qa.gatekeeper.latam-abc.symphony.edgedatg.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:5c:0b:39:56:e2:db:ab:90:bd:c2:2b:0b:b2:93:9a was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qa.gatekeeper.latam-abc.symphony.edgedatg.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:5c:0b:39:56:e2:db:ab:90:bd:c2:2b:0b:b2:93:9a
Serial Number (int): 15099426914020147668159862539786818458
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e0:d0:05:f3:25:4a:de:bd:6f:b6:5e:40:48:9f:d9:ef:73:0b:a9:5a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 37:b6:a9:b8:16:9f:30:7d:7a:ab:2d:18:08:f3:10:9d:bc:cf:c6:2b
Fingerprint (sha256): 2c:e1:ec:c6:72:15:47:c5:0a:53:98:39:9e:94:04:dc:b1:64:4f:53:14:07:db:53:12:39:65:e1:be:32:e5:b0

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate qa.gatekeeper.latam-abc.symphony.edgedatg.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa.gatekeeper.latam-abc.symphony.edgedatg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa.gatekeeper.latam-abc.symphony.edgedatg.com
qa.gatekeeper.latam-abc.symphony.edgedatg.go.com
*.qa.gatekeeper.latam-abc.symphony.edgedatg.com
*.qa.gatekeeper.latam-abc.symphony.edgedatg.go.com

Other certificates including the domain name edgedatg.com

(limited to 100 certificates)
datg-cdnedge-static-assets.platform.edgedatg.com
test.gatekeeper.us-abc.symphony.edgedatg.com
*.dam.cms.us.platform.edgedatg.com
natgeoinstantaccess.com.platform.edgedatg.com
test.gatekeeper.us-abc.symphony.edgedatg.com
*.gatekeeper.us-abc.symphony.edgedatg.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
olaf-api.east.nonprod.us.platform.edgedatg.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
cdn1.edgedatg.com
test.gatekeeper.us-abc.symphony.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
*.dev.gatekeeper.latam-abc.symphony.edgedatg.com
*.dev.gatekeeper.latam-abc.symphony.edgedatg.com
static.ddb.go.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
*.prod.gatekeeper.latam-abc.symphony.edgedatg.com
dockerhub.prod.ext.us-west-2.us.platform.edgedatg.com
prod.airflow.appdata.us.platform.edgedatg.com
telemetrydashboardmonitor.platform.edgedatg.com
static.ddb.go.com
*.gatekeeper.us-abc.symphony.edgedatg.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
*.dtci-pe-vp-image-resizer.platform.edgedatg.com
static.ddb.go.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
*.gatekeeper.us-abc.symphony.edgedatg.com
olaf-api.west.nonprod.us.platform.edgedatg.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
prod.olaf.us-abc.symphony.edgedatg.com
*.staging.gatekeeper.latam-abc.symphony.edgedatg.com
datg-cdn-static-assets.platform.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
test.gatekeeper.us-abc.symphony.edgedatg.com
*.connector.databus.us.platform.edgedatg.com
test.gatekeeper.latam-abc.symphony.edgedatg.com
prod-datg-cdn-origin.platform.edgedatg.com
*.dtci-pe-vp-image-resizer.platform.edgedatg.com
dockerhub.nonprod.ext.us-east-1.us.platform.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
static.ddb.go.com
*.idphospital.us-abc.symphony.edgedatg.com
abcinstantaccess.com.platform.edgedatg.com
qa.gatekeeper.latam-abc.symphony.edgedatg.com
*.dtci-pe-vp-image-resizer.platform.edgedatg.com
secure.cdn.media.oscar.abc.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
*.test.gatekeeper.latam-abc.symphony.edgedatg.com
*.athenaportal.us.symphony.edgedatg.com
*.connector.databus.us.platform.edgedatg.com
dev.gkcast.us-abc.symphony.edgedatg.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
qa.gatekeeper.latam-abc.symphony.edgedatg.com
idphospital.us-abc.symphony.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
*.test.gatekeeper.latam-abc.symphony.edgedatg.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
prod.gatekeeper.latam-abc.symphony.edgedatg.com
secure.cdn.media.oscar.abc.com
secure.cdn.media.oscar.abc.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
origin.aws.edgedatg.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
telemetrydashboardmonitor.platform.edgedatg.com
dev.gkcast.us-abc.symphony.edgedatg.com
api.watchabc.go.com
qa.gatekeeper.latam-abc.symphony.edgedatg.com
test.gatekeeper.us-abc.symphony.edgedatg.com
*.pres.cms.us.platform.edgedatg.com
origin.aws.edgedatg.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
api.utils.watchabc.go.com
test.gkcast.us-abc.symphony.edgedatg.com
secure.cdn.media.oscar.abc.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
olaf-api.east.prod.us.platform.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
static.ddb.go.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
test.gatekeeper.us-abc.symphony.edgedatg.com
datg-cdn-static-assets.platform.edgedatg.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
static.ddb.go.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
test.gatekeeper.us-abc.symphony.edgedatg.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
*.prod.gatekeeper.latam-abc.symphony.edgedatg.com
telemetrydashboardmonitor.platform.edgedatg.com

