*.staging.atlassian.io

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:55:b2:47:85:6c:7d:4a:38:e7:fc:18:73:f7:b2:66 was issued on by Amazon.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.staging.atlassian.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:55:b2:47:85:6c:7d:4a:38:e7:fc:18:73:f7:b2:66
Serial Number (int): 15066469122011185420197619022538715750
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 25:d2:b9:85:17:53:5a:b9:78:da:53:78:99:c8:68:a2:bf:cd:3f:22
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 21:0c:d1:ca:91:f8:5c:ae:16:68:56:8b:95:73:7d:6d:7b:5f:f8:82
Fingerprint (sha256): 0e:9e:7b:53:60:79:df:e4:5e:e2:a9:48:07:06:69:9e:99:9a:fd:05:67:5c:33:21:6f:f1:84:2d:aa:22:02:3a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.staging.atlassian.io

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.staging.atlassian.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.staging.atlassian.io
*.staging.atl-paas.net
*.staging.public.atl-paas.net
*.us-east-1.staging.atl-paas.net
*.us-east-1.staging.public.atl-paas.net
*.us-west-1.staging.atl-paas.net
*.us-west-1.staging.public.atl-paas.net
*.us-west-2.staging.atl-paas.net
*.us-west-2.staging.public.atl-paas.net
*.eu-west-1.staging.atl-paas.net
*.eu-west-1.staging.public.atl-paas.net
*.stg.atlassian.com
*.stg.internal.atlassian.com
*.stg.intsys.atlassian.com
*.internal.staging.atlassian.io
*.uswest.staging.atlassian.io
*.internal.uswest.staging.atlassian.io
*.uswest2.staging.atlassian.io
*.internal.uswest2.staging.atlassian.io
*.useast.staging.atlassian.io
*.internal.useast.staging.atlassian.io
*.euwest.staging.atlassian.io
*.internal.euwest.staging.atlassian.io

Other certificates including the domain name atlassian.io

(limited to 100 certificates)
*.staging.atlassian.io
*.atlassian.io
*.staging.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.staging.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.dev.atl-paas.net
*.staging.atl-paas.net
*.dev.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.csp.paas-inf.net
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.staging.atlassian.io
*.atl-paas.net
*.atlassian.io
*.staging.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.staging.atlassian.io
*.dev.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
*.staging.atlassian.io
*.atlassian.io
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.dev.atlassian.io
*.atl-paas.net
foos.platform.dev.atlassian.io
*.atl-paas.net
*.dev.atl-paas.net
*.dev.atlassian.io
*.staging.atlassian.io
*.staging.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atlassian.io
*.csp.paas-inf.net
*.atl-paas.net
*.atl-paas.net
*.staging.atlassian.io
*.atlassian.io
*.atl-paas.net
*.dev.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net

Certificate

The complete raw certificate details for *.staging.atlassian.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK/rfmxsuo5WmNL8K+uR
4k+m7EuAv1HlcMN8GhJRTet3V3UQzA/wKdXrEFr4HBjLtj8itc5bXgDNde7kmqpu
ytl36iRgc9e4ZBfHgBpE/LfeA0m2DSFxXMqBsN8gCcRDtBGEAGJfDGe60KHVyWGa
ar7XMa8MmhFk6PPh1QPF+OrOVtx263gOSY3DDwfPpxn4996TydX0rndpgtOWHuvU
Lfs9h3p09QqanllKgTEm8RTu/ItAmBeCiu0v+1XzJQpaC61Nm5Ulj7dAMYvYUsKS
4phQfcQ2j43cbUKOxk1xhscuJEe/L58E3CcriNYERTsH8U43kVPqVk0+6pSmTTJw
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15066469122011185420197619022538715750
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.staging.atlassian.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22809644228697598653051482688231746457189880986298217872352882222161901929291984110852620570972387524322739662997632462451530179155166965948114793774158726649190021689869871475575117940818761824199283077254560177998542346758372405083686498790574434557024279838233055904445997449384841640851842139294802959672190087401662371218287808337320197466135535787542351090594297202881430323881536629619461001803582425268315994086350773777396418840853973885579842129528623214938640334392434618280744794350234358692306350524127329892028737479892212236297330593361220488664354890693665016050209079148204992737268444866808648986637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25d2b98517535ab978da537899c868a2bfcd3f22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (781 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-1.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-1.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-1.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-1.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.internal.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.intsys.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uswest.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.uswest.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uswest2.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.uswest2.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.useast.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.useast.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euwest.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.euwest.staging.atlassian.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016e7c82acc80000040300473045022100dd883bc61296c40430e011b23646b4eeaaef4bd4f96e291beedc8881b2828a7c02201f5673b518831165877a357b3ab3f6ad3e09bcb4f3fbcaf1da7d682bf17054600077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016e7c82ad1f0000040300483046022100efaecfca1bd5a5eff91aadaf422d5cf4625a79b3d0df4de3a3470a4bb6ccbf19022100d7eeca80056391ff894909a7f7520b7fc840caf42152ce1fdc37e9f3509100da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ab9820bccdf05f30ec8e78e75574455541e4ae80687121f79acbe201f98e97857751e04454b5fb7addbfee4851106871cf27ac8bf0d9bbe0a3f0873b63604e21608768c60579607a0164608f94de2090ef5a5a0d9df2dd648abe80eefba78fa1eeb0fc8918713b955538177f47c80106f486d0bd655bc698a3d575a2495b8e69c054c85cbca349c7fb9c3904491836ab37b0e259881d30c8725e0ce98797382c085bab7c37edf25dc8b5dd411abff59c34d8f824a7d93bc605b4798395977f47415842065a5af2087f2b6182ca1ed4fb02b1a78b82c93fdbfb3b62c2e8acfeddf46273d8d451796309e539682c6d10cde8b541689a996a7cd899536ca7f14271