con.api.mini

- Bayerische Motoren Werke Aktiengesellschaft -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:66:a8:40:f8:16:42:36:78:dd:e4:18:5f:0e:53:5f was issued on by DigiCert Inc.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayerische Motoren Werke Aktiengesellschaft

Organization: Bayerische Motoren Werke Aktiengesellschaft
Locality: München
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:66:a8:40:f8:16:42:36:78:dd:e4:18:5f:0e:53:5f
Serial Number (int): 5849938854905221788020684301949358943
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 0d:82:37:15:5b:f4:cd:d3:0f:72:be:8f:a6:3b:3c:a1:30:17:bc:1b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 0f:5c:e3:62:65:0e:d0:cb:0b:63:37:8f:92:6e:d0:d3:ed:75:41:d2
Fingerprint (sha256): 23:47:0a:4f:46:aa:5e:2a:b7:66:a7:04:cc:a0:cd:95:5d:cd:41:4f:8b:a8:bc:74:76:b6:14:2c:ae:85:13:aa

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate con.api.mini

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for con.api.mini

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

con.api.mini
www.m99.mini-int3.com
www.m1.mulo-ref.com
www.m96.mini-int3.com
www.m173.bmw-int1.com
aem-author-pocaka-inta6.bmw.com
qrcode-int1.api.bmw
con-int1.api.mini
www.m172.bmw-int4.com
www.m100.mini-int3.com
tracking-api-int1.api.bmw
tracking-api.bmw.com
dtmassets.bmw.com
static4.bmw.com
www.m95.mini-int3.com
wpm-int1.api.bmw
www.m101.mini-int3.com
www.m98.mini-int3.com
www.m162.bmw-int4.com
www.m97.mini-int3.com
qrcode.api.bmw
www.m1.mulo-dev.com
www.m172.bmw-int1.com
www.m161.bmw-int4.com
www.m101.mini-int2.com
static3.bmw.com
www.m1.mulo-int.com
www.m164.bmw-int4.com
www.m173.bmw-int4.com
static2.bmw.com
www.m171.bmw-int1.com
wpm.api.bmw
www.m171.bmw-int4.com

Other certificates including the domain name api.mini

(limited to 100 certificates)

Certificate

The complete raw certificate details for con.api.mini in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvitg4RKFCWRyGTLdeDa
oOx0PSd5PVNoQyOrzBdleBoVCGX0orNWGc401W/XLlRE7LTKButUL4pXaundOwXA
7wCFliOuP0Lx5A/ihPfCoLblWgotsEwQomgWUBazvmK3hwGTirbvVtddXeaYpK1t
edbDQAV9ppjGsHIC+0KXwdN6LXw5TW2e4W3wSYAPsdBqFV0qL4EUmGQ4Ev190GlB
/M6D5CBIGYIYSSA2ik5N00dDkJQyhxRdb77rK6TmaWweboIIsn/ozvhxHbnqdDEc
svmsXWAOFc7zLL22JyojNxXS5BkvAAKZ9bxIec2tAvphCLe64CpLe5xmRIvP/OyN
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5849938854905221788020684301949358943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische Motoren Werke Aktiengesellschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'con.api.mini'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24612858751088917616375944180086454749124906523076742940521269868074028828263783416715654686749462358431552379984199233701185147575778303093707828392239433830254733988964621018827486677838389891817143003783996530019579125961131079603219961576487152173188155473534616095391260797283575162551474728152402832721581792632211912952810515571139696998569152288301130440461809316269731903431885958654834021694928756741202254909647972047082171790527535951549913685068471036295974274541888969671131847825217355141885834056424313239642262436621751781509968479420453619650810773702836134586912418356381605800220200784862036921653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d8237155bf4cdd30f72be8fa63b3ca13017bc1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (714 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.api.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m99.mini-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m1.mulo-ref.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m96.mini-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m173.bmw-int1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aem-author-pocaka-inta6.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrcode-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con-int1.api.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m172.bmw-int4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m100.mini-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtmassets.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m95.mini-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m101.mini-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m98.mini-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m162.bmw-int4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m97.mini-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrcode.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m1.mulo-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m172.bmw-int1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m161.bmw-int4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m101.mini-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m1.mulo-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m164.bmw-int4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m173.bmw-int4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m171.bmw-int1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m171.bmw-int4.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016165179c48000004030047304502210097bd691611f9f6f17d520463a0bf35438bcfa717fbab523ab6034f7414557df102203e40955cf00cef7c5788db04394254b41821b86d64d9fa3132fffc43b11aa0d50076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016165179d1e0000040300473045022023a459a7656a388b5dc4de5075c796172eb563c56de0d0a03634e6aa919894eb022100829c6ab78a66438ef37b74d7a670ea3f979da99cbd49037107ad7c34459bea6e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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