api-raven.production.infra.apna.co

Issued by Amazon

About this certificate

This digital certificate with serial number 04:d4:d5:17:a5:4a:90:f4:cb:11:9d:f6:af:c2:4d:5e was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api-raven.production.infra.apna.co

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d4:d5:17:a5:4a:90:f4:cb:11:9d:f6:af:c2:4d:5e
Serial Number (int): 6422000943797534250328915338649029982
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f1:12:d8:bd:60:40:dd:5f:5d:38:d9:47:0c:39:7a:f9:ca:93:6c:25
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d3:9d:46:1c:c7:14:1c:7a:8d:8f:b0:ab:94:38:5e:8b:b8:cc:6f:23
Fingerprint (sha256): 32:23:4f:0a:1c:cc:70:7a:4e:89:46:95:e2:d7:0c:43:66:43:d7:76:b8:55:aa:aa:0d:dd:c7:a0:69:f3:aa:2c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate api-raven.production.infra.apna.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-raven.production.infra.apna.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-raven.production.infra.apna.co

Other certificates including the domain name apna.co

(limited to 100 certificates)
cdn.apna.co
kb-ls-test-e2e-3-development01.infra.apna.co
retool.infra.apna.co
apna.co
employer.apna.co
apna.co
cms.production.infra.apna.co
apna.co
jenkins.infra.apna.co
django.staging.infra.apna.co
admin.stage.pa.shopcall.io
dash.infra.apna.co
apna-co-temp.staging.infra.apna.co
www.studior-inc.com
backend.development.infra.apna.co
kb-nj-launch-new-production01.infra.apna.co
analytics.apna.co
canary.production.infra.apna.co
es-ls-test-e2e-development01.infra.apna.co
apna-experts.apna.co
apna-insights.staging.infra.apna.co
join.apna.co
security.staging.infra.apna.co
es-nj-local-3-development01.infra.apna.co
percona.infra.apna.co
grafana.staging.infra.apna.co
engineering.apna.co
apna.co
jenkins.infra.apna.co
django.staging.infra.apna.co
vpn-portal.infra.apna.co
www.apna.co
website-test.apna.co
apna-co-temp.staging.infra.apna.co
admin.projectmumbai.org
staging-gke.infra.apna.co
careers-test.apna.co
kb-nj-ups2-production01.infra.apna.co
prod.apna.co
apna-co.staging.infra.apna.co
es-new-world-hereicome-production01.infra.apna.co
backend-stg.apna.co
rabbitmq-production.infra.apna.co
flower-rabbitmq.prod.infra.apna.co
es-namanj-manual-production01.infra.apna.co
foundrymotor.com
dev.scorecard.ghandicap.com
grafana.infra.apna.co
apna.co
www.burnr.io
kb-ls-test-e2e-2-development01.infra.apna.co
apna-co.staging.infra.apna.co
es-deploy001-001.infra.apna.co
cdn.apna.co
backend-stg.apna.co
flower-rabbitmq-b.prod.infra.apna.co
bender.brennaswitzer.com
kong-admin.staging.infra.apna.co
apna-co.staging.infra.apna.co
kong-admin.staging.infra.apna.co
vpn.infra.apna.co
backend-stg.apna.co
jenkins.infra.apna.co
metabase.infra.apna.co
website-test.apna.co
mobsf.staging.infra.apna.co
prometheus.staging.infra.apna.co
kong-admin.staging.infra.apna.co
es-namanj-development01.infra.apna.co
kb-nj-launch-new-production01.infra.apna.co
kb-namanj-development01.infra.apna.co
comm-ops.apna.co
cdn.apna.co
api-raven.production.infra.apna.co
api.staging.infra.apna.co
unleash.staging.infra.apna.co
engineering.apna.co
api-raven.production.infra.apna.co
apna.co
bb.staging.infra.apna.co
cardless.study
es-ls-test-e2e-1-development01.infra.apna.co
yamakoune-practice.tk
blog.apna.co
es-poc.infra.apna.co
kb-manish-launch-001-production01.infra.apna.co
sub47.rukab.xyz
unleash.infra.apna.co
api.staging.infra.apna.co
rabbitmq-production-b.infra.apna.co
comm-ops.apna.co
cdn.apna.co
vpn-portal.infra.apna.co
unleash.infra.apna.co
unleash.infra.apna.co
analytics-prod.apna.co
employer.apna.co
join.apna.co
unleash-proxy.production.infra.apna.co
apna.co

