termius.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 03:65:48:f5:15:90:d5:e2:70:2f:15:e6:c9:c4:59:1e was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=termius.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:65:48:f5:15:90:d5:e2:70:2f:15:e6:c9:c4:59:1eSerial Number (int): 4513585721132324689607704804745042206
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 05:20:f8:5e:5f:83:b7:44:fc:13:b9:e2:a9:ae:33:89:89:6e:30:f8
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 8a:3a:54:12:8e:e9:c8:73:84:48:38:bb:d5:78:53:2a:32:20:fd:7c
Fingerprint (sha256): 5f:ac:04:46:b6:d7:08:2b:b6:22:ce:37:88:1f:fe:33:29:79:6f:6d:27:5f:cf:cb:0e:ee:f7:7a:3a:48:0b:6b
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate termius.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for termius.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
termius.com
www.termius.com
serverauditor.com
www.termius.com
serverauditor.com
Other certificates including the domain name termius.com
(limited to 100 certificates)
api.termius.com
termius.com
api.dev.termius.com
support.termius.com
api.termius.com
termius.com
api.termius.com
docs.termius.com
webhook.api.termius.com
ceabnar.com
arisepod.betsol.com
*.dev.termius.com
www.lucavisciola.com
termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
api.termius.com
arisepod.betsol.com
arisepod.betsol.com
migration-status.transplantconnect.com
arisepod.betsol.com
cdn.termius.com
migration-status.transplantconnect.com
dev.serverauditor.com
*.termius.com
dev.termius.com
api.termius.com
docs.termius.com
api.dev.termius.com
api.dev.termius.com
support.termius.com
migration-status.transplantconnect.com
deb.termius.com
migration-status.transplantconnect.com
account.termius.com
*.termius.com
arisepod.betsol.com
termius.com
cerealsbank.com
arisepod.betsol.com
api.dev.termius.com
*.account.termius.com
migration-status.transplantconnect.com
api.termius.com
api.dev.termius.com
migration-status.transplantconnect.com
security.termius.com
dev.account.termius.com
docs.termius.com
cdn.termius.com
api.202576c5dc6a55ad30cc72fcf23e6048f0356c347f.termius.com
api.termius.com
customer.termius.com
blog.termius.com
webhook.api.termius.com
migration-status.transplantconnect.com
cdn.termius.com
dev.termius.com
arisepod.betsol.com
docs.termius.com
cdn.termius.com
api.dev.termius.com
demos.account.termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
webhook.api.termius.com
status.termius.com
termius.com
api-status.360cities.net
migration-status.transplantconnect.com
termius.com
5revive.com
migration-status.transplantconnect.com
termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
dev.termius.com
termius.com
www.termius.com
api.dev.termius.com
grpc.termius.com
account.termius.com
docs.termius.com
status.termius.com
*.api.termius.com
api-status.360cities.net
blog.termius.com
migration-status.transplantconnect.com
api.termius.com
blog.termius.com
dev.termius.com
blog.termius.com
api.dev.termius.com
www.termius.com
termius.com
api.termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
termius.com
api.dev.termius.com
support.termius.com
api.termius.com
termius.com
api.termius.com
docs.termius.com
webhook.api.termius.com
ceabnar.com
arisepod.betsol.com
*.dev.termius.com
www.lucavisciola.com
termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
api.termius.com
arisepod.betsol.com
arisepod.betsol.com
migration-status.transplantconnect.com
arisepod.betsol.com
cdn.termius.com
migration-status.transplantconnect.com
dev.serverauditor.com
*.termius.com
dev.termius.com
api.termius.com
docs.termius.com
api.dev.termius.com
api.dev.termius.com
support.termius.com
migration-status.transplantconnect.com
deb.termius.com
migration-status.transplantconnect.com
account.termius.com
*.termius.com
arisepod.betsol.com
termius.com
cerealsbank.com
arisepod.betsol.com
api.dev.termius.com
*.account.termius.com
migration-status.transplantconnect.com
api.termius.com
api.dev.termius.com
migration-status.transplantconnect.com
security.termius.com
dev.account.termius.com
docs.termius.com
cdn.termius.com
api.202576c5dc6a55ad30cc72fcf23e6048f0356c347f.termius.com
api.termius.com
customer.termius.com
blog.termius.com
webhook.api.termius.com
migration-status.transplantconnect.com
cdn.termius.com
dev.termius.com
arisepod.betsol.com
docs.termius.com
cdn.termius.com
api.dev.termius.com
