login.barracuda.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:82:18:0c:b4:ac:6f:c0:dd:1f:e9:91:eb:47:82:de was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=login.barracuda.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:82:18:0c:b4:ac:6f:c0:dd:1f:e9:91:eb:47:82:de
Serial Number (int): 17955450321297636499924682253951009502
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ef:0a:ca:38:4c:5e:d1:3a:8d:ae:b8:83:cf:cc:41:75:a2:56:d6:9f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): db:27:bf:61:5b:41:f0:c5:5f:32:26:ea:24:96:ac:c0:b9:f9:96:3b
Fingerprint (sha256): 18:5f:6e:b0:d1:4b:40:23:cb:f9:41:e3:e8:c4:d6:c0:ad:7c:69:fd:2e:c2:05:2f:26:12:d1:10:1f:e1:4a:f5

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate login.barracuda.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for login.barracuda.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

login.barracuda.com
login.barracudanetworks.com
soap.login.barracudanetworks.com

Other certificates including the domain name barracuda.com

(limited to 100 certificates)
netsecfeedback.barracuda.com
api.backup.barracuda.com
us.access.barracuda.com
blog.barracuda.com
statuspage.io
chickentreat.craveable.support
stage.barracuda.com
chickentreat.craveable.support
chickentreat.craveable.support
ess.cd1.barracudanetworks.com
chickentreat.craveable.support
bsf03.barracuda.com
encrypt.barracudanetworks.com
statuspage.io
statuspage.io
statuspage.io
azurecgw.barracuda.com
statuspage.io
dev.access.barracuda.com
cudaeye.barracuda.com
*.us.access.barracuda.com
downloads.access.barracuda.com
*.barracuda.com
statuspage.io
backfeed.barracuda.com
statuspage.io
collabora.aks.datainspector.barracuda.com
assets.barracuda.com
statuspage.io
content.barracuda.com
waas.barracudanetworks.com
sslvpn.barracuda.com
us.access.barracuda.com
statuspage.io
login.beta.barracudanetworks.com
hq.barracuda.com
ess.cd1.barracudanetworks.com
www.barracuda.com
statuspage.io
sni.cloudflaressl.com
ess.cd1.barracudanetworks.com
azurewaf.barracuda.com
www.barracuda.com
statuspage.io
chickentreat.craveable.support
insiders.barracuda.com
*.eu.access.barracuda.com
statuspage.io
ops.barracuda.com
statuspage.io
dev.access.barracuda.com
content.barracuda.com
statuspage.io
fr.blog.barracuda.com
ess.de.barracudanetworks.com
billing.barracudanetworks.com
*.ess.ca.barracuda.com
dev.access.barracuda.com
url.access.barracuda.com
statuspage.io
connect.barracuda.com
staging1.blog.barracuda.com
analytics.us.access.barracuda.com
statuspage.io
statuspage.io
statuspage.io
chickentreat.craveable.support
prometheus.aks.datainspector.barracuda.com
ngfirewall.barracuda.com
statuspage.io
bu.barracuda.com
netsecfeedback.barracuda.com
ess.vt2.barracudanetworks.com
csg.barracuda.com
chickentreat.craveable.support
collabora.aks.datainspector.barracuda.com
statuspage.io
community.barracuda.com
*.bmb.barracuda.com
docs.access.barracuda.com
api.dev.access.barracuda.com
webgateway.barracuda.com
azureccb.barracuda.com
qa-corp.barracuda.com
connect.barracuda.com
chickentreat.craveable.support
statuspage.io
statuspage.io
stg.access.barracuda.com
chickentreat.craveable.support
content.barracuda.com
statuspage.io
statuspage.io
portal.production-blue.cse-cudasvc.com
login.barracuda.com
statuspage.io
ess.cd1.barracudanetworks.com
*.ess.barracuda.com
analytics.us.access.barracuda.com
ess.cd1.barracudanetworks.com

