iam.ausgrid.com.au

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:76:c1:41:59:2e:2e:54:05:6e:91:40:a9:5b:8b:c6 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=iam.ausgrid.com.au

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:76:c1:41:59:2e:2e:54:05:6e:91:40:a9:5b:8b:c6
Serial Number (int): 17896574656995079448067963928704682950
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c8:cb:99:77:b3:5e:04:c2:4a:30:dd:f5:8e:83:2f:df:55:e9:87:b7
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 04:1f:ec:96:e3:1e:b5:09:92:f0:f1:f1:2e:32:de:07:0c:fc:13:b9
Fingerprint (sha256): 0d:e1:6b:03:17:fc:f5:34:c9:d4:60:be:66:cf:cd:64:ed:46:54:e4:67:d9:fd:de:cf:20:0b:0f:dc:b7:34:30

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate iam.ausgrid.com.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iam.ausgrid.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iam.ausgrid.com.au

Other certificates including the domain name ausgrid.com.au

(limited to 100 certificates)
fap-dev.energy.com.au
AUSITE01.ausgrid.com.au
AUSITE01.ausgrid.com.au
sapp14pasu001.energy.com.au
elearning.ausgrid.com.au
iam.ausgrid.com.au
app.klaytn.domains
tls-wasx.swiftdigitalcloud.com.au
tls-wasx.swiftdigitalcloud.com.au
aashaar.in
ava.staging.awellhealth.com
*.ausgrid.com.au
*.ausgrid.com.au
iam-dev.ausgrid.com.au
remote.ausgrid.com.au
*.ausgrid.com.au
*.ausgrid.com.au
ava.staging.awellhealth.com
tls-wasx.swiftdigitalcloud.com.au
sapp19pasp001.energy.com.au
tls-wasx.swiftdigitalcloud.com.au
tls-wasx.swiftdigitalcloud.com.au
tls4.swiftdigitalcloud.com.au
tls-wasx.swiftdigitalcloud.com.au
*.ausgrid.com.au
*.ausgrid.com.au
ausgrid.com.au
*.ausgrid.com.au
*.ausgrid.com.au
*.ausgrid.com.au
tls4.swiftdigitalcloud.com.au
iam-test.ausgrid.com.au
tls-wasx.swiftdigitalcloud.com.au
*.ausgrid.com.au
*.ausgrid.com.au
*.ausgrid.com.au
*.ausgrid.com.au
iam-test.ausgrid.com.au
*.ausgrid.com.au
dtapr.ausgrid.com.au
*.ausgrid.com.au
sapp14pasu001.energy.com.au
tls-wasx.swiftdigitalcloud.com.au
*.ausgrid.com.au
*.ausgrid.com.au
*.ausgrid.com.au
tls-wasx.swiftdigitalcloud.com.au
tls-wasx.swiftdigitalcloud.com.au
*.ausgrid.com.au
*.ausgrid.com.au
*.ausgrid.com.au
*.ausgrid.com.au
*.ausgrid.com.au
iam-test.ausgrid.com.au
tls-wasx.swiftdigitalcloud.com.au
fap-dev.energy.com.au
www.ausgrid.com.au
autodiscover.notes.ausgrid.com.au
www.ausgrid.com.au
*.ausgrid.com.au
*.ausgrid.com.au
idoportal.ausgrid.com.au
iam.ausgrid.com.au
tls-wasx.swiftdigitalcloud.com.au
*.ausgrid.com.au
nagatakidani.com
*.ausgrid.com.au
tls-wasx.swiftdigitalcloud.com.au
*.ausgrid.com.au
remote.ausgrid.com.au
idam.ausgrid.com.au
www.commissionaire.io
*.ausgrid.com.au
www.honsw.eu
elearning.ausgrid.com.au
services.ausgrid.com.au
idam-dev.ausgrid.com.au
iam-test.ausgrid.com.au
tls-wasx.swiftdigitalcloud.com.au
tls4.swiftdigitalcloud.com.au
www.theviralwebsite.com
*.ausgrid.com.au
iam.ausgrid.com.au
*.dev.ausgrid.com.au
tls4.swiftdigitalcloud.com.au
mybattery.ausgrid.com.au
tls-wasx.swiftdigitalcloud.com.au
iam-dev.ausgrid.com.au
*.ausgrid.com.au
ausgrid.com.au
*.ausgrid.com.au
sapp14pasu001.energy.com.au
tls-wasx.swiftdigitalcloud.com.au
AUSITE01.ausgrid.com.au
*.ausgrid.com.au
admin.grounding.pe
ausgrid.com.au
remote.ausgrid.com.au
tls-wasx.swiftdigitalcloud.com.au
*.ausgrid.com.au

