canisiusconnect.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 01:ef:f7:c5:7d:68:3a:01:cf:aa:68:cd:19:dc:64:ab was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=canisiusconnect.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:ef:f7:c5:7d:68:3a:01:cf:aa:68:cd:19:dc:64:abSerial Number (int): 2575212346906485392366510062092182699
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: f3:fd:ff:3f:03:b2:ad:d7:4c:7d:20:bd:b7:f9:c4:bb:bf:19:da:93
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 45:cd:08:de:36:1a:80:00:8a:b6:03:bc:50:8a:6c:50:da:cb:d0:8d
Fingerprint (sha256): 12:3c:5e:8c:82:f4:4e:18:41:79:27:8d:03:c6:a8:28:23:3c:6f:33:75:44:34:c0:8f:4d:62:66:4c:e7:d0:a4
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate canisiusconnect.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for canisiusconnect.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
canisiusconnect.com
www.canisiusconnect.com
www.canisiusconnect.com
Other certificates including the domain name canisiusconnect.com
(limited to 100 certificates)
connect.woodstockacademy.org
canisiusconnect.com
canterburycommunity.org
canisiusconnect.com
canisiusconnect.com
cecconnect.com
connectlatinschool.org
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
cecconnect.com
canisiusconnect.com
canisiusconnect.com
canterburycommunity.org
cooperalumnione.com
canisiusconnect.com
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
cecconnect.com
careerservices.manual.graduway.com
cadetcommunity.com
canisiusconnect.com
canisiusconnect.com
connectgettysburg.com
canisiusconnect.com
canisiusconnect.com
cecconnect.com
cecconnect.com
canisiusconnect.com
m.canisiusconnect.com
collegecrusadenetwork.com
canterburycommunity.org
cooperalumnione.com
cecconnect.com
cualumni.network
cardinalsconnect.com
canisiusconnect.com
cooperalumnione.com
canisiusconnect.com
cadetcommunity.com
m.canisiusconnect.com
canisiusconnect.com
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
cooperalumnione.com
coloradoacademyconnect.org
connect.pepperdine.edu
cecconnect.com
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
cecconnect.com
canisiusconnect.com
cooperalumnione.com
canisiusconnect.com
cardinalsconnect.com
collegecrusadenetwork.com
canisiusconnect.com
cooperalumnione.com
cooperalumnione.com
m.canisiusconnect.com
cardinalsconnect.com
canterburycommunity.org
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canisiusconnect.com
canisiusconnect.com
canterburycommunity.org
collegecrusadenetwork.com
cooperalumnione.com
collegecrusadenetwork.com
cardinalsconnect.com
cooperalumnione.com
connect.woodstockacademy.org
cecconnect.com
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
canisiusconnect.com
collegecrusadenetwork.com
collegecrusadenetwork.com
canisiusconnect.com
canterburycommunity.org
canisiusconnect.com
canisiusconnect.com
cecconnect.com
connectlatinschool.org
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
cecconnect.com
canisiusconnect.com
canisiusconnect.com
canterburycommunity.org
cooperalumnione.com
canisiusconnect.com
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
cecconnect.com
careerservices.manual.graduway.com
cadetcommunity.com
canisiusconnect.com
canisiusconnect.com
connectgettysburg.com
canisiusconnect.com
canisiusconnect.com
cecconnect.com
cecconnect.com
canisiusconnect.com
m.canisiusconnect.com
collegecrusadenetwork.com
canterburycommunity.org
cooperalumnione.com
cecconnect.com
cualumni.network
cardinalsconnect.com
canisiusconnect.com
cooperalumnione.com
canisiusconnect.com
cadetcommunity.com
m.canisiusconnect.com
canisiusconnect.com
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
cooperalumnione.com
coloradoacademyconnect.org
connect.pepperdine.edu
cecconnect.com
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
cecconnect.com
canisiusconnect.com
cooperalumnione.com
canisiusconnect.com
cardinalsconnect.com
collegecrusadenetwork.com
canisiusconnect.com
cooperalumnione.com
cooperalumnione.com
m.canisiusconnect.com
cardinalsconnect.com
canterburycommunity.org
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canisiusconnect.com
canisiusconnect.com
canterburycommunity.org
collegecrusadenetwork.com
cooperalumnione.com
collegecrusadenetwork.com
cardinalsconnect.com
cooperalumnione.com
connect.woodstockacademy.org
cecconnect.com
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
canisiusconnect.com