Certificate

The complete raw certificate details for api-raven.production.infra.apna.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIQBNTVF6VKkPTLEZ32r8JNXjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTA1MTUwMDAwMDBaFw0yMjA2MTMy
MzU5NTlaMC0xKzApBgNVBAMTImFwaS1yYXZlbi5wcm9kdWN0aW9uLmluZnJhLmFw
bmEuY28wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4jcg0jAonB0mP
dn5JEOxbGbx2WisR1f/55lgQ3Q7IfoqFacugRw/jrWdQAEcoMNQ5gmE9PRgeTa2U
7C/C+viof1ejHj/EjsV5UXyF2iLVsfEHTP238zyZAXDJaEquihH05LlqMyNpNqYP
ki9xscpLxldxUjfnGaATTn1ZT1sJ3rOQL0J/OECl4+NyzB79phhCRbUcQrYwFfCT
v1MIC342SdB8bl/vqiZqD6H4BX3KhQmLf0E1A8y4F6Hp80xt/AASqTLRkQJUV3Hk
RBE1rcwPz0ALnGRMgaax+E4orRA2kMmAY9oqRBGx12XVys0MoPPzsuhAmonubLVt
/RyjuK31AgMBAAGjggL7MIIC9zAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0
W/k90DAdBgNVHQ4EFgQU8RLYvWBA3V9dONlHDDl6+cqTbCUwLQYDVR0RBCYwJIIi
YXBpLXJhdmVuLnByb2R1Y3Rpb24uaW5mcmEuYXBuYS5jbzAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAu
oCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAT
BgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGG
IWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYq
aHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1Ud
EwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AEalVet1+pEgMLWi
iWn0830RLEF0vv1JuIWr8vxw/m1HAAABeW7BQ1UAAAQDAEcwRQIhANLYFSUGeMTg
juMPaRV7ZPqD0PngVUUfXJ+j6pOsSiD3AiA+fSYVQzaeh9emmrhgobVhh8UqqmGs
rk4QN5Y7EMzxFgB1ACJFRQdZVSRWlj+hL/H3bYbgIyZjrcBLf13Gg1xu4g8CAAAB
eW7BQz4AAAQDAEYwRAIgAPdCjFQs90MvhKNMnmNniMEGNc4G8TTk0LFbS5sDwooC
IDR0O99oHzHptRJeAIwx+yVhXgWDEjywtw0QOi3DdgsTAHcAUaOw9f0BeZxWbbg3
eI8MpHrMGyfL956IQpoN/tSLBeUAAAF5bsFDegAABAMASDBGAiEArPXfO4blcY+r
LzZFg2E9gCI2vFch5yJXSbpK6mb/aiwCIQD6pKejC/K0S3KzRUiPxwPA3SclK3zm
M6UO5FRm4NeDezANBgkqhkiG9w0BAQsFAAOCAQEAd6HyWOixEHQE1p0/yyCl0au2
3idlkYHS7MfuFNRr+PEh8lDSJYjTUCzJ5GSKwJ5zwhmTpS47Japhe5agypvtJHjl
8Jlgw78Eei4Uuw0ABG4lXkLPnVB6huwVLQ1CdTejswMsesGDbTzvFAvBkqA71CWA
/FajDjQnuVMk+aciYGcB5uYyDT/fJC2p81cCwFl2P/j3TqVARm4AqGLxwgK6iajM
Y4rSOmCAzAUJp4DdRtqYKHk4uy0/g5On7v/yCGyBPTIVnqj/ngCa7cQwMUm6Ak5x
tXL8q7zYYzy8bLFScXqxVB/7fOOwfSVCJNJPHXsSSddAEkBWejSoRtzjqOwtig==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI3INIwKJwdJj3Z+SRDs
Wxm8dlorEdX/+eZYEN0OyH6KhWnLoEcP461nUABHKDDUOYJhPT0YHk2tlOwvwvr4
qH9Xox4/xI7FeVF8hdoi1bHxB0z9t/M8mQFwyWhKrooR9OS5ajMjaTamD5IvcbHK
S8ZXcVI35xmgE059WU9bCd6zkC9CfzhApePjcswe/aYYQkW1HEK2MBXwk79TCAt+
NknQfG5f76omag+h+AV9yoUJi39BNQPMuBeh6fNMbfwAEqky0ZECVFdx5EQRNa3M
D89AC5xkTIGmsfhOKK0QNpDJgGPaKkQRsddl1crNDKDz87LoQJqJ7my1bf0co7it
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6422000943797534250328915338649029982
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-raven.production.infra.apna.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23297763449279601322827891305888381657076430812627372034013516596341035453495181223731668742298940679257917001210715559103513679769350589505330935525046427481704240493500549743650283830855541379003992310471558750400450703104692048967401298546477214985770191978263907589801369701757191229298308398839838407436952816968491891622841800863334712505915943258700425887024769744949619258703734307011447890352485029876569521516412498564700893357396236254689803818767026455619918152943794017878158378324984361901628148461429712910275477046443322017005243296244477999544014630673931463244373014895234662958837013794778244492789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f112d8bd6040dd5f5d38d9470c397af9ca936c25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-raven.production.infra.apna.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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