Certificate

The complete raw certificate details for iam.ausgrid.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIQDXbBQVkuLlQFbpFAqVuLxjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODExMTQwMDAwMDBaFw0xOTEyMTQx
MjAwMDBaMB0xGzAZBgNVBAMTEmlhbS5hdXNncmlkLmNvbS5hdTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBALQibnjt7qT3sC8txQcprkcWf5iPVcYhTGlV
iqKF48kJcMCf2VhvXCcOwo+ePSa8hbePXTVpCOMiBI8TVUWwX5LVl2ufjExv0kqp
KUKWfJHdOkM69PrkbdY/LBDsQBEs4yHnstOsDD8mfv2gR1hNxRfJ0kuGVYYE9hFw
IrNM4Gf9OQeuZD0G6HpQl30QwsweD5te7qT86PGT2Aa/jrtCTwGUK0u1q+upETRV
cV1av9QUJU5XGZjD2fMmP6Bz9y9Q7JvSLWXJ25FCf6q9hl2XcVPDu2wNESOuuWp8
2XANjlBbKA1eBgP3ufPMMUx/+DREfFCTFLMfVUqrNuZG3pJiw00CAwEAAaOCAoAw
ggJ8MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBTI
y5l3s14Ewkow3fWOgy/fVemHtzAdBgNVHREEFjAUghJpYW0uYXVzZ3JpZC5jb20u
YXUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0
LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIB
MHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIu
YW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFt
YXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQYGCisGAQQB
1nkCBAIEgfcEgfQA8gB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQ
AAABZxCY8kcAAAQDAEgwRgIhAKE2lPomJLmfDZeK6eutIpCShqhe9EHhQ72yy6k8
0tOQAiEA3TZUkjTJiw1FBBFZ6Pg7U++PohdE2suhJVrk+4Z4O0wAdwCHdb/nWXz4
jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWcQmPMiAAAEAwBIMEYCIQDBJvGS
WkXDNGpPOh6paAZIJn7xjc6sIRBM4mwKqvyqGAIhAOGc9mw8SJw+hxoKEqIbkPw0
dobgv/U1cVsxdWE/nIIKMA0GCSqGSIb3DQEBCwUAA4IBAQA4DN/+mSG21bWr2fhf
4mAoMUYGlfGanYBFLRpWMR/uMYnsCCRb4/6AzBKF6IaidaC6VwWQEatuB9kV/trT
VBQiVZhCXURF6rP3z112Fj0/6h9jZz393N1juAgkvf8rHuYbtZJiRbr318ONdAT5
MLqYjH+rLWcceJ5GnA3Fhds8L/sRPkH1j5SxJ+CyU3i79pOnYpsX28vNPC2A+TI+
UWbnLito5WVIRQjudWmPiAUOGaZqgLC/fRkPEXEDhdMry81THnsxf1X888KevKC7
Q1hQ0r27sIAK3HTCQstxcsy5k18BU2MIf0F7JYGRTGKQ0DYiC0WhZENh6x3+lGKm
7MLg
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCJueO3upPewLy3FBymu
RxZ/mI9VxiFMaVWKooXjyQlwwJ/ZWG9cJw7Cj549JryFt49dNWkI4yIEjxNVRbBf
ktWXa5+MTG/SSqkpQpZ8kd06Qzr0+uRt1j8sEOxAESzjIeey06wMPyZ+/aBHWE3F
F8nSS4ZVhgT2EXAis0zgZ/05B65kPQboelCXfRDCzB4Pm17upPzo8ZPYBr+Ou0JP
AZQrS7Wr66kRNFVxXVq/1BQlTlcZmMPZ8yY/oHP3L1Dsm9ItZcnbkUJ/qr2GXZdx
U8O7bA0RI665anzZcA2OUFsoDV4GA/e588wxTH/4NER8UJMUsx9VSqs25kbekmLD
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17896574656995079448067963928704682950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iam.ausgrid.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22739873715492292975794243901597382986383675341874828731098022279820894973673910696586928445444322242199508605091403034209571491207996112571960281986063856829323618827047664455642282085719241361646872730340579527335026143584466025166662248444816356944028474191572525444359968551002480050096318906845466477473799035346128535298672881713614963035454742914207489926400510976651424370895081617623667840245756585466475257732778790498490476038585861886359761715278806838186883807630018665278765002683167960373927150214973995884492489817420881796931871252718099438410505225217824059781922179037242317848226414337790388126541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8cb9977b35e04c24a30ddf58e832fdf55e987b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iam.ausgrid.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001671098f2470000040300483046022100a13694fa2624b99f0d978ae9ebad22909286a85ef441e143bdb2cba93cd2d390022100dd36549234c98b0d45041159e8f83b53ef8fa21744dacba1255ae4fb86783b4c0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001671098f3220000040300483046022100c126f1925a45c3346a4f3a1ea9680648267ef18dceac21104ce26c0aaafcaa18022100e19cf66c3c489c3e871a0a12a21b90fc347686e0bff535715b3175613f9c820a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00380cdffe9921b6d5b5abd9f85fe2602831460695f19a9d80452d1a56311fee3189ec08245be3fe80cc1285e886a275a0ba57059011ab6e07d915fedad35414225598425d4445eab3f7cf5d76163d3fea1f63673dfddcdd63b80824bdff2b1ee61bb5926245baf7d7c38d7404f930ba988c7fab2d671c789e469c0dc585db3c2ffb113e41f58f94b127e0b25378bbf693a7629b17dbcbcd3c2d80f9323e5166e72e2b68e565484508ee75698f88050e19a66a80b0bf7d190f11710385d32bcbcd531e7b317f55fcf3c29ebca0bb435850d2bdbbb0800adc74c242cb7172ccb9935f015363087f417b2581914c6290d036220b45a1644361eb1dfe9462a6ecc2e0