staging.zero2one.jp

Issued by Amazon

About this certificate

This digital certificate with serial number 01:8c:59:cf:7a:57:66:1f:26:c2:a3:37:59:d6:31:be was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staging.zero2one.jp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:8c:59:cf:7a:57:66:1f:26:c2:a3:37:59:d6:31:be
Serial Number (int): 2057971128526987192817554003812823486
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 85:8d:8e:40:91:25:e8:c7:84:fd:dc:1c:78:a1:03:15:0b:d6:0b:e1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 62:81:a4:11:d7:d1:ce:18:c9:48:54:46:49:4a:b0:a6:c3:f6:a3:55
Fingerprint (sha256): 25:fb:b1:cf:b2:3c:a4:5f:26:41:34:ab:26:ec:17:42:f7:28:b3:1d:e2:f7:1c:04:af:e5:38:3e:b6:fd:3a:8e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate staging.zero2one.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging.zero2one.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

staging.zero2one.jp

Other certificates including the domain name zero2one.jp

(limited to 100 certificates)
zero2one.jp
zero2one.jp
dev3.zero2one.jp
b2b.zero2one.jp
discussions.zero2one.jp
*.internal.zero2one.jp
testenv03wp.zero2one.jp
delta3.zero2one.jp
*.internal.zero2one.jp
dev.zero2one.jp
*.zero2one.jp
dev.zero2one.jp
discoursedev.zero2one.jp
*.staging.zero2one.jp
delta.zero2one.jp
zero2one.jp
ml-mea.zero2one.jp
hitachi-mfa.zero2one.jp
staging.zero2one.jp
*.multi.zero2one.jp
echo.zero2one.jp
mst-mea.zero2one.jp
zero2one.jp
*.zero2one.jp
ml-mea.zero2one.jp
discussions.zero2one.jp
testenv03.zero2one.jp
dev3.zero2one.jp
shimadzu-mea.zero2one.jp
ctc16question.zero2one.jp
dev.zero2one.jp
*.multi.zero2one.jp
zero2one.jp
discussions.zero2one.jp
testenvlab.zero2one.jp
ctc-mea.zero2one.jp
review.zero2one.jp
shimadzu-mebjupyter.zero2one.jp
aibpc.zero2one.jp
*.internal.zero2one.jp
echojupyter.zero2one.jp
discoursedev.zero2one.jp
golfjupyter.zero2one.jp
dev.zero2one.jp
*.staging.zero2one.jp
zero2one.jp
zero2one.jp
discussions.zero2one.jp
aibpc.zero2one.jp
mst-mea.zero2one.jp
testenv03.zero2one.jp
zero2one.jp
nomura-fio.zero2one.jp
dev3.zero2one.jp
*.zero2one.jp
*.staging.zero2one.jp
officialsitetemp01.zero2one.jp
*.staging.zero2one.jp
discussions.zero2one.jp
dev.zero2one.jp
discussions.zero2one.jp
*.zero2one.jp
ml-mea.zero2one.jp
techplay.zero2one.jp
techplay.zero2one.jp
*.internal.zero2one.jp
aibpc.zero2one.jp
shimadzu-mea.zero2one.jp
hub.zero2one.jp
discussions.zero2one.jp
discussions.zero2one.jp
discussions.zero2one.jp
dev.zero2one.jp
discussions.zero2one.jp
discussions.zero2one.jp
zero2one.jp
discussions.zero2one.jp
aibpc.zero2one.jp
zero2one.jp
dev.zero2one.jp
dev.zero2one.jp
aibpc.zero2one.jp
delta3.zero2one.jp
shimadzu-mea.zero2one.jp
tohoku16.zero2one.jp
discussions.zero2one.jp
delta.zero2one.jp
ctc16.zero2one.jp
dev3.zero2one.jp
delta3.zero2one.jp
discussions.zero2one.jp
*.multi-internal.zero2one.jp
dev.zero2one.jp
staging.zero2one.jp
discussions.zero2one.jp
*.staging.zero2one.jp
ctc-mea.zero2one.jp
zero2one.jp
*.external.zero2one.jp
testenv04-01.zero2one.jp

