ekyc.uatkyc.move.tatacommunications.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 09:ad:26:07:49:0e:57:b1:9c:ae:db:da:7d:bb:02:10 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ekyc.uatkyc.move.tatacommunications.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:ad:26:07:49:0e:57:b1:9c:ae:db:da:7d:bb:02:10
Serial Number (int): 12862090627362589199877221136237003280
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6d:d6:dc:26:57:08:7e:81:73:35:98:fc:5c:73:36:d6:df:30:ed:d1
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 50:09:93:b8:d9:b1:a4:ad:6a:aa:15:7d:04:a0:fe:23:30:30:c0:9c
Fingerprint (sha256): 10:e3:51:57:71:2d:bf:ff:78:60:c8:36:84:5a:12:02:2d:1d:83:d7:95:11:11:e1:10:be:52:7e:cb:da:17:6a

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate ekyc.uatkyc.move.tatacommunications.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ekyc.uatkyc.move.tatacommunications.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ekyc.uatkyc.move.tatacommunications.com

Other certificates including the domain name tatacommunications.com

(limited to 100 certificates)
in-pun.vpn.tatacommunications.com
reports.move.tatacommunications.com
indiakyc.move.tatacommunications.com
uk.vpn.tatacommunications.com
eptw.tatacommunications.com
*.globalpartnerportal.com
mobility.tatacommunications.com
cardiolog.tatacommunications.com
test-network.iot.tatacommunications.com
gleexpecls.instacccloud.tatacommunications.com
videoconferencing.tatacommunications.com
in-pun.vpn.tatacommunications.com
xfer.tatacommunications.com
mt-edge-b.3scale.net
in-access.tatacommunications.com
mt-edge-b.3scale.net
ekyc.devkyc.move.tatacommunications.com
us-access.tatacommunications.com
support1.chit.biz
smartdevices.iot.tatacommunications.com
care.koinx.com
portal3.mss.tatacommunications.com
developer.tatacommunications.com
*.tatacommunications.com
jobs.tatacommunications.com
ekyc.prod.in.tmpkyc.move.tatacommunications.com
ekyc.devkyc.move.tatacommunications.com
extranet-vno.tatacommunications.com
demo.analytics.iot.tatacommunications.com
campaign.tatacommunications.com
test-data.iot.tatacommunications.com
extranet-vno.tatacommunications.com
portaltest.tatacommunications.com
helpcenter.keysuggest.io
test-platform.iot.tatacommunications.com
sfilex.tatacommunications.com
healthandsafety.tatacommunications.com
mt-edge-b.3scale.net
*.tatacommunications.com
portal.tatacommunications.com
idp.tatacommunications.com
helpdesk.mytravaly.com
kiacart.triblem.com
www.peakinfra.ethicshelpline.in
www.tatacommunications.com
mt-edge-b.3scale.net
support.xcellhost.cloud
enetcare.tatacommunications.com
primerep.tatacommunications.com
cti1.instaccglobal.tatacommunications.com
support.subcom.tech
in-pun.vpn.tatacommunications.com
customerzone.tatacommunications.com
actsync-na.tatacommunications.com
safety.tatacommunications.com
support.inxeption.com
filexch.tatacommunications.com
hranalytics.tatacommunications.com
smesupport.iifl.com
indiakyc.devkyc.move.tatacommunications.com
portalna.tatacommunications.com
primerep.tatacommunications.com
cardiolog.tatacommunications.com
ekyc.move.tatacommunications.com
test-data.iot.tatacommunications.com
support.agtpl.in
www.tatacare.tatacommunications.com
itassist.aggregateintelligence.com
*.mss.tatacommunications.com
in.mum.vpn.tatacommunications.com
ekyc.uatkyc.move.tatacommunications.com
oneplacebeta.tatacommunications.com
tatacommunications.com
filexch.tatacommunications.com
documentation.mrnobody.in
www.peakinfra.ethicshelpline.in
in-mum.vpn.tatacommunications.com
mobility.tatacommunications.com
us.vpn.tatacommunications.com
in-chn.vpn.tatacommunications.com
move.tatacommunications.com
lmt.tatacommunications.com
*.msft5-eu2.tatacommunications.com
workersafety.uat2.iot.tatacommunications.com
comms-apac.tatacommunications.com
*.tatacommunications.com
*.globalpartnerportal.com
ethernetportal.tatacommunications.com
agrud-support.wetranscloud.in
business-support.truecaller.com
*.msft5-us2.tatacommunications.com
netpms.tatacommunications.com
voiceservices.tatacommunications.com
uat-ekyc.move.tatacommunications.com
support.minits.in
support.freedomcard.io
tatacommunications.com
iot.tatacommunications.com
support.ignitecinc.com
*.ipstorage.tatacommunications.com

