giftcards.flightcentre.com.au

Issued by Amazon

About this certificate

This digital certificate with serial number 08:1b:1b:85:d6:62:fc:3c:00:a4:b5:a4:87:11:a0:ab was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=giftcards.flightcentre.com.au

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:1b:1b:85:d6:62:fc:3c:00:a4:b5:a4:87:11:a0:ab
Serial Number (int): 10774574210214138296753893954079006891
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 77:f8:1b:5a:4e:59:b5:79:63:d7:d5:70:a6:05:8c:c3:9e:28:bd:7c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a6:c5:49:31:fa:e8:52:d3:df:40:81:ce:b1:c6:3d:f8:3b:6d:d4:53
Fingerprint (sha256): 1e:e0:57:a3:56:7b:15:3f:cf:fa:19:b0:34:ad:96:f8:c2:33:10:20:f3:d7:bf:a1:d6:0a:be:f5:f8:ad:08:e0

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate giftcards.flightcentre.com.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giftcards.flightcentre.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giftcards.flightcentre.com.au
admin.giftcards.flightcentre.com.au

Other certificates including the domain name flightcentre.com.au

(limited to 100 certificates)
customer.stg.eca.fcl.cloud
admin.4dconsulting.com.au
acquiastage.flightcentre.com.au
redirect.aws.fclweb.net
acquiastage.flightcentre.com.au
acquiadev.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
cruises.flightcentre.com.au
www.cievents.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
www.cievents.com.au
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.cievents.com.au
acquiatestau.flitech.net
acquiadev.flitech.net
alerts.flightcentre.com.au
www.studentflights.com.au
acquiadev.flightcentre.com.au
flightcentre.com.au
acquiaprod.flitech.net
www.studentflights.com.au
stg-packages.flightcentre.com.au
acquiastage.flightcentre.com.au
acquiaprod.flitech.net
dev-account.flightcentre.com.au
www.studentflights.com.au
acquiadev.flitech.net
acquiaprod.flitech.net
acquiatestau.flitech.net
partner.flightcentre.com.au
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
acquiatest.4dconsulting.com.au
acquiaprod.flitech.net
www.studentflights.com.au
flightcentre.com.hk
acquiatest.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
www.studentflights.com.au
www.studentflights.com.au
acquiaprod.flitech.net
redirect.aws.fclweb.net
pages.travel.flightcentre.com.au
acquiatestau.flitech.net
stg-account.flightcentre.com.au
acquiaprod.flitech.net
www.studentflights.com.au
acquiadev.flitech.net
giftcards.flightcentre.com.au
giftcards.flightcentre.com.au
*.flightcentre.com.au
redirect.aws.fclweb.net
acquiadev.4dconsulting.com.au
www.cievents.com.au
www.studentflights.com.au
www.studentflights.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiatest.flitech.net
acquiatest.flitech.net
www.cievents.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
flightcentre.com.hk
www.studentflights.com.au
acquiatestau.flitech.net
account.flightcentre.com.au
www.flightcentre.com
acquiatest.flitech.net
akamai-san60.exacttarget.com
giftcards.flightcentre.com.au
prod.31.slot.cdn.salesforce-communities.com
giftcards.flightcentre.com.au
redirect.aws.fclweb.net
flightcentre.com.hk
acquiatest.4dconsulting.com.au
redirect.aws.fclweb.net
alerts.flightcentre.com.au
redirect.aws.fclweb.net
acquiatest.flitech.net
www.studentflights.com.au
redirect.aws.fclweb.net
www.studentflights.com.au
acquiaprod.flitech.net
www.studentflights.com.au
www.studentflights.com.au
click.travel.flightcentre.com.au

