storytoys.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 08:8d:74:b3:50:e4:9a:6d:03:ce:ff:f1:d1:38:99:f3 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=storytoys.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 08:8d:74:b3:50:e4:9a:6d:03:ce:ff:f1:d1:38:99:f3Serial Number (int): 11368304789723016453926508541077133811
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d7:92:68:b6:82:77:54:d3:ff:d6:59:7d:75:b0:d6:7f:f7:70:5b:1d
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 48:4f:9c:50:ce:a2:e6:19:d1:fa:79:53:ed:a1:d2:2a:1f:1d:6e:38
Fingerprint (sha256): 4a:31:33:12:2f:c3:83:06:59:42:1c:76:b8:d1:91:a6:61:b2:41:51:66:bd:8b:0c:1c:78:9d:69:c4:7f:d5:58
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate storytoys.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for storytoys.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
storytoys.com
*.storytoys.com
*.storytoys.com
Other certificates including the domain name storytoys.com
(limited to 100 certificates)
bamboodigital.in
leonardoscat.com
storytoys.com
s.cps.onl
dev-api.bepos.io
storytoys.com
repscare.org
bargybud.com
leonardoscat.com
letsvoo.com
pruebas.telesetalmacen.com
thrivnerplanner.com
storytoys.com
dev.links.ourmosque.co.uk
www.robensy.com
pruebas.telesetalmacen.com
beerscovery.com
app.metacheck.net
share.libyatoys.ly
www.wellplatetracker.com
storytoys.com
alpha.nwzer.com
customer.5f.app
novusinnovate.com
storytoys.com
www.nivendha.me
garrawayf.console.appabrik.jp
storytoys.com
www.vres.fi
moprosoft.halexhg.com
app.tslassistantdev.com
www.lundgren.ai
www.mandaladoo.com
universidadmager.lernit.app
kishnish.com
leonardoscat.com
www.iyadmarzouka.com
www.samaitch.com
storytoys.com
srba.fyi
storytoys.com
www.smartincodes.com
links.gopichand.me
barbie-color-creations.storytoys.com
big-game-booking.com
www.volvocars-forum.de
storytoys.com
cum.engineer
adventure.jeremyrabaino.com
thrivnerplanner.com
www.am3.dev
storytoys.com
storytoys.com
storytoys.com
store-lease.com
storytoys.com
storytoys.com
dev.boostweather.com
www.portstewartstays.co.uk
storytoys.com
sunside.games
beesocial.co.in
dedicio.com
www.solitairecardgamesfree.com
storytoys.com
storytoys.com
storytoys.com
earth.simplicityloadout.com
www.sevir.fr
app.h3skills.com
mizukai-apparel.com
leonardoscat.com
chromebooks.ch
pakmenus.com
leonardoscat.com
www.bulhrtg.club
storytoys.com
www.storytoys.com
orsaydemain.corehab.fr
explore2.saga.einride.dev
b360cloud.com
www.csc-ca.com
sreelalithadental.co.in
jooni.app
brightpalette.ca
yaka.ph
www.solidculture.co.za
app-marina.de
rehabilitationspsychologie.at
duodecimal.co
www.albayoo.com
patchi.dev
storytoys.com
tourneygames.com
atlaria.launchlabs.app
static.bezahl.de
www.bytepic.dev
www.mintmyguitar.rocks
store-lease.com
www.vasuchetty.com
leonardoscat.com
storytoys.com
s.cps.onl
dev-api.bepos.io
storytoys.com
repscare.org
bargybud.com
leonardoscat.com
letsvoo.com
pruebas.telesetalmacen.com
thrivnerplanner.com
storytoys.com
dev.links.ourmosque.co.uk
www.robensy.com
pruebas.telesetalmacen.com
beerscovery.com
app.metacheck.net
share.libyatoys.ly
www.wellplatetracker.com
storytoys.com
alpha.nwzer.com
customer.5f.app
novusinnovate.com
storytoys.com
www.nivendha.me
garrawayf.console.appabrik.jp
storytoys.com
www.vres.fi
moprosoft.halexhg.com
app.tslassistantdev.com
www.lundgren.ai
www.mandaladoo.com
universidadmager.lernit.app
kishnish.com
leonardoscat.com
www.iyadmarzouka.com
www.samaitch.com
storytoys.com
srba.fyi
storytoys.com
www.smartincodes.com
links.gopichand.me
barbie-color-creations.storytoys.com
big-game-booking.com
www.volvocars-forum.de
storytoys.com
cum.engineer
adventure.jeremyrabaino.com
thrivnerplanner.com
www.am3.dev
storytoys.com
storytoys.com
storytoys.com
store-lease.com
storytoys.com
storytoys.com
dev.boostweather.com
www.portstewartstays.co.uk
storytoys.com
sunside.games
beesocial.co.in
dedicio.com
www.solitairecardgamesfree.com
storytoys.com
storytoys.com
storytoys.com
earth.simplicityloadout.com
www.sevir.fr
app.h3skills.com
mizukai-apparel.com
leonardoscat.com
chromebooks.ch
pakmenus.com
leonardoscat.com
