*.ow-prod-app.wna.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 01:94:30:35:f8:96:9e:36:5c:6c:dc:7f:a0:bf:1b:57 was issued on by Amazon.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ow-prod-app.wna.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:94:30:35:f8:96:9e:36:5c:6c:dc:7f:a0:bf:1b:57
Serial Number (int): 2098665762536027343440747636797152087
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 0a:70:84:fa:41:ab:82:1e:48:1a:f1:16:ef:0e:ae:18:0d:8d:61:89
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e0:d6:be:27:59:2d:29:a5:0a:25:f9:0f:25:48:5a:f6:38:b6:8c:22
Fingerprint (sha256): 28:93:e1:44:c2:e4:a7:b2:4b:8c:e7:11:60:25:de:2e:a4:a3:28:1c:a1:bc:3c:07:31:d4:c0:a3:ac:8a:f0:9c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.ow-prod-app.wna.cloud

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ow-prod-app.wna.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ow-prod-app.wna.cloud
bi.owteam.com
*.aoacademy.com
wiki.owschools.com
*.ignitiaschools.com
rostering.odysseyware.com
*.sooschools.net
*.ignitiaschools.net
login.calverthomeschool.com
my.learnbest.com
lms.calvertacademy.com
*.sooschools.com
*.owschools.net
go.learnbest.com
*.owschools.com

Other certificates including the domain name wna.cloud

(limited to 100 certificates)
*.k8s.doolittle-dev2.us-west-2.aws.wna.cloud
*.cosmos-prod.edgenuityapp.com
media.wne-cdn.com
*.imlp-prod-app.wna.cloud
media.wne-cdn.com
*.doolittledev.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.doolittle-dev2.us-west-2.aws.wna.cloud
*.dev.doolittle.us-west-2.aws.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.assessment-prod.il-apps.com
*.doolittleprod.wna.cloud
*.doolittle-dev2.wna.cloud
*.ow-prod-app.wna.cloud
*.k8s.doolittle-production.us-west-2.aws.wna.cloud
*.rad-prod.edgenuityapp.com
*.ow-prod-app.wna.cloud
media-prod.wne-cdn.com
*.k8s.doolittle-dev2.us-west-2.aws.wna.cloud
*.k8s.doolittle-dev2.us-west-2.aws.wna.cloud
*.assessment-dev.il-apps.com
*.doolittle-dev2.wna.cloud
*.doolittle-nonprod.wna.cloud
*.rad-prod-app.wna.cloud
*.doolittle-dev5.wna.cloud
*.assessment-prod.il-apps.com
*.ow-prod-app.wna.cloud
*.wna.cloud
*.lmsadmin-qa.edgenuityapp.com
*.ow-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.doolittle-prod-app.wna.cloud
*.rad-prod.edgenuityapp.com
media-nonprod.wne-cdn.com
*.armstrong-prod-app.wna.cloud
*.k8s.doolittle-nonprod.us-west-2.aws.wna.cloud
*.ow-prod.edgenuityapp.com
*.k8s.doolittle-dev3.us-west-2.aws.wna.cloud
*.imlp-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.imlp-prod-app.wna.cloud
*.doolittle-dev2.us-west-2.aws.wna.cloud
*.imlp-prod-app.wna.cloud
*.doolittle-dev4.wna.cloud
*.wna.cloud
*.ow-prod-app.wna.cloud
*.lmsadmin-qa-app.wna.cloud
*.wna.cloud
*.imlp-dev.edgenuityapp.com
*.cosmos-prod.edgenuityapp.com
media.wne-cdn.com
*.rad-prod-app.wna.cloud
*.doolittledev.wna.cloud
*.doolittle-nonprod.wna.cloud
*.lmsadmin-dev.edgenuityapp.com
*.doolittle-pnayak.wna.cloud
*.lmsadmin-prod-app.wna.cloud
*.imlp-prod-app.wna.cloud
*.k8s.ops.us-west-2.aws.wna.cloud
*.ops.wna.cloud
*.doolittle-dev6.wna.cloud
*.armstrong-prod-app.wna.cloud
*.rad-prod-app.wna.cloud
*.doolittle-dev3.wna.cloud
*.ow-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.rad-prod-app.wna.cloud
*.doolittle-dev5.wna.cloud
*.lectura-staging.il-apps.com
*.k8s.doolittle-production.us-west-2.aws.wna.cloud
*.doolittle-dev-app.wna.cloud
*.doolittle-dev2.wna.cloud
*.ow-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.doolittle-prod.il-apps.com
*.k8s.ops.us-west-2.aws.wna.cloud
*.k8s.doolittle-pnayak.us-west-2.aws.wna.cloud
*.assessment-prod.il-apps.com
*.doolittle-production.wna.cloud
*.ops.wna.cloud
*.doolittle-nonprod.wna.cloud
*.imlp-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.intergalactic-prod.il-apps.com
*.doolittle-nonprod.wna.cloud
*.doolittledev.wna.cloud
*.ow-prod-app.wna.cloud
*.imlp-prod-app.wna.cloud
*.doolittle-production.wna.cloud
*.doolittle-dev6.wna.cloud
*.doolittle-nonprod.wna.cloud
*.doolittle-iam.wna.cloud
*.doolittle-production.wna.cloud
*.prod.ops.us-west-2.aws.wna.cloud
*.prod.doolittle.us-west-2.aws.wna.cloud
*.k8s.doolittle-dev6.us-west-2.aws.wna.cloud
*.doolittleprod.wna.cloud
*.doolittle-production.wna.cloud

