management.perf-football-api.awsdev.feeds.skybet.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 01:5d:12:1d:53:76:a1:aa:ec:8b:af:32:a7:50:33:ee was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=management.perf-football-api.awsdev.feeds.skybet.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:5d:12:1d:53:76:a1:aa:ec:8b:af:32:a7:50:33:ee
Serial Number (int): 1812479010448906001971875819274908654
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 76:2c:db:1a:1d:33:b2:9e:43:e2:9d:30:d2:57:f4:a9:89:86:9d:40
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 5a:53:d1:d8:24:ce:3e:2a:86:50:eb:19:c1:ac:3c:ec:bb:7f:b9:cd
Fingerprint (sha256): 16:4f:e0:4a:62:67:d5:7e:c8:e1:ee:be:91:4a:cb:92:0c:7d:6c:31:f7:54:12:3e:11:eb:60:66:c1:c4:1c:f3

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate management.perf-football-api.awsdev.feeds.skybet.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for management.perf-football-api.awsdev.feeds.skybet.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

management.perf-football-api.awsdev.feeds.skybet.com

Other certificates including the domain name skybet.com

(limited to 100 certificates)
affiliatehub.skybet.com
*.awsdev.feeds.skybet.com
test-abelson-feed-api.awsdev.feeds.skybet.com
www.skybet.com
txodds-stage.awsdev.feeds.skybet.com
st3.skybet.com
test.skybet.com
txodds-dev-crowthed.awsdev.feeds.skybet.com
support.skybet.com

ebm01.cheetahmail.com
txodds-dev-pjo01.awsdev.feeds.skybet.com
affiliatehub.skybet.com
m.skybet.com

players.runningball.aws.feeds.skybet.com
entity-management-test.awsdev.feeds.skybet.com

dsu01-dev-football-api.awsdev.feeds.skybet.com
f.chtah.com
txodds-dev-lse01.awsdev.feeds.skybet.com
txodds-stage.awsdev.feeds.skybet.com
ebm01.cheetahmail.com
txodds-dev-crowthed.awsdev.feeds.skybet.com
f.chtah.com
txodds-dev-uiq01.awsdev.feeds.skybet.com
*.awsdev.feeds.skybet.com
txodds-dev-lse01.awsdev.feeds.skybet.com
f.chtah.com
reporting.skybet.com
affiliatehub.skybet.com
push.skybet.com
stage-football-api.awsdev.feeds.skybet.com
management.test-football-api.awsdev.feeds.skybet.com
www.skybet.com
mft.skybet.com
st1.skybet.com
clearpass.skybettingandgaming.com
txodds.aws.feeds.skybet.com
push.skybet.com
push.skybet.com
eds.skybet.com
www.skybet.com
dev-football-api.awsdev.feeds.skybet.com
f.chtah.com
playerlinking-test.awsdev.feeds.skybet.com
perf-football-api.awsdev.feeds.skybet.com
st3.skybet.com
txodds-dev-jho04.awsdev.feeds.skybet.com
aga02-dev-football-api.awsdev.feeds.skybet.com
dev-football-api.awsdev.feeds.skybet.com
f.chtah.com
st1.skybet.com
secure.skybet.com
management.inttst-football-api.awsdev.feeds.skybet.com

inttst-football-api.awsdev.feeds.skybet.com
www.skybet.com

managementacademy.skybet.com
txodds-test.awsdev.feeds.skybet.com

txodds-test.awsdev.feeds.skybet.com
playerlinking-test.awsdev.feeds.skybet.com
f.chtah.com
*.awsdev.feeds.skybet.com
f.chtah.com
staging-abelson-feed-api.awsdev.feeds.skybet.com
txodds-stage.awsdev.feeds.skybet.com
skybetgroups.skybet.com
management.perf-football-api.awsdev.feeds.skybet.com
services.skybet.com
ebm01.cheetahmail.com
promocode.skybet.com
staging-abelson-feed-api.awsdev.feeds.skybet.com
txodds-dev-esp01.awsdev.feeds.skybet.com
f.chtah.com
txodds.aws.feeds.skybet.com
ccc.betfair.com
txodds-test.awsdev.feeds.skybet.com
txodds-dev-pjo01.awsdev.feeds.skybet.com
entity-management-test.awsdev.feeds.skybet.com
skybet.com
txodds-test.awsdev.feeds.skybet.com
txodds-dev-esp01.awsdev.feeds.skybet.com
txodds-test.awsdev.feeds.skybet.com
services.skybet.com
*.staging.sbgservices.com
secure.skybet.com
www.skybet.com
skybetgroups.skybet.com
test-abelson-feed-api.awsdev.feeds.skybet.com
skybet.com

f.chtah.com
nxa.skybet.com
opta.aws.feeds.skybet.com
ebm01.cheetahmail.com
txodds-dev-pjo01.awsdev.feeds.skybet.com
dev-abelson-feed-api.awsdev.feeds.skybet.com

