vetservices.royalcanin.be

Issued by Amazon

About this certificate

This digital certificate with serial number 03:7e:28:a5:5b:e9:48:2f:d9:49:4a:cb:b4:9c:ae:d6 was issued on by Amazon.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vetservices.royalcanin.be

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7e:28:a5:5b:e9:48:2f:d9:49:4a:cb:b4:9c:ae:d6
Serial Number (int): 4642737789006253323092400291891162838
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 61:e6:3f:07:2d:36:07:b8:af:ac:ff:2f:c6:04:34:31:b7:26:1b:b8
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): c0:99:7c:62:1e:fb:b1:83:0c:b1:e2:f5:bf:6c:f2:b0:d2:6e:0c:c9
Fingerprint (sha256): 32:c6:8a:6d:d2:35:ec:47:a7:e3:84:fa:5f:6c:5b:c2:66:ad:52:d6:2e:f4:13:b7:1e:25:cb:75:d3:e9:db:d1

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate vetservices.royalcanin.be

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vetservices.royalcanin.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vetservices.royalcanin.be
vetservices.royalcanin.cz
vetservices.royalcanin.ee
prescripcion-veterinaria.royalcanin.com.mx
vetservices.royalcanin.pl
vetservices.royalcanin.ru
vetservices.royalcanin.com
vetservices.royal-canin.de
vetservices.royalcanin.nl
vetservices.royalcanin.ch
vetfollowup.royalcanin.com.au
www.vetservice.royalcanin.dk
vetservices.royalcanin.fi
vetservices.royalcanin.fr
vetservices.royalcanin.gr
vetservices.royalcanin.lv
vetservices.royalcanin.lt
vetservices.royalcanin.my
vetfollowup.royalcanin.co.nz
vetservices.royalcanin.ph
vetservices.royalcanin.sk
vetservices.royalcanin.kr
serviciosveterinarios.royalcanin.es
vetservices.royalcanin.se
vetservices.royalcanin.co.th
vetservices.royalcanin.com.ua
www.vet-followup.royalcanin.co.uk
vetservices.royal-canin.at

Other certificates including the domain name royalcanin.be

(limited to 100 certificates)
survey.royalcanin.be
my.royalcanin.be
partnerfidelity.royalcanin.be
aws-cf-rd08.mars-inc.com
order.royalcanin.be
support.royalcanin.be
incapsula.com
www.promo.royalcanin.be
kiosk.royalcanin.be
royalcanin.be
deals.royalcanin.be
www.royalcanin.be
offer.royalcanin.be
aws-cf-rd08.mars-inc.com
deals.royalcanin.be
order.royalcanin.be
vetfollowup.royalcanin.com.au
aws-cf-rd08.mars-inc.com
www.partner.royalcanin.be
www.partner.royalcanin.be
order.royalcanin.be
royalcanin.be
weborder.royalcanin.be
maps.royalcanin.be
royalcanin.be
www.deals.royalcanin.be
royalcanin.be
maps.royalcanin.be
incapsula.com
deals.royalcanin.be
incapsula.com
aws-cf-rd08.mars-inc.com
deals.royalcanin.be
my.royalcanin.be
breeders.royalcanin.be
incapsula.com
scan.offer.royalcanin.be
royalcanin.be
partner.royalcanin.be
kiosk.royalcanin.be
www.my.royalcanin.be
maps.royalcanin.be
royalcanin.be
www.partner.royalcanin.be
vetservices.royal-canin.at
vetservices.royalcanin.be
www.partner.royalcanin.be
survey.royalcanin.be
www.promo.royalcanin.be
www.royalcanin.be
royalcanin.be
offer.royalcanin.be
my.royalcanin.be
multifunction.royalcanin.be
incapsula.com
vetservices.royal-canin.at
rctools.royalcanin.be
vetservices.royalcanin.be
offer.royalcanin.be
incapsula.com
order.royalcanin.be
multifunction.royalcanin.be
*.royalcanin.be
deals.royalcanin.be
survey.royalcanin.be
aws-cf-rd08.mars-inc.com
deals.royalcanin.be
www.my.royalcanin.be
royalcanin.be
www.royalcanin.be
adminvfu.royalcanin.com
partnerfidelity.royalcanin.be
deals.royalcanin.be
survey.royalcanin.be
support.royalcanin.be
royalcanin.be
adminvfu.royalcanin.com
order.royalcanin.be
www.royalcanin.be
*.royalcanin.be
aws-cf-rd08.mars-inc.com
vetservices.royal-canin.at
order.royalcanin.be
support.royalcanin.be
account.royalcanin.be
survey.royalcanin.be
my.royalcanin.be
incapsula.com
kiosk.royalcanin.be
breeders.royalcanin.be
support.royalcanin.be
rctools.royalcanin.be
deals.royalcanin.be
www.royalcanin.be
www.royalcanin.be
survey.royalcanin.be
www.royalcanin.be
survey.royalcanin.be
deals.royalcanin.be
www.deals.royalcanin.be

Certificate

The complete raw certificate details for vetservices.royalcanin.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAz+RGSqvDRAEKCt9vOh
dylKD8eCRESMJKORG2WF7lcJtdT434FgfCK/4HE9TnK/+s9/o068/3KydwUA3o3V
S0ATPjCKuEVaS70ghEtbL4KMVj2uGtRGEsYuQ+D7smVJni0O+e+UztNdWAVZ+sm/
gVkcpkBgc0lFgWdiEkL/u4bxD7cwaLzK45ZUVvyq25DjDMMTKH6Gz1zidJFCF8On
zN3xyEgEWr2GoE+nYvbfqi2Ym/Bw5NHNFlXEVyX8lQ3dsMYEuHNpiW7bU0rha7Z/
qKpTIUF/Jw6KeGmk/d3U4NAr6BX0aruhCl/EZ1mhxyPomXpLyUs9s4RUpdJYkqq6
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4642737789006253323092400291891162838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vetservices.royalcanin.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20709489215487628825626507149539118735165731916877835428037387500626937089531644011126366491255179221202700216560597608903191621975375782250713046169695830074111793774052557163569964347995196144168052206012665201609508071422101597665795124102496646315072176251909259605765677458220293334904769268574796189916291258654342708052176244918944194127733470848266787584971244752281577899988554001118983053803349998974271422070788981341067146584201334489927409986291453489990488253582303853764806484602551420877909151378907508440362328915487338103026051978670061369734657563590344976830247125613191902911734649798348744866451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61e63f072d3607b8afacff2fc6043431b7261bb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (815 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripcion-veterinaria.royalcanin.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royal-canin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetfollowup.royalcanin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservice.royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetfollowup.royalcanin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviciosveterinarios.royalcanin.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vet-followup.royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royal-canin.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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