upload.fire.com
Issued by Amazon
About this certificate
This digital certificate with serial number 08:a3:91:d3:58:5a:75:30:28:c1:b8:ae:ed:1c:31:e5 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=upload.fire.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:a3:91:d3:58:5a:75:30:28:c1:b8:ae:ed:1c:31:e5Serial Number (int): 11483126048099361481970357426632536549
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ec:40:de:0b:0f:c2:83:3f:b4:33:22:a3:35:93:93:f5:9f:c2:47:68
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): e7:d1:24:fa:76:11:04:af:a2:bc:2f:99:67:fd:7c:45:ef:4a:a2:0d
Fingerprint (sha256): 15:6a:0b:35:50:52:14:09:55:2b:9c:6d:f7:28:ac:b8:da:0d:2f:cb:b7:8b:da:57:5f:b1:81:df:0a:0c:da:4e
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate upload.fire.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for upload.fire.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
upload.fire.com
static-upload.fire.com
static-upload.fire.com
Other certificates including the domain name fire.com
(limited to 100 certificates)
*.test.fire.com
fire.com
fire.com
www.viveportstatus.com
fire.com
www.viveportstatus.com
*.test.fire.com
docs.fire.com
www.viveportstatus.com
business.fire.com
business.fire.com
business.fire.com
www.viveportstatus.com
fire.com
www.viveportstatus.com
dia-api.fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
dia.fire.com
docs.fire.com
www.viveportstatus.com
fire.com
upload.fire.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
*.fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
docs.fire.com
dia-api.fire.com
donate.fire.com
dia-api.fire.com
fire.com
www.viveportstatus.com
www.fire.com
www.viveportstatus.com
donate.fire.com
fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
www.viveportstatus.com
fire.com
fire.com
www.viveportstatus.com
fire.com
fire.com
fire.com
fire.com
fire.com
www.viveportstatus.com
upload.fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
www.viveportstatus.com
status.fire.com
www.viveportstatus.com
donate.fire.com
www.viveportstatus.com
donate.fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
bol-gateway.test.fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
*.fire.com
fire.com
www.viveportstatus.com
donate.fire.com
fire.com
docs.fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
*.fire.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
www.viveportstatus.com
fire.com
www.viveportstatus.com
*.test.fire.com
docs.fire.com
www.viveportstatus.com
business.fire.com
business.fire.com
business.fire.com
www.viveportstatus.com
fire.com
www.viveportstatus.com
dia-api.fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
dia.fire.com
docs.fire.com
www.viveportstatus.com
fire.com
upload.fire.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
*.fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
docs.fire.com
dia-api.fire.com
donate.fire.com
dia-api.fire.com
fire.com
www.viveportstatus.com
www.fire.com
www.viveportstatus.com
donate.fire.com
fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
www.viveportstatus.com
fire.com
fire.com
www.viveportstatus.com
fire.com
fire.com
fire.com
fire.com
fire.com
www.viveportstatus.com
upload.fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
www.viveportstatus.com
status.fire.com
www.viveportstatus.com
donate.fire.com
www.viveportstatus.com
donate.fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
bol-gateway.test.fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
*.fire.com
fire.com
www.viveportstatus.com
donate.fire.com
fire.com
docs.fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
*.fire.com
www.viveportstatus.com
www.viveportstatus.com
Certificate