Certificate

The complete raw certificate details for management.perf-football-api.awsdev.feeds.skybet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgIQAV0SHVN2oarsi68yp1Az7jANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDkyMTAwMDAwMFoXDTI0MTAxOTIzNTk1OVowPzE9
MDsGA1UEAxM0bWFuYWdlbWVudC5wZXJmLWZvb3RiYWxsLWFwaS5hd3NkZXYuZmVl
ZHMuc2t5YmV0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKmq
7xCxFE+bQnEk205m7AUam4WoeZwwFx2fziDz2S3fY+iSQD0MdWQ0flMdEoTmuW+S
bwOr9NJpoIuRISvyFHqBvySS68wSBsmJhykUYFlWYVkrNDxMFZkwtR8Iw8RicjRN
kSXgWEvWuS4nmveMGQ87uRJZXoHzFS8GCXCbTljFbKN2Gw4P0E+AUXRKJz9bQQ02
iFhp+1mJ/5bKLtJVEBzpCDQlCn9mUMhyHoe3zcmfjYKKrc2izV0PlYklfve162Qu
bFmGhCOtHu8fVd/nlEkVdhFPLqTcxhfyLkpxdZDiSXA6HcsChhIL7GQ0RmIozITU
ypCfZmO2TTqb0hExelcCAwEAAaOCAw0wggMJMB8GA1UdIwQYMBaAFIG4DmOKiRIY
5fo7O1CVn+blkBOFMB0GA1UdDgQWBBR2LNsaHTOynkPinTDSV/SpiYadQDA/BgNV
HREEODA2gjRtYW5hZ2VtZW50LnBlcmYtZm9vdGJhbGwtYXBpLmF3c2Rldi5mZWVk
cy5za3liZXQuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6g
LIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY3JsMHUG
CCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1h
em9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpv
bnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkC
BAIEggFuBIIBagFoAHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsA
AAGKt2WSYgAABAMARjBEAiBq2WtcG9lc7lPNxk1OGsHWfGGMI0jj57b/+sNXGGEk
JwIgStG8L2EPvEFC3Jswyc8cViTjoa/SeSy04K9ngNdtxa0AdgBIsONr2qZHNA/l
agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYq3ZZJ5AAAEAwBHMEUCIBE7ON+hqzxI
d63UjeRVfwtHMOQZpcyWIK1BSZijYgbhAiEA/ZmqskF5Bw3ZJ2N4prYaXLBsyReM
omFSpz4gk5mF5zMAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAA
AYq3ZZKMAAAEAwBIMEYCIQDOJB124cNYDrNBpTF17pskCb2K5PFMyL5LcKtbh3Hf
jAIhAL6VPFB/z/PWagdvGDUsY8kJ8zc0VzdneneBCn7wt3sCMA0GCSqGSIb3DQEB
CwUAA4IBAQAlEPYJxxbt3KojOWGukw4bKDQoUhLLtgbc8EHiyqDEsGfrrZDa8wzF
BKrc3sutUyRZ00anV9scGJHc+hI7g/xK5mw3GtupdkqIJ8JqI4rqOt1LALkB8omu
19ECAZuteAfx1YzutkwowWuRTC9uwu9hdH5bz0cBtDH+wiv7kg7XuX8CmaVrPl5E
V6feCQx8XhXkgQXnGZD3jBtU5akhfyDs5FU9DztZx8F0uznzRfgZU4wUr7nTBF3j
9db05BWCb2FLwCIvocyyA25E9tQXvf5l3w7/fJ3zTRb/fuUsuGtYV6ylmzjvUFxQ
obECVuUmEv6JpPrIqfhcGodaelI3R0Sf
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqarvELEUT5tCcSTbTmbs
BRqbhah5nDAXHZ/OIPPZLd9j6JJAPQx1ZDR+Ux0ShOa5b5JvA6v00mmgi5EhK/IU
eoG/JJLrzBIGyYmHKRRgWVZhWSs0PEwVmTC1HwjDxGJyNE2RJeBYS9a5Liea94wZ
Dzu5EllegfMVLwYJcJtOWMVso3YbDg/QT4BRdEonP1tBDTaIWGn7WYn/lsou0lUQ
HOkINCUKf2ZQyHIeh7fNyZ+NgoqtzaLNXQ+ViSV+97XrZC5sWYaEI60e7x9V3+eU
SRV2EU8upNzGF/IuSnF1kOJJcDodywKGEgvsZDRGYijMhNTKkJ9mY7ZNOpvSETF6
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1812479010448906001971875819274908654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'management.perf-football-api.awsdev.feeds.skybet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21418564161486834658118434072034862688891561583230724485782288327284442856102746133286287980441732874764470657313795662663980009868222875323181388594247201053854171210469965759714091631203079683336839873103669108198944716217178396862499077419425892930356111272458722411562214275309268673540104387208292435631645022147363645124878272155701226182160035236458818231095291011868920106465405711873617145313877369700437288243303124746607116496268407195974754385137229739035280645820074608444403916145572659241401929744516439392968870732118844004832664815151560802532374554813731162722787306023280964489904795522866097519191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							762cdb1a1d33b29e43e29d30d257f4a989869d40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.perf-football-api.awsdev.feeds.skybet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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