Certificate

The complete raw certificate details for staging.zero2one.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIQAYxZz3pXZh8mwqM3WdYxvjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTEyMjUwMDAwMDBaFw0yMTAxMjUx
MjAwMDBaMB4xHDAaBgNVBAMTE3N0YWdpbmcuemVybzJvbmUuanAwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9BQblIp9Z1I5Oeqizb7DJqaEx6wWTeJwu
maLWwFY1s2RYDemvK6eXOEspoTROrkixeWi6nub2smY45KzPyd7+yK7pV8AqasxU
0uEqDMe56cbkanLkyFWdfLRlraNtz/E6OFqLkrHmSXxkZQEuFQJNjlVWo3Yi/QuA
9r+dchEppV4CNIabjbY/irUmhjzbfHJd4/QeiIRviAvWd9CZSo/gldexkMQ4k5ri
BNthsG1eZblQ3P/LHAhTVN2IBU0oP7kjRYljXFOnfAxeSa/YJMd+oVhhZbWxZ3SQ
Z+6V3hsxtRXXbgCBgMNBM4rkWTVrnZXQHw2vA5QB9gZ3e8x0C7BPAgMBAAGjggKB
MIICfTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU
hY2OQJEl6MeE/dwceKEDFQvWC+EwHgYDVR0RBBcwFYITc3RhZ2luZy56ZXJvMm9u
ZS5qcDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1
c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwB
AgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2Ex
Yi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIu
YW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBBgYKKwYB
BAHWeQIEAgSB9wSB9ADyAHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN
3BAAAAFvOqLP6QAABAMASDBGAiEA1ygXwk3M8WJ0ygmVBNT2P7mXGOYQ5nvYhpzC
6vITswECIQC6JhahjCkbsyfDpzOieZMHfB3qtenESiIcY+3jirbaKgB3AId1v+dZ
fPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABbzqi0IUAAAQDAEgwRgIhAIkA
Nf5h8GKg5MkUDIjyE3xPdR6OVz0ENtB7fun7OhcMAiEA2VcnOBcjqFU1q6nNdAHk
/iVanmZtDmBs1U+GpfX22BMwDQYJKoZIhvcNAQELBQADggEBAC9jcDAAVNQGcDGD
CIv8uUAqhryFIwqiA1dOwuKbw99iGHOZ58uug8YIiUhitnocl+WS4HUpjMl0FPJu
FQk7z1zx492QI7azRPv38eIc9DBBonlua5H68ZX/z3c049xTc4wKBvNmR3phAiHg
e0yYsl/dUr0eTth833yhAnvIgZWJM0/xB1RwfL4C+l2jAhne4idDR/K7bnKWSzKT
C2OnsqtIGAgvIp1tORdaoLhC7IUQ9XGg6Gkir5z4O+GtMUrh8YnNXWEZqQuMS+kY
MFxMJ/JG0J7wcxPad3i6NCqyzK4CeqWCNkIImgQHHp1twjpe94Hfny0A/JrfXnON
LiOyiRo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQUG5SKfWdSOTnqos2+w
yamhMesFk3icLpmi1sBWNbNkWA3pryunlzhLKaE0Tq5IsXloup7m9rJmOOSsz8ne
/siu6VfAKmrMVNLhKgzHuenG5Gpy5MhVnXy0Za2jbc/xOjhai5Kx5kl8ZGUBLhUC
TY5VVqN2Iv0LgPa/nXIRKaVeAjSGm422P4q1JoY823xyXeP0HoiEb4gL1nfQmUqP
4JXXsZDEOJOa4gTbYbBtXmW5UNz/yxwIU1TdiAVNKD+5I0WJY1xTp3wMXkmv2CTH
fqFYYWW1sWd0kGfuld4bMbUV124AgYDDQTOK5Fk1a52V0B8NrwOUAfYGd3vMdAuw
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2057971128526987192817554003812823486
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.zero2one.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23861518512043734293888906457023134898206182964697761920193727367355564751714445136095114964431210771224706832957116467866641782803399876720202145862865526974489189027243388947232179025312113181681773843795076068247156620648989681464268927362515942981663964120748601932579697938976253037800634775325332668953862180286454689620359239976299377419353958013360059573384991769654602009858646280562416669266184319033799536027148128172926826745521694573280727333305773475166219216888525108623118720393244368768511555608819339047419037181245175028229925547034372232005959540313088973487466527352030924385521581642160834064463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							858d8e409125e8c784fddc1c78a103150bd60be1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.zero2one.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016f3aa2cfe90000040300483046022100d72817c24dccf16274ca099504d4f63fb99718e610e67bd8869cc2eaf213b301022100ba2616a18c291bb327c3a733a27993077c1deab5e9c44a221c63ede38ab6da2a0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016f3aa2d0850000040300483046022100890035fe61f062a0e4c9140c88f2137c4f751e8e573d0436d07b7ee9fb3a170c022100d95727381723a85535aba9cd7401e4fe255a9e666d0e606cd54f86a5f5f6d813
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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