The complete raw certificate details for upload.fire.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgIQCKOR01hadTAowbiu7Rwx5TANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAxMjgwMDAwMDBaFw0yMzAyMjYy MzU5NTlaMBoxGDAWBgNVBAMTD3VwbG9hZC5maXJlLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMHbKLCGyUM3DqcIi7+1oiwEOt01cMs6XLHVksZc SWlr1uQQ2efH0bbZEq/mme6pbh2opOqb9NKUH0Sb83LTdM941EGNiuYShH+xzI/s 8FdmXNEHso5BgnV0S6ayXSLUO3X8cQA7vIpTMvxaRN/i8AF8ABk7LZ0ffnVaAsxT eunknBn/+y3m2Gyw5cLrWhDNxewE4U/owpdjY4vmdu4MhhXDxsn5u3t3dT0TNyJV xuAJV5oVQB54IGX/nhL6XuujkJw8T6qqupy9Lrj3M0LGnDYFf5f/k4NjFBWrlbMv 1Rpdoqy5vfVcC/phc1B10UBM3Kp37jwaUbeDH8NotSM7SbkCAwEAAaOCAwIwggL+ MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBTsQN4L D8KDP7QzIqM1k5P1n8JHaDAyBgNVHREEKzApgg91cGxvYWQuZmlyZS5jb22CFnN0 YXRpYy11cGxvYWQuZmlyZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vY3Js LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi0xLmNybDATBgNVHSAEDDAKMAgG BmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3Nw LnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5z Y2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggF+ BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EM JMqFhjTr3IKKAAABfp4T8ZcAAAQDAEcwRQIhAJRgsOcUPmgPxrOcJzoPFu8ZlhPw UjXx6LGHKCdOdzcSAiBGEdb3CJ+Mhlj4D+12KZhVh4iIvyRdZK34yMt1G8MvmAB2 ADXPGRu/sWxXvw+tTG1Cy7u2JyAmUeo/4SrvqAPDO9ZMAAABfp4T8YMAAAQDAEcw RQIhAPSWtI5vkv9W4zk/o+Li7s8n/lf5VsVKWlLSv7Pm5RtEAiAEzI40wI9yDoZy VeaZYjBWNV1DnY21c5nfqa4/N/O+zAB2ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwL h9zwAw55NqWaAAABfp4T8bQAAAQDAEcwRQIgZCSYpQM1xbyCSnSi4az2TAibxW6k 0+HVeBR0ZljHEpsCIQDjwxpLxGXSL4aYP2oPgDhZ++MTArpTa0JEaPnGqFPjqzAN BgkqhkiG9w0BAQsFAAOCAQEAOJP8suCYlzEfUBeVLbaLHNSq2Q1kT1z9iw23NfgY HQvqG5R0IIJKHCqD1uKSeb1QzWyJwOVmmopK8vGrvXeWu5mpYxTERHVyQCGzb5Bb N/TjvZ4LWL4kepTwex3+v/UKCXujYB8ONDmrkZkrz1IR85bYsjsOTAuT0q57sInV r/Mw+UXlAH7kFHT+2zdjJUmEtv1QqL0vtFsL+C9mV0s/p1kfVaeXXZuzVDDcqf38 NrcOvFaf43JuhidD8wucrjVe/xcHaHq193B+PN8DPNZGNcMkpSEw2byTp0BMw1VQ RlcpRQ0+W38nwJwHeMT/B4j83IGeIQ7DeOuxy+eoOijvzQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdsosIbJQzcOpwiLv7Wi LAQ63TVwyzpcsdWSxlxJaWvW5BDZ58fRttkSr+aZ7qluHaik6pv00pQfRJvzctN0 z3jUQY2K5hKEf7HMj+zwV2Zc0QeyjkGCdXRLprJdItQ7dfxxADu8ilMy/FpE3+Lw AXwAGTstnR9+dVoCzFN66eScGf/7LebYbLDlwutaEM3F7AThT+jCl2Nji+Z27gyG FcPGyfm7e3d1PRM3IlXG4AlXmhVAHnggZf+eEvpe66OQnDxPqqq6nL0uuPczQsac NgV/l/+Tg2MUFauVsy/VGl2irLm99VwL+mFzUHXRQEzcqnfuPBpRt4Mfw2i1IztJ uQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11483126048099361481970357426632536549 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'upload.fire.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24472064161401606675131302372736223518330138541028594319520367234697410144141017750914085702772238790253437410328694059914489295779163129944049482299687075335491651229066479481646070217962906144081312819904146125471070449916292431755799188253776097451142104436818254355460724778721109961858723518850673060739856855773421447254728154236457693904674928595207835125919156949041278245374943547351702328595384211929546930739952685403863690742595895338687015012547174840869013487973085672893786935881808803168238354408699800201509014480351743914288540986547344004095944894443138377022685909819800876826905685501473927678393 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ec40de0b0fc2833fb43322a3359393f59fc24768 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upload.fire.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-upload.fire.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003893fcb2e09897311f5017952db68b1cd4aad90d644f5cfd8b0db735f8181d0bea1b947420824a1c2a83d6e29279bd50cd6c89c0e5669a8a4af2f1abbd7796bb99a96314c44475724021b36f905b37f4e3bd9e0b58be247a94f07b1dfebff50a097ba3601f0e3439ab91992bcf5211f396d8b23b0e4c0b93d2ae7bb089d5aff330f945e5007ee41474fedb3763254984b6fd50a8bd2fb45b0bf82f66574b3fa7591f55a7975d9bb35430dca9fdfc36b70ebc569fe3726e862743f30b9cae355eff1707687ab5f7707e3cdf033cd64635c324a52130d9bc93a7404cc35550465729450d3e5b7f27c09c0778c4ff0788fcdc819e210ec378ebb1cbe7a83a28efcd