Certificate

The complete raw certificate details for giftcards.flightcentre.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIQCBsbhdZi/DwApLWkhxGgqzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTEyMTkwMDAwMDBaFw0yMTAxMTkx
MjAwMDBaMCgxJjAkBgNVBAMTHWdpZnRjYXJkcy5mbGlnaHRjZW50cmUuY29tLmF1
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjsJM9DN9pxu1Vi4lKJ6
Uql9qqeX7WzHq14+tfSopK6ZPIpYXox640Ykw8tIQQDqQ1A4MURzqCnyIAr20+5j
TQzbMKrReE+E8lyErNBkPcMY74A1C/8KbcWqlwXynEjScZTrKqkWU1tAInRa7TU2
pYmvsFqwxEOSy9IdlDXB5dUZ0IMmCxWMDX+zxw5do6ytkzC73U4I5sDBPM9oO7RG
0ZWVmQYkdacYaMEPinPlSVh5bwUvfsMtKaJ2aQTRwsAKl7gKRehiipyJQrdkx9np
99Nm06hPQeCN8Cg8MoPUPhAce8Ys9t+AZenkdLgtitrRI864L7+NV6w5Mh4IqQKf
ZQIDAQABo4ICrjCCAqowHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAw
HQYDVR0OBBYEFHf4G1pOWbV5Y9fVcKYFjMOeKL18ME0GA1UdEQRGMESCHWdpZnRj
YXJkcy5mbGlnaHRjZW50cmUuY29tLmF1giNhZG1pbi5naWZ0Y2FyZHMuZmxpZ2h0
Y2VudHJlLmNvbS5hdTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIu
YW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwB
AjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v
b2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j
cnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAA
MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5
G9+443fNDsgN3BAAAAFvG4ZPowAABAMARzBFAiAamT2w+Apy3HP7LPmMxG5sLK10
Te19dOfu0XsxN7U2MAIhANj1s+rH5o6L9Uzl9Pz8PB9yK5L6oj/yvYhZ3fbpHCcg
AHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFvG4ZQRAAABAMA
RzBFAiEA8zw8oSrjgKDySWBDsARxw+wu/zmdaHs9iWTNRXZ1b1oCIEc7WwOT0OQQ
tvOQCcztDWkFOlZqc5IoRkhM4lani5e5MA0GCSqGSIb3DQEBCwUAA4IBAQA0IsiI
y7Tuk7fNJWBwKw3h4E/s2O1PW6GQovDAA7cHRcfdZUGkbEpbDN2BT69jXDS1Wdhb
KWm2LBPfkE6wZcD4Xj+rMHqK8yx/XsVRWeNT5HcdHEVxVRt8/lluBr27Gi8vIDGM
iMYlUGZowB+l4P9iemww9JsLVavqTAIV4WCy5KaLOO8SNUmIpYR7tfpCqEMh1BsT
pzjAWkURbgqkRbuxdo4x8EGJRg4miAegfJu/d7c+RyPz4roJuZaMPreDzkcPRMGN
wLtMykuoecmpzn32pH3PSAPXRSeG06tbFnKoGHilSVhfV9GgHk88DvJYKGVfWMJI
Cdrri8055QlrDd+Y
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjsJM9DN9pxu1Vi4lKJ6
Uql9qqeX7WzHq14+tfSopK6ZPIpYXox640Ykw8tIQQDqQ1A4MURzqCnyIAr20+5j
TQzbMKrReE+E8lyErNBkPcMY74A1C/8KbcWqlwXynEjScZTrKqkWU1tAInRa7TU2
pYmvsFqwxEOSy9IdlDXB5dUZ0IMmCxWMDX+zxw5do6ytkzC73U4I5sDBPM9oO7RG
0ZWVmQYkdacYaMEPinPlSVh5bwUvfsMtKaJ2aQTRwsAKl7gKRehiipyJQrdkx9np
99Nm06hPQeCN8Cg8MoPUPhAce8Ys9t+AZenkdLgtitrRI864L7+NV6w5Mh4IqQKf
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10774574210214138296753893954079006891
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giftcards.flightcentre.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24519342873837091964593306544206347214920243959737722713541570721711883462380197309385206220429634675644404343511959264006366685433817883543004383720754998523161717230568344113739840702445365047028793018155994337578213958737678272210091737035186550770822850468274919241860501659512688991412080301130319223615267205213947723910253123966509304373152089819738580012458005769659519241120013286586607513812254826826320755644459127835571640027422180997028527310010213187954414068552836912240171290828627513648258604233144174321870862207976242800199493428400858392653890324823969456982581041493119753485683908533659132665701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77f81b5a4e59b57963d7d570a6058cc39e28bd7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcards.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.giftcards.flightcentre.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016f1b864fa3000004030047304502201a993db0f80a72dc73fb2cf98cc46e6c2cad744ded7d74e7eed17b3137b53630022100d8f5b3eac7e68e8bf54ce5f4fcfc3c1f722b92faa23ff2bd8859ddf6e91c27200076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016f1b8650440000040300473045022100f33c3ca12ae380a0f2496043b00471c3ec2eff399d687b3d8964cd4576756f5a0220473b5b0393d0e410b6f39009cced0d69053a566a73922846484ce256a78b97b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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