demos.account.termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
webhook.api.termius.com
status.termius.com
termius.com
api-status.360cities.net
migration-status.transplantconnect.com
termius.com
5revive.com
migration-status.transplantconnect.com
termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
dev.termius.com
termius.com
www.termius.com
api.dev.termius.com
grpc.termius.com
account.termius.com
docs.termius.com
status.termius.com
*.api.termius.com
api-status.360cities.net
blog.termius.com
migration-status.transplantconnect.com
api.termius.com
blog.termius.com
dev.termius.com
blog.termius.com
api.dev.termius.com
www.termius.com
termius.com
api.termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
Certificate
The complete raw certificate details for termius.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIQA2VI9RWQ1eJwLxXmycRZHjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDcwNjAwMDAwMFoXDTI0MDgwMzIzNTk1OVowFjEU MBIGA1UEAxMLdGVybWl1cy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCQGc32ews1Enz9Gq9kOd3pkwY4D4cdtoGecJ5nJ15Y2nDjDBhjjFTZrbcC CItgBXBPdkQNWRaNZY5C9YvRQpeLqgihA+9xsKjgULCX6mdgD/uv4XWMCNr0FArv j+SSjYbmNr0q/QGx1Dk6if2FCMIbY8q2pvMtnxIVFAMzVA6wFKsJTMVu6UKqmg0G +RUXRKxEMKgoqs3pldpos/TGCAo6yxqeeLHL5c5mjJK+ES1Av4tN7K78JHLYNDru qRRr1r+5+1uKp5QX7fAZnkgv0MBhU6DVRgo8x7sO+zV552sK+sAeFh3cB42zTLrH 1bI1gX/274sB1JVS2LKV6CtOkjEjAgMBAAGjggMJMIIDBTAfBgNVHSMEGDAWgBSB uA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUBSD4Xl+Dt0T8E7niqa4ziYlu MPgwOgYDVR0RBDMwMYILdGVybWl1cy5jb22CD3d3dy50ZXJtaXVzLmNvbYIRc2Vy dmVyYXVkaXRvci5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAx LmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEw dQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMS5h bWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1h em9udHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHW eQIEAgSCAW8EggFrAWkAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1 mwAAAYkpRMhfAAAEAwBHMEUCICVWiaUvqSdvavjSftZ/MLTiMwvztG1xbH43XgBP QLzNAiEA6X+OLKnc9lFV3hBCEzsTOnIKngDmSFwqwRtBfJd42+4AdwBIsONr2qZH NA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYkpRMh3AAAEAwBIMEYCIQDhnE1Z SzYSzA9fIRbjUz/jS4kzhrhZyoEZ5TW0nadgVgIhAJN3d7CmLDJefXvNXcNMIaWr Q0tXzyRBm5sc+TEAtm7sAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX +6sAAAGJKUTIQwAABAMARzBFAiEA3OHPa3lVTzVN2uav9ue5AUgO1Bnv3HIkdkg+ U9MOqh4CICFpr6iM0tX41CoxqXUC8p5Lj21VnzaM1KbQESUP6KQcMA0GCSqGSIb3 DQEBCwUAA4IBAQCbSRRje8L+s6z0jR3Rpkh1sy+/kIass8Zo+QtTywbAQaeNBdIo 4KXgI6NM97tARKVGcvRJ+TYO8x0yZP/NZcuR1iIihksOgQsdSzrTj5JVrYfcNkVS 75I4bIP4FiT6tM0ATfjgn2u4rXDGjqukqqO9+3axecy8MLwX5Et6y/B0RI8Fn7FG 4HJqPj2N2Hbvw0bt+NVRzZCz6meHdu/6xYioyKUt6icMRiEJvQOLBG1Yr79vYRN5 N7z4FJgWxf+Fe6AIhSWmtGJdssVCnze33p535EcPEt3DomnJkqYGXhCCuaQ7k+TA 3mTNWPrs4b01J89r+z0GHq7qA89X1ugng2ty -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBnN9nsLNRJ8/RqvZDnd 6ZMGOA+HHbaBnnCeZydeWNpw4wwYY4xU2a23AgiLYAVwT3ZEDVkWjWWOQvWL0UKX i6oIoQPvcbCo4FCwl+pnYA/7r+F1jAja9BQK74/kko2G5ja9Kv0BsdQ5Oon9hQjC G2PKtqbzLZ8SFRQDM1QOsBSrCUzFbulCqpoNBvkVF0SsRDCoKKrN6ZXaaLP0xggK Ossannixy+XOZoySvhEtQL+LTeyu/CRy2DQ67qkUa9a/uftbiqeUF+3wGZ5IL9DA YVOg1UYKPMe7Dvs1eedrCvrAHhYd3AeNs0y6x9WyNYF/9u+LAdSVUtiylegrTpIx IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4513585721132324689607704804745042206 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'termius.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18191040609149830137573122546851814180031024147948165160799132045359442707019842236121694270816459082995867422793117434211808969175817333365643208176468177427947276797042807475344854895215289347393343972146145996413438471373869076853178870502601215200363574283278818692961436400991955217302588477393357757921410918006775187443866533646478711832668004299812602805895746246587206045343861097049351286986943423368392459075005498432480463788946865596555169286114087631894129612519223870703764889459624768495672041413014865075065459620963412910116556062451309269171128722501165846362270822344233573941959856428046911418659 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0520f85e5f83b744fc13b9e2a9ae3389896e30f8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'termius.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.termius.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serverauditor.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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