speedns.net

Issued by Amazon

About this certificate

This digital certificate with serial number 05:70:34:d2:b0:99:70:dd:6d:aa:03:13:19:0b:6a:34 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=speedns.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:70:34:d2:b0:99:70:dd:6d:aa:03:13:19:0b:6a:34
Serial Number (int): 7228748604948858309923814717671565876
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 12:8f:c6:ec:3f:05:c4:ed:28:22:e8:3e:4b:35:8c:38:b3:fb:ae:09
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a5:3c:bc:25:fc:fc:6d:50:c2:a7:40:d3:fb:6d:1a:62:14:22:90:22
Fingerprint (sha256): 39:97:df:7e:e9:46:4d:d4:e6:30:d3:00:25:56:9d:98:ff:03:7b:a3:00:61:ed:5d:26:05:80:52:57:0f:68:22

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate speedns.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for speedns.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

speedns.net
*.speedns.net

Other certificates including the domain name speedns.net

(limited to 100 certificates)
speedns.net
ssl389236.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389238.cloudflaressl.com
support.speedns.net
ssl389237.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389236.cloudflaressl.com
speedns.net
speedns.net
ssl389238.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389237.cloudflaressl.com
sni.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389238.cloudflaressl.com
www.speedns.net
ssl389238.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389236.cloudflaressl.com
sni.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389236.cloudflaressl.com
speedns.net
ssl389238.cloudflaressl.com
ssl389237.cloudflaressl.com
support.speedns.net
ssl389236.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
www.speedns.net
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389236.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
support.speedns.net
ssl389238.cloudflaressl.com
ssl389236.cloudflaressl.com
speedns.net
ssl389238.cloudflaressl.com
ssl389238.cloudflaressl.com
speedns.net
ssl389238.cloudflaressl.com
ssl389237.cloudflaressl.com
ssl389238.cloudflaressl.com

Certificate

The complete raw certificate details for speedns.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIQBXA00rCZcN1tqgMTGQtqNDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAzMTQwMDAwMDBaFw0yMTA0MTQx
MjAwMDBaMBYxFDASBgNVBAMTC3NwZWVkbnMubmV0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA1vvgvOK/rtmI/NBNMv6SfDh0wTVRSAjJOwk++B/FYC5W
M70ioZwsZHKWj4QI7sW+rFRW3q93GpqzEMZJ+Xb4sK1JtiuageQ1FjkueX9QvepV
ugoX5+W4QDdFL7/j5chMO3/C2AXAh/sFTquDUTwXEQKAj5G3ggBgXw2DshtebiuZ
7ZAf6YY3dsyYrfjtQ2JkM7wQdTTB6Lu8bsk8tuvvynFCf4JQvjQO1p+N/F32jJn6
xxDCBR4TfJ1o+dafV8hZ5T//gAYei2uFDYfZ/Owr9zvO5XyuzsGS+fJh8DwirHCd
us26kFwUKcEsHBNdxsvoF8Go/PsipYzgNnJoHUUTpQIDAQABo4IChTCCAoEwHwYD
VR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFBKPxuw/BcTt
KCLoPks1jDiz+64JMCUGA1UdEQQeMByCC3NwZWVkbnMubmV0gg0qLnNwZWVkbnMu
bmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVz
dC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAEC
ATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFi
LmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5h
bWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggEDBgorBgEE
AdZ5AgQCBIH0BIHxAO8AdQD2XJQv0XcwIhRUGAgwlFaO400TGTO/3wwvIAvMTvFk
4wAAAXDWeFGnAAAEAwBGMEQCIHcdX1I7tlviIZRKMymAJ6kmOyuJxuJhlIOEQCdn
nYpsAiBmbmeQB7FOYm3J6KGoM72BdL/B9rokiyJnHd8/3D2+FgB2AFzcQ5L+5qtF
RLFemtRW5hA3+9X6R9yhc5SyXub2xw7KAAABcNZ4UfUAAAQDAEcwRQIgEHMtFfB6
tzWnmg/XJK3BFEPB5eTczfD0I6t8/LcM7WYCIQDVISjJORpYsUY4+FDCcPvVtENp
axe8F0SmfSxzrnAf2DANBgkqhkiG9w0BAQsFAAOCAQEAlKDJFYrtGl2J1rs+bquz
T4xUvMsJmQ9qhG4cSJ2mfwJQ+6y+JQR3I2n4Dnc4LWh4SWSKueAEGDYobRkjcohx
b8eOsIpsaeKnijChFO4lNa8AEGAJebm0eeFAPOYdIv5+L/OcmBzy/aqSanMK4gB7
SBdblTgiiPdiSabEu4ozlKw31c0o3X+FT7tHVulZ+s9yZOWzgWSZlWcmYh2DGHii
BtKq5+HZX3+FdaUwSBYgFxilA62nQ8GiluBH7DrNKD0vWPBl8mpdCRPPM97KigLG
0VEvCd64irKZyceHK9MQHEaHDZl0KeSOvGnSfEhGHHvJZ+Ll4C98u8X3BRnKqLvH
KA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vvgvOK/rtmI/NBNMv6S
fDh0wTVRSAjJOwk++B/FYC5WM70ioZwsZHKWj4QI7sW+rFRW3q93GpqzEMZJ+Xb4
sK1JtiuageQ1FjkueX9QvepVugoX5+W4QDdFL7/j5chMO3/C2AXAh/sFTquDUTwX
EQKAj5G3ggBgXw2DshtebiuZ7ZAf6YY3dsyYrfjtQ2JkM7wQdTTB6Lu8bsk8tuvv
ynFCf4JQvjQO1p+N/F32jJn6xxDCBR4TfJ1o+dafV8hZ5T//gAYei2uFDYfZ/Owr
9zvO5XyuzsGS+fJh8DwirHCdus26kFwUKcEsHBNdxsvoF8Go/PsipYzgNnJoHUUT
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7228748604948858309923814717671565876
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'speedns.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27139202875639988093672041883737258600649079840141325045901396159193830981915686377908908547374959420967383447265657020379573553512442182730860371025753989025795079544510338582510978081656984594043656278632834377323998557551570918317059852166033361923192013569473861505231208497759465387788659501585164626289984417350261468804952764641922065186829598965352453642445683796869502489152339146887217705611114962908014919610752409139562317844577608201583951648056925158931990634162910863811879263273532545811450072002731733929904040855341211420277017789761129478958262816543461144383508321060498366005369922088581755900837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							128fc6ec3f05c4ed2822e83e4b358c38b3fbae09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speedns.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000170d67851a700000403004630440220771d5f523bb65be221944a33298027a9263b2b89c6e2619483844027679d8a6c0220666e679007b14e626dc9e8a1a833bd8174bfc1f6ba248b22671ddf3fdc3dbe160076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000170d67851f50000040300473045022010732d15f07ab735a79a0fd724adc11443c1e5e4dccdf0f423ab7cfcb70ced66022100d52128c9391a58b14638f850c270fbd5b443696b17bc1744a67d2c73ae701fd8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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