naturalmotion.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 03:17:b6:32:46:d9:23:18:f5:26:3d:19:93:a2:76:e9 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=naturalmotion.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:17:b6:32:46:d9:23:18:f5:26:3d:19:93:a2:76:e9
Serial Number (int): 4110802196983492304965821990070023913
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: a7:53:b8:99:61:9e:e3:f2:f8:64:fc:d3:24:3a:04:c8:79:12:84:0a
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 02:dc:aa:5e:b2:87:0e:34:56:1c:d9:fc:4f:31:2a:e0:0d:b1:c9:38
Fingerprint (sha256): 1d:bc:59:67:31:86:62:40:1c:3e:a8:a9:8e:18:57:c3:c3:1a:0b:e6:23:34:15:9f:43:11:e8:37:f7:04:f6:70

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate naturalmotion.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for naturalmotion.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

naturalmotion.com
*.naturalmotion.com

Other certificates including the domain name naturalmotion.com

(limited to 100 certificates)
ssl277858.cloudflaressl.com
accessallareas.naturalmotion.com
ssl391883.cloudflaressl.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
ssl391883.cloudflaressl.com
files.naturalmotion.com
naturalmotion.com
naturalmotion.com
ssl391883.cloudflaressl.com
ssl3087.cloudflare.com
jira.naturalmotion.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
exchange.naturalmotion.com
jira.naturalmotion.com
ssl277858.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl3087.cloudflare.com
ssl391881.cloudflaressl.com
accessallareas.naturalmotion.com
ssl277856.cloudflaressl.com
naturalmotion.com
ssl3087.cloudflare.com
ssl391881.cloudflaressl.com
ssl391883.cloudflaressl.com
testrail.naturalmotion.com
testrail.naturalmotion.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
confluence.naturalmotion.com
ssl3087.cloudflare.com
ssl391883.cloudflaressl.com
naturalmotion.com
ssl277858.cloudflaressl.com
naturalmotion.com
ssl391883.cloudflaressl.com
naturalmotion.com
accessallareas.naturalmotion.com
ssl277858.cloudflaressl.com
confluence.naturalmotion.com
ssl3087.cloudflare.com
ssl391883.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391882.cloudflaressl.com
ssl277858.cloudflaressl.com
naturalmotion.com
ssl391881.cloudflaressl.com
naturalmotion.com
naturalmotion.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
docs.naturalmotion.com
fb.naturalmotion.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl277858.cloudflaressl.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl277858.cloudflaressl.com
support.naturalmotion.com
ssl3087.cloudflare.com
ssl277858.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl391882.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl3087.cloudflare.com
naturalmotion.com
ssl3087.cloudflare.com
naturalmotion.com
ssl277858.cloudflaressl.com
ssl3087.cloudflare.com
naturalmotion.com
ssl277858.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391881.cloudflaressl.com
naturalmotion.com
ssl391883.cloudflaressl.com
ssl391881.cloudflaressl.com
naturalmotion.com
naturalmotion.com
ssl3087.cloudflare.com
accessallareas.naturalmotion.com
*.naturalmotion.com
naturalmotion.com
ssl3087.cloudflare.com
ssl277858.cloudflaressl.com
ssl391882.cloudflaressl.com
ssl277858.cloudflaressl.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl391882.cloudflaressl.com
accessallareas.naturalmotion.com

