akuankka.fi

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:e9:ba:88:ae:c4:45:ad:04:d0:a0:d5:34:26:3d:c0 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=akuankka.fi

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:e9:ba:88:ae:c4:45:ad:04:d0:a0:d5:34:26:3d:c0
Serial Number (int): 13176640487406909048710142140445244864
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dc:28:03:74:12:be:d3:f9:b3:2e:27:ea:d4:26:f7:78:fa:15:9a:58
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): e0:27:df:16:97:45:07:13:b4:a5:15:74:6c:19:c4:9f:96:d4:54:32
Fingerprint (sha256): 3f:5b:ed:cd:7a:9c:2c:c3:18:52:80:a3:4a:66:72:11:94:d2:03:25:8c:23:b9:2f:89:bc:4c:4d:7c:93:4a:cf

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate akuankka.fi

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for akuankka.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akuankka.fi
prinsessat.fi
*.satukirjasto.fi
akuankkajuniori.fi
*.akuankka.fi
*.akuankkajuniori.fi
satukirjasto.fi
prinsessa.fi
*.prinsessa.fi
*.prinsessat.fi

Other certificates including the domain name akuankka.fi

(limited to 100 certificates)
akuankka.fi
*.akuankka.fi
www.lastenomakauppa.fi
lataamo.akuankka.fi
amonas.10kysymysta.fi
api.akuankka.fi
juniori.akuankka.fi
smftest.kauppa.akuankka.fi
kauppa.akuankka.fi
kauppa.akuankka.fi
*.akuankka.fi
www.lastenomakauppa.fi
akuankka.fi
akuankka.fi
kauppa.akuankka.fi
www.lataamo.akuankka.fi
akuankka.fi
*.akuankka.fi
*.juniori.akuankka.fi
www.lastenomakauppa.fi
akuankka.fi
akuankka.fi
kauppa.akuankka.fi
amonas.10kysymysta.fi
smftest.kauppa.akuankka.fi
amonas.10kysymysta.fi
akuankka.fi
api.juniori.akuankka.fi
beta.lastenomakauppa.fi
smftest.kauppa.akuankka.fi
akuankka.fi
message000.sp-prod.net
smftest.kauppa.akuankka.fi
www.lastenomakauppa.fi
akuankka.fi
akuankka.fi
akuankka.fi
*.juniori.akuankka.fi
akuankka.fi
amonas.10kysymysta.fi
amonas.10kysymysta.fi
www.lataamo.akuankka.fi
smftest.kauppa.akuankka.fi
www.akuankka.fi
kauppa.akuankka.fi
*.akuankka.fi
akuankka.fi
akuankka.fi
www.akuankka.fi
www.lastenomakauppa.fi
*.akuankka.fi
www.lastenomakauppa.fi
*.akuankka.fi
kauppa.akuankka.fi
amonas.10kysymysta.fi

