cctoken.lab.expedia.com

- Expedia, Inc -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 29:8c:6c:ed:4f:78:c4:36:39:74:21:51:63:73:8e:b4 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Expedia, Inc

Organization: Expedia, Inc
State / Province: Washington
Locality: Bellevue
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 29:8c:6c:ed:4f:78:c4:36:39:74:21:51:63:73:8e:b4
Serial Number (int): 55227478689283450376438963882545090228
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: c9:9e:0b:28:21:24:dd:04:3e:df:b7:b0:49:c5:b7:a5:bf:d8:d1:a1
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 48:0c:02:ee:99:00:8c:d3:a6:e2:21:22:19:02:34:c5:77:1c:9f:24
Fingerprint (sha256): 27:4d:2c:a5:63:89:8d:ee:f9:ba:ae:ae:c1:58:ae:b7:53:b0:76:53:45:cd:b9:92:c3:af:4f:d8:f7:0e:ef:50

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate cctoken.lab.expedia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cctoken.lab.expedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cctoken.lab.expedia.com
tokenprovider-integration.cctlab.expecn.com

Other certificates including the domain name expedia.com

(limited to 100 certificates)
*.us-west-2.prodp.mesop.expedia.com
summervibes2022.expedia.com
*.us-west-2.i.prod.lodgingshared.expedia.com
*.us-east-1.prod.bexgnautilus.expedia.com
*.us-west-2.i.prod.internationalisation.expedia.com
*.us-east-1.prod.lodgingshared.expedia.com
*.us-east-1.test.egtiger.expedia.com
trs-tilt.prod.expedia.com
portal-lambdas-us-west-2-main.prod.epsdecaf.expedia.com
*.test.expedia.com
www.expedia.com
*.hotelplanner.com
*.prod.lshop.expedia.com
*.prod.monitoring.expedia.com
*.test.air.expedia.com
datafeed.test.epsdecaf.expedia.com
linguo-lodging-v1-us-east-1.test.epsdecaf.expedia.com
mx1a.expedia.com
secure0024.hubspot.com
vap.expedia.com
*.test.ersappengg.expedia.com
mi.expedia.com
test.contracts.expedia.com
*.us-east-1.i.prod.ewsapi.expedia.com
thingstodo.expedia.com
*.us-east-1.i.prod.bexcruise.expedia.com
*.eweprod.expedia.com
atappdgeo.expedia.com
commission-payments-us-west-2.prod.epsdecaf.expedia.com
*.us-west-2.i.test.egtiger.expedia.com
efr-lab.expedia.com
*.test.searchdiscovery.expedia.com
*.origin.expedia.com
*.us-east-1.i.test.payments.expedia.com
*.us-west-2.i.prod.lodgingpartner.expedia.com
cpa.prod.nimbus.expedia.com
*.us-west-2.i.prodp.egailabspci.expedia.com
discoverbudapest.expedia.co.uk
*.us-east-1.prod.eguser.expedia.com
*.us-west-2.i.test.ewedatasci.expedia.com
leblancresorts.expedia.com
www.excellencegroup.expedia.com
*.prod.lodgingselect.expedia.com
outrigger.expedia.com
*.expedia.com
*.hotelplanner.com
secure0024.hubspot.com
csp.expedia.com
*.prod.monitoring.expedia.com
www.expedia.com
*.us-west-2.prod.merchandising.expedia.com
*.prod.dcs.expedia.com
*.us-west-2.i.prod.localexpert.expedia.com
eps-gateway-canary-us-east-1.prod.epsdecaf.expedia.com
test.egcontactcenter.expedia.com
ean-surenext-booking-service.i.prod.epsdecaf.expedia.com
*.prod.monitoring.expedia.com
jamf.expedia.com
*.test.tuesdaySegment.expedia.com
*.us-east-1.i.prod.lodgingpartner.expedia.com
cloudbees.vrbojenkins-gn.us-west-2.test.cicdtools.expedia.com
media.expedia.com
lab.vap.expedia.com
puntacana2023.expedia.com
mk.expedia.com
*.sem.prod.gmomarketingtech.expedia.com
*.hotelplanner.com
*.hotelplanner.com
www.goodday.expedia.com
*.us-west-2.i.test.eweflex.expedia.com
li.lisecurelink.com
forum.tools.expedia.com
partner-users-api-us-west-2-main.prod.epsdecaf.expedia.com
secure0024.hubspot.com
discoverpuntacana.expedia.com
www.expedia.com
*.test.piidataprotection.expedia.com
newsroom.expedia.com
*.test.lpsprojectping.expedia.com
www.cancun2023.expedia.com
*.us-west-2.prod.lodgingbooking.expedia.com
*.us-west-2.test.egtiger.expedia.com
houston.expedia.com
Hollandtripbuilder.expedia.de
eps-com-us-west-2.test.epsdecaf.expedia.com
bcexplorer.expedia.com.au
*.us-west-2.i.prod.lodgingshared.expedia.com
www.helpinghand.expedia.com
rateshop.expedia.com
*.test.securityplatform.expedia.com
jpmcpayout.payments.expedia.com
www.puntacana.expedia.com
lx.expedia.com
canaryislands.expedia.com
lab.vap.expedia.com
www.expedia.com
*.us-east-1.int.expedia.com
www.expedia.com
*.hotelplanner.com
japanelevated.expedia.com

Certificate

The complete raw certificate details for cctoken.lab.expedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YnnNgqSmrghVHvK5Xq6
xSUDVH/dbF8AXcea9Z1X2+YxsiTYNu1LKQS5GY5rtOw93CzjRq+WfpBwPw23gF52
RQoaIY7RN/7z7i1SZI5f1UvGy1lFurJSC7+SkzNvxQVRMWrREc7M2vt/3QX2QjJP
GlfG3GO8DCgzTOldoqAFM/AdgzIZXn91QAua8l1sYa528oxkAKyQ65tDSR083EuD
gS0Oh3Ir5s2xYVVNVCzi08Vf9jiVdP1qRFszVhgMdLdgbD+hnpYEB8ub0EvpbPp8
W80e0oL6tN9v/pO7hde75lOCcemd7r04JruFp9LEKdXUtSWKoPGx57YbuGZwtnMv
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 55227478689283450376438963882545090228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-07 23:11:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-07 23:11:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Expedia, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cctoken.lab.expedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26451808324713117995920072399308239229328282366439052127555147743560218044585581348935447770676506903395887104722190885497115663519241108344816010216488932501199760144417392979668883872732272158411214424269172802173887217794511011815010102636986762045645865409337691821714704483293508876701342403811093187844526658202267429095956149976506479767995863917293060189582247227117334269361832465961797498229610738443316232462802584305786523607249367101055168956398760302977905025341204711502804006343975591241169970900785153882997434704316127256772682665254145857319881111490137503326350574184750899323946783711350551162693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c99e0b282124dd043edfb7b049c5b7a5bfd8d1a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cctoken.lab.expedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokenprovider-integration.cctlab.expecn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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