Certificate

The complete raw certificate details for naturalmotion.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgIQAxe2MkbZIxj1Jj0Zk6J26TANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTI0MDEwNjAwMDAwMFoXDTI1MDIwMjIzNTk1OVowHDEa
MBgGA1UEAxMRbmF0dXJhbG1vdGlvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDiRTqyV4DMR/uCaBGIyZXxw+vIjnEQDlZacLxnxangirI96+5N
CfatsmPWI5+H2ykKYMxtB/VzYlDHHAtZ/WomLGvpVMgfZNtnskd6hhHblVTGqA4t
cqlSxg9RjiqYAC0JUULTJPzHZ1X7eZGcNmKi0fQ0wsO1ELMcMVcWIhR+9BcdPXQB
i0k7lICyvaG5P0EwlfGEKHFiUox9TOIRX2UsNAGeLZ6bekdVN+ka+TGgLir6K879
pybTXkbjlW0hHYWDEAr8Bm+IRNe9Q0lmXchpI9y/d6La3OYLZowjTWLWIgXZjwba
hFEL2G+GQy5csOtZh9r423lYqge7GCU569APAgMBAAGjggMBMIIC/TAfBgNVHSME
GDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUp1O4mWGe4/L4ZPzT
JDoEyHkShAowMQYDVR0RBCowKIIRbmF0dXJhbG1vdGlvbi5jb22CEyoubmF0dXJh
bG1vdGlvbi5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs
hipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYI
KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6
b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9u
dHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMIIBgAYKKwYBBAHWeQIE
AgSCAXAEggFsAWoAdgDPEVbu1S58r/OHW9lpLpvpGnFnSrAX7KwB0lt3zsw7CAAA
AYzeJ+FSAAAEAwBHMEUCIQDrSIC21Jf2PeWpN3rIgX8B2k95f8l1QT8Eu6GsqF2j
aQIgGVR3r/yCYcMELA19XSt1cnY5GbM3IRbJGtX1lf8upDUAdwB9WR4S4Xgqexxh
Z3xe/fjQh1wUoE6VnrkDL9kOjC55uAAAAYzeJ+E0AAAEAwBIMEYCIQDWbktxt39d
axNSmOrMFhwDdct4OQW2e9ER8X8UeISNbAIhAPhh4WIFMJQKm+t3l5axZYss7p6M
jQH9+hKlGdMh2YXWAHcA5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAA
AAGM3ifhXAAABAMASDBGAiEAihssJ2gBko8ePgeN394RtlOijepPrkL6UoQq1OOX
Np0CIQDMDb+GRtTLgI51ZinPItvDyCmGjuq2cEfS5zyYbpkNhTANBgkqhkiG9w0B
AQsFAAOCAQEAO794LthM5lW2msZCcYoMyEt0g+vaxO/Er4auCaHeE0bNtc9ik/Pe
ztMwF++TgOLZtJSf+Xt1d4AT/vKMZtyj0Gk19QikD2PUxxKVRfqAqJ54n909ELHr
IGVHqN+PKQ7uSwQR091ip1uOYjjcIaHryK+0i/uWztRb2uyNo20sL1CVdq+MaKNZ
J7G1nCDAqvuUOCp7IJOovN9F1dTJP4ukE4C0fq3f9tDu9Ewp//n6oKihfTvwwnRq
NfDIQjX2+48RaSkuGAFWoC1PjxWfoGWIdgcZFUQifqWKgve3M3Z9aKM8GkwvpJvC
5B5id2jyJbEcEQSnVWqg8P9M/quFmyh0+Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kU6sleAzEf7gmgRiMmV
8cPryI5xEA5WWnC8Z8Wp4IqyPevuTQn2rbJj1iOfh9spCmDMbQf1c2JQxxwLWf1q
Jixr6VTIH2TbZ7JHeoYR25VUxqgOLXKpUsYPUY4qmAAtCVFC0yT8x2dV+3mRnDZi
otH0NMLDtRCzHDFXFiIUfvQXHT10AYtJO5SAsr2huT9BMJXxhChxYlKMfUziEV9l
LDQBni2em3pHVTfpGvkxoC4q+ivO/acm015G45VtIR2FgxAK/AZviETXvUNJZl3I
aSPcv3ei2tzmC2aMI01i1iIF2Y8G2oRRC9hvhkMuXLDrWYfa+Nt5WKoHuxglOevQ
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4110802196983492304965821990070023913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naturalmotion.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28563995154510526674481386716412008056907851539618536823437576105366540562450556214100269625552333073641738740372291846936265735620140324494903502237902986731686784963475919852595850932533928132347504273691370277298130764543362494163349943036346691973321993524664594345386209790034857372961413406910283901601140028509627994904816668206001980147682748096645612826504939592869463803166427715553422290599817335880154253498266028959375176271665717733579260150268398435352827351482927050253061442211119477878035076284113500051538582090028156394013841259919756278319600910703286248090536475376706592529336821408717366611983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a753b899619ee3f2f864fcd3243a04c87912840a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalmotion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003bbf782ed84ce655b69ac642718a0cc84b7483ebdac4efc4af86ae09a1de1346cdb5cf6293f3deced33017ef9380e2d9b4949ff97b75778013fef28c66dca3d06935f508a40f63d4c7129545fa80a89e789fdd3d10b1eb206547a8df8f290eee4b0411d3dd62a75b8e6238dc21a1ebc8afb48bfb96ced45bdaec8da36d2c2f509576af8c68a35927b1b59c20c0aafb94382a7b2093a8bcdf45d5d4c93f8ba41380b47eaddff6d0eef44c29fff9faa0a8a17d3bf0c2746a35f0c84235f6fb8f1169292e180156a02d4f8f159fa065887607191544227ea58a82f7b733767d68a33c1a4c2fa49bc2e41e627768f225b11c1104a7556aa0f0ff4cfeab859b2874f9