Certificate

The complete raw certificate details for akuankka.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIQCem6iK7ERa0E0KDVNCY9wDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDUwNDAwMDAwMFoXDTI1MDYwMTIzNTk1OVowFjEU
MBIGA1UEAxMLYWt1YW5ra2EuZmkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqNBBaP4gJ0liJzFKK/o6k2Yxz3jYPLAhisFQRW8b6ESwzDl0A0OyZXYel
m6LYeJ2HxxNgLBzr3UuuiqD+G5sr9Ra2l05LeDCuqpJMYD3RziwxHQceP7Uvf/mM
RR+276Dl4xq3FcvHx1cYeZ/dDTKcM2Mb1enjqL0diA3jZmYbKNDndxQjtNTCjJpS
ODvMrmdZSGKImkmsTWWG+1doEqCIh4FS0Ye+dBJU6xPlpa/1IRcX+v4Sv5BisBGm
nSnUVOWlDfpH3j4NxSQDaFYgruqa4IoWODa0CsL6DrTWSdbwuC2hU4WtGUqYja9L
XZVIbOTT3h0DCzStUOQ1z7j6OjT1AgMBAAGjggODMIIDfzAfBgNVHSMEGDAWgBTA
MVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQU3CgDdBK+0/mzLifq1Cb3ePoV
mlgwgbMGA1UdEQSBqzCBqIILYWt1YW5ra2EuZmmCDXByaW5zZXNzYXQuZmmCESou
c2F0dWtpcmphc3RvLmZpghJha3VhbmtrYWp1bmlvcmkuZmmCDSouYWt1YW5ra2Eu
ZmmCFCouYWt1YW5ra2FqdW5pb3JpLmZpgg9zYXR1a2lyamFzdG8uZmmCDHByaW5z
ZXNzYS5maYIOKi5wcmluc2Vzc2EuZmmCDyoucHJpbnNlc3NhdC5maTATBgNVHSAE
DDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIu
YW1hem9udHJ1c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYB
BQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF
BQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2Vy
MAwGA1UdEwEB/wQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3AE51oydc
mhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABj0Ljg5IAAAQDAEgwRgIhAPWD
f6UcIQxtfHqg9LVnA6r6oGnOkzNu2cMufxis1UHEAiEAymXnfjnRu9fDhjImxxzG
x6LD9/gHnjOUOjmU1AzPNv4AdQB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kO
jC55uAAAAY9C44NEAAAEAwBGMEQCIF+1bQJotSkgIFECfPs/B/3EYZRqDAzpOkih
QvbL1uBxAiA6USnwlR6GRWA5LEmZSCSolYPasIsEqzR4JcoYK4p+NgB3AObSMWNA
d4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAABj0Ljg1UAAAQDAEgwRgIhAM69
Xp8/cl5osyIJlN0zu+T1807WzKhcQqv8GwzYmA+tAiEAjztpERy5tZFA/5wYxbgI
zzEePAOc8BIR7t1GDPjWnQkwDQYJKoZIhvcNAQELBQADggEBAEiPfrdPbVR++dVP
rbYuKHN4r5OKzmXIwGd//ehOFHfkK1JXIUzI2x51tCfAAX4JahdrXwhbDLaRtmTh
1kNeyrBuCEnQFqqQTSZBjlKz5tOEEp60DfzbdfrE0s7rtx3Il5R6APhknmdwMe88
fN0JRk2V1rrpeg59kMm+0be3x+veMYJIBmYoHcRun1H1hrXTDG/FEfPGxj94VWVJ
zv/9z7fyfyYbd7fG/BbAphXH3Ngmd4tNiObDEzXa1lWhq1YkESly558wuyOG3ru/
wiGuj/luSUyR5Ldl4LVqBvYxsOD9OdbXv7g1q0SMPD5C3Tj5nVl49ZKAQnXDW9pP
UymDxYs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjQQWj+ICdJYicxSiv6O
pNmMc942DywIYrBUEVvG+hEsMw5dANDsmV2HpZui2Hidh8cTYCwc691Lroqg/hub
K/UWtpdOS3gwrqqSTGA90c4sMR0HHj+1L3/5jEUftu+g5eMatxXLx8dXGHmf3Q0y
nDNjG9Xp46i9HYgN42ZmGyjQ53cUI7TUwoyaUjg7zK5nWUhiiJpJrE1lhvtXaBKg
iIeBUtGHvnQSVOsT5aWv9SEXF/r+Er+QYrARpp0p1FTlpQ36R94+DcUkA2hWIK7q
muCKFjg2tArC+g601knW8LgtoVOFrRlKmI2vS12VSGzk094dAws0rVDkNc+4+jo0
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13176640487406909048710142140445244864
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'akuankka.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21486185498887233174574664124791586527420655871544377229671148245198564453176591938111015607822933454707054872675019759755618667651414279654887172621855627463114076807440632277383599468315901015097113904917299087447871107900442370622670508496061374100329364279659335509914921216908467017382752600800835973498624382847024774190406820435934120583724196206462853453184968203251707739836280711950455762840343298522113376009135790730891218131312059523149771857216663354895309807257703262520308129589483169266673556153050999863963758932749047878313492876026683101755560207001006623243720819269575811907491574814636454327541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc28037412bed3f9b32e27ead426f778fa159a58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akuankka.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prinsessat.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satukirjasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akuankkajuniori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akuankka.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akuankkajuniori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satukirjasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prinsessa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prinsessa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prinsessat.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018f42e383920000040300483046022100f5837fa51c210c6d7c7aa0f4b56703aafaa069ce93336ed9c32e7f18acd541c4022100ca65e77e39d1bbd7c3863226c71cc6c7a2c3f7f8079e33943a3994d40ccf36fe0075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018f42e38344000004030046304402205fb56d0268b529202051027cfb3f07fdc461946a0c0ce93a48a142f6cbd6e07102203a5129f0951e864560392c49994824a89583dab08b04ab347825ca182b8a7e36007700e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018f42e383550000040300483046022100cebd5e9f3f725e68b3220994dd33bbe4f5f34ed6cca85c42abfc1b0cd8980fad0221008f3b69111cb9b59140ff9c18c5b808cf311e3c039cf01211eedd460cf8d69d09
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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