freeze.dcp.groupe-seb.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:db:47:17:cb:5d:8a:56:dc:e6:94:9a:82:cb:47:79 was issued on by Amazon.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=freeze.dcp.groupe-seb.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:db:47:17:cb:5d:8a:56:dc:e6:94:9a:82:cb:47:79
Serial Number (int): 21076974885061002824754558645423523705
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c8:e5:76:8e:f1:0a:35:94:13:39:ff:b0:6e:a4:7a:ab:b3:df:11:e2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): de:f4:1c:ca:86:b3:db:be:64:be:e2:62:74:ce:df:47:69:e1:94:4a
Fingerprint (sha256): 5b:73:e0:24:22:09:39:24:ce:f5:6d:ad:e9:d4:77:7c:3c:da:53:5a:aa:ac:eb:74:ea:44:db:35:95:33:eb:1c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate freeze.dcp.groupe-seb.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for freeze.dcp.groupe-seb.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

freeze.dcp.groupe-seb.com
bat.api.groupe-seb.com
bat.bo.groupe-seb.com
bat.cookeo-community.groupe-seb.com
bat.dcp-module.groupe-seb.com
bat.openapi.groupe-seb.com
bat.proto1.groupe-seb.com
bat.proto2.groupe-seb.com
freeze.api.groupe-seb.com
freeze.bo.groupe-seb.com
freeze.cookeo-community.groupe-seb.com
freeze.dcp-module.groupe-seb.com
freeze.openapi.groupe-seb.com
freeze.proto1.groupe-seb.com
freeze.proto2.groupe-seb.com
bat.marecette.companion.moulinex.fr
bat.marecette.cookeo.moulinex.fr
freeze.marecette.companion.moulinex.fr
freeze.marecette.cookeo.moulinex.fr

Other certificates including the domain name groupe-seb.com

(limited to 100 certificates)
preprod-direct.api.groupe-seb.com
cert00088-azurecdn.akamaized.net
preprod.brandsites.api.groupe-seb.com
digital-ready.groupe-seb.com
brandsites.api.groupe-seb.com
*.urlbuilder.groupe-seb.com
digital-ready3.groupe-seb.com
dcp2.groupe-seb.com
mediaplan.groupe-seb.com
preprod-direct.api.groupe-seb.com
digital-ready3.groupe-seb.com
digital-ready2.groupe-seb.com
digital-ready.groupe-seb.com
appstore.dcp.groupe-seb.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
digital-ready.groupe-seb.com
dcp2.groupe-seb.com
qa.openfoodsystem.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
appstore.dcp.groupe-seb.com
PREPROD.api.groupe-seb.com
testmpu.groupe-seb.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
prod.api.groupe-seb.com
dcp2.groupe-seb.com
bat.iot.api.groupe-seb.com
PREPROD.api.groupe-seb.com
digital-ready.groupe-seb.com
preprod-direct.api.groupe-seb.com
digital-ready3.groupe-seb.com
dcp2.groupe-seb.com
cert00088-azurecdn.akamaized.net
freeze.dcp.groupe-seb.com
perf.api.groupe-seb.com
prod.rcu-eai-salesforce.groupe-seb.com
analytics.groupe-seb.com
*.moulinex.fr
cert00088-azurecdn.akamaized.net
brandsites.api.groupe-seb.com
dcp.groupe-seb.com
freeze-direct.iot.api.groupe-seb.com
cert00088-azurecdn.akamaized.net
digital-ready2.groupe-seb.com
dcp.groupe-seb.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
analytics.groupe-seb.com
digital-ready2.groupe-seb.com
cert00088-azurecdn.akamaized.net
dcp2.groupe-seb.com
apipro.groupe-seb.com
urlbuilder.groupe-seb.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
brandsites.api.groupe-seb.com
dcp2.groupe-seb.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
perf.api.groupe-seb.com
analytics.groupe-seb.com
digital-ready3.groupe-seb.com
devops.groupe-seb.com
data.groupe-seb.com
cert00088-azurecdn.akamaized.net
devops.groupe-seb.com
iot.api.groupe-seb.com
sebplatform.bo.groupe-seb.com
bat.bo-new.groupe-seb.com
appstore.dcp.groupe-seb.com
cert00088-azurecdn.akamaized.net
PREPROD.api.groupe-seb.com
preprod.iot.api.groupe-seb.com
brandsites.api.groupe-seb.com
drs.api.groupe-seb.com
freeze.dcp.groupe-seb.com
bat.api.groupe-seb.com
freeze.dcp.groupe-seb.com
cert00088-azurecdn.akamaized.net
datas.groupe-seb.com
freeze.api.groupe-seb.com
digital-ready.groupe-seb.com
freeze.iot.api.groupe-seb.com
digital-ready2.groupe-seb.com
dcp2.groupe-seb.com
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
freeze.dcp.groupe-seb.com
dcp2.groupe-seb.com
cert00088-azurecdn.akamaized.net
digital-ready.groupe-seb.com
mediaplan.groupe-seb.com
jenkins.dcp.seb.com
*.dsm.groupe-seb.com
brandsites.api.groupe-seb.com

Certificate

The complete raw certificate details for freeze.dcp.groupe-seb.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/MRf3uTjOkxWhYZfoPk
6Kk5YmToN8HbGRJ2F+Gfttat4tvVm3WbpZqgwD8oDt8TFqj9MG5IxbIva41KIwnu
8xv6x9UN4Kc8IDJudCOY7i5V2aMHuJoZLL4HlOpIWdr9SCyzsxK5qIGe4jI35FE6
Q/e+u2Dgce3BDpOSAXuVOrinYGZTxKki7+u8TFZclQaMrjkrOZraRl+B6Zy0/GNM
9OQqMRMW972r3jPy4NwlibdmfPgECAvKtWxSGw7aeolP1MNyc/r6WuEr/iGBM/XK
sR+NaOdcDR2cG9Qgfkrbh9Jb6fG5joubl5ffrCezk0ZxtjuF5JeCplKjhNf79vwZ
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21076974885061002824754558645423523705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freeze.dcp.groupe-seb.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24231377719931157119112566873188581558998376446088343711108596213925850964304836640496514508659739786397474038722647558023236042209008393214702263707591471060043983222348598968274311177996180709519629318496292391586756820043195938975286123364723660628216084258768734668045016062442111295223976825306383481439664824575838011864380286251671643387277537277543355596026449639704243819381137005430029199416826840966797639656043020449887552993166647625243783173593461872764581548908723845349076340766501345502094179340789759065046919552583862355706881854433915709782876090227766056268406266066139998833351808676731652151747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8e5768ef10a35941339ffb06ea47aabb3df11e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (594 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeze.dcp.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bat.api.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bat.bo.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bat.cookeo-community.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bat.dcp-module.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bat.openapi.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bat.proto1.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bat.proto2.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeze.api.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeze.bo.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeze.cookeo-community.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeze.dcp-module.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeze.openapi.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeze.proto1.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeze.proto2.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bat.marecette.companion.moulinex.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bat.marecette.cookeo.moulinex.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeze.marecette.companion.moulinex.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeze.marecette.cookeo.moulinex.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000167ccac24430000040300483046022100f787209886226899048ca1118145da57f831dbf952e3dc74acb77d2ba7cdeb0c022100f1ded15590aabaca5df7095132051935b9b79456fd372c6c67b8683915bd26ba0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000167ccac25130000040300473045022100d12e391ecd5fcc82f211d542ee9e8b543a17dc01402f0ba9f8e4f6ff1838e9a502204bb79d7591e96c0dcb528da7b5fe49ac6f5011fc7046c46ab4fabb9e82521a29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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