideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-profiles.myrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-profiles.people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-profiles.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-profiles.southernaccents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-profiles.southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-profiles.sunset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-profiles.time.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 61a6996d249f0e1188e639e0fe74d1056952a943
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.aol.com/AOLMSPKI/aolServerCert.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.web.aol.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.1066.1.1000.1.0.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://pki-info.aol.com/AOLMSPKI/index.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							873bc9c4a505e4090db169468f3f37b8cd94eec0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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