Certificate

The complete raw certificate details for ekyc.uatkyc.move.tatacommunications.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIQCa0mB0kOV7GcrtvafbsCEDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTExMzAwMDAwMFoXDTI0MTIxMTIzNTk1OVowMjEw
MC4GA1UEAxMnZWt5Yy51YXRreWMubW92ZS50YXRhY29tbXVuaWNhdGlvbnMuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptGZtNphBFyI7zykIQAI
MTm8XRFBDKZaFsPrqOnwVzzsQxUmYiuXyg0WfTtGXT+0eILJvVbgi5lGgHZjUxL+
u/XVxlKmV3UUFSRR3j2/XUxqUZbFgYUo7G04jvFi8ukL/yEa9EbCc+iS6FSWDBkW
Hj3EWWZrzF/PVp73U54pP7VUvfsTHhK6Mb6uzkDv+dysdiXYCiOmg01kLJAd3FgH
cL3pDI493+60Lla5u9ieCGzUqrW+ZttZWG618xdiapmL2nkC6AdvZedl1beXia0d
L8SI6mJtk/3PxsRYRAdN3rLTSV2CSz9FdmVxnejWYGwdcwujNyEU4/WUlOgcrCC4
vQIDAQABo4IC/zCCAvswHwYDVR0jBBgwFoAUVdkYX9IczAHhWLS+q9lVQgHXLgIw
HQYDVR0OBBYEFG3W3CZXCH6BczWY/FxzNtbfMO3RMDIGA1UdEQQrMCmCJ2VreWMu
dWF0a3ljLm1vdmUudGF0YWNvbW11bmljYXRpb25zLmNvbTATBgNVHSAEDDAKMAgG
BmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDMuYW1hem9u
dHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGG
IWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYq
aHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY2VyMAwGA1Ud
EwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AO7N0GTV2xrOxVy3
nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABi8YLBhwAAAQDAEYwRAIgKaSPi2ym9GvD
SattjXoANxCcIqpy/lg39B805oDUQF8CIG6vqQGQh1THpme+rJv1SCzY98BJJsph
4VA2+ufLdAUDAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGL
xgsF2AAABAMARzBFAiEA3Men8lA4Mh4iZTsNt59Icl0GCfS+JefoCcjcl8YaxuUC
IGqSi/hiLULrtctJ2MPVlsWqdvQZfcomyXDU0F9280SOAHYAPxdLT9ciR1iUHWUc
hL4NEu2QN38fhWrrwb8ohez4ZG4AAAGLxgsGFQAABAMARzBFAiEA663ITHFwwkkm
iWcPDZX+3hqSHbp6lJiKwv4I4siUZJ8CIFpUEGIB5V2+OvPzMe/MWGvjn3t3lFZm
zSmw4oaz8BGFMA0GCSqGSIb3DQEBCwUAA4IBAQAVZAL08ZVXqM74NBGb0pAY3w3k
qXHex1JoLSz47WD0wCFeeM7dxEpOFCpqLaXaHdlry8HXsIMaQJblrOltPkH8jVmd
sz3T8nRpstnAlP/M6o+CqC3OSl4DFhVbw5+IiZFyf/jiX8rV6/8fhSo5bruu6Wvg
zNHpq143eo68fimCdGWXy+ltzpIvRv8yNeqN4IBJ01A9j6IQRY4AxXoWOKq6vslu
Y+nu1s6qhtF0y5ytm4Pmlb1f7023GtWjy4WY0FQG4UTZKHcx6HvFAgmVt1XN5sSi
PiOBt7KVzYIqfzMFiIhdivZ8A3G9z6KcOWKDwNjfhR2TFeoi2pP2un9L0l64
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptGZtNphBFyI7zykIQAI
MTm8XRFBDKZaFsPrqOnwVzzsQxUmYiuXyg0WfTtGXT+0eILJvVbgi5lGgHZjUxL+
u/XVxlKmV3UUFSRR3j2/XUxqUZbFgYUo7G04jvFi8ukL/yEa9EbCc+iS6FSWDBkW
Hj3EWWZrzF/PVp73U54pP7VUvfsTHhK6Mb6uzkDv+dysdiXYCiOmg01kLJAd3FgH
cL3pDI493+60Lla5u9ieCGzUqrW+ZttZWG618xdiapmL2nkC6AdvZedl1beXia0d
L8SI6mJtk/3PxsRYRAdN3rLTSV2CSz9FdmVxnejWYGwdcwujNyEU4/WUlOgcrCC4
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12862090627362589199877221136237003280
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ekyc.uatkyc.move.tatacommunications.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21058916441619196569640128734868024566961605141815613783540658675756184587421493539841910059978891446878786270228455911095520981951366159390171044253473355352112608879747400428264284045341938932808972322710211753500396159844160306705338703780985135796239509621475750920516239062595536497792809500659130520680322035106512228844526880488597925343325416253153824182792755954910901897924459083256768505268507243589418930682743446605084575194109159011436118917858579763088520349278904497761026799172074155704937214886795917266496629442788160139479176946696248151081799956254719619365474076884546487356167002708989626595517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6dd6dc2657087e81733598fc5c7336d6df30edd1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekyc.uatkyc.move.tatacommunications.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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