Certificate

The complete raw certificate details for qa.gatekeeper.latam-abc.symphony.edgedatg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFcDjyEk7TnMy9jM1WQT
fgIl6T8Invq2ywubkdDpxIJdg+rA2bWNcTj5l1L3DhTmBniXOh14ZVX4ACWtTqBG
+VGs3klM9yvvBhkovxSPpHi+kW0mjIr3sdw1mvK77f1DOfelsBQPVntFOu418MMH
/mmCI8SH7D8EHsrYq3C0vZ3feTh2vuDYjKGb0LBIDo02/yVDvNajrdZ6HONMybtU
gTxlKnqk5i3BbGIdkVpl5rFZt50p8JXrbIvcb6IMF5FBkhtVoNefRqRTE11kId4w
ocL7BuSFjAb8NvBU8VLlZ/Cc0EX7Pmxu0FWL4zwWrrk6NSdPyMfy7EvVfYisIJFP
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15099426914020147668159862539786818458
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa.gatekeeper.latam-abc.symphony.edgedatg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20745990169079778176311885912775643031160093728423040574394245621841929197136111458948466517015290698273294007593902468696253024420414856193742840258613246447441676290953997994563559262462913395595314346930756391566069107880958257022833317867466648634015502277997262923918720046980359339933959503728218833293302027420010230695659011846725830245831182724570324778444312756363593601287523490024400932034518309315940988842391366036871312764636842583048893203877946410314897817570304214282483960043083920085492524220234950190089738336647316690673940124465571963641829490434887409532496962114613219129486628281707712827339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0d005f3254adebd6fb65e40489fd9ef730ba95a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (201 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.gatekeeper.latam-abc.symphony.edgedatg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.gatekeeper.latam-abc.symphony.edgedatg.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.gatekeeper.latam-abc.symphony.edgedatg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.gatekeeper.latam-abc.symphony.edgedatg.go.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a0076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000179f86eb4800000040300473045022100f56a3fd96d5bc380ef382c8ba24bc084b972d736b9750b77002df84c7552880d022045b328d37617aa384bb078dc8f137edfd0b80a3a7232f19358937f94e81334720077002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f0200000179f86eb4b30000040300483046022100be4cbeacf5f7dd0837685c96996dd344568d147f55e230bf178b5e36ec2bb1ac022100c255b51468326754b1e6f8a9780905b62660640274247ec95796fbcc9311f16400770051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e500000179f86eb4ef000004030048304602210083ac0fa0c1a11647089b476b2e40d5f859476ca30ad4263743f78718017fd440022100aa05de31ea297dd6ee72d6710fa4d9040724d391bf9f6a3432dfcd441d6ca4b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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