www.avantageaviva.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0d:e0:3c:ff:62:17:4e:5b:b9:d2:5f:0c:35:f3:15:a1 was issued on by Amazon.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.avantageaviva.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:e0:3c:ff:62:17:4e:5b:b9:d2:5f:0c:35:f3:15:a1
Serial Number (int): 18444275619631074267144043044292203937
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 03:c2:4c:60:ff:3c:a7:ef:d4:cf:0a:c2:df:b7:a1:fa:43:1b:1a:62
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 78:77:d7:70:cd:8e:25:ca:0b:43:72:db:31:fa:a5:a9:ef:2c:0c:c2
Fingerprint (sha256): 48:d5:81:22:78:cb:bb:fa:46:c0:0b:2e:16:0b:80:f9:37:c5:eb:34:fd:3b:51:a3:31:51:76:d6:8b:69:1e:04

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate www.avantageaviva.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.avantageaviva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.avantageaviva.com
www.avivastaffpension.co.uk
www.flasfund.co.uk
www.avivatransfer.co.uk
www.protectionetancheaviva.com
www.myavivastadium.ie
avivaprivacy.uk
www.avivawellbeingrewards.com
www.avivapartenaire.ca
vimeo-player.at.aviva.com
www.wlfund.co.uk
www.avivastaffpensions.co.uk
www.friendslife.co.uk
www.myavivaflex.co.uk
www.avantageaviva.ca
www.avivawellbeingrewards.co.uk
www.autoenrolmentplanner.co.uk
www.bcmotorcycle.uk
www.avivawaterprotection.com
www.myavivastadium.com
www.avivabrand.com
www.aviva-direct.ie
www.43.fpinternational.com
upgrademypension.aviva.co.uk
www.apprentices.aviva.co.uk
www.monaviva.avivaassurance.ca
www.avivasavesmarter.co.uk
www.advantageaviva.ca
www.bcmotorcycle.ca
www.avivahealth.ie
www.ecommunity.aviva.co.uk
www.bcmotorcycle.co.uk
www.bcmotorcycle.net
www.avivaadvantage.com
www.riskasyst.ie
broker.aviva.co.uk
www.avivawaterprotection.ca
www.flcfund.co.uk
www.olab.aviva.com
wlfund.co.uk
retirementannuity.aviva.co.uk
www.graduates.aviva.co.uk
www.avivaadvantage.ca
www.bcmotorcycle.com
www.protectionavivacontreleau.ca
www.avivadirect.ie
www.library.aviva.com
www.protectionavivacontreleau.com
www.advantageaviva.com
www.protectionetancheaviva.ca

Other certificates including the domain name avantageaviva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.avantageaviva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiI6eDOcPt5ZxnkQvybx
lmom2/wnfzWDQUyDwNBpn/ioh2/y0gQVJTY9CASU31yxlNhaH+Zsn7YuM9NU3en0
RkXWmmlQoel9KCt+P0Hzz14pkyuWOQjQFtLfGr5uvgPwfJyf6+FuSJfxWBZhIW8S
Z3h6MBJtqpINuACwwi4GtTuC7UsjhbjoxZOemvU5GpkWHgEHpiPyY/Ibv45ssd6M
Vk8dqxFFOuFwTkVvfuKsRSDw17tuhSX6Lu5rfhMJGnv5YE1Dxn23t7cf7hQwxh7a
0tejjjrNXvlPVR7CCp5xW7+BRb3BV7U+qsFO+zauEnThI/STZy+Ce1kD8yoKyWV/
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18444275619631074267144043044292203937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.avantageaviva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20467484055956149793415720540157923057006051928472707158515747436952794025950358686064364483547346364844142761691893882291576329319561892822674683232464671838748884521394888562228250122581194434604552656310832615312869738954560144986600833147670972053247746193436888943573818101242958923765872196701063093595947693498903215993558797435744081931645401973590678996424181077825972426043992773729777435251401106996896111949780667047964954152721177303811968386243635705035420032763705009909350924333412836173845664767163760293274806145635176010076517747320450217956134489236941146794120318682718455991258782933492282261263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03c24c60ff3ca7efd4cf0ac2dfb7a1fa431b1a62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1251 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avantageaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivastaffpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flasfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivatransfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectionetancheaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myavivastadium.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaprivacy.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivawellbeingrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivapartenaire.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimeo-player.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wlfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivastaffpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myavivaflex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avantageaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivawellbeingrewards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoenrolmentplanner.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivawaterprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myavivastadium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivabrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviva-direct.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.43.fpinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upgrademypension.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apprentices.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monaviva.avivaassurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivasavesmarter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivahealth.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecommunity.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivaadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskasyst.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broker.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivawaterprotection.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flcfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olab.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirementannuity.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graduates.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivaadvantage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectionavivacontreleau.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivadirect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.library.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectionavivacontreleau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectionetancheaviva.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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