www.bienparabien.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 03:d2:87:f4:37:ef:07:65:43:34:ba:e4:6b:03:e6:1b was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.bienparabien.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:d2:87:f4:37:ef:07:65:43:34:ba:e4:6b:03:e6:1b
Serial Number (int): 5080823801925851612299538787964544539
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: fa:d4:f6:be:9a:61:b7:26:15:78:8f:e8:35:49:19:87:31:75:1d:1d
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): ed:f0:bf:76:cf:d4:7b:77:3a:f4:90:d0:8b:5f:75:77:7f:3b:7f:29
Fingerprint (sha256): 47:0d:2a:d1:e7:f3:55:26:d0:4e:e7:5a:e0:1e:c8:14:1e:9e:fd:82:1d:61:88:83:d0:b0:a7:c4:9a:17:4d:6b

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate www.bienparabien.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bienparabien.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bienparabien.com
bienparabien.com

Other certificates including the domain name bienparabien.com

(limited to 100 certificates)
tym.share.app-staging.c-rayon.com
amborjo.com
hillstarmedia.com
ivenfe.cc
scoring.bienparabien.com
www.status.bienparabien.com
www.mysolace.app
www.pspkdevtest.net.au
www.botls.app
notes.andymatuschak.org
insent.ai
bienparabien.com
www.joeyyang.com
isys.cc
seils.com.au
account.bienparabien.com
blog.bienparabien.com
www.mryu.menu
simulador.bienparabien.com
cburg.galander.berlin
spotter.soinlabs.net
blog.bienparabien.com
it.bienparabien.com
liquidez.bienparabien.com
www.belezafresca.com
www.kdmservices.in
www.appricode.co
api.facturacion.bienparabien.com
thetiburondon.com
www.pantaurelawan.com
status.bienparabien.com
www.nsjtt.org
*.bienparabien.com
www.matjaz.dev
nrm.bienparabien.com
myautodebits.ca
creditos.bienparabien.com
tst-originacion.bienparabien.com
www.neonotes.app
bienparabien.com
servicios.bienparabien.com
www.karlitekniksupompalari.com
soc.bienparabien.com
subscribe.insighttimer.com
soc.bienparabien.com
mailing.bienparabien.com
tst-originacion.bienparabien.com
agorapacific.com
liquidez.bienparabien.com
neuralup-app.com
www.bienparabien.com
www.bienparabien.com
valija.bienparabien.com
www.okoplay.com
api-ad.bienparabien.com
www.restaurantefutu.es
villaluronorte.com.ar
admin.kiey.com
satisfaccion.bienparabien.com
*.bienparabien.com
*.bienparabien.com
www.iceberg-technology.com
www.thehabitguru.com
nrm.bienparabien.com
ll.myroomabroad.com
yals.bienparabien.com
njhomes.info
www.nsjtt.org
static.bienparabien.com
tst-originacion.bienparabien.com
tym.share.app-staging.c-rayon.com
portmarnockden.com
promotores.bienparabien.com
*.bienparabien.com
www.bienparabien.com
tesoreria.bienparabien.com
www.bamboosalon.ca
mates.tentafy.com
valija.bienparabien.com
neu.report
www.pixelboxapp.com
blog.bienparabien.com
promotores.bienparabien.com
preview.ivyukraine.com
tst.bienparabien.com
www.bienparabien.com
link.metro-fs.com
petit.cocain.blue
kuronlyric.jp
status.bienparabien.com
ulink.goshop.my
tst.bienparabien.com
swiftlab.co.uk
www.urbancapital.in
symmetry.la
www.pantaurelawan.com
dreamitdesigns.net
kingsdownapp.plumsocial.co.uk
link.hilmers.de
tst.bienparabien.com

