dev-profiles.timeinc.net

- Time Inc. -

Issued by AOL Member CA

About this certificate

This digital certificate with serial number 70:00:11:1c was issued on by America Online Inc..

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Time Inc.

Organization: Time Inc.
Organization unit: Time Inc. Interactive
State / Province: New York
Locality: New York
Country: US

America Online Inc.

Organization: America Online Inc.
State / Province: Virginia
Locality: Dulles
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 70:00:11:1c
Serial Number (int): 1879052572
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: ae:31:95:63:55:f1:70:89:83:dd:64:b4:ba:77:55:bf:59:7e:f0:50
AuthorityKeyId: 61:a6:99:6d:24:9f:0e:11:88:e6:39:e0:fe:74:d1:05:69:52:a9:43

Fingerprint (sha1): 12:f9:f1:6a:93:a7:1f:6c:7f:c9:82:98:27:e4:70:11:f6:ed:81:e9
Fingerprint (sha256): 0f:3e:8d:d1:d0:57:37:60:d7:1b:69:61:b5:ae:d9:2c:ff:ed:80:29:d6:64:7e:3e:a9:e5:ce:71:34:a7:54:35


Revocation information

OCSP Server: http://ocsp.web.aol.com/ocsp
CRL Distribution Point: http://crl.aol.com/AOLMSPKI/aolServerCert.crl

Check the revocation status for certificate dev-profiles.timeinc.net

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-profiles.timeinc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-profiles.timeinc.net
dev-profiles.allyou.com
dev-profiles.coastalliving.com
dev-profiles.cookinglight.com
dev-profiles.golf.com
dev-profiles.instyle.com
dev-profiles.myhomeideas.com
dev-profiles.myrecipes.com
dev-profiles.people.com
dev-profiles.realsimple.com
dev-profiles.southernaccents.com
dev-profiles.southernliving.com
dev-profiles.sunset.com
dev-profiles.time.com

Other certificates including the domain name timeinc.net

(limited to 100 certificates)
coredev-i4.timeinc.net
*.allyou.com
app.dreader.timeinc.net
office.timeinc.com
tools.timeinc.net
editor.timeinc.com
www.oxmoorhouse.com
www.timeinclistrental.com
cgi.pathfinder.com
office.timeinc.com
tia.timeinc.net
dev-dcms.www.timeinc.net
prod-dcms.www.timeinc.net
www5.timeinc.net
dev-wpcom.timeinc.net
app.dreader.timeinc.net
www.meredith.com
qa-tips-1.timeinc.net
content-api.timeinc.net
dev-wpcom.timeinc.net
cgi.timeinc.net
tmpldev-tips-1.timeinc.net
myrecipes-mobile.timeinc.net
tools.timeinc.net
www.reference.dcms-sa.timeinc.net
qa-profiles-uat.timeinc.net
qa-profiles.timeinc.net
www.reference.dcms-sa.timeinc.net
tmpcaa.enterprise.corpad.timeinc.com
csp-endpoint.timeinc.net
profiles.timeinc.net
dev-profiles.timeinc.net
timeinc.net
csp-endpoint.timeinc.net
www.timeinclistrental.com
staging.timeinc.net
rails.timeinc.net
prod-dcms.www.timeinc.net
www.reference.dcms-sa.timeinc.net
timeinc.net
office.timeinc.com
www.oxmoorhouse.com
prod-dcms.www.timeinc.net
dev-subs.timeinc.net
npd.timeinc.net
www.timeinclistrental.com
prod-dcms.www.timeinc.net
www.meredith.com
dev-dcms.www.timeinc.net
tia.timeinc.net
editor.timeinc.com
qa-profiles.timeinc.net
applenews.meredithcorp.io
www.timeinclistrental.com
www.oxmoorhouse.com
*.shinken.eces.timeinc.net
editor.timeinc.com
qa-ucs.timeinc.net
railsdeployprod.timeinc.net
omns.timeinc.net
content-api.timeinc.net
dev-ucs.timeinc.net
www.oxmoorhouse.com
*.allyou.com
adops-static.timeinc.net
i4.timeinc.net
www.reference.dcms-sa.timeinc.net
www.oxmoorhouse.com
applenews.meredithcorp.io
cp.timeinc.net
dev-app.dreader.timeinc.net
rails.timeinc.net
*.dcms-test.timeinc.net
rails.timeinc.net
editor.timeinc.com
amp.timeinc.net
*.timeinc.net
railsadmin.timeinc.net
*.timeinc.net
fb.ipsoft.timeinc.net
www.timeinclistrental.com
content-api.timeinc.net
office.timeinc.com
spare-tips-4.timeinc.net
dev-app.dreader.timeinc.net
ucs.timeinc.net
tia.timeinc.net
www.timeinclistrental.com
test-editor.dcms-ioe.timeinc.net
tips-1.timeinc.net
cmdb.timeinc.net
amp.timeinc.net
www.timeinc.net
cp.timeinc.net
editor.timeinc.com
www.oxmoorhouse.com
www.timeinclistrental.com
shinken.timeinc.net
railsdeploy.timeinc.net
i2.timeinc.net

Certificate

The complete raw certificate details for dev-profiles.timeinc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pjK1lv/xsyAamIuwnJt
zOGqcte34CaiVLihk6WWfn73q8HWXjTSBSpUHEakqIDSxTwlPo0EhaOykHJLu4CG
aMVqWWHv0bkHEoQCZ3+VDNKPDEimw3qrkzfTtiLq3QFw+k3sga8zbj1Sr+/DxLRZ
rub1pc8/07gCKNDnW0VLz8CksvE8wG9agu1M4FORBjb3PI0Tql/fEjYCWhvRpuGf
DGD1bjoLTiaOlUoPgmqL3AgQeEcQ1XghtxgXLUDnSpw3XEovsXlH7qh7ZKiPhthY
eh2Yf0+xkZQBIMJUrWBB3uNc3GBcsRXsCoojLI1yOYshT2eBTvWTqJKviSTr/37R
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1879052572
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dulles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'America Online Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AOL Member CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-08-06 16:13:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-08-06 16:13:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Time Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Time Inc. Interactive'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-profiles.timeinc.net'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26585388750590026292560689548082080786474423692562007567072245056134153575169277546606526131211595247789421439621054736451493928031110924190295545846072559988916140538506332535149993454391855681853746984171428702184279084261762507699681512457615943091569624688855101142517787943256599487208315971827044292103558488228021001385766408908875997818125233980897133768373961433558669602794732636554900866532776649421575515486654074660076758590717419466402669928033862378712037543144528051300582187382813717769177731170327383363906457741588966255992989799491634789315636092697425387993197425629582147581364198112769326633291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (394 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profiles.timeinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profiles.allyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profiles.coastalliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profiles.cookinglight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profiles.golf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profiles.instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profiles.myhomeideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profiles.myrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profiles.people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profiles.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profiles.southernaccents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profiles.southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profiles.sunset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profiles.time.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 61a6996d249f0e1188e639e0fe74d1056952a943
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.aol.com/AOLMSPKI/aolServerCert.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.web.aol.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.1066.1.1000.1.0.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://pki-info.aol.com/AOLMSPKI/index.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae31956355f1708983dd64b4ba7755bf597ef050
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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