www.bulhrtg.club
storytoys.com
www.storytoys.com
orsaydemain.corehab.fr
explore2.saga.einride.dev
b360cloud.com
www.csc-ca.com
sreelalithadental.co.in
jooni.app
brightpalette.ca
yaka.ph
www.solidculture.co.za
app-marina.de
rehabilitationspsychologie.at
duodecimal.co
www.albayoo.com
patchi.dev
storytoys.com
tourneygames.com
atlaria.launchlabs.app
static.bezahl.de
www.bytepic.dev
www.mintmyguitar.rocks
store-lease.com
www.vasuchetty.com
Certificate
The complete raw certificate details for storytoys.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIQCI10s1Dkmm0Dzv/x0TiZ8zANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTEyMDAwMDAwMFoXDTI0MTIxNzIzNTk1OVowGDEW MBQGA1UEAxMNc3Rvcnl0b3lzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAMkEjlNBv0fe3vdXnsjMpWednhdX/MG1L77KOr/k/iQyh++CVKIa3RBX M2083QD623er5cYgafKg1uAPCTj3EVvInBHHrMwZieUsU3CeifpfPlQTZ09mtQYF ymlScbG7p+Jrf7Syat5f8vVmCFuyekr2w+4ZEoUQ9eTrSKHsk01XwtwhUWJmvVNz uqEtbYm2+eirmZXY6dIgPU9hzQMrSZpS0lOrRQ7jYCL45zX/dJypvS5UbFyJxlbs EKlm7LuCFrEKbUXHsGpp9ht+bzK5fLD+3rfNOcloigY8vhB1Li8168PSfLcVN2B8 SXDn3fPPC+6ulooq8fukml9y7HVTQs8CAwEAAaOCAvkwggL1MB8GA1UdIwQYMBaA FFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBTXkmi2gndU0//WWX11sNZ/ 93BbHTApBgNVHREEIjAggg1zdG9yeXRveXMuY29tgg8qLnN0b3J5dG95cy5jb20w EwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3Js LnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBn MC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20w NgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3Iy bTAzLmNlcjAMBgNVHRMBAf8EAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoA dwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYvsbzl4AAAEAwBI MEYCIQDNi0JNNUn2484gyKMSdHM9TNyzszzhtaXHTSs9Rs1UEwIhAKZHnK2LHD2x KcCgn+LZ0+nF/0Rj7JrNTyIFzT3qA7muAHcASLDja9qmRzQP5WoC+p0w6xxSActW 3SyB2bu/qznYhHMAAAGL7G85bAAABAMASDBGAiEA/pjBf7p7XRFN1yQFC80lZGmO 1VNXa0Cg/V1WzTgdpMQCIQCxF+u8NAajqCCEDRgU6CzR9QKyPoifZoOgageNptCG +wB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABi+xvOWwAAAQD AEcwRQIhALrPBk4NWKfpaWsK2f9YO1VjPYSBuPXtubZwGx/MSNIyAiALZUuJEYtc 9FTnUd9GT8wHhamVsxW1rQQ4pm45JII47TANBgkqhkiG9w0BAQsFAAOCAQEAILQc 5cgT4qxNdRIExRLWsztDoh2O/ZRDSO/n+5HLoAtd0QtAw+50Vcnj/G5We60naxJ/ SPJ2h5/UcCERGhrKrJDI9uIjzalmStvesXPArlFk8XNYftnqqwViZL2TI1rUbMaV nL8twR7zyryDLev5w+2RHYd6YpR0YuI71gZ2hzsv1BVTas5hUkwkC553S6Om3b2K WRPl6B2kjRLhvfM7NNMLs82pSKH/0BO8e9GsVKUcS5JXtNl4PBmuO6lKU9wSDcmc w8aRzUrp+HbyU/kVIrawEjfb9+66PETS5ZZI1Sytb+gmnGEfonKn3oKBft6qoO5h CIPRjkNtvaNz9MO7gA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQSOU0G/R97e91eeyMyl Z52eF1f8wbUvvso6v+T+JDKH74JUohrdEFczbTzdAPrbd6vlxiBp8qDW4A8JOPcR W8icEceszBmJ5SxTcJ6J+l8+VBNnT2a1BgXKaVJxsbun4mt/tLJq3l/y9WYIW7J6 SvbD7hkShRD15OtIoeyTTVfC3CFRYma9U3O6oS1tibb56KuZldjp0iA9T2HNAytJ mlLSU6tFDuNgIvjnNf90nKm9LlRsXInGVuwQqWbsu4IWsQptRcewamn2G35vMrl8 sP7et805yWiKBjy+EHUuLzXrw9J8txU3YHxJcOfd888L7q6Wiirx+6SaX3LsdVNC zwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11368304789723016453926508541077133811 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-17 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'storytoys.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25376145924750368704007106602782428201522452335052023327909631184961855153764439629821047209128366009677093344222025207722716030216296186244373185853400885277616347271342338576982087368948353237168650983147101151030197559910897617022959429970665253807035963150751369573387290102841492384190604480545498242066018745214399203122316307986377487835384322493035420808400225979764200825831417910706194288208823181147465303310225008176129738208283623528516389686743616159396654632956322645368764299646493732669577397288979429266029627267584455949272095305826068778903900566297109391821183013699256492582310272565494244655823 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d79268b6827754d3ffd6597d75b0d67ff7705b1d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storytoys.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.storytoys.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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