Certificate

The complete raw certificate details for login.barracuda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIQDYIYDLSsb8DdH+mR60eC3jANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAzMjUwMDAwMDBaFw0yMTA0MjUx
MjAwMDBaMB4xHDAaBgNVBAMTE2xvZ2luLmJhcnJhY3VkYS5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt477CVKGwkF8Ii+qPp6HrhxjGq0VTZj1e
dlvnInU475XqoRnD7TQIekUt87yrLHM+7L5jH1P6Wh0BIH9hUo5oqDpeoTZS1iCZ
DcddZ7lIqLrQ8znnCKR/FAP73x40AOZVkniy19Uuk5nTcqCd9pXS1DZ0Ss9TgPt6
5JzPY+4oYlAa2ryJ+3C6KxrFtn8gon6CMTtqjLWM9PvFvwuiVOMR2UmCMcbDgb4D
BfO3vth8UHANyeCN7z9tMl0lCaYB1GtAIxZtd+uZy7uScORc+CxTAQwYrpTkmBeg
eQCh1bJPhDsAJpH+ULvunUrcIL12u25qsNu6GlhgFkrw4GbIiUhxAgMBAAGjggK/
MIICuzAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU
7wrKOExe0TqNrriDz8xBdaJW1p8wXQYDVR0RBFYwVIITbG9naW4uYmFycmFjdWRh
LmNvbYIbbG9naW4uYmFycmFjdWRhbmV0d29ya3MuY29tgiBzb2FwLmxvZ2luLmJh
cnJhY3VkYW5ldHdvcmtzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu
c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCG
SAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo
dHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0
dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMB
Af8EAjAAMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAu9nfvB+KcbWTlCOXqpJ7
RzhXlQqrUugakJZkNo4e0YUAAAFxD3SVbQAABAMARzBFAiEA58dyY72iivfxDIFY
496Pcm3dRHKlrOKtzf35grq9wTYCIFX7D8UtgqPCrKnYjAQV+Ac6osOGdCoIhj38
iHAIUql+AHcAXNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbHDsoAAAFxD3SV
nQAABAMASDBGAiEAoX7BsA00lTiPo948+MNpCTU0H10Ex4kHUBrys4cmESwCIQDa
lJdS07ZYPcIHAPSkdZlpV5Ph9XUjAua3nNUQWs2xIjANBgkqhkiG9w0BAQsFAAOC
AQEAkoPQOOtZ8Osy/3Ma6+OMYXkEDnIHg+p1Ef+yk5Ow6t/cEmFYs9KV3qzxuP/X
gBkhJzsLcTmIqFqHB5vklae6DD5iWcCIo+j2Rcti1vXicgeS0K38AGbw8S82XSh3
MzOO6saMv6t84ttsCiV4MRqgCvuyi35k9E3oLlfe9W+yt8jLEbPCOUPsy8RQIWM9
uzaNUJOtUZLAARlXNbkPVezOTC3XtXQbv+HRdwNlxA7LUy622pzbBC/4gjsccqF/
csC9hsr+NbpaekioEwYbdaPBq92XFgjF4wV5a3ysz5gxEkBZp/UYqZB9xk6TyXW4
BQ47rao2Hotm6heAYEv8bITmRQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreO+wlShsJBfCIvqj6eh
64cYxqtFU2Y9XnZb5yJ1OO+V6qEZw+00CHpFLfO8qyxzPuy+Yx9T+lodASB/YVKO
aKg6XqE2UtYgmQ3HXWe5SKi60PM55wikfxQD+98eNADmVZJ4stfVLpOZ03KgnfaV
0tQ2dErPU4D7euScz2PuKGJQGtq8iftwuisaxbZ/IKJ+gjE7aoy1jPT7xb8LolTj
EdlJgjHGw4G+AwXzt77YfFBwDcngje8/bTJdJQmmAdRrQCMWbXfrmcu7knDkXPgs
UwEMGK6U5JgXoHkAodWyT4Q7ACaR/lC77p1K3CC9drtuarDbuhpYYBZK8OBmyIlI
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17955450321297636499924682253951009502
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'login.barracuda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21951532079625543327798144714093103122437392684686399142668877042960273395802325039175898127845920684012100349038997059082982483770442163184826340298916778206716461146096903197662816792812936956673624041832687910395744824536388343147360245751801689292703121982936378248452272032107828593117875667340455022412170852014694684166484639277258505264733896687020090105391925205668655271604482949535329634078173695826436540223628005059539780157802137032638551069125773041086119244316518247075374358940227811452210928951625375393743606209648120736224490581055427364743439526822893364281126028782984928932991303412468912048241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef0aca384c5ed13a8daeb883cfcc4175a256d69f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.barracuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.barracudanetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soap.login.barracudanetworks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001710f74956d0000040300473045022100e7c77263bda28af7f10c8158e3de8f726ddd4472a5ace2adcdfdf982babdc136022055fb0fc52d82a3c2aca9d88c0415f8073aa2c386742a08863dfc88700852a97e0077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001710f74959d0000040300483046022100a17ec1b00d3495388fa3de3cf8c3690935341f5d04c78907501af2b38726112c022100da949752d3b6583dc20700f4a47599695793e1f5752302e6b79cd5105acdb122
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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