Certificate

The complete raw certificate details for www.bienparabien.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgIQA9KH9DfvB2VDNLrkawPmGzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTIxMTAwMDAwMFoXDTI1MDEwNzIzNTk1OVowHzEd
MBsGA1UEAxMUd3d3LmJpZW5wYXJhYmllbi5jb20wggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCm8GDtHC7uyOnjTVELaYxhyilDuFZwVHE4ela7xQ8xUpt9
5FUrDSBcqHuZwck5VuJCsBAfdynLMn4DI2yOxVmQF7WCxP/qvAkWnLJIqFZFKSV7
OjzfBuChr555qz4025vg3VB03z6juEFsfz3HFIAHr2yMZU+s7jhWrRmyfgIjribr
lFFPD/ChmIcEudy4AKDlUIKIiDsMmKZPKkOtPknL9MrvmvW1SD1W6T/JAnhc3sL7
3Qtpuw8oZ4dW4+Kk3BxE0zeDwv7MIaTtTYtC5TTFpV0gD4/1eRt9LFxpm/G1c1HD
9LdOFwBxX+Wu02kfgbiRMb81t8R62jJOeLyLC/fzAgMBAAGjggL+MIIC+jAfBgNV
HSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQU+tT2vpphtyYV
eI/oNUkZhzF1HR0wMQYDVR0RBCowKIIUd3d3LmJpZW5wYXJhYmllbi5jb22CEGJp
ZW5wYXJhYmllbi5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCg
LqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmww
dQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5h
bWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1h
em9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHW
eQIEAgSCAW0EggFpAWcAdQBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo5
3wAAAYxXxVGPAAAEAwBGMEQCIFIGaet80ZBr3Y2AICyKLQxjrGHLfOxsiW9LVXOf
ENFgAiAT0bKsOwnY4iZdUCiU5u2Nkyq3nM32T8yNClwEcjsU6AB1AD8XS0/XIkdY
lB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjFfFUdsAAAQDAEYwRAIgexXdvH+0
RClOJslOmP57RpNmTiTtOAcdUVwaJsItZJACIHtoboFxwnUREb+Jy0knfV7If+XJ
eH1UN7m2AJ5TjO50AHcAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgA
AAGMV8VR0gAABAMASDBGAiEA9wXk76HJZfAUv5AN9rvyW1YXhIo+194GOd9wJJdi
Oy8CIQCynPSixj7yctlpexWrlBtTbh2wAyFTSkFZZ9MFLkQNJzANBgkqhkiG9w0B
AQsFAAOCAQEAU6HfjnweaRHPgw6z1LsC74+LWlLtHn0G8xoadoHjEd5A51By58A7
K7HLctw60SDDQIATcMPhcTXBH2V4v3gsDybvo/Qob0wrKqw3RHz6NFZJL2laghd6
6elz531wOmju8/Cf8Goexl4XH4iRJpnqrjmQKyvKz+uhX9x6HVwWe3fBGX0v5O95
uCQIZ2YL5/3xPeBVwxjSwFxIt/kyLEAz/ba7zvc5Nvf40phM2oGGH65VAfMudKNs
EJqLIfvqymlqPN+m4UVmPUvFG5efRSBJPTFsWPD3d2RHh7l3hheeGck7hovT+hZv
ymYodcM+R8gbxp4PyFqKzkcTUEsR0XUaRQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvBg7Rwu7sjp401RC2mM
YcopQ7hWcFRxOHpWu8UPMVKbfeRVKw0gXKh7mcHJOVbiQrAQH3cpyzJ+AyNsjsVZ
kBe1gsT/6rwJFpyySKhWRSklezo83wbgoa+eeas+NNub4N1QdN8+o7hBbH89xxSA
B69sjGVPrO44Vq0Zsn4CI64m65RRTw/woZiHBLncuACg5VCCiIg7DJimTypDrT5J
y/TK75r1tUg9Vuk/yQJ4XN7C+90LabsPKGeHVuPipNwcRNM3g8L+zCGk7U2LQuU0
xaVdIA+P9XkbfSxcaZvxtXNRw/S3ThcAcV/lrtNpH4G4kTG/NbfEetoyTni8iwv3
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5080823801925851612299538787964544539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bienparabien.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21074093738772089873894604427693165103826733808317260413209172201822215146756291576535967021232194843833053526800099567237176309106019081415081222690144813118013777873659557128670178446269553554312429082074701460706607300966650323418915818386174085331867401697441024777298151683168585203978704234003402748463742412101830879657647532912327328635701225041585880672827217936255538076498734010130843320037374030687358652496247401978707131297054570405414028878558475988743172779397357611793301363218306893598655451806608970166214827653054411866429796450832608904369496760192669382530131026090201492835912319349033395812339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fad4f6be9a61b72615788fe83549198731751d1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bienparabien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bienparabien.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018c57c5518f00000403004630440220520669eb7cd1906bdd8d80202c8a2d0c63ac61cb7cec6c896f4b55739f10d160022013d1b2ac3b09d8e2265d502894e6ed8d932ab79ccdf64fcc8d0a5c04723b14e80075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018c57c551db000004030046304402207b15ddbc7fb444294e26c94e98fe7b4693664e24ed38071d515c1a26c22d649002207b686e8171c2751111bf89cb49277d5ec87fe5c9787d5437b9b6009e538cee740077007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018c57c551d20000040300483046022100f705e4efa1c965f014bf900df6bbf25b5617848a3ed7de0639df702497623b2f022100b29cf4a2c63ef272d9697b15ab941b536e1db00321534a415967d3052e440d27
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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