opel.fr

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:c8:8b:60:37:2b:e4:1b:3b:c8:07:12:91:6e:3b:a0 was issued on by Amazon.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=opel.fr

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:c8:8b:60:37:2b:e4:1b:3b:c8:07:12:91:6e:3b:a0
Serial Number (int): 19650478190609033250270028681469377440
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b4:55:a3:8f:17:a6:7e:26:cf:f3:f2:0d:89:71:91:d6:39:98:17:92
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 93:f8:97:5f:8c:94:e5:c6:89:a7:21:51:69:72:c9:20:96:cf:91:70
Fingerprint (sha256): 59:34:90:ef:cf:a5:82:5a:6a:f7:8a:f3:7f:eb:de:46:07:b0:3f:92:e7:c4:10:19:6a:de:fb:08:c9:63:60:f3

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate opel.fr

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opel.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opel.fr
opel.ua
opel.lv
opelegypt.net
opel.hr
opel.sk
opel.si
opel.ro
opel.pl
opel.rs
opel.no
opel.ba
opel.com.tr
opel.nl
opel.bg
opel.pt
opel.fi
opel.ru
opel.be
opel.lu
opel.lt
opel.dk
opel.it
opel.gr
opel.com
opel.co.za
opel.es
opel-algerie.com
opel.at
opelauto.md
opel.cz
opel.ie
opel.ee
opel.mk
opel.ch
vauxhall.co.uk
opel.cl

Other certificates including the domain name opel.fr

(limited to 100 certificates)
fix.services-store.peugeot.fr
www.opel.fr
prd.connect.opel.com
pat.connect.opel.com
uat-admin.connect.opel.com
dev.connect.opel.com
uat.connect.opel.com
www.opel.cz
plus.opel.fr
my.opel.ba
pat.connect.opel.com
dev.services-store.dsautomobiles.com
int.rent.opel.fr
prd-admin.connect.opel.com
tis2web.service.gm.com
www.opel.fr
my.gm.com
trn-admin.services-store.dsautomobiles.com
inf.connect.opel.com
pat.connect.opel.com
my.opel.ba
www.buick.com
ppr.connect.opel.com
abarth.pt
my.opel.ba
pat.services-store.dsautomobiles.com
www.opel.cz
dev-admin.connect.opel.com
my.opel.ba
trn.services-store.dsautomobiles.com
inf.connect.opel.com
dev.services-store.dsautomobiles.com
www.buick.com
dev-admin.services-store.dsautomobiles.com
pat.connect.opel.com
tis2web.service.gm.com
dev-admin.connect.opel.com
pat.services-store.dsautomobiles.com
services-store.peugeot.fr
dev.connect.opel.com
www.buick.com
fix.services-store.peugeot.fr
www.buick.com
www.opel.cz
www.opel.cz
admin.connect.opel.com
www.opel.cz
pat.services-store.dsautomobiles.com
dev.connect.opel.com
admin.connect.opel.com
www.opel.cz
dev-admin.connect.opel.com
pat-admin.connect.opel.com
dev.connect.opel.com
www.opel.cz
my.opel.ba
ppr-admin.connect.opel.com
ssl880993.cloudflaressl.com
services-store.peugeot.fr
my.opel.ba
trn.services-store.dsautomobiles.com
plus.opel.fr
rent.opel.fr
uat-admin.connect.opel.com
uat.connect.opel.com
admin.connect.opel.com
plus.opel.fr
dev-admin.connect.opel.com
dev-admin.connect.opel.com
www.opel.cz
rc3.plus.opel.fr
plus.opel.de
ppr.connect.opel.com
sni30545.cloudflaressl.com
www.opel.cz
dev.connect.opel.com
my.opel.ba
dev.connect.opel.com
dev.services-store.dsautomobiles.com
www.opel.cz
*.opel.fr
fix-admin.connect.opel.com
admin.services-store.peugeot.fr
services-store.peugeot.fr
tis2web.service.gm.com
my.gm.com
corsa-e.opel.fr
my.gm.com
admin.services-store.dsautomobiles.com
at-media.opel.com
dev.connect.opel.com
www.opel.cz
rc9.plus.opel.fr
inf-admin.connect.opel.com
pat-admin.connect.opel.com
ppr.services-store.dsautomobiles.com
fix-admin.services-store.dsautomobiles.com
inf.services-store.dsautomobiles.com
www.buick.com
ssl880994.cloudflaressl.com

Certificate

The complete raw certificate details for opel.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBQ4JTOJvD2HhqXJrWmu
1Hos8I58Ym+IfQkICBd3b4fJMiu3MOCWrzScARJds8rNLUGrhVWZB/B/9zwmqi8k
Ftym1p38otnuoIhwB/NzW7iEGjS/XL2ATJUt6Bm+zZdr9zmb2sS8T1UqasZgnzia
aVru+0+EW/t8K+hPUi+UENl1/1dnuOoZ8YFI+FIo/UB/qN3OS+0JjXPRQ7fRXHHe
BHA8GATh9zNjjNQLGeiffaQF8rRYX5kyoBp8RuIj1lHgZ4ElupvodsQbwjSzQP+L
UseVvM45Jhl4XzJFBsq6M7q4Mw1j8k31BppFobjUgo6o+q5XtVjsuf7E5d7c+z3b
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19650478190609033250270028681469377440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opel.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25257631510349772781336856084911241928144489940023623460846153080789213873890240403997424577395934765456711722204084898821984557473760466749527464866928888069333092543280680947641652407991602080450458571814263173564724520606304852396661432722682022899084492935108858437179875840074637388969188092138229729435615129447043210639913594373665106308837583313638615505370578451479404468712584458042892515154553413059124433084131711241926416472891303130148418014191419925555256852098713899089715568057012104243880436030141366805100132993261841130769318041178747556869448966698181986836307161769050986682964963253480643746779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b455a38f17a67e26cff3f20d897191d639981792
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (371 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opelegypt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel-algerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opelauto.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vauxhall.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.cl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000174c066dc690000040300483046022100b9a16b7085884fbce02ed2a9a409d4b942391d200c5bbaad08f45698cf50802c0221009147c6d1ae4fd82baca720243c623ee83b0f94dddefd2012a3c76fc974f0f2300076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000174c066dcb20000040300473045022100d6bce5f74856da3c598fb9f23dfce20d437614c1fc59b0234bcf95c9ca5b37af02205613147a0d756f3b7abf6fabe8611506bfd24f27675dee65b8f1f58b9daed70f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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