*.vlmservice.com
Issued by Amazon
About this certificate
This digital certificate with serial number 04:09:19:9e:c9:8e:5f:4d:ae:c8:6c:c8:4b:2e:75:2c was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.vlmservice.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:09:19:9e:c9:8e:5f:4d:ae:c8:6c:c8:4b:2e:75:2cSerial Number (int): 5364162295534849984083179583182894380
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 60:c2:72:37:bb:63:c8:78:f7:cf:d5:66:9a:ba:d1:54:86:89:58:fb
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): b8:ad:c3:15:4e:f2:6c:00:af:7f:e1:85:18:82:2e:cb:3b:3a:8c:a0
Fingerprint (sha256): 5d:e2:96:3f:29:be:a7:43:4f:8c:19:59:52:68:4b:9f:ed:53:b1:3c:4d:13:09:3e:f5:0b:27:82:69:22:ae:3e
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.vlmservice.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.vlmservice.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.vlmservice.com
Other certificates including the domain name vlmservice.com
(limited to 100 certificates)
*.vlmservice.com
eligibility-pebb1.vlmservice.com
enroll-geha3.vlmservice.com
bcs.geha.vlmservice.com
enroll-geha3.vlmservice.com
canaryhealth.com
*.canaryhealth.com
eligibility-oebb1.vlmservice.com
*.canaryhealth.com
iuhealth.vlmservice.com
bcs.kdhe.vlmservice.com
*.canaryhealth.com
*.canaryhealth.com
eligibility-oebb1.vlmservice.com
eligibility-oebb1.vlmservice.com
bcs.geha.vlmservice.com
eligibility-pebb1.vlmservice.com
*.vlmservice.com
close.vlmservice.com
*.vlmservice.com
eligibility-oebb1.vlmservice.com
bcs.iuhealth.vlmservice.com
bcs.sanjosemed.vlmservice.com
close.vlmservice.com
eligibility-oebb1.vlmservice.com
*.vlmservice.com
close.vlmservice.com
close.vlmservice.com
eligibility-oebb1.vlmservice.com
*.vlmservice.com
*.vlmservice.com
bcs.hhsc.vlmservice.com
eligibility-oebb1.vlmservice.com
*.vlmservice.com
geha.vlmservice.com
eligibility-oebb1.vlmservice.com
close.vlmservice.com
afspa.vlmservice.com
afspa.vlmservice.com
*.canaryhealth.com
*.vlmservice.com
bcs.geha.vlmservice.com
close.vlmservice.com
canaryhealth.com
canaryhealth.com
eligibility-oebb.vlmservice.com
*.vlmservice.com
*.vlmservice.com
eligibility-pebb1.vlmservice.com
enroll-geha3.vlmservice.com
bcs.geha.vlmservice.com
enroll-geha3.vlmservice.com
canaryhealth.com
*.canaryhealth.com
eligibility-oebb1.vlmservice.com
*.canaryhealth.com
iuhealth.vlmservice.com
bcs.kdhe.vlmservice.com
*.canaryhealth.com
*.canaryhealth.com
eligibility-oebb1.vlmservice.com
eligibility-oebb1.vlmservice.com
bcs.geha.vlmservice.com
eligibility-pebb1.vlmservice.com
*.vlmservice.com
close.vlmservice.com
*.vlmservice.com
eligibility-oebb1.vlmservice.com
bcs.iuhealth.vlmservice.com
bcs.sanjosemed.vlmservice.com
close.vlmservice.com
eligibility-oebb1.vlmservice.com
*.vlmservice.com
close.vlmservice.com
close.vlmservice.com
eligibility-oebb1.vlmservice.com
*.vlmservice.com
*.vlmservice.com
bcs.hhsc.vlmservice.com
eligibility-oebb1.vlmservice.com
*.vlmservice.com
geha.vlmservice.com
eligibility-oebb1.vlmservice.com
close.vlmservice.com
afspa.vlmservice.com
afspa.vlmservice.com
*.canaryhealth.com
*.vlmservice.com
bcs.geha.vlmservice.com
close.vlmservice.com
canaryhealth.com
canaryhealth.com
eligibility-oebb.vlmservice.com
*.vlmservice.com
*.vlmservice.com
Certificate
