avolin.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 02:1e:f4:f8:95:54:63:5a:4f:f9:db:80:fd:83:97:93 was issued on by Amazon.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avolin.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:1e:f4:f8:95:54:63:5a:4f:f9:db:80:fd:83:97:93
Serial Number (int): 2819193500068756532282388703307077523
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ed:50:4e:4f:55:9f:77:2c:33:90:b2:98:c9:e9:6e:e8:78:c4:25:a7
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 89:9f:58:c6:fe:78:5e:ae:70:93:dd:c9:c7:ce:05:24:7b:f5:86:6a
Fingerprint (sha256): 4b:90:b1:7e:08:f3:91:e2:cb:eb:76:8b:e4:f9:ec:d4:07:87:d4:b5:53:a3:1c:6d:ff:a6:9f:e7:f3:11:8a:30

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate avolin.com

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avolin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avolin.com
onescm.com
*.firm58.com
*.qaenv.projectbeckon.com
*.aclate.com
aclate.com
*.gfi.com
symphonycommerce.com
projectbeckon.com
*.onescm.com
firm58.com
acornsys.com
*.beckon.com
*.stage.projectbeckon.com
supportsoft.com
nuviewinc.com
*.dev.projectbeckon.com
*.projectbeckon.com
*.xinet.northplains.com
*.symphonycommerce.com
streetsmartmobile.com
*.uat.projectbeckon.com
*.objectstore.com
beckon.com
*.supportsoft.com
*.acornsys.com
*.telescope.northplains.com
*.streetsmartmobile.com
*.support.northplains.com
gfi.com
objectstore.com
*.nuviewinc.com
*.avolin.com

Other certificates including the domain name avolin.com

(limited to 100 certificates)
support.engineyard.com
classichelp.kayako.com
support.engineyard.com
support.cardinal-mark.com
support.engineyard.com
lp.avolin.com
aliases.ignitetech.com
email.avolin.com
avolin.com
avolin.com
support.infinio.com
aliases.ignitetech.com
aliases.ignitetech.com
support.engineyard.com
classichelp.kayako.com
avolin.com
classichelp.kayako.com
email.avolin.com
ssl954700.cloudflaressl.com
aliases.ignitetech.com
classichelp.kayako.com
supportsurvey.zephyrtel.com
email.avolin.com
ssl954701.cloudflaressl.com
avolin.com
support.cardinal-mark.com
aliases.ignitetech.com
avolin.com
email.avolin.com
support.engineyard.com
sni.cloudflaressl.com
supportsurvey.zephyrtel.com
support.engineyard.com
lp.avolin.com
aliases.ignitetech.com
*.avolin.com
dnnsupport.dnnsoftware.com
aliases.ignitetech.com
email.avolin.com
classichelp.kayako.com
aliases.ignitetech.com
support.engineyard.com
sni.cloudflaressl.com
supportsurvey.zephyrtel.com
support.cardinal-mark.com
classichelp.kayako.com
*.avolin.com
avolin.com
supportsurvey.zephyrtel.com
blog.avolin.com
email.avolin.com
classichelp.kayako.com
avolin.com
support.cardinal-mark.com
avolin.com
support.cardinal-mark.com
supportsurvey.zephyrtel.com
*.avolin.com
lp.avolin.com
support.engineyard.com
support.engineyard.com
classichelp.kayako.com
support.engineyard.com
supportsurvey.zephyrtel.com
www.avolin.com
sni.cloudflaressl.com
avolin.com
classichelp.kayako.com
lp.avolin.com
*.avolin.com
supportsurvey.zephyrtel.com
aliases.ignitetech.com
classichelp.kayako.com
avolin.com
avolin.com
supportsurvey.zephyrtel.com
aliases.ignitetech.com
support.engineyard.com
support.engineyard.com
blog.avolin.com
classichelp.kayako.com
lp.avolin.com
*.avolin.com
lp.avolin.com
aliases.ignitetech.com
support.engineyard.com
support.cardinal-mark.com
support.engineyard.com
supportsurvey.zephyrtel.com
avolin.com
support.engineyard.com
ssl954701.cloudflaressl.com
avolin.com
aliases.ignitetech.com

Certificate

The complete raw certificate details for avolin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWGiE+AnTypvs5t2Gos3
kN+yf4As6/5HvYmoGILN1QSfmsKCs6V+bN8PIYxrNF2ShlaZ0uZQMsnH1xH3sOlX
yElwF8rRvX8py37VkGhUaaQcgS6LP9kVr8CbLDVV4uxMmW8OgtY/wUHi8OMEBVzG
DaX4uXR0eeXS8NqBDhNLRFV4tYIDYnPNhmz0a+HdJEX9IG/Rc/PGv/+Cbb9m7vjz
hL81Ykg+DR0DOXm6MNi2BQvQEn5POwdXIwPFSFwPo/HFD0Y5rFsdaWiNdlLQZmBx
H+BEez10Zv0pdjPULcRnkruPuUbjgoowB9FngwjgsWm7gqu4pR7I8svJ8o7k897U
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2819193500068756532282388703307077523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avolin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21887371442895006053178103500466340322830106283752548068554709818107283465120488189129258682906266431180969720167204407000041116985637955010866757336837843779174929798177070519649063690912513829995622713344722057066048811806152223970366279548348844002058470095984245922700864643540239773920074031360774729091471178975383988788675651911267930808833915371310733385211094398258909082570099512148330352324289111927991682289980557827837474854631964783412313509173972771754176980036986461748686943161302018172768181056285634692408550322897583018727208448068143181263274927729996677416762110469981962657940176421015873574077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed504e4f559f772c3390b298c9e96ee878c425a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avolin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onescm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firm58.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qaenv.projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aclate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aclate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symphonycommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onescm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firm58.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acornsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuviewinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xinet.northplains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symphonycommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetsmartmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.objectstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supportsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acornsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telescope.northplains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streetsmartmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.support.northplains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'objectstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuviewinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avolin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000188c77734c3000004030047304502201c575ceb256f8b526480e025e4219e54f3a946c02bd0f986698529557713a58e022100e1245f65b1b5be994781ee5751b4ffe955c9bcf09d7ee4b6b4134f4eda90fb0600750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000188c77734700000040300463044022055874440be0bcaf0b9b8ad830be55213d3d80ce0609d6ac349013f5eca6885a002205676abe56b8a79ea39ed07406827a526847600792aef94ef70c26eefdc1f3abc007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000188c77734400000040300473045022100f8b43e19818fe0abce254a613160ca8d6238ce8832a7b95a8b4c7856b6a99c1a022053d8a2bc08d46977ca6eabcd1112ee08328fd1a679af1bc6bd58b1f388880140
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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