collegecrusadenetwork.com
collegecrusadenetwork.com
Certificate
The complete raw certificate details for canisiusconnect.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIQAe/3xX1oOgHPqmjNGdxkqzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDUyMjAwMDAwMFoXDTI0MDYxOTIzNTk1OVowHjEc MBoGA1UEAxMTY2FuaXNpdXNjb25uZWN0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMZaxFAA4NoDeCbF05MP7jdK4oaW7J9HCbA75uwsv/oTMHpZ NxqGnD4dUN978uKUtHGhjG/uyxE188aeqXG9AHOdZo4PezVJ+7PwTXi1bgJ8K7UD 0TCVGqASbXAXrCkDhrQyX/SZeynz3n4+X+IEZnJYOQ6uquVU8LEKTjrtjKl/nWvb K4gw/UeBMFYgHgwWamzpX0kwn/N+DfJmPylvQRNUKeHis4cU4h3KFLSr5L4pIHOI eitA8rOCnMui0ROf7qPla19LuJqOsHdn7JqajZw2PVkHldV+2haiAR3PFfzNGcTZ N6hd31fTnNkxWu4UuV7c88vKRe4HMXnI4z85VWcCAwEAAaOCAwQwggMAMB8GA1Ud IwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBTz/f8/A7Kt10x9 IL23+cS7vxnakzA3BgNVHREEMDAughNjYW5pc2l1c2Nvbm5lY3QuY29tghd3d3cu Y2FuaXNpdXNjb25uZWN0LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu cjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNybDATBgNVHSAEDDAKMAgGBmeB DAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIy bTAxLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0w MS5hbWF6b250cnVzdC5jb20vcjJtMDEuY2VyMAwGA1UdEwEB/wQCMAAwggF9Bgor BgEEAdZ5AgQCBIIBbQSCAWkBZwB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI WUZxH7WbAAABiEHDAEsAAAQDAEYwRAIgPQ9P6RjHG1UW0LwY1Ou4CArOxnzvJcAK 1PrieO9+wZgCIDhvh5eF2oZw7s4N30gfBeOPXIC8h+hww4bmAhjyndYlAHYASLDj a9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGIQcMANgAABAMARzBFAiEA yqWalhfSiQ0pbLmicbA/sZffeEOMEO1EAtqiz91jBqMCIC14VdJE/ZguB4zjmlhS CU2jOv6FHEO/C08tBEAEQ6MJAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9 MEjX+6sAAAGIQcL/+QAABAMARzBFAiEAqI8caRoSbcUMxfC4fHY4CYs4XrTEDBDi 1HL2HqM+NCACIHBBK3t08KMX6Zl2xH3OatgQvQAlghEeOItbGv5xx6epMA0GCSqG SIb3DQEBCwUAA4IBAQCuFcwEtXsgnVOW47F2KoeivlCdKFV0ow8H3Lz+TZHuDQEM xuiFTp0zOjLKq6MVdgz61hl+32q3E2elWhwL9Wl+TmC7r8ZfXTFXiKNNnB3Izxv2 Ns6sWRUROG8ha+K9vLah+cq46U/ntnjL0T4VPpGSb9Z1jUNzocjpkyZM7pEoYR1V UfJjE+KBpomvO1O1syVtAiIW9bR0szAHQxp99vv1mewat5aDGKJCYtmGC+4xZ4AE 0ewqVwLviO81I5SCbt0r1JNhv6Wsouy12IS6KhsKsTGTae6HpL6/bM2+GSKJiCx0 Hoj9MkamVni2ljSuo2Rt3cWYiRz/OHqxyJ4zQru5 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlrEUADg2gN4JsXTkw/u N0rihpbsn0cJsDvm7Cy/+hMwelk3GoacPh1Q33vy4pS0caGMb+7LETXzxp6pcb0A c51mjg97NUn7s/BNeLVuAnwrtQPRMJUaoBJtcBesKQOGtDJf9Jl7KfPefj5f4gRm clg5Dq6q5VTwsQpOOu2MqX+da9sriDD9R4EwViAeDBZqbOlfSTCf834N8mY/KW9B E1Qp4eKzhxTiHcoUtKvkvikgc4h6K0Dys4Kcy6LRE5/uo+VrX0u4mo6wd2fsmpqN nDY9WQeV1X7aFqIBHc8V/M0ZxNk3qF3fV9Oc2TFa7hS5Xtzzy8pF7gcxecjjPzlV ZwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2575212346906485392366510062092182699 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canisiusconnect.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25039943183104947650051774298226323080033024142435361906906432533740916080401468818919655666920620561845793479881659625503208209410654596319747665410338824730312086361417712428577582608088776882955380093096122905489913236918950355300325378837029509454482754262659913596621536860552568493184040380198739225115671780727109971674993399122515950685553660501680275585566491170458560212695855196191320331863387036040666123361949900899445043487724551697572549149590628770934840139897698110460191818266643052029800056701645128623980420052572019202039366128039064883286333324202541146377427775057466656103610940838668192535911 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f3fdff3f03b2add74c7d20bdb7f9c4bbbf19da93 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canisiusconnect.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canisiusconnect.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018841c3004b000004030046304402203d0f4fe918c71b5516d0bc18d4ebb8080acec67cef25c00ad4fae278ef7ec1980220386f879785da8670eece0ddf481f05e38f5c80bc87e870c386e60218f29dd62500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018841c300360000040300473045022100caa59a9617d2890d296cb9a271b03fb197df78438c10ed4402daa2cfdd6306a302202d7855d244fd982e078ce39a5852094da33afe851c43bf0b4f2d04400443a309007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018841c2fff90000040300473045022100a88f1c691a126dc50cc5f0b87c7638098b385eb4c40c10e2d472f61ea33e3420022070412b7b74f0a317e99976c47dce6ad810bd002582111e388b5b1afe71c7a7a9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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