The complete raw certificate details for *.vlmservice.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIQBAkZnsmOX02uyGzISy51LDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA3MzAwMDAwMDBaFw0yMDA4MzAx MjAwMDBaMBsxGTAXBgNVBAMMECoudmxtc2VydmljZS5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDE8yhfRkWtj/003yCwy02/g8Yz1isHzgcWw2Oz Nyuu4diQBf7d09vaaZpLCQaLFd6TvRjFVdVuxOGUDY0COQkHxkeZcOPerR1cV+Cf TxUoxR1t0cQRGSwT92JJUCsWjRXg/Fy/j0EhbEMXsChPdgoYpMEolG5NthDxtfUn 0Mlf4HP1GLeqPt6vTjK+K+zxlBY05jCUbySxGw8PTIU0+AMJGiKjnV7JiEgwH7A8 XKiqnDj/AiRtktHP+3IclEw6aSRU18WvUOWHtlfcnO/RwR+9rfN1Yz5LhS7YpT2G sp9zMmbWdJvoda8zVKYn1QJAgCzBt5KLMExtM7TWXHuqKNQ7AgMBAAGjggJ7MIIC dzAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUYMJy N7tjyHj3z9VmmrrRVIaJWPswGwYDVR0RBBQwEoIQKi52bG1zZXJ2aWNlLmNvbTAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYI KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6 b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9u dHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBAwYKKwYBBAHWeQIE AgSB9ASB8QDvAHUA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFs QRLpQAAABAMARjBEAiAvQqA/5CHOEBjeGQ/PLewmlnjHHwU1h7OrGMR5nd1GjgIg SD0evua9KxWPvDXolrB3TP3I9exX+k9BPmWBDWE4OfcAdgCHdb/nWXz4jEOZX73z bv9WjUdWNv9KtWDBtOr/XqCDDwAAAWxBEumNAAAEAwBHMEUCIQDNU/WexdbrUxH8 fUfEjygj5bz17ugyGQwmMFCybHZxbgIgBPxN//bfjdBNe6AoCxW8pnKVuVBwMyPQ 3HuNimfLNNEwDQYJKoZIhvcNAQELBQADggEBAMBZ4PiJbYkcR/3VaSn1G1uEDa3X 9MSyuYKwiI8E37dQh9vquPGrebh8NGgQYtj8/alIr0Hj2KLk2zcg4eDrr+pgeYq7 iSMwD+iCcdY1r2VYwE6Kxrx4kyXJ0xObKkJQa9CzK/CyL+sVF1gc/OJNf5cmN4Oy Qdl4gNzibRCMV18tZ363UxBGqGPdMvwZvUdbyGXindRb7h3qqNyL636fmbKR0JYK UDY+zPDPu+rfjxoqNlSFC5j2u5D2tL18ysISBKd7VjYpW/JbrGFxPl7HK9yRJS6h Dvjq16z+ElfgNbR4R7suAcRp4wVOeEOh7Id+NVPKfaSkwxDLNRHh/OLzT7Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPMoX0ZFrY/9NN8gsMtN v4PGM9YrB84HFsNjszcrruHYkAX+3dPb2mmaSwkGixXek70YxVXVbsThlA2NAjkJ B8ZHmXDj3q0dXFfgn08VKMUdbdHEERksE/diSVArFo0V4Pxcv49BIWxDF7AoT3YK GKTBKJRuTbYQ8bX1J9DJX+Bz9Ri3qj7er04yvivs8ZQWNOYwlG8ksRsPD0yFNPgD CRoio51eyYhIMB+wPFyoqpw4/wIkbZLRz/tyHJRMOmkkVNfFr1Dlh7ZX3Jzv0cEf va3zdWM+S4Uu2KU9hrKfczJm1nSb6HWvM1SmJ9UCQIAswbeSizBMbTO01lx7qijU OwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5364162295534849984083179583182894380 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-30 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vlmservice.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24862613306018610288548609957644359606112533198694436389771998379246415009988887518603098283698161244557553813620883592696254028616356381690838621706409575106182077599192892994386901214000044236527479907856568641951830357815275019192289507651930660456945063529606709922076235763691847964961567315014084547884029202407927165311431897555135277688347636998326785399086477482981371570879098472794769988079712234528096470023996417167551362374024256745769979001856740731614042224258154427026438819762505086231864246708743207976172631453724890213404732817476906611884876619522800678107017602071899787720508610833706063025211 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 60c27237bb63c878f7cfd5669abad154868958fb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vlmservice.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016c4112e940000004030046304402202f42a03fe421ce1018de190fcf2dec269678c71f053587b3ab18c4799ddd468e0220483d1ebee6bd2b158fbc35e896b0774cfdc8f5ec57fa4f413e65810d613839f70076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c4112e98d0000040300473045022100cd53f59ec5d6eb5311fc7d47c48f2823e5bcf5eee832190c263050b26c76716e022004fc4dfff6df8dd04d7ba0280b15bca67295b950703323d0dc7b8d8a67cb34d1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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