Certificate

The complete raw certificate details for *.ow-prod-app.wna.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4b4phR0GvpzSzE8bwmvP
LTOnSI+CyUpu1drtK3Jp8TNlg740ra5Y8qR6BDoFWSfVZ48UUzOnWuVHmLms6xlr
pzu1oOGzyAnr1fu+yKYv5xAa7ek3z3Hwu9QQnyTWmB4GHn4r78XbAzR7xztPxyBm
WEiCpWa33R5CzONIQDjcioJiTD8FOtFed8hqS1OZPcTgV0kYb+qWBkgWWM1Ch48r
A94KEJOvDNl9x8nJd5SjhZpTGFvobMfKXOLiCT06hTKGEXYRaJOcdG3kxACRCwef
VfY4xZQcjhepVgeJH7hfko6sST3ccT3jVf5dvPXOS/00Ec9LocI/oFe/u4ynnoU2
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2098665762536027343440747636797152087
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ow-prod-app.wna.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28497391086917463873351321715427550337391844018949933120076824679760908334708276776152838125268538825084528079744370497901684049729737471753342249422303071268235485995852832695593852583523427537736057675970324739792271225702983446608039148536107817660243452883687294018253279697869198432095427387628212733848840796129432801031628912845038013966663735843460869491820302232904983300228168873331784864430894473840627402952398689308346667093121429180314215167924361946158554685501140771340907979081771613548525972786465627956635108017717501795686599589247222351713110439937285709235524833648978862553652913356737001895493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a7084fa41ab821e481af116ef0eae180d8d6189
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (311 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ow-prod-app.wna.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.owteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aoacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.owschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ignitiaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rostering.odysseyware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sooschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ignitiaschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.calverthomeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.learnbest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.calvertacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sooschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.owschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.learnbest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.owschools.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000181b670c7130000040300473045022056d8b6497cd85a6d9169157cc85e0d1ae6eda422c05f7d995f59924661d13fa202210089b9662408fc2ac079703713ce4b25569e6bc81df1e8443f6b513c0f05b9a22500770035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c00000181b670c6570000040300483046022100aa9720692ae5309752ba09439b3e8fb24ab28c5623547d5a0068e2d0b734950e022100d6dbb4c60936ef7426668e2d3b65d9f29e1606c2ca955b389170adcddbe1e3ba007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000181b670c68e0000040300473045022100a7e7610818200036e2f285b446f767527c7ccd9e3c7b2719978e2f1e95a99d3b022018280be08c1a7fcdcd2f177e2f459114ca960e3fe856fab9107580f7fb321678
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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